Privacy Policy
1. Scope
This policy explains how we handle your personal data when you contact us through this website's contact form or booking entry. We process personal data in line with the EU General Data Protection Regulation (GDPR).
2. What we collect
When you submit the contact form, we collect what you choose to provide:
- Name
- Company (optional)
- Phone / WeChat (optional)
- Topic and the business challenge you describe
- Technical context: the page path and your language preference
We use no third-party tracking or CAPTCHA scripts in the form; spam protection is a hidden field plus a minimum dwell-time check, with no data sent to third parties.
3. Purpose and lawful basis
We use this information solely to respond to and follow up on your enquiry. The lawful basis is our legitimate interest in conducting B2B business communication (Art. 6(1)(f) GDPR) and, where applicable, your consent in submitting the form.
4. Recipients
To operate the website and respond to enquiries, we use the following recipients and processors where needed:
- Website hosting and content delivery providers, including Tencent Cloud COS / CDN for static hosting, content delivery, security controls, and operational logs.
- Contact form delivery via Formspark (Formspark B.V., Netherlands), an EEA-based form backend that receives your submission under a GDPR Art. 28 data processing agreement and forwards it to our inbox. Spam is filtered with Botpoison, an invisible proof-of-work check (no CAPTCHA and no tracking cookies) that runs in your browser when you submit.
- Our email service provider, used to receive and respond to enquiries sent to contact@codebluedev.com.
- If you use a "book a call" entry, the configured scheduling service processes the details needed to arrange the meeting.
- Relevant CodeBlue group team members who support enquiry handling, project scoping, or delivery discussions.
We do not sell your personal data or use it for purposes unrelated to responding to your enquiry.
5. International transfers
Lanxu Software is established in China and is part of the international CodeBlue group. If you contact us from the EEA or the United Kingdom, the information you submit may be transferred to China and may also be accessed by group personnel or processors in other countries when needed to respond to your enquiry.
Where GDPR or UK GDPR transfer rules apply, we use an appropriate transfer mechanism before enabling the relevant processing route, such as EU Standard Contractual Clauses, the UK International Data Transfer Addendum, an adequacy decision where available, or another valid legal mechanism.
6. Retention
We keep enquiry information only as long as necessary to respond to and follow up on your request — normally no longer than 24 months. If the enquiry becomes a project or contract, relevant records may be kept for the longer period required for contract performance, accounting, audit, dispute resolution, and legal compliance. After the applicable period, information is deleted or anonymised.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your personal data, and to withdraw consent at any time. To exercise these rights, email contact@codebluedev.com. You also have the right to lodge a complaint with your local EU or EEA data protection supervisory authority; the European Data Protection Board publishes the current list of national authorities at edpb.europa.eu.
8. Updates
We may update this policy from time to time. Updates are posted on this page with a revised effective date.