Legal

Privacy Policy

Last updated: 15 September 2026

This policy explains what personal information Doux Biotech collects when you use douxbiotech.com, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers this website only.

1. Who we are

Doux Biotech ("we", "us", "our") is the trading name of Zhengzhou Doux Biotechnology Co., Ltd. (郑州嘟咪生物科技有限公司), a company incorporated in the People's Republic of China. We develop and manufacture pet nutritional supplements on an OEM/ODM basis. We are the data controller responsible for the personal information described in this policy.

Registered name: Zhengzhou Doux Biotechnology Co., Ltd. / 郑州嘟咪生物科技有限公司

Unified Social Credit Code: 91410103MAKFXQXJ31

Registered address: Building 1, 21 Zhenghang Street, Erqi District, Zhengzhou City, Henan Province, China.

For any question about this policy or about your personal information, write to us at Lyric@douxbiotech.com.

2. Information you give us

When you submit the contact form or a product inquiry, we collect what you enter: your name, company, email address, telephone number, the subject or product you are asking about, an estimated quantity if you provide one, and the text of your message.

  • We ask for your company name because this is a business-to-business website. You may use a personal email address, and you do not have to give us your personal telephone number.
  • Please do not send us sensitive personal information — such as health, biometric or financial data — through these forms. We do not need it and we do not ask for it.

3. Information collected automatically

When you browse the site, our servers and our analytics provider record technical information about the visit: your IP address, browser type and version, device type, operating system, the pages you view, how long you spend on them, the page you arrived from, and an approximate location derived from your IP address.

Our servers also record the IP address of every form submission. We use this to rate-limit abuse and to keep a record of where an inquiry came from.

4. Advertising and campaign data

If you reach this site by clicking one of our advertisements on Google, Google adds a click identifier to the landing page address (gclid, gbraid or wbraid). We store that identifier together with any campaign parameters in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the page you first landed on, and the page that referred you.

We keep this for 90 days so that if you contact us later — in the same visit or on a later one — we can tell which advertisement brought you to us and which campaign produced your inquiry. Without it we cannot measure whether our advertising is effective, and we would have no way to stop showing ads to people who are not interested.

This information is written to your device only after you accept advertising cookies. Before you accept, it is held in your browser's session storage, which is deleted when you close the tab.

5. Cookies we use

A cookie is a small text file that a website asks your browser to store. We also use session storage, which works in a similar way but is deleted when you close the tab.

We group cookies into two categories. Strictly necessary cookies are always active because the site cannot work without them. Analytics and advertising cookies are set only if you accept them.

The table below lists every cookie this site can set. Which of them are actually set depends on the choices you make and on which marketing features are switched on at the time of your visit.

CookiePurposeDurationCategory
doux_consentRemembers the cookie choices you made, so we do not ask again on every page.180 daysStrictly necessary
doux_localeRemembers the language you selected.1 yearStrictly necessary
doux_attrStores the advertising click identifier and campaign parameters described in section 4, so an inquiry can be attributed to the advertisement that produced it.90 daysAdvertising
_gaGoogle Analytics 4 — distinguishes one visitor from another.Up to 2 yearsAnalytics
_ga_*Google Analytics 4 — keeps the state of your session.Up to 2 yearsAnalytics
_gcl_auGoogle Ads — links a click on an advertisement to activity on this site, for conversion measurement.90 daysAdvertising

6. How we use your information

  • To answer your inquiry, prepare a quotation, and follow up on your project.
  • To send samples, documentation, order confirmations and invoices if you become a customer.
  • To keep a record of our business communications with you.
  • To measure how this website and our advertising perform, and to improve both.
  • To protect the site against spam, abuse and automated submissions.
  • To comply with accounting, tax, customs and other legal obligations.

We do not use your information to make automated decisions that have a legal effect on you, and we do not use it to train advertising profiles for anyone else's benefit.

9. Who we share your information with

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share it only with service providers who process it on our instructions:

  • Google — Google Analytics 4 for website measurement, and Google Ads for advertising and conversion measurement. We also load web fonts from Google's servers, which means Google receives the IP address of your browser when a page loads. See section 10.
  • Alibaba Cloud — our enterprise email service (阿里云企业邮箱) delivers inquiry notifications to our sales team. Only the content of the inquiry is transmitted.
  • Our hosting and content delivery providers, including Alibaba Cloud CDN and Cloudflare — to serve this website and to keep it available.
  • Our own back-office systems — inquiries are stored in a database on infrastructure we control.
  • Professional advisers, regulators, customs authorities and law enforcement — where we are required by law to disclose, or where it is necessary to establish or defend a legal claim.

10. Google Analytics and Google Ads

This site uses Google Analytics 4 to understand how visitors find and use it. Google Analytics receives your IP address, information about your device and browser, and the pages you visit. Google Analytics 4 does not log or store your full IP address; it is used only to derive an approximate location, which is then discarded.

If you arrive through one of our Google Ads campaigns, we record the click identifier (gclid) together with your inquiry, so that we can tell which campaign and which keyword produced it. When you have accepted analytics cookies, our own server also reports the completed inquiry to Google Analytics as a conversion event. That report is sent from our server rather than from your browser, so that it is not lost when a browser blocks third-party requests.

Google and other third-party vendors may use cookies to serve advertisements to you based on your previous visits to this and other websites. You can opt out of personalised advertising at any time:

Opting out of personalised advertising does not stop you seeing advertisements; it means they will not be tailored to your previous browsing.

11. International transfers

We are established in China, and the information you send us is stored on servers located in China. If you contact us from the European Economic Area, the United Kingdom, Switzerland or another region with data transfer restrictions, your information will be transferred to and processed in China.

Where the law requires it, we put appropriate safeguards in place for those transfers, such as the Standard Contractual Clauses approved by the European Commission, together with a transfer impact assessment. Our service providers — including Google, Cloudflare and Alibaba Cloud — may process data in other countries under their own contractual safeguards. You can ask us for a copy of the safeguards that apply to your information.

12. How long we keep your information

We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires:

  • Inquiries that do not lead to a customer relationship: up to 3 years from our last contact with you, so that we can pick up the conversation if you come back.
  • Customer records, quotations, contracts and correspondence: for the duration of the business relationship, and afterwards for as long as accounting, tax and customs law requires us to keep them.
  • Advertising click identifiers stored with an inquiry: kept with that inquiry, for the period above.
  • Analytics data in Google Analytics: according to the retention period configured in our Google Analytics property.
  • Server logs containing IP addresses: kept for a short period only, for security and troubleshooting.

13. Your rights

Depending on where you live, you may have some or all of the following rights:

  • To be told whether we hold personal information about you, and to receive a copy of it.
  • To have information that is inaccurate or incomplete corrected.
  • To have your information erased, where we have no legal or contractual reason to keep it.
  • To restrict, or to object to, certain processing — including profiling for advertising purposes.
  • To receive the information you gave us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
  • To withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
  • To complain to your local data protection authority. In the European Union you can find yours at edpb.europa.eu; in the United Kingdom it is the Information Commissioner's Office at ico.org.uk.
  • Not to be discriminated against for exercising any of these rights.

To exercise any of these rights, email Lyric@douxbiotech.com. We will respond within 30 days. We may ask you to confirm your identity before we act, so that we do not disclose personal information to the wrong person.

If you are a California resident, we do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months. You may still ask us to disclose, delete or correct the information we hold about you.

14. How we protect your information

We use access controls, encrypted connections over HTTPS, restricted internal access to inquiry data, and rate limiting on our forms. Our staff access inquiries only when their role requires it.

No method of transmission over the internet, and no method of electronic storage, is completely secure. We cannot guarantee absolute security. If a breach occurs that is likely to affect your rights, we will notify you and the relevant supervisory authority as required by law.

15. Children

This is a business-to-business website intended for companies and professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe that a child has sent us personal information, contact us and we will delete it.

16. Do Not Track and Global Privacy Control

Some browsers can send a "Do Not Track" signal. There is still no common standard for how a website should interpret it, so this site does not respond to it. We do honour the choices you make in our cookie banner, and any cookie or storage-blocking settings in your browser, which are enforced by your browser regardless of what this site requests.

17. Changes to this policy

We may update this policy when our practices change or when the law requires it. The date at the top of this page shows the current version. If we make a change that significantly affects your rights, we will say so clearly on this page and, where we have your email address and the law requires it, tell you by email.

18. How to contact us

For any question, request or complaint about privacy, write to Lyric@douxbiotech.com, or by post to Zhengzhou Doux Biotechnology Co., Ltd. (Doux Biotech), Building 1, 21 Zhenghang Street, Erqi District, Zhengzhou City, Henan Province, China.

If you are not satisfied with our response, you have the right to complain to your national data protection authority.