Overview
This Privacy Policy explains how Sumking Ltd. handles information submitted through this business website. It applies to visitors, registered users, business contacts, and people who submit inquiries. The website supports business identification, account access, inquiry review, communication, security, and legal administration. It is not designed to collect consumer payment-card information or unrelated sensitive personal records. By using the website, you acknowledge the practices described here. If your organization enters a separate agreement with us, that agreement may contain additional privacy or confidentiality provisions for the engagement and its authorized participants.
Information we collect
We collect information that you provide, including company name, contact name, business email, country or region, account credentials, and complete project requirements. A registered user account stores the normalized email address, a password hash, timestamps, and limited login metadata. Inquiry records may be linked to an authenticated account so the user can review prior messages. We may also collect technical information such as an IP-derived security hash, browser identifier, requested page, session activity, and timestamps. We do not ask for card numbers, security codes, or full bank credentials through website forms.
How we use information
Information is used to create and protect accounts, receive and assess inquiries, match requests to relevant business capabilities, respond to contacts, prepare possible commercial discussions, maintain inquiry history, prevent abuse, troubleshoot service problems, and comply with legal obligations. We may use an inquiry to ask clarifying questions about intended use, quantities, destination, timing, or specifications. Submission does not create an order or contract. We do not use account registration as permission to send unrelated mass marketing. Communications remain connected to the relationship, request, security, policy, or service administration.
Email communications
When an inquiry is saved, we attempt to send an internal notification to our support channel and a confirmation to the customer email address. Both messages may include the company, contact, customer email, country or region, and full requirements so the parties can verify the record. Email transmission can fail or be delayed; failure does not erase the database record. Users should avoid including unnecessary confidential personal information in an inquiry. If you receive a confirmation you did not request, contact support@sumkingltd.com so we can review the record.
Cookies and sessions
We use a first-party session cookie to maintain security, authentication, form protection, and short-lived website state. The browser cookie contains an identifier rather than the account password. Associated session data is managed on the server and expires according to our security configuration. The cookie is configured with HTTP-only and same-site protections and is marked secure when served through HTTPS. Disabling required session cookies can prevent registration, login, profile access, and protected form submission. We do not describe optional advertising trackers because the site is not built around behavioral advertising.
Disclosure and service providers
Information may be disclosed to personnel and service providers that need it for website hosting, database operation, security, email transmission, professional advice, or a requested business review. Providers receive only the access reasonably required for their role and are expected to protect information. We may disclose records when required by law, to respond to lawful process, to protect rights or security, or in connection with a legitimate corporate transaction. We do not sell website inquiry information as a data-broker activity. Commercial project information may also be handled under contract-specific confidentiality terms.
Retention
We retain account and inquiry records for as long as reasonably needed to provide access, maintain business records, respond to follow-up, protect the website, document communications, resolve disputes, and satisfy legal or accounting obligations. Retention periods can differ based on the relationship and record type. Session and rate-control records use shorter operational periods. Mail delivery outcomes may be retained with the inquiry to show whether notifications succeeded. When information is no longer reasonably required, we may delete it, de-identify it, or restrict its use, subject to backups and legal retention duties.
Security
We use measures appropriate to the website, including password hashing, prepared database statements, server-side validation, output escaping, form-request protection, bounded fields, rate controls, server-managed sessions, and restricted configuration practices. Access to hosting and business tools should also be protected through account controls and secure administration. No internet transmission or storage method is guaranteed to be completely secure. Users should choose a unique password, protect access to their email, sign out from shared devices, and notify us of suspected unauthorized account activity.
Your requests and contact
You may ask about access, correction, deletion, or restriction of personal information associated with you, subject to identity verification and applicable recordkeeping duties. A request should come from the relevant email address and explain the account or inquiry involved. We may retain limited information when necessary for legal obligations, security, fraud prevention, or documented business disputes. Questions and requests can be sent to support@sumkingltd.com or mailed to Sumking Ltd., 8 The Green, Ste A, Dover, DE 19901, United States. We may update this policy as operations or legal requirements change.