Privacy Policy

1. Who this policy covers

This policy applies to visitors, inquiry and buyer contacts, supplier and production contacts, professional advisers, and newsletter subscribers. Dongguan Shengyixing Trading Co., Ltd. (昇易兴（东莞市）贸易有限公司), registered in Dongguan, Guangdong, China, operates the Alrightmade brand and this website and is the data controller for information collected through the website and during the inquiry stage. Where a project document names a different responsible entity for an accepted project, that entity is responsible for the information used for that project.

We decide how to use information received directly from visitors and business contacts and act as data controller where applicable. If you provide consignee or end-customer details so we can make, pack, or deliver your order, we use them only for your instructions. You must have a lawful basis to provide them, and we do not market directly to your customer.

This policy does not cover another organisation’s independent service or processing.

For privacy questions or to identify the responsible legal entity before requesting a quotation, use our contact form and write “Privacy”.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identity and business contact data: name, role, company, business email, telephone or messaging number, country, address, and preferred language or contact channel.
• Inquiry and project data: products, quantities, target market, dates, budget context, messages, tech packs, specifications, artwork, photographs, measurements, samples, approvals, feedback, and selected inquiry-list items.
• Transaction and logistics data: quotations, purchase orders, invoices, payment status and reference, payer and tax information, delivery contacts, consignee details, shipping documents, claims, and support history. We do not collect full card numbers through this website.
• Supplier and professional data: contact, capability, quotation, compliance, quality, production, and delivery information needed to evaluate or perform a project.
• Technical and security data: IP address, browser and device information, requested pages, timestamps, referral data, error and security logs, and information stored locally by your browser.
• Marketing preferences: newsletter subscription, source, consent or objection records, and unsubscribe status.

Please avoid sending government identifiers, bank credentials, health information, or other sensitive personal information unless it is necessary for a documented legal or project requirement and we have agreed a secure method.

3. Where information comes from

We collect information directly from you through the inquiry form, newsletter form, email, telephone, WhatsApp or other agreed business channels, samples, documents, and project communication. We may also receive business contact information from a colleague in your organisation, an authorised agent, a supplier or logistics partner, a trade event, or a public business source such as a company website or professional directory.

If you give us another person’s information, you must be authorised to do so and should direct them to this policy where appropriate.

4. How and why we use it

We use personal information for the following purposes and legal grounds, where the relevant law recognises them:

• To respond and take pre-contract steps: understand an inquiry, assess feasibility, source materials, prepare a quotation, arrange samples, and communicate before a business contract.
• To perform a contract: manage approvals, production, quality, payment, packing, delivery, support, claims, and records for an accepted project.
• For legitimate business interests: operate and secure the website, improve services and workflows, maintain supplier and buyer relationships, prevent fraud, establish or defend claims, and conduct proportionate B2B follow-up, balanced against individual rights.
• With consent: send optional newsletter updates or use a non-essential feature where consent is required. Consent can be withdrawn.
• To meet legal obligations: maintain tax, accounting, customs, export, sanctions, safety, and corporate records; respond to lawful requests; and protect legal rights.

Where providing information is necessary to quote, contract, pay, deliver, or comply with law, we will identify the required fields. Without them, we may not be able to respond or perform the project.

5. Site data and third-party services

We use technical functions for security, forms, navigation, and site operation. Your inquiry list stores selected product references and notes in your browser so they remain available on later visits. Remove them from the list or clear your browser storage.

Inquiry and project files may pass through secure uploads, email or messaging, cloud storage, and backups. We limit access according to project need and the safeguards available in each service.

Vercel Web Analytics helps us understand aggregated traffic and improve navigation. It may process the requested page, time, referrer, filtered query parameters, approximate location, browser, operating system, and device type. Vercel states that it does not use third-party cookies or associate Analytics records with an individual or IP address, and that it resets its visitor hash daily. Do not put personal information in a page URL. See Vercel Web Analytics privacy and compliance.

Videos on this website are hosted on YouTube, a Google service, and the player loads from youtube-nocookie.com only after you press play. YouTube then receives your IP address and browser information and may store data on your device. See the Google Privacy Policy.

Google Fonts and any enabled translation, map, video, social, or spam-prevention service may receive technical data such as your IP address and browser information under its own privacy terms.

We do not sell personal information or share it for cross-context behavioural advertising. Our current Vercel Web Analytics setup does not use third-party cookies. If this changes, we will update this policy and provide any consent or opt-out control required by law.

6. When we share information

We use controlled access and share only the minimum information reasonably needed for the stated purpose with:

• the contracting seller and authorised Alrightmade team members;
• factories, material and trim suppliers, sample rooms, printers, embroiderers, laboratories, inspectors, packaging providers, and other production partners evaluating or performing the project;
• website hosting, security, email, communications, cloud storage, translation, form, and IT service providers;
• banks, payment providers, accountants, insurers, freight forwarders, couriers, customs agents, and trade-compliance providers;
• lawyers, auditors, professional advisers, regulators, courts, customs, tax, law-enforcement, or other authorities where reasonably necessary or legally required; and
• a genuine buyer, investor, lender, or successor in a proposed business transaction, subject to appropriate confidentiality and legal safeguards.

We do not rent personal information. An authorized production or service partner receives only the project file or information needed to evaluate or perform its assigned work and must handle it under appropriate confidentiality and access duties. Include only information necessary for the project.

7. International processing

Alrightmade coordinates projects from China and serves buyers and partners internationally. Personal information may therefore be accessed or processed in China and in countries where the buyer, contracting seller, production partner, logistics provider, payment provider, or technology provider operates.

Privacy laws differ between countries. Where law requires a transfer safeguard, we use a lawful mechanism such as contractual protection, a risk assessment, consent, or another permitted basis. We provide details on request where legally required.

8. How long we keep information

We keep personal information only as long as reasonably necessary for the purpose collected, including to:

• respond to and follow up a current or reasonably prospective inquiry;
• perform the project and maintain approval, quality, payment, delivery, warranty, and claim history;
• meet accounting, tax, customs, export, sanctions, product, and corporate record duties;
• establish, exercise, or defend legal claims during the applicable limitation period;
• maintain a newsletter subscription until unsubscribe and a minimal suppression record afterwards; and
• keep proportionate security and server logs for diagnosis, abuse prevention, and legal compliance.

The exact period depends on the record, project status, legal jurisdiction, contract, and risk. We delete, anonymise, or securely archive information when it is no longer needed. Backups and legal holds may take longer to expire.

You may request deletion of design and project files. We will delete the agreed files and confirm the result where applicable, but may retain contract, transaction, payment, quality, delivery, claim, dispute, security, backup, or other records where retention is needed to perform the project, comply with law, or establish or defend legal rights. We will explain an applicable retention exception and its scope.

9. Security

We use reasonable administrative, technical, and organisational measures appropriate to the nature of the information and the size of the business. These may include access limits, account authentication, transport encryption where available, provider review, backups, malware and spam controls, staff or contractor confidentiality, and verification of payment changes.

No internet, email, messaging, or storage system is completely secure. Do not send passwords or full payment-card credentials. Tell us promptly if you believe project or personal information has been sent to the wrong person or an Alrightmade communication has been compromised.

10. Your privacy rights

Depending on your location and the applicable law, you may have rights to:

• know whether and how we process your personal information and receive a copy;
• correct inaccurate or incomplete information;
• request deletion, restriction, or anonymisation in applicable circumstances;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a portable format;
• withdraw consent without affecting earlier lawful processing;
• receive equal service and not be discriminated against for exercising a privacy right; and
• complain to the privacy or data-protection authority where you live, work, or believe a breach occurred.

We do not currently sell personal information or share it for cross-context behavioural advertising.

Submit a request through the inquiry form with “Privacy request” and the relevant right in the message. We may verify identity, authority, account, or project details and may retain information where a legal exemption or obligation applies. An authorised agent may act where permitted with appropriate proof.

11. Marketing choices

Newsletter subscription is optional. Use the unsubscribe method in a message or contact us to stop it. We may keep a minimal suppression record so we do not add the address again by mistake.

A current buyer may receive project communication and limited relevant B2B follow-up where lawful. You can object to promotional follow-up at any time without affecting service messages needed for an active inquiry, order, safety issue, payment, claim, or legal notice.

12. Children and automated decisions

This is a business-to-business website and is not directed to children. We do not knowingly collect personal information from a child through the inquiry or newsletter forms. Contact us if you believe a child has submitted information so we can assess and remove it where appropriate.

We do not use your information for decisions based solely on automated processing that have a legal or similarly significant effect. Filters, spam checks, and security tools may run automatically, but a person reviews whether to enter a manufacturing contract.

13. Changes and contact

We review this policy when our services, providers, or legal obligations change. The effective and last-reviewed dates appear at the top. Material new uses of personal information will be brought to affected people as required before they begin.

For questions, rights requests, complaints, or the identity and contact details of the responsible legal entity, use our contact form and write “Privacy”.