Privacy Notice
Effective date: 16 October 2026
Who we are
Shanghai Vanton Biotechnology Co., Ltd. (上海梵通生物科技有限公司) operates the VanTsteri website enquiry service and is responsible for the enquiry information described in this notice.
Address: B201–B203, 2nd Floor, Building 5, No. 785, Tieli Road, Baoshan District, Shanghai, China.
Privacy contact: inquiry@vantsteri.com.
This notice explains how we handle information submitted through our enquiry forms and related correspondence.
Information we collect
Our enquiry forms collect your name, email address, country or region and requirements. Depending on the form and the information you provide, they also collect your company, product or service of interest, industry, related case, project city or location, contamination concern, application requirements, dimensions, installation constraints and operating conditions. Further correspondence may contain information you provide to clarify or follow up on your enquiry.
Your name, email address, country or region and requirements are needed to submit the enquiry form. Without these details, the form cannot accept your submission. You can also contact us directly by email.
We record the website address and page path from which you submit the form. This source-page field excludes URL query strings, fragments and embedded login credentials. This limitation applies to that field, rather than to all hosting or technical records.
Please provide only information relevant to your enquiry. Avoid including passwords, payment details, health information or confidential project information in an initial enquiry.
How we use enquiry information
We use customer enquiry information only to respond to enquiries, assess project requirements and carry out related follow-up. We do not use this information for marketing.
Website storage and email notifications
Enquiry records are stored in the website’s WordPress database. Our designated company administrator handles enquiries and related follow-up.
Relevant enquiry details are also sent through Tencent Enterprise Email to notify us of your submission. Our company contact and notification address is inquiry@vantsteri.com. Information included in notification emails and subsequent correspondence is also processed within the email service.
Hosting and overseas processing
Hostinger provides website hosting. The selected website server location is Massachusetts, United States, so information submitted through the enquiry forms is stored on a website server outside China. Our company handles enquiries from China.
Hosting backups may contain copies of enquiry records. The selected website server location does not describe the location of every backup or other copy held by service providers.
Technical protection of the enquiry form
When you submit an enquiry, the server receives the connecting IP address. The enquiry handler uses a hashed version of that address to limit repeated submissions, with a configured rate-limit expiry of 60 seconds. This does not make the information anonymous or guarantee that every stored copy is physically deleted after 60 seconds.
The enquiry handler does not store the raw connecting IP address as a field in new enquiry records. Hosting, security and other technical records are separate from those enquiry fields.
Retention and review
We review enquiry records 12 calendar months after the last substantive contact. Following review, information that is no longer needed is deleted from the website and from email and exported copies under our control. This is a manual process, not automatic deletion at 12 months. Ordinary record edits and automated notifications do not restart the review period. Records needed for completed business, disputes or other justified purposes are handled separately. Deleting active records does not immediately remove copies held in service-provider backups.
Optional website analytics
If you select “Accept analytics”, we use Google Analytics 4 to understand visits to our public website pages and enquiries that our server confirms it has saved. Google Analytics does not load through this implementation before you accept. If you have not chosen, or you reject analytics, this implementation does not send analytics requests to Google, including cookieless analytics pings. Rejecting analytics does not prevent you from browsing or submitting an enquiry.
Our manually configured analytics events use a public page address without its query string or fragment, a fixed website label and an event type. We do not include your name, email address, telephone number, company, enquiry text, enquiry record ID or submitted form fields in those events. We do not forward the previous page address. A saved-enquiry event means that the website confirmed storage; it does not confirm email delivery or a completed sale.
After consent, Google's analytics service also processes technical information involved in its operation, such as browser/device information, analytics identifiers, session activity and network information received when your browser connects to Google. Google may process this information outside your country. The analytics configuration does not enable Google Signals, advertising storage, advertising user data or personalised advertising. This does not mean that analytics data is anonymous or that Google receives no network information.
Google Signals and collection of fine-grained location and device data are disabled in the current property settings. User-provided data collection is disabled at both the property and Google tag levels. These settings do not eliminate the basic browser, device and network information needed to operate the analytics service after consent.
Your choice is stored in your browser for up to 180 days. Accepted analytics may set first-party _ga analytics cookies, configured here for up to 180 days without extending their expiry on each visit. Browser controls and service behaviour can affect actual storage. This consent setting is separate from hosting logs, necessary website functions and enquiry processing described elsewhere in this notice.
The current Google Analytics property settings specify two months for event-data retention and fourteen months for user-data retention, with resetting user-data retention on new activity enabled. New activity can therefore extend the retention period of a user identifier. These settings apply to the data covered by Google's retention controls; they do not set a single deletion deadline for all analytics information, standard aggregated reports, hosting logs or enquiry records. Google processes eligible retention deletions on its own schedule. The browser preference and cookie periods described above are separate from these server-side settings.
You can reopen “Analytics preferences” on public website pages and select “Reject analytics” to withdraw consent. This disables further analytics collection through this implementation and removes accessible analytics cookies for this site. It cannot recall requests already sent or delete information Google has already received. To ask about previously collected information, contact inquiry@vantsteri.com. If browser storage is unavailable, your preference may not persist between pages; the default remains no analytics until you accept again.
See Google's privacy policy for information about Google's processing.
Your requests
For questions about our handling of enquiry information, or to request access, correction or deletion, please contact inquiry@vantsteri.com. Please identify the enquiry concerned and explain your request without sending unnecessary identity documents or sensitive information.
Our designated company administrator verifies the identity of the person making the request. We may ask for information reasonably necessary to confirm your identity and locate the relevant records. Requests will be reviewed in accordance with applicable requirements.
Depending on the law that applies, you may also have rights to restrict or object to processing, obtain a portable copy of information, withdraw consent where processing relies on consent, or complain to a relevant data protection authority.