This site has one form. It collects what we need to answer a sourcing enquiry, and nothing else.
RAY & LYN CO., LIMITED, a company registered in Hong Kong, is the controller of the personal data described here. Manufacturing is carried out by our production facility in Yuyao, Zhejiang, China, which processes enquiry data on our instruction.
For any question about this policy or about data we hold, write to [email protected].
| Enquiry form | Name, company, email, country, product or model, quantity, neck size, colour or decoration wishes, and your message. |
|---|---|
| Technical data | The page you submitted from, so we know which product the enquiry relates to. No advertising identifiers. |
| Server logs | Our hosting provider records standard request data — IP address, timestamp, requested URL, browser type — for security and abuse prevention. |
We do not ask for, and do not want, payment card details, identity documents or any special-category data through this website.
To answer your enquiry and prepare a quotation. This is processing necessary for a contract or for steps taken at your request before entering a contract (GDPR Article 6(1)(b)).
To keep a commercial record. Quotations, orders and correspondence are retained as business records, on the basis of our legitimate interest in running the business and meeting accounting obligations (Article 6(1)(c) and (f)).
Security. Server logs are used to detect abuse and attacks, on the same legitimate-interest basis.
We do not sell data, and we do not send marketing email to addresses collected through the enquiry form.
Two service providers process data on our behalf, both under contract and both used only to deliver the service described:
| Cloudflare, Inc. | Hosts this website and delivers the enquiry form. Requests pass through their global network. |
|---|---|
| Resend, Inc. | Delivers the enquiry notification email to our inbox and the acknowledgement to you. |
| Professional advisers | Accountants, auditors or lawyers, where a specific matter requires it. |
| Authorities | Only where we are legally obliged to disclose. |
Both providers operate infrastructure outside the European Economic Area. Where data leaves the EEA, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.
Enquiries that do not lead to an order are deleted 24 months after the last exchange.
Enquiries that become orders are kept for the period required by tax and accounting law, together with the commercial documents of the transaction.
Server logs are kept for a short rolling period, typically 30 days or less.
Deletion means removal from the active systems. Backups are overwritten on their normal cycle.
There is no analytics script, no advertising pixel and no social login on this site, so there is no tracking to consent to. That is why you do not see a cookie banner.
The only cookie that can be set is a strictly functional one used by the hosting platform for security and load balancing. It carries no personal profile and cannot be used to follow you to another website.
| Access | A copy of the personal data we hold about you |
|---|---|
| Rectification | Correction of anything inaccurate |
| Erasure | Deletion, where no legal obligation requires us to keep it |
| Restriction | Limiting how we use the data while a dispute is resolved |
| Portability | Receiving your data in a structured, machine-readable format |
| Objection | Objecting to processing based on legitimate interest |
Write to [email protected]. We respond within one month. If you are in the EU or UK you also have the right to complain to your national data protection authority.
This page reflects how the site operates today. If the way we handle data changes — a new tool, a new purpose, a longer retention period — the policy is updated before the change takes effect, and the date below moves.
Last updated: 28 October 2026