Legal

Privacy Policy

HOWDY is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard information in connection with our international B2B operations.

Last updated: June 2025

1

Who We Are

HOWDY ("we," "us," or "our") is a B2B manufacturer founded in 2006, specialising in electric blankets, heated gloves, electric hot water bottles, heated cushions, and related textile products. We operate a 25,000 m² manufacturing facility with approximately 240 employees and supply customers across Europe, the United States, Canada, Japan, and the United Kingdom.

For the purposes of applicable data protection legislation -- including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and other relevant laws -- HOWDY acts as the data controller in respect of the personal data described in this policy.

Data Controller

HOWDY Manufacturing Co., Ltd.

Email: [email protected]

2

Data We Collect

As a B2B business, the personal data we collect primarily relates to business representatives, procurement contacts, and trade show attendees. We do not sell directly to consumers. The categories of data we may collect include:

Business Contact Information

  • Full name and job title
  • Company name and address
  • Business email address
  • Business telephone number
  • Country and region

Commercial & Transaction Data

  • Enquiry and order details
  • OEM/ODM project specifications
  • Shipping and delivery addresses
  • Payment and invoicing records
  • Correspondence history

Website Usage Data

  • IP address and browser type
  • Pages visited and time spent
  • Referring URLs
  • Cookie and tracking data

Trade Show & Event Data

  • Business card information
  • Notes from meetings
  • Product interest categories
  • Follow-up preferences

Note: We do not intentionally collect special categories of personal data (such as health, racial origin, or political opinions) in the course of our normal business operations.

3

How We Collect Data

We collect personal data through the following channels:

  • Website enquiry forms -- when you submit a contact, sample request, or quotation form on our website.
  • Email and direct communication -- when you contact us directly by email or telephone to discuss procurement or partnership opportunities.
  • Trade shows and exhibitions -- when you visit our booth or exchange business cards at industry events.
  • Business transactions -- when we enter into a purchase order, OEM/ODM agreement, or other commercial relationship.
  • Automated technologies -- when you browse our website, we may automatically collect technical data via cookies and similar technologies (see Section 9).
  • Third-party platforms -- such as B2B sourcing platforms or trade directories where your business contact information is publicly listed.
4

How We Use Your Data

We use the personal data we collect for the following purposes:

Purpose Description
Business enquiries Responding to requests for quotations, samples, product information, and OEM/ODM consultations.
Order fulfilment Processing and managing purchase orders, production schedules, shipping, and invoicing.
Customer relationship Maintaining ongoing business relationships, providing after-sales support, and managing accounts.
Marketing & updates Sending product updates, new catalogue releases, trade show invitations, and relevant industry news where you have consented or where we have a legitimate interest.
Legal compliance Meeting our legal obligations under applicable laws, including export controls, customs documentation, and financial record-keeping.
Website improvement Analysing website usage to improve content, navigation, and the overall user experience for our B2B visitors.
6

Data Sharing & International Transfers

We do not sell your personal data to third parties. We may share your data with the following categories of recipients only as necessary and under appropriate safeguards:

  • Logistics and freight partners -- shipping companies, customs brokers, and freight forwarders required to deliver orders to customers in the UK, EU, US, Canada, and Japan.
  • Financial and payment service providers -- banks, payment processors, and accounting software providers used for invoicing and transaction management.
  • IT and technology service providers -- cloud hosting, CRM systems, and email service providers who process data on our behalf under data processing agreements.
  • Professional advisers -- legal, accounting, and compliance consultants bound by professional confidentiality obligations.
  • Regulatory and government authorities -- where required by law, such as customs authorities, tax agencies, or product safety regulators in the relevant export markets.

International Data Transfers

As an internationally operating manufacturer, your data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom, including China where our manufacturing facilities are located. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office (ICO), or other lawful transfer mechanisms.

7

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Our general retention guidelines are:

7

Years

Financial records, invoices, and transaction data (for tax and legal compliance)

3

Years

Business contact and correspondence data following the end of the commercial relationship

12

Months

Website enquiry data and trade show contacts where no commercial relationship has been established

When data is no longer required, we securely delete or anonymise it. In some cases, we may retain anonymised data for statistical analysis and business planning purposes indefinitely.

8

Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data where there is no legitimate reason for continued processing.

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another controller.

Right to Object

Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority in your country (for example, the ICO in the UK or your national data protection authority in the EU).

9

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve functionality and understand how visitors interact with our content. We use the following types of cookies:

Required

Strictly Necessary Cookies

Essential for the website to function. These cannot be disabled. They include session management and security cookies.

Analytics

Analytics Cookies

Help us understand visitor behaviour, page performance, and traffic sources (e.g., Google Analytics). Enabled only with your consent.

Marketing

Marketing Cookies

Used to deliver relevant content and track the effectiveness of our B2B outreach. Enabled only with your consent.

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect website functionality. For more information, see our Cookie Policy.

10

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

  • SSL/TLS encryption for data transmitted via our website
  • Access controls limiting data access to authorised personnel only
  • Regular review of data handling and security procedures
  • Secure disposal of data when no longer required
  • Contractual data protection obligations placed on third-party service providers

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals as required by applicable law.

11

Children's Privacy

Our website and services are intended exclusively for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a person under 18, please contact us immediately at [email protected] and we will take prompt steps to delete such data.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued engagement with HOWDY following any update constitutes your acknowledgement of the revised policy.

13

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact our privacy team:

Get in Touch

Company

HOWDY Manufacturing Co., Ltd.

Founded

2006

Privacy Email

[email protected]

General Enquiries

[email protected]

Export Markets

United Kingdom · European Union · United States · Canada · Japan

UK residents may also contact the Information Commissioner's Office (ICO) at ico.org.uk if you are unsatisfied with our response. EU residents may contact their national data protection authority.

Disclaimer: This Privacy Policy is provided for informational purposes. HOWDY operates across multiple jurisdictions including the UK, EU, US, Canada, and Japan. The applicable data protection laws and your specific rights may vary depending on your location. This policy is designed to reflect our commitment to compliance with UK GDPR, EU GDPR, and other relevant international privacy frameworks. We recommend seeking independent legal advice if you have specific compliance questions.