Privacy Policy — how AOYIN collects, uses, and protects your information.
AOYIN Holding Co., Ltd. operates www.aymetals.com. This page explains what personal information we collect when you browse our site or send us an RFQ, how we use it, who we share it with, how long we keep it, and how to contact us about it. It is the policy that applies whether you are in Europe, the Americas, Asia or anywhere else — the content reflects the highest applicable standard we serve.
What personal information we collect
We collect information you give us directly — when you fill in an RFQ, send us an email, or call us. We collect limited technical data from your browser when you visit the site. We do not collect more than we need for the purpose stated below.
| Source | What we collect | Why |
|---|---|---|
| RFQ / Contact form | Name, company name, country, email, phone, project details, alloy / form / dimensions you share | Reply to your RFQ with a quote and a lead-time plan |
| Email / WhatsApp / phone | Name, contact details, message content, attached drawings / specs you share | Process your inquiry, issue quotations, execute orders |
| Site analytics | IP address, browser type, pages visited, referrer, session duration | Understand which pages and materials are useful, fix what isn’t |
| Cookies | Strictly necessary cookies for site function; optional analytics cookies only with consent | Operate the site, measure site performance |
| Order execution (after RFQ) | Billing / shipping address, tax ID, MTC signing authority | Issue commercial documents, certificates, execute shipments |
How we use the information
We use the data we collect for the purposes set out below. We don’t use it for anything else without telling you.
- Respond to your RFQ — quote, lead time, technical clarification, document issuance
- Execute your order — production scheduling, MTC, packing, shipment, document pack
- Send order-related updates — production milestones, inspection windows, shipping notifications, dispute resolution
- Maintain business records — invoices, contracts, certificates, audit trail (as long as required by accounting / compliance rules)
- Improve the website — aggregate analytics on which pages are useful, which aren’t
- Comply with legal obligations — tax records, customs declarations, audit requests
- Defend legal claims — keep order records for the statutory limitation period
- Marketing — only with consent — newsletter / product update opt-in, never as default
Legal basis for processing (EU / UK visitors)
For visitors in the European Economic Area or the United Kingdom, GDPR requires a clear legal basis for each processing activity. Below is the basis we apply to each category.
| Processing activity | Legal basis under GDPR |
|---|---|
| RFQ response & order execution | Contract performance (Art. 6(1)(b)) — steps at your request prior to entering a contract |
| Document issuance, MTC, invoicing | Legal obligation (Art. 6(1)(c)) — tax, customs, audit record rules |
| Site analytics | Consent (Art. 6(1)(a)) — only if you accept the optional analytics cookies |
| Marketing communications | Consent (Art. 6(1)(a)) — explicit opt-in, opt-out at any time |
| Order documentation retention | Legal obligation (Art. 6(1)(c)) + legitimate interest in defending claims (Art. 6(1)(f)) |
Who we share information with
We never sell personal information. We share only what’s needed to deliver the service you asked for, with the categories of recipients below.
- Logistics providers — sea / road freight forwarders, customs brokers — to execute the shipment you ordered
- Surveyors & inspectors — third-party inspection agencies (SGS / TÜV / BV / ABS) — only when you’ve asked for third-party inspection
- Certificate issuers — CCPIT (China Council for the Promotion of International Trade) for Certificates of Origin
- Auditors & regulators — when legally required for tax, customs, or accreditation audits
- IT service providers — email / CRM / web-hosting providers, under data-processing agreements
- Legal counsel — in the rare event of a dispute where records are required
None of the above recipients are entitled to use your information for their own marketing purposes. We do not share customer lists with any third party. We do not sell customer data.
How long we keep your information
We keep information only as long as needed for the purpose it was collected, plus the statutory retention period that applies. After the retention period, information is securely deleted or anonymized.
| Category | Retention period | Basis |
|---|---|---|
| RFQ inquiries (no order) | 24 months from last contact | Reasonable re-engagement window for the same inquiry |
| Order records (commercial invoice, MTC, packing list, BL) | 10 years from shipment date | Tax, customs, audit, limitation-of-claim periods |
| Quality records (test data, inspection reports) | 10 years from shipment date | Classification society MTC traceability + customer reference |
| Marketing opt-in | Until you opt out | Consent-based processing |
| Site analytics | Aggregate only, 26 months max | Trend-level analytics, not personal profiling |
Cookies and similar technologies
We use the minimum cookies needed for the site to function. Optional cookies are only loaded with your consent.
| Type | Purpose | Duration | Consent? |
|---|---|---|---|
| Strictly necessary | Session management, site security, language preference | Session / 12 months | No — required for site function |
| Analytics | Self-hosted Matomo analytics — aggregated, no third-party sharing, no profiling | Aggregated, 26 months | Yes — only if you accept |
| Marketing | Newsletter signup, re-engagement campaigns | Until opt-out | Yes — explicit opt-in only |
If you arrived from a privacy-respecting region, you’ll see a cookie banner before any optional cookies are loaded. You can change your preference at any time by clearing cookies or contacting us.
Your rights as a data subject
Depending on your jurisdiction, you have some or all of the rights below. We honor all of them, regardless of where you are based, as the highest applicable standard.
- Right of access — request a copy of the personal information we hold about you
- Right of rectification — correct information that is wrong or out of date
- Right of erasure — request that we delete your information, where applicable
- Right to restrict processing — pause processing while a dispute is resolved
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to certain processing, including marketing
- Right to withdraw consent — for any processing we rely on consent for
- Right to lodge a complaint — with your local data protection authority, after contacting us first
International data transfers
AOYIN Holding Co., Ltd. is headquartered in China. Where information is transferred outside your country, we work to the highest applicable standard — SCC (EU Standard Contractual Clauses), PIPL cross-border assessment (China), or equivalent mechanisms in your jurisdiction.
Specifically:
- Personal data collected in the EU / UK is transferred to China under SCC for the purpose of order execution
- Personal data collected in China is processed in China under PIPL
- Personal data collected in the US is processed either in China (for order execution) or in the US (for marketing-only flows), depending on the purpose
- All transfer recipients are bound by data-processing agreements that match or exceed this policy
Security
We take reasonable steps to protect personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (HTTPS / TLS), access controls, and periodic review of access logs.
That said, no system is 100% secure. If you have reason to believe your interaction with us is no longer secure (for example, you suspect a leaked password), please notify us immediately so we can investigate and remediate.
Children’s privacy
AOYIN’s services are designed for business customers and professional buyers. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have collected information from a minor, please contact us so we can delete it.
Changes to this policy
We may update this policy from time to time. When we do, we revise the “Last updated” date at the bottom of this page. For material changes — those affecting how we use your personal information — we email active customers and update the cookie banner on next visit. Continuing to use the site after a material change signals your acceptance of the updated policy.
How to contact us
For privacy questions, data-subject requests, or to lodge a complaint — contact us via the channels below. We aim to respond within 30 days.
AOYIN Holding Co., Ltd.
Data Protection Officer
Email: [email protected]
Phone: +86 570 386 9925
Postal: Quzhou Aoyin Metal Materials Co., Ltd. (operating subsidiary) · Quzhou, Zhejiang, China
Last updated: 2026-09-13
If you arrived from a specific privacy framework — GDPR (EU/UK), CCPA (California), LGPD (Brazil), PIPL (China) — this policy is designed to satisfy each. Where requirements differ, we apply the stricter one.
Privacy question? Contact our DPO.
Email [email protected] with the request type — access, rectification, erasure, objection — and we confirm receipt within 12 hours and resolve within 30 days.
Tel: +86 570 386 9925 · Email: [email protected] · WhatsApp: +86 133 0570 9557