User-provided data. When you contact us through our website, send us an email, or engage our services, we collect the personal information you choose to share: your full name, email address, telephone number, company name and business address, job title, project details, and any additional details you include in your correspondence. We collect this information only when you actively and knowingly provide it to us.

Automatically collected data. When you visit our website, our servers automatically record standard technical information: your IP address and approximate geolocation, browser type and version, operating system and device type, pages viewed and visit duration, the website that referred you, date and time of each visit, and similar diagnostic data. We use this information in aggregate to understand usage patterns and improve the site. This data is not used to identify individual visitors.

Cookies. Our website may place cookies on your device. Essential cookies are necessary for basic operation. Analytics cookies help us understand how the site is used. You can control cookie preferences through your browser settings at any time.

We use your information to respond to inquiries and provide the services you request; to communicate project updates, technical information, and administrative matters; to improve our website and services based on usage patterns; to detect, investigate, and prevent security incidents or fraudulent activity; and to comply with legal obligations including record retention and responding to lawful requests. We do not use your information for automated decision-making or profiling. We do not sell or rent your personal information to third parties.

For EEA residents, we process data on these bases: consent (you gave permission, withdrawable at any time); contractual necessity (needed to perform a contract with you); legitimate interests (operating our business, communicating with clients, maintaining system security, improving services, provided your rights are not overridden); and legal obligation (required by law).

We do not sell, rent, or trade your personal information. We may share with trusted service providers who help us operate our website and business, contractually bound to protect your data and use it only for the services they provide. We may disclose information if required by law, regulation, or legal process.

We retain personal information only as long as needed for the purposes described or as required by law. Contact data is kept for the duration of our relationship plus a reasonable period. Contractual records are kept as required by applicable law. When no longer needed, data is deleted securely or anonymised. We implement encryption in transit, access controls, and regular security assessments to protect your information.

Your information may be transferred to and processed in countries other than your own, including China where our company is registered and the United States where service providers may be located. We ensure safeguards are in place, including Standard Contractual Clauses where required under GDPR.

Under GDPR: EEA residents have the right to access, correct, delete, restrict, or port their data, and to object to processing based on legitimate interests.

Under CCPA: California residents have the right to know what personal information is collected, to request deletion, and to opt out of data sales. Count Drops does not sell personal information.

To exercise these rights, contact us. We respond within 24 hours.

Our services are not directed to individuals under sixteen. We do not knowingly collect information from children. Our website may contain links to third-party sites. This policy applies only to our website.

We may update this policy periodically. Material changes will be reflected in the effective date. This policy is governed by the laws of the People's Republic of China.