Effective Date: August 20, 2026

1. Introduction

Nanjing Roka Machinery Technology Co., Ltd. (“we,” “us,” “our,” or “the Company“), operating the website rokatooling.com (the “Website“), is committed to protecting the privacy and personal data of our visitors and customers.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your personal data. By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Company details:
Company Name: Nanjing Roka Machinery Technology Co., Ltd.
Address: Room 2267, Building 8, Yaxi International Slow Town, No. 6 Man’an Road, Gaochun District, Nanjing City, Jiangsu Province, China
Email: longstaffalzate@gmail.com
Phone: +86-15751822839

2. Information We Collect

We collect the following categories of personal information through our Website:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

3. How We Use Your Information

We process your personal information for the following purposes:

• Order Processing & Fulfillment: To process payments, arrange shipping, deliver products, and manage returns or exchanges.
• Customer Service: To respond to your inquiries, provide product support, and resolve disputes.
• Account Management: To create and manage your user account, including order history and saved preferences.
• Marketing & Communications: To send newsletters, product announcements, and promotional offers (you may opt out at any time).
• Website Improvement: To analyze usage patterns, improve website functionality, and enhance user experience.
• Security & Fraud Prevention: To monitor for suspicious activity, prevent fraudulent transactions, and protect our Website and users.
• Legal Compliance: To comply with applicable laws, regulations, and legal requests, and to protect our legal rights.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

5. Sharing Your Information

We do not sell your personal data. We share your information only with the following categories of recipients, as necessary for the purposes described in this policy:

Each third-party provider has its own privacy policy. We encourage you to review the privacy policies of these providers. We do not share your personal data with any other third parties for their own marketing purposes.

6. International Data Transfers

As an international trade company based in China, we process and store your personal data in China and may transfer it to other countries where our service providers or customers are located.

For transfers of personal data from the EEA, UK, or Switzerland to countries outside these regions (third countries), we ensure appropriate safeguards are in place, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Transfer to countries that have been deemed to provide an adequate level of data protection by the relevant authority;
• Your explicit consent to the transfer.

If you wish to receive a copy of the safeguards we have in place, please contact us using the details in Section 13.

7. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy and to comply with legal obligations:

8. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies (e.g., pixels, web beacons, local storage) to operate the site, analyze traffic, and personalize content. Cookies are small text files stored on your device.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality (e.g., shopping cart, checkout).

9. Your Privacy Rights

9.1 GDPR Rights (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: Request that we limit processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another service.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time for processing based on consent, without affecting prior lawful processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France) if you believe we have not handled your data appropriately.

9.2 CCPA/CPRA Rights (California, USA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to exceptions.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. You may opt out of “sharing” (e.g., targeted advertising) by disabling relevant cookies.
• Right to Non-Discrimination: You will not be penalized for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: Request that we limit the use of sensitive personal information to purposes permitted by law.

9.3 How to Exercise Your Rights

To exercise any of the above rights, please contact us at longstaffalzate@gmail.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

10. Children’s Privacy

Our Website is intended for business and professional users. We do not knowingly collect personal information from children under the age of 16 (or the minimum age required by applicable law, such as 13 under COPPA in the U.S. or 16 under GDPR in the EEA).

If you believe we have collected personal information from a child, please contact us immediately at longstaffalzate@gmail.com, and we will take steps to delete such information.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted between your browser and our server;
• Secure payment processing via PCI-DSS compliant payment gateways;
• Regular security updates and patches for our WordPress installation and plugins;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Regular backups and monitoring for unauthorized access.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do:

• We will post the updated policy on this page;
• We will update the “Effective Date” at the top of the policy;
• For material changes, we will provide notice via email (if you have an account) or a prominent notice on the Website.

We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Nanjing Roka Machinery Technology Co., Ltd. does not currently have an EU representative. For GDPR-related matters, please contact us directly using the details above.