Privacy Policy
Last updated: 18 September 2026 · Version: 1.0 · Effective date: 18 September 2026In short: Privacy policy means the public document that explains what personal information a business collects, why it collects it, how long it keeps it and what rights you have over it. For Blue Coral Food, this is simple: we collect only the information you submit through our business inquiry form plus limited aggregated and pseudonymous analytics data. We never sell your data, and you can ask us to access, correct or delete it at any time by emailing [email protected].
This Privacy Policy explains how Blue Coral Food Co., Ltd. ("Blue Coral Food", "we", "us" or "our") collects, uses and protects information when you visit our website at https://www.your-halal-food.com (the "Website").
Blue Coral Food is a Halal-certified business-to-business (B2B) food manufacturer and exporter based in Dongguan, Guangdong, China. We supply Halal sauces, seasonings, spices and condiments to importers, distributors, wholesalers and food brands across Malaysia, Indonesia, Thailand, Vietnam, Singapore, Saudi Arabia, the United Arab Emirates (UAE) and Qatar. The Website is an information and business-inquiry website: it does not operate an online shop, and we do not process payments or create customer accounts on it.
You can learn more about our company on the About Blue Coral Food page, browse our Halal product range and review our supply chain capabilities.
1. Who we are
Blue Coral Food Co., Ltd. is established in Dongguan, Guangdong, China. We operate the Website and are the data controller of any personal information collected through it.
Data Controller
Blue Coral Food Co., Ltd. is the data controller for personal information collected through this Website.
- Company name: Blue Coral Food Co., Ltd.
- Unified Social Credit Code: 91441900MADE55F266
- Registered address: Room 702, Building T8, Xinghua Smart City, Dongguan, Guangdong, China
- Privacy contact: [email protected]
EU Representative / Data Protection Officer
Our products and services are currently directed primarily to business customers in Malaysia, Indonesia, Thailand, Vietnam, Singapore, Saudi Arabia, the United Arab Emirates and Qatar. We do not currently target individuals in the European Union or maintain an establishment in the European Union.
Based on our current business activities, we do not currently appoint an EU representative under Article 27 of the General Data Protection Regulation (GDPR), and we have not appointed a Data Protection Officer under Article 37 of the GDPR. If our business activities or target markets change, we will reassess these requirements and update this Privacy Policy accordingly.
For any question about this Privacy Policy or your personal information, contact us:
- Email: [email protected]
- Phone or WhatsApp: +86 189 2653 2490
- Business hours: Monday to Saturday, 9:00 to 18:00 (GMT+8)
- Location: Dongguan, Guangdong, China
- Inquiry form: Contact Blue Coral Food
2. What information we collect
Personal information means any detail that can identify you as an individual, such as your name, email address or phone number. We collect only information that is reasonably necessary to answer business inquiries and keep the Website working properly. There are two categories.
2.1 Information you give us
You provide personal information only when you voluntarily submit an inquiry through the Website (including the contact form and sample request form). This typically includes:
- Your name, company name, job title
- Email address and phone number (including WhatsApp)
- Country of business
- Product interest and estimated order quantity
- Any message you choose to send us
You are not required to create an account to use the Website, and we do not collect personal information from visitors who simply read pages. By submitting an inquiry, you confirm that you have read this Privacy Policy and that you consent to Blue Coral Food processing your details for the purpose of responding to that inquiry. You can withdraw your consent at any time by emailing [email protected].
2.2 Information collected automatically
When any visitor loads a page, the Website and the service providers we use automatically collect limited technical information such as your IP address (which is truncated on our pages before storage), browser type, device type, operating system, referring website, pages visited, time on page and approximate country-level location. This information is used to keep the Website secure, to measure how B2B buyers use the site and to diagnose problems. We do not combine this information with your inquiry data to build individual profiles, and we do not use it for advertising or remarketing.
3. Why we use your information
We use personal information only for the purposes described below, each supported by a lawful basis under the EU General Data Protection Regulation (GDPR), China's Personal Information Protection Law (PIPL) and equivalent national data-protection laws.
| Purpose | Lawful basis |
|---|---|
| To respond to your business inquiry and provide quotations | Performance of steps taken at your request prior to entering into a contract (GDPR Art.6(1)(b); PIPL Art.13(1)(2)) |
| To comply with export, customs, Halal certification and tax obligations | Compliance with a legal obligation (GDPR Art.6(1)(c); PIPL Art.13(1)(3)) |
| To measure overall Website usage and diagnose problems | Legitimate interests (GDPR Art.6(1)(f); PIPL Art.13(1)(7)) -- your consent for non-essential cookies where required |
| To communicate material changes to this Privacy Policy | Legitimate interests in maintaining transparent contractual documentation |
We do not use your personal information for advertising profiling, remarketing or automated decision-making that produces legal or similarly significant effects.
4. How long we keep your information
We keep personal data only for as long as the purpose for which it was collected requires:
| Data | Retention period | Reason |
|---|---|---|
| Inquiry and quotation correspondence | 24 months from our last contact with you | Business follow-up |
| Order, shipping and customs documentation containing personal data | 10 years from the end of the relevant calendar year | PRC accounting and tax law |
| Analytics data (Google Analytics 4) | 14 months | Our configured GA4 data-retention setting |
| Consent and marketing-preference records | For as long as the consent is active, plus 24 months | Evidence of consent |
When a retention period ends, we delete or irreversibly anonymise the data. You may request earlier deletion at any time using the details in Section 11.
5. How we protect your information
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. These measures include:
- HTTPS (TLS) encryption on all pages of the Website
- Access to personal data restricted to Blue Coral Food staff on a need-to-know basis
- Use of reputable service providers (WordPress, Cloudflare, Google LLC) that contractually commit to equivalent security standards
- Regular review of access controls and configuration
6. Who we share your information with
We do not sell your personal information. We share personal information only in the limited circumstances below:
- Service providers acting on our behalf: WordPress (hosting), Cloudflare (content delivery and security) and Google LLC (Google Analytics 4) process data under written instructions that reflect the requirements of the GDPR, the PIPL and equivalent laws.
- Logistics and customs partners: where an order is placed, shipment-related personal data is shared with freight forwarders and customs brokers as needed to deliver goods.
- Verification and regulatory bodies: where an order requires certification or regulatory documentation, we may share company and product information (not your inquiry contact details) with certification bodies and competent authorities such as JAKIM, BPJPH, MUIS, SFDA and MoIAT.
- Legal and professional advisers: where we are required to do so by law, regulation or legal process, or to enforce our rights under these Terms.
7. International data transfers
We are established in China and use service providers in other countries, so your personal data may be transferred to and processed in China and the United States. Where a transfer is regulated by the law of your jurisdiction, we rely on the following safeguards:
- Analytics (Google LLC, United States): Google's certification under the EU–US Data Privacy Framework and its UK Extension, and, where that framework does not apply, the European Commission's Standard Contractual Clauses (Decision 2021/914).
- Transfers to us in China: your explicit consent where the law of your jurisdiction permits consent as a transfer basis, and/or contractual clauses imposing protection equivalent to your local law.
- PRC law requirements: where a transfer is classified as requiring a security assessment, certification or the filing of a standard contract with the Cyberspace Administration of China, we complete that procedure before the transfer takes place.
You may request a copy of the safeguards applicable to your data at [email protected].
8. Cookies and similar technologies
We use a small number of cookies and similar technologies -- strictly necessary WordPress and Cloudflare cookies, plus Google Analytics 4 analytics cookies set only after your prior consent. We do not use advertising or payment cookies. Full details are in our Cookie Policy, including how to withdraw your consent at any time through the Cookie settings link in the footer of every page.
9. Your rights
Subject to applicable law, you have the following rights in relation to your personal information:
- Access: request a copy of the personal information we hold about you
- Rectification: ask us to correct inaccurate or incomplete information
- Erasure: ask us to delete your information ("right to be forgotten"), where we no longer need it or where you withdraw consent
- Restriction: ask us to limit how we use your information
- Portability: receive your information in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
- Complain: lodge a complaint with your local data protection authority (see Section 10)
To exercise any of these rights, email [email protected]. We respond to all verified requests within 30 days (or a shorter period required by your local law). We may ask for evidence of identity before processing a request, to protect your information from unauthorised access.
10. Your rights and the authorities you can complain to under local law
In addition to the rights listed above, the law of your jurisdiction may give you further rights. You can lodge a complaint with the competent authority in your jurisdiction, including:
| Jurisdiction | Authority |
|---|---|
| Saudi Arabia | Saudi Data and Artificial Intelligence Authority (SDAIA) |
| United Arab Emirates | UAE Data Office |
| Qatar | National Cyber Security Agency (NCSA) |
| Malaysia | Personal Data Protection Commissioner (JPDP) |
| Indonesia | Indonesian personal data protection supervisory body |
| Thailand | Personal Data Protection Committee (PDPC) |
| Singapore | Personal Data Protection Commission (PDPC) |
| Vietnam | Department of Personal Data Protection (PDPD), Ministry of Public Security |
| China | Cyberspace Administration of China (CAC) |
| EU / EEA | Your national supervisory authority |
| UK | Information Commissioner's Office (ICO) |
11. Data breaches
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the applicable law so requires, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will also notify you without undue delay. We maintain an internal incident register and review every incident to prevent recurrence.
12. Children's privacy
We do not knowingly collect personal information from children. For the purposes of this policy, a child means an individual under 16 years of age (or the lower age set by applicable local law). If you believe a child has provided us with personal information, please email [email protected] and we will delete it.
13. External links
The Website may contain links to third-party websites, such as the JAKIM, BPJPH, SFDA, MUIS, MoIAT and GSO portals and our Halal certifications page. This Privacy Policy does not apply to those websites; please read their own privacy notices. We provide a plain-language summary of the GDPR on the independent GDPR.eu resource; it is not an official source of EU law. For official EU legal texts, consult EUR-Lex (https://eur-lex.europa.eu) or the European Commission website.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our business practices or the features of the Website. For material changes, we will post a prominent notice on the Website before the change takes effect, and we will update the "Last updated" date and version number at the top of this page. We encourage you to review this Privacy Policy periodically.
15. Frequently Asked Questions (FAQ)
Q:Who is the data controller?
A:Blue Coral Food Co., Ltd., a B2B food manufacturer based in Dongguan, Guangdong, China. You can reach us at [email protected].
Q:What personal information do you collect?
A:Only the information you voluntarily submit through our contact form or sample request form -- typically your name, company, email, phone, country and message -- plus limited technical data (truncated IP, browser, pages visited) collected automatically for security and analytics.
Q:Do you sell my personal information?
A:No. We never sell personal information. We share it only with service providers acting on our behalf, logistics and customs partners where an order is placed, and verification bodies where certification documentation is required.
Q:What is the lawful basis for processing my information?
A:We rely on performance of steps at your request (to respond to your inquiry), legal obligations (export, customs, tax), legitimate interests (Website security, analytics with your consent where required), and, where applicable, your explicit consent.
Q:How long do you keep my information?
A:Inquiry correspondence is kept for 24 months from our last contact; order and customs documentation for 10 years (PRC accounting and tax law); Google Analytics 4 data for 14 months; consent records for the life of the consent plus 24 months. You can request earlier deletion at any time.
Q:Is my data transferred outside my country?
A:Yes. Personal data collected through the Website is processed in China by our team and in the United States by Google LLC as our analytics provider. Where required, we rely on the EU–US Data Privacy Framework, the European Commission's Standard Contractual Clauses, or your explicit consent. You can request a copy of the safeguards at [email protected].
Q:What rights do I have over my personal information?
A:You can request access, correction, deletion, restriction, data portability, or object to processing, and you can withdraw consent at any time. Details are in Section 9.
Q:Who can I complain to in my market?
A:Each jurisdiction has its own supervisory authority -- SDAIA in Saudi Arabia, the UAE Data Office in the UAE, JPDP in Malaysia, the Indonesian PDP supervisory body, the Thai PDPC, the Singaporean PDPC, Vietnam's PDPD department, the CAC in China, your national authority in the EU/EEA, or the ICO in the UK. Full details are in Section 10.
Q:Will you notify me if there is a data breach?
A:Where the applicable law requires it, we will notify the competent supervisory authority within 72 hours of becoming aware of a breach likely to affect your rights, and we will notify you directly where the breach poses a high risk to you.
Q:Do you use my data for automated decisions or advertising?
A:No. We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it for advertising profiling or remarketing.
Q:Do you collect information from children?
A:No. We do not knowingly collect personal information from individuals under 16 (or the lower age set by applicable local law).
Q:How do I contact you about privacy?
A:Email [email protected], phone or WhatsApp +86 189 2653 2490, Monday to Saturday 9:00–18:00 (GMT+8), or use our contact form.
Q:How will I know if this Privacy Policy changes?
A:Material changes are posted on this page with a new version number and a prominent notice on the Website before they take effect. The "Last updated" and "Effective date" at the top show the current revision.
Q:Is gdpr.eu an official source?
A:No. The independent GDPR.eu resource is a plain-language reference maintained outside the EU institutions. For official EU legal texts, consult EUR-Lex (https://eur-lex.europa.eu) or the European Commission website.
Q:Are cookies covered in this Privacy Policy?
A:Cookies are described in detail in our Cookie Policy, including how to withdraw consent at any time through the Cookie settings link in the footer of every page.
16. Contact us
- Blue Coral Food Co., Ltd.
- Email: [email protected]
- Phone or WhatsApp: +86 189 2653 2490
- Location: Dongguan, Guangdong, China
- Inquiry form: Contact Blue Coral Food
If you are sourcing Halal sauces, seasonings or snack products, contact our sales team, request a sample or learn about our OEM/ODM and private-label service. See also our Cookie Policy, Terms of Service and Halal certifications.
Have questions about your data or our terms?
Our sales team is ready to help with product catalogs, samples, pricing and OEM/ODM inquiries. Reach out and we will respond during business hours.
Contact Us | Blue Coral Food