SLOOPZONE is the company's own direct B2B sales channel for automotive chassis parts — not an aggregator or marketplace. All data collected through this platform is processed by Sloop Spare Parts Mfg. Co., Ltd.
What we collect
When you use SLOOPZONE, we may collect the following information:
Contact details — email address, company name, contact name, country, and optionally phone number, provided when you request a quote, submit a cart, or create an account.
Uploaded files — parts lists (Excel, Word, PDF, or images) you upload via the quote tool. Files are stored in Cloudflare R2 and used only to generate your quote.
OE numbers searched — the OE numbers you enter in the search bar. We aggregate these (without linking them to you personally) to understand catalog demand.
Technical data — IP address (hashed before storage, not retained in raw form), browser type, referring URL, and approximate country derived from request headers.
Cookies — a language preference cookie (no personal data) and an optional session cookie if you log in to the buyer portal.
We do not collect payment card data. All payments are made by bank wire (T/T); bank details are communicated separately after order acceptance and never pass through this website.
Lawful basis
We rely on the following lawful bases to process your personal data:
Contract performance — processing is necessary to generate and deliver a quote, and to fulfill an accepted order. Without your contact details and uploaded parts list, we cannot provide the service.
Legitimate interest — following up on open quotes and orders by email, and detecting and preventing fraud and abuse. We have assessed that our interest in doing this does not override your privacy rights.
Consent — for any cookies beyond strictly necessary session cookies, and for any future analytics features. We will ask for consent before enabling them.
If you are located in the European Economic Area, the United Kingdom, or a jurisdiction that recognises equivalent rights, you have the right to object to processing based on legitimate interest at any time.
How we use it
We use your information to:
Generate and deliver parts quotes (the core service).
Send you the quote and order documents by email when you provide an address.
Follow up on open quotes and orders via email. Every follow-up email includes a one-click unsubscribe link.
Fulfill confirmed orders — coordinate manufacturing, shipping, and delivery with our factory and logistics partners.
Improve our catalog by tracking which OE numbers are searched but not found (aggregated, not personal).
Detect and prevent abuse (rate limiting, fraud detection, upload scanning).
Comply with applicable legal and tax obligations.
We do not use your data for advertising profiling, behavioral targeting, or sell it to data brokers or lead-generation services.
Storage & security
Your data is stored on the following infrastructure:
Cloudflare D1 — Cloudflare D1 (SQLite at edge) — structured data: customer records, quotes, order details. Encrypted at rest; served over TLS 1.3.
Cloudflare R2 — Cloudflare R2 (object storage) — uploaded files (parts lists, generated quote PDFs). Encrypted at rest. Files are scoped to your session and not publicly accessible.
Cloudflare KV — Cloudflare KV (edge cache) — anonymised page-view caching. No personal data.
Resend — Resend, Inc. — outbound transactional email. Your email address is transmitted when we send quote PDFs and order confirmations.
HiNet — HiNet (Chunghwa Telecom) — our primary business email is hosted here, operated from Taiwan.
Retention periods:
Uploaded files — deleted from R2 90 days after quote generation.
Quote records — retained for 7 years from date of issue (tax and accounting requirements). Quotes never accepted are deleted after 2 years.
Customer contact records — retained for the duration of the business relationship plus 3 years. Earlier deletion available on request, subject to legal minimums.
Technical logs — purged after 30 days.
Access to production systems is restricted to authorised company personnel via role-based access controls.
Sharing with third parties
We share data only as strictly necessary to fulfill your order. The recipients are:
Sloop Spare Parts Mfg. Co., Ltd. — Sloop Spare Parts Mfg. Co., Ltd. — the data controller and manufacturer are the same legal entity. No data leaves to a separate manufacturer.
Shipping carriers (DHL, FedEx, or sea-freight forwarders) — receive your company name, delivery address, and shipment details when coordinating delivery. Their respective privacy policies apply to that data once it is handed over.
Cloudflare, Inc. — Cloudflare, Inc. — infrastructure provider. All platform traffic and stored data passes through Cloudflare's network. Cloudflare Privacy Policy.
Resend, Inc. — Resend, Inc. — transactional email provider. Your email address is transmitted when we send quote PDFs and order confirmations. Resend Privacy Policy.
We do not share personal data with any other third party, and we never sell it.
International transfers
SLOOPZONE is operated from Taiwan (R.O.C.). By submitting information through this platform, you acknowledge that your data is processed in Taiwan and on Cloudflare's global infrastructure (which may include servers in the United States, the European Union, and other regions).
Where Cloudflare or Resend transfer data outside your jurisdiction, they rely on approved transfer mechanisms such as Standard Contractual Clauses (for EU/EEA data). Please refer to their respective privacy policies for details.
Your rights
Depending on your location, you may have the following rights regarding your personal data. These rights are recognised under Taiwan's Personal Data Protection Act, the EU General Data Protection Regulation, and equivalent laws in other jurisdictions:
Access — request a copy of all personal data we hold about you.
Rectification — ask us to correct inaccurate information.
Erasure — ask us to delete your data. We will do so except where retention is required by law.
Portability — receive your data in a machine-readable format (where technically feasible).
Objection — object to processing based on legitimate interest. We will stop unless we have compelling legitimate grounds that override your rights.
Opt-out of marketing email — click the unsubscribe link in any email we send, or contact us directly.
To exercise any right, email us with "Privacy Request" in the subject line. We will acknowledge within 5 business days and resolve within 30 calendar days.
Cookies
SLOOPZONE uses only the cookies strictly necessary to operate the platform:
Name
Purpose
Expires
Personal data
lang
Language preference
1 year
None
session
Buyer portal login (set only on login)
24 h / browser close
Opaque token only
We do not currently use third-party analytics or advertising cookies. If we add analytics tools in a future release, this policy will be updated and a consent banner shown before any such cookies are set.
You can disable cookies in your browser at any time. Disabling the session cookie will prevent login to the buyer portal; the rest of the platform (search, OE catalog, quote upload) will continue to work without cookies.
B2B platform — not for minors
SLOOPZONE is a business-to-business platform intended exclusively for companies, traders, and procurement professionals acting in a commercial capacity. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through this platform, contact us and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes (such as adding a new category of data collection), we will notify active customers by email at least 14 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.
Governing law
This Privacy Policy is governed by the laws of the Republic of China (Taiwan), including the Personal Data Protection Act. Any dispute arising under this policy that cannot be resolved informally shall be subject to the exclusive jurisdiction of the Taichung District Court, Taiwan.
If you are located in the EU/EEA and believe your GDPR rights have been violated, you also have the right to lodge a complaint with your local supervisory authority.
Contact
For privacy questions, data subject requests, or general enquiries, contact us with "Privacy Request" in the subject line:
