Privacy Policy

Who We Are

The data controller for this policy is China AT Industrial Limited, operating under the brand name ACAT Mold. Our principal place of business is located at 【PLACEHOLDER: full English street address】, Xixiang, Bao'an District, Shenzhen, Guangdong, China.

This policy applies to both acatmold.com and acatmould.com. The second domain is an alternate English spelling that redirects to the primary site; both are owned and operated by China AT Industrial Limited and fall within the scope of this policy.

We operate as a custom injection mold manufacturer and production molder. The personal data we process relates entirely to the business activities of receiving inquiries, issuing quotations, designing and cutting molds, conducting trial runs, delivering tooling and molded parts, and providing lifetime after-sales support.

To exercise any right described in this policy, use the form at /contact and choose Privacy Request.

Information We Collect

Information you provide directly

When you submit an inquiry, request a quote, or place an order, you may provide your name, company name, country of operation, phone number, business email address, and the text of your message. You may also upload files, including three-dimensional models in STEP, IGES, or X_T formats, two-dimensional engineering drawings, PDF specifications, photographs of existing parts, and compressed archives of project documents.

Information recorded automatically

Our website infrastructure logs IP addresses, browser type and version, device type and operating system, the referring page that brought you to our site, the pages you visit and links you click, form submission and error events, and an approximate geographic location derived from your IP address. We do not collect precise GPS coordinates or location data from your device.

Information generated through the business process

As a project moves from inquiry to delivery, we accumulate additional information: shipping and customs documentation including consignee name, delivery address, and declared goods value; dimensional measurement and inspection records from trial shots and CMM reports; and the record of written communications between your team and ours throughout the project lifecycle.

How We Use It and Our Lawful Basis

The table below sets out each purpose for which we process personal data and the corresponding legal basis under GDPR Article 6. We do not make decisions about you based solely on automated processing, and we do not build profiles of individuals for marketing or scoring purposes.

Your 3D Files and Drawings

Technical files -- including 3D models, 2D drawings, product specifications, and any other engineering documents you share with us -- are treated as confidential business information. They are not marketing material, portfolio content, or reference data for other clients.

How We Share Information

We share personal data only with third parties that need it to help us operate our business or fulfill your order. We share by category, not by compiling mailing lists or data profiles. The categories of recipients are:

• Website hosting and security providers -- infrastructure services that store and protect our website and its data.
• Form and CRM processing services -- tools that route and store inquiry submissions and project communications.
• Email delivery services -- services that transmit project-related messages between our team and yours.
• Statistical analytics services -- tools used to measure page performance and inquiry conversion; data is used in aggregate and is not sold.
• Freight forwarders and customs brokers -- to complete international shipment and customs clearance of molds and parts, we must provide the consignee name, delivery address, phone number, and declared goods value to the carrier, forwarder, and destination customs authority.
• Banks and payment processors -- to receive and reconcile payments for tooling and production orders.
• Third-party inspection and certification bodies -- when you or your end customer requires a pre-shipment inspection or factory audit, the relevant contact and order information is shared with the appointed inspector.
• Accounting and tax advisors -- to prepare financial records and meet our tax filing obligations in China.
• Government authorities -- when required by applicable law, regulation, or a valid legal process.

International Transfers

Our factory, engineering team, and primary business systems are located in China. When you submit an inquiry or place an order from the European Union, the European Economic Area, or the United Kingdom, your personal information and technical files are transferred to and processed in a country outside the EU/EEA/UK.

For personal data originating from EU or EEA residents, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer mechanism, supplemented by access controls, encrypted transmission, and a strict need-to-know access policy as additional safeguards.

For personal data originating from UK residents, we rely on the UK International Data Transfer Addendum (IDTA) or an equivalent mechanism recognized by the UK Information Commissioner's Office, along with the same supplemental safeguards described above.

When molds and parts are shipped internationally, the necessary consignee and shipment information will also pass through the logistics chain, including the carrier, freight forwarder, and destination country customs authority, as described in Section 5.

If we implement EU- or UK-based hosting or data localization arrangements in the future, we will update this policy, assign a new version number, and note the effective date of the change.

Retention

We keep personal data only as long as necessary for the purpose for which it was collected or as required by law. The table below sets out our standard retention periods.

Data that we are legally required to retain is not subject to deletion on request. Where this applies to your data, we will tell you which records cannot be deleted, the reason, and the period for which they must be kept.

Security

We apply the following technical and organizational measures to protect personal data and technical files:

• All data transmitted between your browser and our website is encrypted using HTTPS/TLS.
• Client files are stored in an internal environment that is not directly accessible from the public internet; access is granted per project and per individual.
• All employees and contractors with access to client data are bound by confidentiality agreements.
• Internal accounts use two-factor authentication and are provisioned on a least-privilege basis.
• Access rights are revoked promptly when a team member leaves the company or when a project concludes.
• Data backups are encrypted, and access logs are reviewed on a regular schedule.

In the event of a security incident that involves your personal data and that triggers a legal notification obligation, we will notify you within 72 hours of becoming aware of the incident, to the extent required by applicable law.

No method of transmitting data over the internet is completely secure. We do not represent that our systems are impenetrable, but we commit to maintaining controls that meet or exceed common industry standards for a manufacturing business of our type.

Cookies and Analytics

Strictly necessary cookies

Some cookies are required for the website to function. These include session management for forms, language preference storage, and security tokens that prevent cross-site request forgery. These cookies are set without requiring your consent because they are technically essential.

Optional analytics cookies

We may use analytics tools to measure page performance and understand how visitors navigate from initial visit to inquiry submission. For visitors from the EU and UK, non-essential cookies are written only after you confirm consent through the cookie notice. Declining is as straightforward as accepting, and declining does not prevent you from submitting an inquiry.

We do not run cross-site advertising tracking, and we do not deploy retargeting pixels on this website. If we add any such capability in the future, this policy will be updated with a new version number and effective date before the change takes effect.

Analytics data is used solely to understand aggregate traffic patterns and improve the inquiry experience. It is not sold and is not shared with advertisers.

Cookies in use

Cookie names and durations will be confirmed once the analytics and consent management configuration is finalized. This table will be updated at that time with a new version date.

California and Other US State Privacy Rights

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA) or its amendment, the California Privacy Rights Act (CPRA). We do not share personal information for the purpose of cross-context behavioral advertising.

California residents have the right to know what personal information we have collected about them, to request deletion of that information, to request correction of inaccurate information, to limit the use of sensitive personal information, and to receive equal service regardless of whether they exercise these rights.

Residents of other US states that have enacted comprehensive privacy legislation have similar rights under those laws. We apply a consistent standard across all US-based contacts.

To exercise any of these rights, use the form at /contact and select Privacy Request. We will verify your identity before processing the request and will respond within the time period required by the applicable state law.

Your Rights in the UK and EEA

If you are located in the United Kingdom or the European Economic Area, you have the following rights under applicable data protection law:

• Access Request a copy of the personal data we hold about you.
• Rectification Ask us to correct inaccurate or incomplete personal data.
• Erasure Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Restriction Ask us to pause processing of your data while a dispute or correction request is resolved.
• Objection Object to processing carried out on the basis of legitimate interests, including any direct communications.
• Portability Receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Withdraw consent Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint File a complaint with your national data protection authority. In the UK, this is the Information Commissioner's Office at 【PLACEHOLDER: ico.org.uk -- confirm URL before publishing】. In the EU, contact the supervisory authority in your member state.

To exercise any of the above rights, use the form at /contact and select Privacy Request. We may ask you to verify your identity or confirm your company email domain before acting on the request. We will not charge a fee for routine requests and will not treat you differently for exercising your rights. For complex or repetitive requests, we may extend our response time within the limits permitted by law and will inform you of the extension.

Children

Our website and services are directed exclusively at business professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly upon notification. To report such a case, use the form at /contact.

Changes to This Policy

When we update this policy, we publish the revised version on this page with a new version number and effective date. For material changes -- changes that affect how we use your data or the rights available to you -- we will also post a notice on the /contact page at the time the updated policy takes effect.

Continued use of our website or services after the effective date of an update constitutes acknowledgment of the revised policy. If a change materially reduces your rights, we will provide reasonable advance notice before the change takes effect.

How to Contact Us

We provide two channels for privacy-related communications. Submitting a request through the web form is the preferred method for exercising any right described in this policy, because it creates a timestamped record and routes your request to the appropriate person.