Privacy policy
Effective 18 September 2026. CNCVerified is a directory and RFQ channel, not a trading company. This policy describes what we collect and why.
Who we are
Controller: CNCVerified, contact [email protected]. English pages are for overseas buyers. The Chinese site is the factory join intake.
What we collect
Buyer accounts: email, password hash, company name, verification codes. RFQs: company, name, email, country, port, process, material, quantity, certificates, optional drawing filename, and the plants or nameplates you targeted. Factory join forms: legal name, contact, phone, WeChat, email, city, equipment, precision, control system, export history. Session cookies keep you signed in and remember the machine tray (max five plants).
Why we process it
To create an account, route an RFQ to a listed plant’s published sales email, review a factory join application, and operate the public directory. We do not sell buyer lists. We do not sit in the purchase-order payment chain. Commission on the PO is 0%.
Where mail goes
RFQs are emailed privately to the factory sales address on file. Public pages do not publish that mailbox or the factory’s website. Personal mobiles from company registries are not published. Join applications stay in the mid-office CRM and are not a public directory by default.
Cookies and analytics
A session cookie (PHPSESSID) is required for sign-in and the RFQ tray. If a GA4 measurement ID is configured, Google Analytics cookies load. See Cookies. You can use the directory without an account; the tray then lasts only for the browser session.
Retention and deletion
Account and RFQ records are kept so we can route mail and handle disputes about a packet. Email one-time codes expire in ten minutes. Write to [email protected] to request deletion of a buyer account, factory user, or join application. We may retain a minimal log where law requires it.
International transfers
Buyers and factories are often in different countries. Data is processed so an RFQ can cross that border. If you are in the EEA/UK, the lawful bases we rely on are contract (account, RFQ) and legitimate interests (directory security, abuse prevention).
Your rights
You may request access, correction, deletion, or a copy of the data we hold on your account or RFQs. Factory applicants may ask what we stored on the join form. We will not invent photos, certificates, or response-rate statistics on a public page.
Children
The service is for business users. We do not knowingly collect data from children.