Privacy Policy
Last updated: March 18,2026
1. Introduction
Welcome to Eeverstand Packaging (ESP), a China-based manufacturer and supplier of stand-up pouches and flexible packaging solutions. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website https://spout-bag.com or engage with our B2B services. We are committed to complying with the General Data Protection Regulation (GDPR) and applicable EU data protection laws. By using our Site, you consent to the data practices described in this policy.
2. Data We Collect
We collect the following types of personal data for legitimate business purposes:
- Contact Information: Name, job title, company name, email address, phone number, and physical address (provided via inquiry forms or direct communication).
- Business Data: Company size, industry, packaging requirements, and order details (to fulfill B2B requests).
- Usage Data: IP address, browser type, device information, pages visited, and referral sources (via cookies and analytics tools, see Section 5).
- Communication Data: Records of emails, chat messages, and inquiries exchanged between you and our team.
3. How We Use Your Data
We use your personal data only for the following lawful purposes under GDPR:
- To respond to your inquiries and provide custom packaging solutions.
- To process orders, deliver products, and manage post-sales support.
- To send important updates (e.g., order status, product changes) with your explicit consent.
- To improve our Site, products, and services based on user behavior analytics.
- To comply with legal obligations (e.g., tax reporting, contract enforcement).
We will not use your data for unsolicited marketing without your prior opt-in consent.
4. Data Sharing & Disclosure
We share your personal data only in the following limited circumstances:
- Service Providers: Third-party vendors who assist with our operations (e.g., shipping, payment processing, IT services), bound by strict data protection agreements.
- Legal Requirements: When required by law, court order, or government authority (e.g., tax authorities, regulatory bodies).
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
We do not sell, rent, or trade your personal data to third parties for commercial purposes.
5. Cookies & Tracking Technologies
Our Site uses cookies and similar tracking technologies to enhance your user experience:
- Necessary Cookies: Essential for Site functionality (e.g., form submission, session management).
- Analytics Cookies: To track Site usage and improve performance (e.g., Google Analytics).
- Marketing Cookies: Only enabled with your explicit consent, for personalized communication.
You can manage your cookie preferences via the cookie consent banner on our Site. You may disable non-essential cookies at any time without affecting core Site functionality.
6. Your Rights Under GDPR
As a user in the EU/EEA, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal retention requirements).
- Restriction: Request restriction of data processing under specific conditions.
- Data Portability: Request a machine-readable copy of your data for transfer to another controller.
- Objection: Object to processing based on legitimate interests or direct marketing.
To exercise these rights, contact us at [your email address]. We will respond to valid requests within 30 days.
7. Data Security
We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse:
- Encryption of sensitive data in transit and at rest.
- Access controls to limit data access to authorized personnel only.
- Regular security audits and employee training on data protection best practices.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact and business data: Retained for 5 years after the end of our business relationship (to comply with tax and legal requirements).
- Usage data: Retained for 24 months for analytics purposes, then anonymized or deleted.
9. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or a prominent notice on our Site.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
EVERSTAND PACKAGING CO., LTD
Address: Room 1711, Building 10, Xincheng Wuyue Plaza, No. 77 Aixihu
North Road,High-tech District, Nanchang City,Jiangxi Province,China 330096
Email: aurora@spout-bag.com
Phone: +8615814032946
