Privacy Policy

We use the information we collect for the following purposes:

• Processing enquiries and quotations -- to respond to your requests for parts sourcing, pricing, availability, and lead times.
• Order fulfilment and supply management -- to process, fulfil, and manage orders for railway parts and components.
• Business communications -- to keep you informed about the status of your enquiry or order, and to follow up on ongoing supply relationships.
• Marketing and outreach -- to send relevant product updates, industry information, or promotional content to existing and prospective business customers where permitted by applicable law.
• Website improvement -- to analyse how visitors use our website and improve its content, performance, and user experience.
• Legal and compliance obligations -- to comply with applicable laws, regulations, export controls, and lawful requests from authorities.

Where data protection laws require a legal basis for processing personal data (such as the GDPR), we rely on the following bases:

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

GRS is headquartered in China and serves customers across North America, Europe, Africa, Southeast Asia, South America, the Middle East, and the CIS region. As a result, your personal information may be transferred to and processed in countries outside your country of residence, including China.

When we transfer personal data internationally, we take appropriate steps to ensure your data is protected in accordance with this Privacy Policy and applicable law. These steps may include relying on standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms recognised under applicable data protection law.

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect usage data. The types of cookies we may use include:

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Where required by law, we will request your consent before placing non-essential cookies.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• The duration of our business relationship and any ongoing supply contracts.
• Legal, accounting, and tax obligations that require us to keep records for specified periods.
• The existence of any dispute, claim, or legal proceedings that may require us to retain relevant records.

When personal information is no longer required, we will securely delete or anonymise it in accordance with our internal data management procedures.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include encrypted data transmission (HTTPS), access controls, and secure storage practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

Depending on your country of residence and applicable law, you may have the following rights with respect to your personal information:

To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

Our website may contain links to third-party websites, platforms, or industry directories (including LinkedIn, B2B trade platforms, and industry association websites). These third-party sites have their own privacy policies, and we do not accept any responsibility or liability for their practices.

We encourage you to review the privacy policy of any third-party website you visit through a link on our site.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Effective Date" at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website following any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us. We are committed to resolving any privacy-related concerns promptly and transparently.