Privacy Policy

This Privacy Policy explains how Zhongshan Fengchen Trading Co., Ltd., trading as MAISON FONCEN ("MAISON FONCEN", "we", "us" or "our") collects and uses personal information when you visit maisonfoncen.com, make a project enquiry, communicate with us, or otherwise use our services.

MAISON FONCEN is the controller of the personal information described in this policy. If you do not provide information marked as required in our enquiry form, we may be unable to review or respond to your project request.

Information you provide

• Contact and professional details, including your name, email address, company, country or region, customer type and optional WhatsApp number.
• Project details, including project type and location, estimated quantity, budget range, target delivery date, project brief and product interests.
• Messages, drawings, reference images or other files you send later by email or another communication channel.
• Your acknowledgement of this Privacy Policy, including the policy version and server-recorded acknowledgement time. If you submit an enquiry while Marketing is enabled, we also record that category choice and its consent version with the enquiry.

Information collected when you use the site

• Enquiry context such as the page used to submit the form, referring page and any UTM campaign parameters present in the URL.
• Standard technical and security information processed by our hosting and network providers, which may include IP address, browser or device information, request time, requested URL and response status.
• Anti-abuse verification data processed by Cloudflare Turnstile when you submit an enquiry, including the verification token and related device or network signals.
• Product selections, form drafts and a recent enquiry reference stored locally in your browser as described below.
• If you enable Analytics, our self-hosted Umami service receives website-use data such as page URL, referring page, time, and browser or device information. Our network necessarily receives the IP address used for the request; Umami is configured without advertising profiles or cross-site identifiers.
• If you enable Marketing, Meta Pixel may receive page and event information, IP address, browser or device information, and Meta browser identifiers such as _fbp or _fbc. If you then submit an enquiry, our server may send Meta a Lead event through Conversions API containing the event name, time and ID, source URL, browser user agent, IP address, Meta browser identifiers when available, and a one-way hashed email address. We do not send Meta your project brief, company, budget, files, WhatsApp number, or product selections.

We do not intentionally collect special-category or sensitive personal information through this website. Please do not include it in a project brief or attachment.

• Review and respond to enquiries, develop proposals and communicate about potential or active projects.
• Provide requested services, administer customer and supplier relationships, and maintain project records.
• Send an enquiry confirmation and notify our project team by email.
• With your Analytics consent, measure aggregate website use through our self-hosted Umami service; and, with your Marketing consent, measure enquiry conversions and advertising effectiveness through Meta Pixel and Conversions API.
• Operate, secure, troubleshoot and improve the website and protect against spam, abuse and unauthorised access.
• Comply with legal obligations, establish or defend legal claims, and enforce our agreements.

We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

Where data-protection law requires a legal basis, we rely on one or more of the following:

• Steps at your request before a contract and performance of a contract, such as reviewing a project enquiry, preparing a proposal and delivering agreed services.
• Legitimate interests in operating and protecting our business, responding to business enquiries, maintaining relationships, understanding enquiry sources and improving our services, balanced against your rights.
• Legal obligations, including applicable tax, accounting, regulatory and law-enforcement requirements.
• Consent, where we specifically ask for it, including optional Preferences, Analytics, and Marketing. These categories are off until you choose them. You may withdraw consent at any time without affecting processing already carried out.

We do not sell personal information. If you enable Marketing, we disclose limited event and technical data to Meta for advertising measurement and optimisation; depending on the law where you live, this may be treated as sharing for targeted or cross-context behavioural advertising. You can refuse or withdraw Marketing at any time. Other disclosures are limited to what is reasonably necessary for:

• Our authorised staff and contractors who need it to handle an enquiry or project.
• Service providers supporting website hosting, self-hosted analytics, network security, cloud storage, databases and email delivery, including Hetzner, Cloudflare and Zoho.
• Meta Platforms companies, only when you enable Marketing, for Meta Pixel and Conversions API measurement and advertising services under Meta's own terms and privacy policy.
• Professional advisers, insurers, auditors, banks, logistics or project partners where relevant to a transaction or project.
• Courts, regulators, law-enforcement bodies or other parties when required by law or necessary to protect rights and safety.
• A buyer, investor or successor in connection with a proposed or completed business reorganisation, subject to appropriate safeguards.

Umami runs on infrastructure we control and is not used to build third-party advertising profiles. Meta may combine data received through its business tools with other data under its own privacy policy when Marketing is enabled. Pages may also display a click-to-play YouTube video using YouTube's privacy-enhanced embed domain; no player loads until you choose to play it. Once activated, Google/YouTube may receive technical and usage information under its own privacy terms. Links to WhatsApp and other external services take you to third parties whose privacy practices apply.

We work internationally, and we or our service providers may process information in countries other than the country where you live. Our website and analytics infrastructure is hosted in Europe, while providers including Cloudflare, Zoho and, when Marketing is enabled, Meta may process information in the United States or other countries where they operate. Where required, we use recognised safeguards for international transfers, such as an adequacy decision, standard contractual clauses or another lawful transfer mechanism. Contact us if you would like more information about safeguards relevant to your information.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. We decide the period by considering the status and length of an enquiry or project, the nature of our relationship, record-keeping and warranty needs, security requirements, limitation periods and applicable legal obligations. When information is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible.

The necessary language preference may remain for up to 12 months. Browser-stored enquiry drafts and product selections expire 14 days after the latest edit, and the recent enquiry reference lasts for the browser session. A successful submission clears the saved draft. Your Cookie settings choice expires after 6 months, after which we ask again; you can clear preferences sooner at any time.

We retain anonymised Umami analytics records for no more than 24 months and remove older records through our self-hosted data-maintenance process. Meta browser identifiers are generally designed to last for up to 90 days, and Meta retains Pixel and Conversions API data under its own terms and retention rules. Our Meta delivery status and event ID may remain with the related enquiry record for audit and deduplication.

We divide site storage and tracking into four categories. Necessary is always active for security, language, your consent record and services you request. Preferences stores selected products and enquiry drafts on this device. Analytics enables our self-hosted Umami service. Marketing enables Meta Pixel and, after an enquiry submission, the matching server-side Meta Conversions API Lead event. Preferences, Analytics and Marketing are off unless you choose them.

Umami is served through a first-party website route and is used for aggregate site measurement. Meta Pixel loads from Meta only after Marketing consent and may set or read Meta identifiers such as _fbp and _fbc. Pixel and the server event use the same random event ID to avoid counting one enquiry twice. The separate Privacy Policy checkbox on the enquiry form authorises us to respond to that request; it is not Marketing consent.

You can Accept all, Reject non-essential, or choose categories in Cookie settings, which remains available in the footer. Withdrawal stops future optional collection; when Analytics or Marketing is withdrawn, the page reloads and we remove Meta identifiers we can access, but withdrawal does not undo earlier lawful processing by us or a provider. Clear saved selections and drafts removes optional first-party data from this device. Where we detect a Global Privacy Control signal, Marketing remains off. You can also use browser site-data controls or private browsing.

Depending on where you live and the applicable law, you may have the right to:

• Ask for access to or a copy of your personal information.
• Correct inaccurate or incomplete information.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests or to direct marketing.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent.
• Complain to the data-protection authority where you live, work or believe an infringement occurred.

To exercise a right, email [email protected]. We may ask for information needed to verify your identity. Rights may be subject to lawful exceptions, and we will explain any applicable limitation in our response.

We use reasonable technical and organisational measures designed to protect personal information, including encrypted transmission, access controls, network protections, restricted administration access and service-provider safeguards. No internet or storage system is completely secure, so we cannot guarantee absolute security.

Our website and project-enquiry services are intended for business and adult users and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can review and delete it as appropriate.

We may update this policy when our practices, services or legal obligations change. We will post the revised policy on this page and change the effective date and version. If a change materially affects how we use information already collected, we will provide additional notice where required.