Privacy Policy
Last updated: 2026-09-23
1. Who we are
Ningbo Airmei Technology Co., Ltd. (“Airmei“, “BSFL“, “we“, “us“) is a manufacturer of professional beauty and personal care tools, including makeup brushes, hairbrushes, powder puffs and bath accessories. We are headquartered at Building 4, No.29, Lane 321, Tongning Road, Jiangbei District, Ningbo, Zhejiang 315020, China.
We are the data controller responsible for the personal information described in this policy.
- Privacy contact: bsfl@airmeitec.com (one mailbox handles general, privacy, data-protection and legal requests)
- General contact: bsfl@airmeitec.com
- Telephone: +86 159 6804 2509 / +86 574 56130169
- Unified Social Credit Code / Registration number: 91330206MAC5TP3E3P
- EU/UK representative under GDPR Article 27 / UK GDPR Article 27: not currently appointed — you confirmed on 2026-09-23 that this is deferred. This must be re-assessed if we begin targeting individuals in the EU/UK (for example, marketing directly to individuals there or monitoring their behaviour).
Our website is a business-to-business (B2B) platform. It is not directed at consumers and is not intended for anyone under 18 years of age.
2. Scope
This policy applies to personal information we collect through:
- our websites, including quote requests and contact forms;
- order, quotation, sample and account processes;
- email, telephone and WhatsApp communication with us;
- offline contact at trade shows, exhibitions and factory visits.
3. Information we collect
3.1 Information you give us
| Category | Examples |
|---|---|
| Identity and contact | name, company name, job title, business email, telephone / WhatsApp number, country, shipping and billing address |
| Business and order | product interest, quantities, branding and packaging choices, requested delivery dates, VAT / tax identification number, purchase order references |
| Cuenta | login name, encrypted password, order and download history |
| Content you upload | logo files, artwork, AI/PDF/PNG design files (.ai, .pdf, .png, .jpg) |
| Communications | messages sent through forms, email, WhatsApp, or notes from calls and meetings |
3.2 Information collected automatically
| Category | Examples |
|---|---|
| Device and usage | IP address, browser type and version, operating system, pages viewed, referring URL, timestamps |
| Cookies and similar technologies | session identifiers, cart contents, consent preferences — see our Cookie Policy |
| Approximate location | country / region derived from your IP address, used for tax and shipping calculation |
3.3 Information from third parties
- Payment service providers (e.g. PayPal, card acquirers) and banks used for T/T and WorldFirst (万里汇) collections — confirmation of payment status and transaction identifiers. We do not receive or store your full card number.
- Shipping carriers and customs brokers — delivery status and, where required, customs documentation.
- Fraud and tax services — geolocation and tax-number validation results.
We do not knowingly collect special-category data (such as health, biometric or political data). Please do not send us such information.
4. Why we use your information and our legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Respond to quotations, samples and enquiries | Steps prior to entering a contract; legitimate interests |
| Process, fulfil and invoice orders; arrange shipping | Performance of a contract |
| Verify tax status and apply correct VAT / sales tax | Legal obligation; legitimate interests |
| Manage accounts, downloads and warranties | Performance of a contract |
| Prevent fraud, abuse and spam; secure our systems | Legitimate interests |
| Keep accounting, tax and customs records | Legal obligation |
| Send marketing communications | Consent (or soft opt-in where permitted), withdrawable at any time |
| Improve our website and services | Legitimate interests (using aggregated data where possible) |
| Establish, exercise or defend legal claims | Legitimate interests |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. Where we rely on legitimate interests, we have balanced them against your rights; you may object as described in section 9.
5. Who we share information with
We share personal information only as necessary, and only with parties bound by confidentiality and data protection obligations:
| Recipient | Purpose |
|---|---|
| Payment service providers and banks (PayPal, card acquirers / WooPayments, and the banks used for T/T and WorldFirst collections) | processing payments |
| Shipping carriers, freight forwarders and customs brokers | delivering goods and clearing customs |
| Email and hosting providers | operating our website and email |
| Geotaxation / geolocation service (MaxMind) | determining applicable tax and shipping |
| IT, backup and security providers | maintaining and securing our systems |
| Professional advisers (lawyers, auditors, accountants) | legal, tax and audit advice |
| Authorities (customs, tax, regulators, courts) | where legally required |
We do not sell your personal information. We do not share it for cross-context behavioural advertising.
We may disclose information as part of a corporate transaction (merger, acquisition, restructuring), subject to this policy.
6. International transfers
We are based in China. Information you provide may be transferred to, stored in, and processed in China and in other countries where our service providers operate (including the United States and the European Union).
Where personal data protected by the GDPR or UK GDPR is transferred outside the EEA or UK, we rely on appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission / UK addendum, and
- where applicable, transfer impact assessments and supplementary technical and organisational measures.
You may request a copy of the relevant safeguards using the contact details in section 1.
7. How long we keep information
| Data | Retention period |
|---|---|
| Enquiries and quotations that do not become orders | 24 months from last contact |
| Orders, invoices, customs and tax records | 7 years (or the period required by applicable accounting and tax law) |
| Account records | while the account is active, then 24 months |
| Uploaded artwork and logo files | while the related order is active, then 24 months |
| Marketing consent records | until consent is withdrawn, plus 24 months as proof |
| Website logs | up to 12 months |
| Cookie consent records | as stated in our Cookie Policy |
We may keep information longer where required by law, or where necessary to establish, exercise or defend legal claims.
8. How we protect information
We use technical and organisational measures appropriate to the risk, including:
- encrypted connections (HTTPS/TLS) across the website;
- access control, so that artwork and logo files you upload are accessible only to authorised staff, and are not publicly downloadable;
- role-based permissions and password protection for administrative access;
- regular backups and malware scanning;
- confidentiality obligations for staff and contractors;
- vendor due diligence before engaging processors.
No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and any competent authority as required by law.
9. Your rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete information, subject to legal retention obligations.
- Restrict or object to certain processing.
- Port information you provided to us in a structured, machine-readable format.
- Withdraw consent at any time.
- Lodge a complaint with your local supervisory authority.
California residents (CCPA/CPRA) additionally have the right to know what categories of personal information are collected, to request deletion, to correct, and to opt out of “sale” or “sharing”. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any right, contact bsfl@airmeitec.com. We will respond within the timeframe required by applicable law (generally 30 days, extendable where permitted). We may need to verify your identity and your relationship to the business before acting.
10. Cookies
We use cookies and similar technologies. Strictly necessary cookies support cart, checkout, security and consent functions. Analytics and marketing cookies are used only with your consent. See our Cookie Policy for the full list and how to change your preferences.
11. Children
Our services are for businesses. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
12. Automated decision-making
We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
13. Changes to this policy
We may update this policy to reflect changes in our practices or the law. We will post the revised version with a new “Last updated” date. Where changes are material, we will provide a prominent notice on our website.
14. Contact
Ningbo Airmei Technology Co., Ltd. Building 4, No.29, Lane 321, Tongning Road, Jiangbei District, Ningbo, Zhejiang 315020, China Email: bsfl@airmeitec.com (general, privacy and legal) Telephone: +86 159 6804 2509 / +86 574 56130169
You may also raise a concern with the competent supervisory authority in your country of residence or place of work.
