Privacy Notice

Effective date: 19 July 2026
Last updated: 24 August 2026

This notice explains how the VeyraStone brand handles personal information through veyrastone.com (the “Site”). The Site is a business-to-business natural-stone information and inquiry website. It does not provide a public account area or online checkout.

1. Who is responsible for the Site

VeyraStone operates the Site from Shuitou, Nan’an, Fujian, China. “VeyraStone” is used here as the public brand name; this notice does not assert a registered legal-entity name that has not been published and verified.

Privacy questions can be sent to sales@veyrastone.com with the subject “Privacy request.”

2. Information we receive

Information you submit

The structured inquiry form can ask for:

• inquiry type;
• stone or material interest and intended application;
• requested format, finish, thickness, dimensions, estimated quantity, and quantity unit;
• destination country and city, requested timing, and documents or testing required;
• your name, company or organization, and business email address; and
• the project or inquiry summary you choose to include.

The first-contact form does not accept attachments. Do not send sensitive personal information, payment-card data, credentials, identity documents, health information, confidential client names, or confidential project material through it. Agree a suitable channel before sending sensitive drawings or regulated information.

The form sends the submitted brief as an email notification. It does not intentionally save the message body as a WordPress form-entry record. Short-lived abuse controls store keyed, non-reversible fingerprints for up to ten minutes to rate-limit repeated requests and for up to five minutes to prevent an accidental duplicate submission; they do not store a readable copy of the form values.

Technical and security information

When the Site is requested, the hosting and security layers receive information normally included in an internet request, such as IP address, date and time, requested URL, referring page, user agent, and response status. This information is used to deliver and protect the Site, investigate faults, and limit abuse.

Consent and analytics information

The Site stores a first-party veyra_consent cookie to remember whether analytics was accepted or rejected. Google Analytics 4 is configured using a basic-consent approach: the external Google tag is not requested and no analytics event is sent before analytics consent is granted. After opt-in, the Site may record page use, scroll depth, outbound or download interactions, selected inquiry intent, RFQ step completion, validation-error counts, and successful submission to understand content and conversion paths.

The analytics event contract intentionally excludes the contact name, email, company, free-text message, stone, dimensions, quantity, destination, required documents, and other form-field values.

See the Cookie Policy for the current storage and consent details.

Administrator information

WordPress authentication cookies are used only for authorized Site administrators who sign in. They are not public visitor accounts.

3. Why information is used

Information is used to:

• respond to sample, sourcing, technical, or quotation inquiries;
• understand the requested application and route the inquiry;
• maintain correspondence and any later business relationship;
• operate, secure, debug, and improve the Site;
• measure content use when analytics consent is available; and
• comply with applicable legal obligations or protect legal rights.

Depending on the context and applicable law, the basis may be consent, steps requested before entering a contract, performance of a contract, compliance with law, or a legitimate interest in operating and securing a B2B website. Analytics storage is controlled by consent.

4. Service providers and disclosures

The Site currently relies on:

• Hostinger for web hosting and server infrastructure;
• Cloudflare for DNS, content delivery, traffic security, and abuse protection;
• Google Analytics 4 for consent-controlled measurement;
• WordPress, GeneratePress, and the VeyraStone theme to render the Site and operate the native structured inquiry form; and
• configured email-delivery services to send form notifications and replies.

These providers process data for their respective services under their own terms and privacy documentation. VeyraStone may also disclose information to professional advisers, authorities, or counterparties when reasonably necessary and legally permitted.

VeyraStone does not currently use the Site to sell personal information or run cross-context behavioral advertising. No marketing pixel is active in the public consent implementation at the date above.

5. International processing

The Site serves an international audience. Information may be processed in China and in locations where the infrastructure, security, analytics, or email providers operate. Applicable transfer safeguards and provider contractual terms should be considered when a project requires regulated or confidential data. The public inquiry form is not intended as a secure data room.

6. Retention

Inquiry records and correspondence are kept only as long as reasonably needed to respond, manage a potential or active business relationship, resolve disputes, and meet legal or accounting requirements. Security logs are retained according to the hosting and security providers’ operational settings. Analytics retention follows the configured Google Analytics property and applicable user-deletion controls. Short-lived form-abuse fingerprints expire after the periods described above. The native public form does not intentionally create a WordPress submission record.

There is no promise in this notice that every category is kept for one fixed period. Retention is reviewed by purpose, and information should be deleted or anonymized when it is no longer needed.

7. Your choices and rights

You can:

• reject or withdraw analytics consent through “Cookie settings” in the footer;
• ask what personal information VeyraStone holds about you;
• ask for correction or deletion where applicable;
• object to or restrict certain processing where applicable;
• request a portable copy where the law provides that right; and
• complain to the privacy authority that applies to you.

Rights vary by jurisdiction and may be limited by legal, contractual, security, or record-keeping obligations. To make a request, email sales@veyrastone.com, identify the request, and provide enough information to locate the relevant correspondence. Additional verification may be requested before data is disclosed or changed.

8. Security

The Site uses HTTPS, access controls, security headers, restricted administration, and traffic-protection services. No internet service can promise absolute security. Use an agreed secure transfer channel for technical drawings, contracts, identity documents, or other sensitive project files.

9. Children

The Site is directed to professional and trade users and is not designed for children. VeyraStone does not knowingly solicit personal information from children through the Site.

10. External links

The Site links to standards bodies, industry organizations, government sources, and other external websites. Those sites control their own privacy practices.

11. Changes

This notice will be updated when the Site’s forms, analytics, providers, business identity disclosures, or applicable processing materially change. The date at the top identifies the current version.

12. Contact

Email sales@veyrastone.com with the subject “Privacy request.” Include the Site URL or inquiry date where that helps locate the relevant record.