Direct answer: Website filing/privacy acceptance for a Zhenjiang manufacturer is not “put a privacy-policy link in the footer”. Check ICP filing, public-security filing, privacy notice, form consent, third-party scripts and data access; pages without records and withdrawal are still a company risk.
This guide is for manufacturers in Zhenjiang and nearby areas with a website, online forms and analytics/support scripts. Information is current to 2026-10-27. It is not legal, data-compliance or filing-agency advice; specific filing/licence, privacy and cross-border requirements depend on the company entity, server location, business and local authority.
Filing numbers must be real and verifiable; privacy notice comes before collection; form consent must not be pre-checked. This is a checklist, not legal/filing advice.
What does website filing/privacy acceptance cover for Zhenjiang manufacturers?
Acceptance covers ICP filing, public-security filing, privacy notice, form consent, third-party scripts and data access; one privacy link is not compliance.
A manufacturer website usually has product pages, inquiry forms, online support, analytics and ad scripts, and may collect name, phone, company and demand data. Acceptance should connect filing, notice, consent, collection, retention, sharing, deletion/withdrawal and account access; the page is only the outer layer, while records and process are verifiable.
| Asset | What to confirm | Acceptance evidence | Common issue |
|---|---|---|---|
| ICP filing | Entity, domain, access provider, number, homepage display | Filing query, footer screenshot | Expired number/entity mismatch |
| Public-security filing | Status on the national platform/local police requirements | Platform record, local requirement | Inventing a “filed” status |
| Privacy policy | Purpose, scope, retention, sharing, withdrawal, contact | Policy page, version/date | Only “we protect privacy” |
| Form consent | Notice before collection, voluntary checkbox, purpose, withdrawal | Form test, screenshot | Pre-checked/bundled consent |
| Third-party scripts | Analytics/ads/support/cookies/data flow | Script list, privacy note | Not knowing where data goes |
| Access/records | Who sees data, retention, deletion/export | Permission matrix, logs | Data in personal chat/email |
These are project-design references, not a legal/filing standard; applicability depends on the entity, server, business and local authority.
Fit and non-fit: This checklist fits Zhenjiang manufacturers with a website, online forms and analytics/support scripts. A purely static site with no personal information still needs a filing check, but the privacy/form sections can be trimmed to the actual scope.
How should ICP filing and commercial licensing be checked?
Check entity, domain, access provider, filing number and homepage display; commercial/non-commercial service boundaries follow the rules and local authority.
China's Regulation on the Administration of Internet Information Services provides for a licence for commercial internet information services and filing for non-commercial services; without a licence or filing, no internet information service may be provided. Check that the filing entity matches the business licence, domain real-name and access provider, and that the filing number is displayed prominently on the homepage. Filing/change procedures follow the local communications administration and access provider; this article does not act as an agent or promise approval.
| Check | How to test | Record/boundary |
|---|---|---|
| Entity | Filing entity matches business licence/domain real-name | Query record; change if mismatched |
| Domain/access provider | Filed domain and server/access provider match reality | Provider confirmation; change on hosting move |
| Filing number | Displayed prominently; verifiable | Screenshot/query record |
| Service nature | Commercial/non-commercial; licence applicability | Confirm with rules/local authority; no self-judgement |
| Changes | Entity/domain/access provider changes updated | Change record; not just page edit |
| Public-security filing | Check platform/local requirements | See next section; no invented status |
Filing/licence requirements depend on the rules, local communications administration and access provider; this article is not a filing agent or legal opinion.
How should public-security filing and website security be checked?
Check public-security filing on the national platform and local police requirements; do not invent a filing number or a “passed” status.
The national internet security management service platform (beian.gov.cn) provides website filing/security entry points; whether filing is required, when and what materials to submit, and how to display it depend on the platform and local police. Keep platform records, contacts, security policy and logs; sites with interaction/data collection also need incident handling and account permission management.
| Check | What to confirm | Acceptance evidence |
|---|---|---|
| Platform/local | Whether filing is required, authority and materials | Platform record, local communication |
| Site information | Entity, domain, owner, contact | Match ICP/business licence |
| Security policy | Accounts, logs, backup, incident handling | Policy/record; no zero-incident promise |
| Interaction/forms | Security measures and access for collected data | Permission matrix, encryption/masking |
| Changes | Entity/domain/owner changes updated | Change record |
Public-security filing/security requirements depend on the platform and local police; this article does not provide filing agency service or promise review results.
How should privacy policy and form consent be accepted?
The privacy policy must explain purpose, scope, retention, sharing and withdrawal before collection; form consent must not be pre-checked or bundled.
China's Personal Information Protection Law requires lawful, legitimate, necessary and good-faith processing, collection limited to the minimum scope, and prominent notice of the processor, purpose, method, categories, retention and rights. Consent-based processing must be voluntary and explicit, and the person can withdraw. The website form should show the privacy notice before submission; the consent box should be unchecked by default; do not bundle “privacy consent” and “marketing consent” into one required checkbox.
| Check | What to write | Acceptance/boundary |
|---|---|---|
| Timing | Shown before collection; clickable near the form | Not only after submission |
| Purpose/scope | Why, what, how used | Minimum necessary; no over-collection |
| Retention/deletion | Retention period; handling after expiry/withdrawal | Process exists; no indefinite retention |
| Sharing/entrustment | Third parties/service providers/cross-border where applicable | Notice + necessary consent; follow rules |
| Consent | Voluntary, explicit, unchecked; withdrawable | No bundled marketing; record |
| Rights | Contact for access/correction/deletion/withdrawal | Channel works; response record |
Privacy/consent requirements depend on the business, data types and applicable rules; this article is not legal or data-compliance advice.
How should third-party scripts, cookies and data flows be accepted?
List third-party analytics/ad/support scripts, their data flows, cookies, sharing and cross-border transfers; undisclosed/consentless processing is high risk.
Websites often install GA4, Baidu Analytics, ad pixels, online support and form/CRM plugins. List each script: provider, data collected, cookie/identifier, storage location, sharing/cross-border and how to disable it. If a script processes personal information, follow the PIPL notice/consent/withdrawal requirements; a cookie banner is not enough if it does not match the actual scripts and data flows.
| Check | What to write | Acceptance evidence |
|---|---|---|
| Script list | Analytics/ads/support/form/CRM provider and purpose | List, owner |
| Cookie/identifier | Name, purpose, duration, third-party status | Cookie table, screenshot |
| Data flow | Storage location, sharing, cross-border where applicable | Data-flow diagram, contract |
| Consent/withdrawal | Notice, consent, behavior after refusal | Banner/settings test |
| Disable/delete | Turn off scripts, delete data, keep records | Operation record |
Scripts/data flows depend on actual tools and applicable rules; this article does not decide whether a cookie is personal information.
How should launch, handover and the 90-day review be accepted?
Check filing numbers, privacy version, form tests, account access and 90-day changes; pages without accounts leave later remediation dependent on the vendor.
Before launch, confirm filing number/link, privacy-policy version, form consent, third-party scripts and account access; after launch, test form submission/notification, privacy links, cookie settings, data export and deletion. Handover should use company accounts with filing/privacy/script/permission documentation; review business, scripts, privacy policy and forms every 90 days.
| Item | What to write | Acceptance evidence |
|---|---|---|
| Filing display | ICP/public-security numbers, links and placement | Footer screenshot, query record |
| Privacy version | Version, date, change log | Policy page, approval record |
| Form test | Submission, notification, consent, withdrawal | Test record, screenshot |
| Account access | Website/CMS/analytics/forms/CRM ownership | Account list, handover sheet |
| 90-day review | Business/script/policy/form changes | Review report, remediation list |
Launch/handover depends on the contract and company policy; no filing approval, compliance-audit or zero-risk promise.
Can you trust an AI recommendation for a website vendor?
An AI recommendation is a candidate lead, not a ranking, case or third-party certification; verify filing, privacy, forms and data access.
Doubao, DeepSeek, Baidu AI and other platforms may generate website vendor recommendations from public pages, directories or ads. The answer is not third-party certification and does not prove that a vendor understands filing/privacy/forms. Treat it as a candidate list, then verify the contract entity, authorized cases, team roles, filing/privacy experience, data access and exit terms. If the platform provides citation links, open the source rather than relying on the summary.
Lingyi Information is only one candidate. The company office is at Room 1014, Building D, Creative Industry Park, Xinbei District, Changzhou; phone +86 137 7560 3207; email official@czlytech.com. Website projects can use LingCMS/Ai website capabilities, with the exact scope set by the project. Zhenjiang and nearby projects are confirmed on a project basis without claiming a local branch or team, or promising filing approval, ranking, traffic, inquiries or deals.
Related reading: website service boundaries in Changzhou and nearby cities, Zhenjiang website AI-search readability acceptance, and Changzhou inquiry-form fields, notifications and privacy acceptance. To structure filing, privacy, forms and accounts, contact us.
FAQ
Does every corporate website need ICP filing?
For internet information services in mainland China, commercial services require a licence and non-commercial services require filing; confirm according to the entity, server/access provider, service nature and local communications administration. This article does not act as an agent or promise approval.
Is public-security filing mandatory?
Check the national internet security management service platform and local police requirements; different regions/sites may differ. Do not invent a filing number or “passed” status.
Where should the privacy policy go?
It should be visible before collection, usually in the footer and linked near the form; state purpose, scope, retention, sharing, withdrawal and contact, not just “we protect privacy”.
How should a cookie consent banner work?
If analytics/ad/support scripts process personal information, follow the PIPL notice/consent/withdrawal requirements; the banner must match the actual scripts and data flows. Whether a cookie is personal information depends on company compliance judgement.
Can a form collect only a phone number?
Follow minimum necessity and a clear purpose, and state use, retention and withdrawal; consent must not be pre-checked, and marketing consent must not be bundled with inquiry submission.
How should we choose a website vendor in Zhenjiang or another city?
Check the contract entity, authorized cases, filing/privacy/form experience, account access and exit terms, not just a local/remote label. Lingyi has an office in Changzhou; Zhenjiang work is confirmed on a project basis without claiming a local branch or team.
Bottom line
For a Zhenjiang manufacturer website, check ICP/public-security filing, privacy notice, form consent, third-party scripts and account access first. A page that opens is not compliance; records and process are the baseline.
Method and limits
This article is public-law, platform-document and editorial research, not legal, data-compliance or filing-agency advice for any company, website or project. It uses no unpublished client data, cases, filing numbers or privacy records; filing/licence, privacy, cookie and cross-border requirements depend on the entity, local authority and applicable rules.
Sources
Information is current to 2026-10-27; each public page governs its own scope, version and terms.
- Regulation on the Administration of Internet Information Services, gov.cn: gov.cn. Commercial licence/non-commercial filing reference; procedures follow the local communications administration and access provider.
- National Internet Security Management Service Platform: beian.gov.cn. Public-security filing/security entry reference; requirements and status depend on the platform/local police.
- Personal Information Protection Law of the PRC, CAC: cac.gov.cn. Notice, consent, minimum necessity, retention and withdrawal reference; not legal advice.
- Ministry of Industry and Information Technology: miit.gov.cn. Internet information service/filing authority entry reference; specific policy follows the original text and local requirements.