1. Who is responsible
The data controller for this website is Hunan Xiaodian New Brand Management Co., Ltd., Room 404, Livestream Base, 4F West, China-Africa Trade City, Gaoqiao Grand Market, Yuhua District, Changsha, Hunan, China. Contact for all privacy matters: sales@aumetta.com.
2. What we collect and why
We only collect what is needed to answer you and to produce or ship what you order:
- Quote requests and messages — name, email address or WhatsApp number, country, product type, quantity, size and your message. Purpose: preparing your quote and communicating about it. Legal basis: taking steps at your request before a contract (GDPR Art. 6(1)(b)).
- Artwork and files — logos, drawings, photos and files you upload or send us, including images generated by the DIY workbench when you attach them to an enquiry. Purpose: design proofs and production. Files stay attached to your enquiry record.
- Shop orders — the above plus your shipping address, the pieces and quantities you chose, and the gift-box option. Purpose: confirming stock and shipping, issuing the payment link, fulfilling and delivering the order (GDPR Art. 6(1)(b)) and keeping accounting records (legal obligation).
- Technical data — our web server keeps standard access logs (IP address, requested page, time, browser type) for security and troubleshooting, kept for up to 30 days (legitimate interest, GDPR Art. 6(1)(f)).
- Communication on WhatsApp, Facebook or by email — when you choose these channels, their operators (Meta Platforms, your email provider) process the data under their own policies.
3. Cookies and browser storage
This website does not use advertising or tracking cookies and currently runs no third-party analytics. It stores a few technical values in your browser's local storage only: your chosen language, whether sound effects on the Craftsmanship page are on, and — until you close the tab — the DIY design you chose to attach to an enquiry and a one-time flag for the opening animation. None of this is sent to us until you submit a form. If we ever add visitor statistics, we will use a cookie-free service or ask for your consent first.
The map on the Contact page is loaded from Google Maps only after you click on it; from that moment Google's privacy policy applies to that map view.
4. The DIY workbench
Logos you upload to the DIY workbench are processed entirely inside your browser. Nothing is transferred to our server unless you click "Enquire with this design" and then submit the enquiry form, in which case a preview image, the cut-out artwork and the chosen configuration are attached to your enquiry.
5. Who receives your data
Your data is handled by our sales and production team. We share it only with service providers needed to serve you:
- Hosting: Alibaba Cloud (Europe) — the website and its database run on a server in Frankfurt, Germany.
- Email: Alibaba Cloud Mail, for notifications and our replies.
- Payment: PayPal or your bank, when you pay an order or a deposit. We never see or store card numbers.
- Carriers: DHL, FedEx, UPS, EMS or the freight forwarder named in your order, who receive your name, address and phone number for delivery.
- We do not sell personal data and do not use it for advertising.
6. Transfers outside the EU/EEA
Aumetta is operated from China; our team accesses enquiry and order data from there in order to respond to you and to produce your order. Where EU law requires, this transfer relies on your explicit request for a quote or order and on the safeguards described above (access limited to the people handling your case, encrypted connections). You may ask us at any time which data we hold about you.
7. How long we keep data
Enquiries without a resulting order are deleted or anonymised after 24 months. Order records and invoices are kept for the period required by accounting law (up to 10 years). Uploaded artwork and DIY previews attached to enquiries that did not lead to an order are deleted after 12 months. Server access logs are kept for up to 30 days.
8. Your rights
You can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to sales@aumetta.com; we answer within 30 days. If you are in the EU/EEA or the UK you may also complain to your local data protection authority.
9. Security
All pages and forms use HTTPS. The enquiry database and uploaded files are stored on an access-controlled server with regular backups. Access to the customer records tool is restricted to authorised staff.
10. Children
Our services are aimed at businesses and adult buyers. We do not knowingly collect data from children under 16.
11. Changes
We update this page when our practices change and show the date of the latest version at the top.