Privacy Policy
Last updated: October 21, 2026
This policy explains how Shandong TMAX Machinery Technology Co., Ltd. ("TMAX Fitness", "we", "us") handles personal data collected through tmaxfitness.com (the "Website").
Who to contact: Shandong TMAX Machinery Technology Co., Ltd., No.21, Building 1, Qixi Market, Xinhua Sub-district, Dezhou City, Shandong, China 253024. Privacy requests: booker@tmaxfitness.com.
1. Who this policy is for
The Website is a business-to-business catalogue for commercial gym equipment. We sell on a quote basis only. The Website has no online shop, cart, checkout, online payment or customer accounts. This policy covers visitors to the Website and people who contact us through it.
2. What we collect
a) Information you send us through our forms
| Form | Required fields | Optional fields |
|---|---|---|
| Request a Quote | name, company, email, WhatsApp/phone, country/region, estimated quantity | business type, destination port/city, categories of interest, models, OEM/private label, message |
| Contact | name, company, email, WhatsApp/phone, country/region, message | business type, topic |
| Become a Dealer | name, company, email, WhatsApp/phone, country/region, territory | business type, company website, product lines, message |
| Spare Parts | name, email, model, description of the part needed | serial number |
Please do not include sensitive personal data (for example health information) in free-text fields.
b) Information recorded with a form submission
- the IP address of the submission;
- the page the form was sent from;
- the time of submission;
- a timer value, used only to filter out automated spam.
c) Information processed when you browse
- Our web server and Cloudflare process technical data such as IP address, browser type, requested pages and timestamps. We need this to deliver the Website and protect it from attacks and abuse.
- Website analytics (only with your consent). If you allow analytics cookies, we use Google Analytics 4 to understand how visitors use the Website. This covers pages viewed, time on site, how you arrived, device and browser type, and approximate location (country/city).
- Google Analytics 4 does not log or store full IP addresses. It uses the IP address only briefly to derive approximate location, then discards it.
- We do not use Google Analytics to identify you by name, and we do not combine it with the data you send in our forms.
- Google signals and advertising features are not enabled.
- If you do not consent, Google Analytics is not loaded at all.
d) Your quote list (stored only in your browser)
When you add products to your quote list, the list is saved in your browser's local storage, so the "Get a Quote" counter works between pages. It stays on your device and is not sent to us until you submit a quote request.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (EU/UK GDPR terms) |
|---|---|
| Reply to your quote request, dealer application, spare-parts request or message, and prepare quotations, layouts and orders | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Follow up on your inquiry and keep records of our business contacts | Our legitimate interest in running our business (Art. 6(1)(f)) |
| Keep the Website secure and filter spam and abuse (including IP address and Cloudflare security checks) | Legitimate interest in security (Art. 6(1)(f)) |
| Measure and improve the Website with Google Analytics | Your consent (Art. 6(1)(a)); you can withdraw it at any time |
| Comply with legal, tax and export obligations once a business relationship exists | Legal obligation (Art. 6(1)(c)) |
We do not send newsletters or marketing emails. We do not sell personal data, and we do not use it for automated decision-making or profiling.
4. Where your data is stored and who sees it
- Website database: form submissions are stored as private records in the Website's administration area. Only authorised TMAX staff can see them.
- Email: each submission is also emailed to our sales team (fannie@tmaxfitness.com and booker@tmaxfitness.com). Inquiries may also be kept in our internal sales tools, so our team can follow up.
- Sales team: may contact you by email, phone or WhatsApp, using the details you gave us.
- Logistics partners: where needed to quote or ship an order, we share the necessary business details (for example destination port and consignee) with freight forwarders and logistics partners.
- Service providers: they process data on our behalf. See section 5.
- Authorities: we may disclose data where required by law.
5. Service providers
- Cloudflare, Inc. provides the Website's content delivery network and security, including bot and attack protection. It processes IP addresses and request data. Privacy policy: https://www.cloudflare.com/privacypolicy/
- Google Ireland Limited / Google LLC provides Google Analytics 4. This applies only if you consent. Google acts as our data processor under its data processing terms. Privacy policy: https://policies.google.com/privacy. You can also install Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout
- WhatsApp: the Website contains links to chat with our sales team on WhatsApp (wa.me). Nothing is shared with WhatsApp until you click. After that, WhatsApp (Meta) processes your data under its own privacy policy.
- Hosting: the Website and its database (including form submissions) are hosted by Tencent Cloud on servers in the United States.
6. Cookies
We set only the cookies listed below. Analytics cookies are set only after you click "Accept all", or after you switch on "Analytics" under Preferences.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
tmax_consent |
TMAX Fitness | Stores your cookie choice | Necessary | 6 months |
__cf_bm |
Cloudflare | Tells humans from bots (security) | Necessary | 30 minutes |
cf_clearance |
Cloudflare | Set only after you pass a security check | Necessary | up to 1 year (set by Cloudflare) |
_ga |
Google Analytics | Distinguishes visitors (random ID) | Analytics, consent required | 2 years |
_ga_<ID> |
Google Analytics | Keeps session state | Analytics, consent required | 2 years |
- The browser's local storage also keeps your quote list (
tmaxQuote). This is necessary for the quote feature and is never sent to us automatically. - Staff who sign in to the administration area receive WordPress login cookies. Visitors never need to log in.
- We use Google Consent Mode: until you consent, Google tags are not loaded, and analytics storage is set to "denied".
Changing your choice:
- Click "Cookie settings" in the footer of any page at any time to change or withdraw your consent.
- If you withdraw consent, we stop analytics and delete the Google Analytics cookies from your browser.
- You can also delete cookies in your browser settings.
- We ask for your choice again after 6 months.
7. International transfers
Your data is processed in these countries:
- Website hosting: the Website and its database, including form submissions, are stored on Tencent Cloud servers in the United States.
- Our team in China: our sales team handles your inquiry from China. Form submissions are sent to us by email, and we access the records from China.
- Cloudflare: processes website traffic on its global network.
- Google Analytics: processes data in the United States, and possibly other countries. This applies only if you consent.
Where EU/UK law applies, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses included in our providers' data processing terms, or on the transfer being necessary to answer your request.
8. How long we keep data
- Inquiries that do not lead to business: 3 years after our last contact with you, then deleted.
- Customers and distributors: for the business relationship, then 5 years after the last order, for tax, accounting and export records.
- Submissions flagged as spam: deleted within 90 days.
- Google Analytics data: 14 months (GA4 setting).
- Server and security logs: kept briefly by our hosting provider (Tencent Cloud) and Cloudflare for security purposes.
9. Your rights
Depending on where you live (for example the EU/EEA, UK, Switzerland, Brazil, California, Canada or Australia), you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- object to or restrict our use of your data;
- data portability;
- withdraw consent at any time (for analytics: via "Cookie settings");
- complain to your local data protection authority.
Email booker@tmaxfitness.com with the subject "Privacy request". We will reply within one month (or the shorter period your local law requires). We may need to verify your identity first.
10. Security
- The Website uses HTTPS.
- Form submissions are stored as non-public records that only authorised staff can open.
- Access to the administration area is password-protected.
- No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.
11. Children
The Website is intended for businesses and professional buyers. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy, for example if we add new services. The "Last updated" date at the top shows the latest version.