This long-form resource is currently available in English.
Privacy policy.
Last updated: 15 October 2026. This site is operated as the Lucida Gulf B2B sourcing intake. Data controller / website operator: not yet published — this remains a production launch blocker.
What we collect
RFQ and inquiry data. When you submit an RFQ, we store the business and contact details, destination, product lines, quantity, target timing, packaging requirements, notes and source information you provide. The record may be synchronized to the Lucida operating workspace so a person can qualify and respond to the request.
First-party analytics. The site creates a random browser identifier in local storage. The server hashes that identifier before storage and keeps the daily hash, page path, event name, limited event context and country code supplied by the hosting network. We do not use third-party advertising trackers. Analytics records are configured to expire after 120 days.
Checkout and fulfilment data. A released physical sample offer or the separately identified digital-catalogue offer may link to Stripe Checkout. Stripe collects payment details under its own privacy terms. Lucida receives limited transaction and fulfilment data such as the checkout reference, email, amount, currency, payment status and, for physical delivery, the shipping details collected at checkout. We do not receive your full card number.
Service providers. Depending on the action and current configuration, data may be processed by Cloudflare for hosting and storage, Feishu for the internal B2B operating record, Stripe for checkout, and an email provider for transactional delivery. A configured WhatsApp link opens Meta's service under Meta's terms.
What we don't do
We do not sell personal data or use it for third-party behavioural advertising. Transactional RFQ, quote, order, receipt and delivery messages are not marketing subscriptions.
Retention
RFQ, quote, order, payment and delivery records are retained for the business relationship, dispute handling and applicable accounting or legal requirements. Analytics records use the 120-day expiry described above. A valid deletion request is handled subject to records we must retain.
Your rights
Where applicable, you may request access to, correction of, or deletion of personal data and may object to or restrict certain processing. Use the structured RFQ form and state “privacy request” in the notes; a dedicated privacy email is still a launch blocker. Identity and authority may need to be verified before data is disclosed or changed.