Privacy Policy

Last updated: 4 November 2026

Nanjing Letop Biotechnology Co., Ltd. (“Letop”, “we”, “us” or “our”) operates the website https://njletop.com (the “Site”). This Privacy Policy explains what personal information we collect when you visit the Site, send us an enquiry or otherwise interact with us, how we use that information, and the rights you have over it.

If you have any questions about this policy or about how we handle your information, please contact us at sales@njletop.com.

1. Who we are

The data controller responsible for your personal information is:

Company: Nanjing Letop Biotechnology Co., Ltd.
Address: No.5 Xinghe Road, Nanjing Economic and Technological Development Zone, Jiangsu, China, 210038
Email: sales@njletop.com

2. Information we collect

We only collect what we need to respond to your enquiry and to operate the Site.

Information you give us

Your name, company name and job title.
Your business email address and telephone or messaging number.
The country or region you are enquiring from.
The product, specification, quantity or documentation you are asking about.
Any other information you choose to include in a message to us.

Information collected automatically

IP address and approximate location derived from it.
Browser type, device type, operating system and screen size.
Pages visited, referring page, time on page and search terms used to reach the Site.
Cookie identifiers and similar technical identifiers.

We do not knowingly collect payment card details, government identity numbers, health data or any other special category of personal data through the Site.

3. How we use your information

We use your personal information to:

Respond to your enquiry and provide quotations, specifications, samples and technical documentation.
Communicate with you about an existing order, shipment or quality document.
Understand how the Site is used so that we can improve its content and performance.
Keep records required for accounting, tax, quality management and regulatory compliance.
Prevent fraud, abuse and unauthorised access to the Site.

We do not sell your personal information, and we do not use it for automated decision-making or profiling that produces legal effects concerning you.

4. Legal basis for processing (EEA, UK and Switzerland)

Where the General Data Protection Regulation or equivalent law applies, we rely on the following legal bases:

Contract or pre-contractual steps — to answer your enquiry and to perform an order you have placed with us.
Legitimate interests — to operate, secure and improve the Site, and to conduct business-to-business communication that you would reasonably expect. We balance these interests against your rights.
Legal obligation — to keep records that applicable law requires us to keep.
Consent — where we ask for it, for example for optional analytics cookies. You may withdraw consent at any time.

5. Cookies and analytics

The Site uses a small number of cookies and similar technologies:

Strictly necessary cookies — required for the Site to function, to remember your language preference and to protect forms against abuse. These cannot be switched off.
Analytics cookies — we use Google Analytics 4 (measurement ID G-MXYCZF95DK) to understand aggregate visitor behaviour such as page views, country and device type. Google receives this data as our processor. IP addresses are handled according to Google’s own retention settings.
Content delivery and security — Cloudflare processes technical request data, including IP address, to deliver pages and to protect the Site against malicious traffic.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site from working. To opt out of Google Analytics across all websites you can install the Google Analytics Opt-out Browser Add-on.

6. Who we share information with

We share personal information only with service providers that help us run the Site and our business, and only to the extent they need it:

Hosting provider — Hostinger, which hosts the Site and stores enquiry records.
Content delivery and security — Cloudflare, for page delivery and traffic protection.
Analytics — Google Analytics, for aggregate usage statistics.
Email and business software — providers we use to send and receive business email.
Professional advisers and authorities — where we are required by law, or where necessary to establish, exercise or defend legal claims.

We do not sell, rent or trade personal information to third parties for their own marketing purposes.

7. International transfers

We are based in China and work with suppliers and customers worldwide. Information you send us may therefore be transferred to and processed in countries other than your own, including China, the European Union, the United Kingdom and the United States. Where personal data protected by the GDPR is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with technical and organisational measures to protect the data.

8. How long we keep information

Enquiries that do not lead to an order: up to 24 months from our last contact, so that we can pick up the conversation if you return.
Customer and order records: for the period required by applicable accounting, tax and quality-management rules, and for as long as a product traceability obligation applies.
Analytics data: according to the retention period configured in Google Analytics, currently up to 14 months.

When information is no longer needed we delete it or irreversibly anonymise it.

9. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you and receive a copy.
Ask us to correct information that is inaccurate or incomplete.
Ask us to delete your information where there is no overriding legal reason for us to keep it.
Object to, or ask us to restrict, certain processing.
Receive your information in a structured, machine-readable format, or ask us to transmit it to another controller.
Withdraw consent at any time, without affecting processing carried out before withdrawal.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email sales@njletop.com with the subject line “Data request”. We will respond within 30 days, and may ask you to confirm your identity so that we do not disclose information to the wrong person.

10. Security

We protect personal information with technical and organisational measures that include encrypted connections (HTTPS) across the Site, access controls on our hosting and email accounts, restricted internal access on a need-to-know basis, and regular software updates. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we act promptly on any suspected incident.

11. Children

The Site is intended for business and professional users. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Links to other websites

The Site may link to external websites, including our social media profiles and regulatory databases. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies before providing personal information.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in the law. The “Last updated” date at the top of this page shows when the current version took effect. Material changes will be announced on this page.

14. Contact us

For any question about this Privacy Policy, or to exercise your rights:

Email: sales@njletop.com
Post: Nanjing Letop Biotechnology Co., Ltd., No.5 Xinghe Road, Nanjing Economic and Technological Development Zone, Jiangsu, China, 210038