Privacy Policy

1. Who this policy covers

This policy explains how personal information is handled through this website and in business communications under the Alrightmade brand. The legal entity responsible for a specific quoted or accepted project is identified in the applicable quotation, pro forma invoice, order confirmation, or agreement. Before a project entity is identified, Alrightmade is responsible for handling the website inquiry.

For website visitors and business contacts, the responsible Alrightmade entity decides why and how the information is used and acts as controller or the equivalent role under applicable law. When a business buyer supplies consignee or end-customer information solely so we can make, pack, or deliver that buyer’s order, we use it only for those instructions as a processor, service provider, or equivalent. The buyer remains responsible for having a lawful basis to provide that information, and we do not use it to market directly to the buyer’s customer.

This policy covers website visitors, inquiry and buyer contacts, supplier and production contacts, professional advisers, and newsletter subscribers. It does not govern another organisation’s independent website or processing.

For privacy questions or to identify the responsible legal entity before requesting a quotation, use the website inquiry form and mark the message “Privacy”.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identity and business contact data: name, role, company, business email, telephone or messaging number, country, address, and preferred language or contact channel.
• Inquiry and project data: products, quantities, target market, dates, budget context, messages, tech packs, specifications, artwork, photographs, measurements, samples, approvals, feedback, and selected inquiry-list items.
• Transaction and logistics data: quotations, purchase orders, invoices, payment status and reference, payer and tax information, delivery contacts, consignee details, shipping documents, claims, and support history. We do not collect full card numbers through this website.
• Supplier and professional data: contact, capability, quotation, compliance, quality, production, and delivery information needed to evaluate or perform a project.
• Technical and security data: IP address, browser and device information, requested pages, timestamps, referral data, error and security logs, and information stored locally by your browser.
• Marketing preferences: newsletter subscription, source, consent or objection records, and unsubscribe status.

Please avoid sending government identifiers, bank credentials, health information, or other sensitive personal information unless it is necessary for a documented legal or project requirement and we have agreed a secure method.

3. Where information comes from

We collect information directly from you through the inquiry form, newsletter form, email, telephone, WhatsApp or other agreed business channels, samples, documents, and project communication. We may also receive business contact information from a colleague in your organisation, an authorised agent, a supplier or logistics partner, a trade event, or a public business source such as a company website or professional directory.

If you give us another person’s information, you must be authorised to do so and should direct them to this policy where appropriate.

4. How and why we use it

We use personal information for the following purposes and legal grounds, where the relevant law recognises them:

• To respond and take pre-contract steps: understand an inquiry, assess feasibility, source materials, prepare a quotation, arrange samples, and communicate before a business contract.
• To perform a contract: manage approvals, production, quality, payment, packing, delivery, support, claims, and records for an accepted project.
• For legitimate business interests: operate and secure the website, improve services and workflows, maintain supplier and buyer relationships, prevent fraud, establish or defend claims, and conduct proportionate B2B follow-up, balanced against individual rights.
• With consent: send optional newsletter updates or use a non-essential feature where consent is required. Consent can be withdrawn.
• To meet legal obligations: maintain tax, accounting, customs, export, sanctions, safety, and corporate records; respond to lawful requests; and protect legal rights.

Where providing information is necessary to quote, contract, pay, deliver, or comply with law, we will identify the required fields. Without them, we may not be able to respond or perform the project.

5. Website storage and third-party features

The site uses technical functions needed for security, forms, navigation, and WordPress operation. The inquiry list stores selected product references and notes in your browser’s local storage so they remain available on later pages or visits. You can remove items through the inquiry list or clear the site’s browser storage.

The site may load services such as hosted fonts, translation, maps, spam prevention, video, or social links. Optional services can receive technical data such as your IP address and browser information under their own privacy terms. Features such as Google Translate or reCAPTCHA are loaded only if enabled by the site operator.

We do not state that we sell personal information or share it for cross-context behavioural advertising. If our use of advertising, analytics, or cookies changes, we will update the notice and provide any consent or opt-out control required by applicable law.

6. When we share information

We share only what is reasonably needed with:

• the contracting seller and authorised Alrightmade team members;
• factories, material and trim suppliers, sample rooms, printers, embroiderers, laboratories, inspectors, packaging providers, and other production partners evaluating or performing the project;
• website hosting, security, email, communications, cloud storage, translation, form, and IT service providers;
• banks, payment providers, accountants, insurers, freight forwarders, couriers, customs agents, and trade-compliance providers;
• lawyers, auditors, professional advisers, regulators, courts, customs, tax, law-enforcement, or other authorities where reasonably necessary or legally required; and
• a genuine buyer, investor, lender, or successor in a proposed business transaction, subject to appropriate confidentiality and legal safeguards.

We do not rent personal information. Production partners may receive project files that contain personal or business contact information, so include only what is necessary.

7. International processing

Alrightmade coordinates projects from China and serves buyers and partners internationally. Personal information may therefore be accessed or processed in China and in countries where the buyer, contracting seller, production partner, logistics provider, payment provider, or technology provider operates.

Privacy laws differ between countries. Where applicable law requires a transfer safeguard, the responsible entity will use an available lawful mechanism, contractual protection, risk assessment, consent or other permitted basis, and will provide information about the relevant safeguard on request where legally required.

8. How long we keep information

We keep personal information only as long as reasonably necessary for the purpose collected, including to:

• respond to and follow up a current or reasonably prospective inquiry;
• perform the project and maintain approval, quality, payment, delivery, warranty, and claim history;
• meet accounting, tax, customs, export, sanctions, product, and corporate record duties;
• establish, exercise, or defend legal claims during the applicable limitation period;
• maintain a newsletter subscription until unsubscribe and a minimal suppression record afterwards; and
• keep proportionate security and server logs for diagnosis, abuse prevention, and legal compliance.

The exact period depends on the record, project status, legal jurisdiction, contract, and risk. We delete, anonymise, or securely archive information when it is no longer needed. Backups and legal holds may take longer to expire.

9. Security

We use reasonable administrative, technical, and organisational measures appropriate to the nature of the information and the size of the business. These may include access limits, account authentication, transport encryption where available, provider review, backups, malware and spam controls, staff or contractor confidentiality, and verification of payment changes.

No internet, email, messaging, or storage system is completely secure. Do not send passwords or full payment-card credentials. Tell us promptly if you believe project or personal information has been sent to the wrong person or an Alrightmade communication has been compromised.

10. Your privacy rights

Depending on your location and the applicable law, you may have rights to:

• know whether and how we process your personal information and receive a copy;
• correct inaccurate or incomplete information;
• request deletion, restriction, or anonymisation in applicable circumstances;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a portable format;
• withdraw consent without affecting earlier lawful processing;
• receive equal service and not be discriminated against for exercising a privacy right; and
• complain to the privacy or data-protection authority where you live, work, or believe a breach occurred.

We do not knowingly sell personal information or share it for cross-context behavioural advertising. If you are entitled to opt out of such activity, our current response is that there is no such activity to opt out of.

Submit a request through the inquiry form with “Privacy request” and the relevant right in the message. We may verify identity, authority, account, or project details and may retain information where a legal exemption or obligation applies. An authorised agent may act where permitted with appropriate proof.

11. Marketing choices

Newsletter subscription is optional. Use the unsubscribe method in a message or contact us to stop it. We may keep a minimal suppression record so we do not add the address again by mistake.

A current buyer may receive project communication and limited relevant B2B follow-up where lawful. You can object to promotional follow-up at any time without affecting service messages needed for an active inquiry, order, safety issue, payment, claim, or legal notice.

12. Children and automated decisions

This is a business-to-business website and is not directed to children. We do not knowingly collect personal information from a child through the inquiry or newsletter forms. Contact us if you believe a child has submitted information so we can assess and remove it where appropriate.

We do not use information collected through this website to make a decision based solely on automated processing that produces a legal or similarly significant effect on an individual. Filters, spam checks, and routine security tools may operate automatically but do not decide whether to enter a manufacturing contract without human review.

13. Changes and contact

We review this policy when our services, providers, or legal obligations change. The effective and last-reviewed dates appear at the top. Material new uses of personal information will be brought to affected people as required before they begin.

For questions, rights requests, complaints, or the identity and contact details of the responsible legal entity, use the website inquiry form and mark the message “Privacy”. We will route the request to the responsible person or contracting entity.