Privacy Policy & Data Protection

At Obibi GROUP CO., LTD. ("Obibi," "we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage in business with us as a manufacturing partner.

Last Updated: January 15, 2024
Effective Date: January 15, 2024

1. Information We Collect

When you engage with us as a business partner, client, or prospective client, we may collect:

  • Contact Details: Name, job title, company name, business address, email address, telephone number
  • Professional Information: Business registration details, tax identification numbers, company size, industry
  • Communication Records: Email correspondence, meeting notes, call recordings (with consent)
  • Project Information: Product specifications, design files, technical requirements

When you visit our website, we automatically collect certain information:

  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types
  • Usage Data: Pages visited, time spent on pages, click patterns, download history
  • Cookies and Tracking: Information collected through cookies and similar technologies
  • Device Information: Operating system, device type, unique device identifiers

For payment processing and financial transactions, we may collect:

  • Billing Information: Company billing address, bank account details, payment history
  • Transaction Data: Details about payments to and from you, order history
  • Credit Information: Business credit references, payment performance data

Note: We do not store sensitive payment card information. All payment card processing is handled by secure third-party payment processors.

2. How We Use Your Information

Service Provision

  • Process and fulfill manufacturing orders
  • Provide OEM manufacturing services
  • Manage product development and sampling
  • Coordinate shipping and logistics

Communication

  • Respond to inquiries and provide support
  • Send order updates and production status
  • Share important service announcements
  • Request feedback on our services

Business Operations

  • Improve our products and services
  • Conduct market research and analysis
  • Develop new products and capabilities
  • Optimize our website and user experience

Legal Compliance

  • Comply with legal obligations
  • Protect our legal rights and interests
  • Prevent fraud and ensure security
  • Enforce our terms and conditions

3. Information Sharing and Disclosure

Data Protection Measures

All third-party service providers are required to maintain appropriate security measures and are prohibited from using your personal information for any purpose other than providing services to Obibi.

4. Data Security

Technical Safeguards
  • SSL encryption for data transmission
  • Firewall and intrusion detection systems
  • Regular security updates and patches
  • Secure data backup procedures
Administrative Controls
  • Role-based access controls
  • Employee privacy and security training
  • Regular security audits and assessments
  • Incident response procedures
Physical Security
  • Secure facility access controls
  • Visitor management systems
  • Secure document storage and disposal
  • 24/7 monitoring and surveillance

Important: While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to maintain the highest standards of data protection.

5. Data Retention

Data Category Retention Period Basis for Retention
Business Contact Information 7 years after last business activity Legal and business requirements
Financial Records 10 years from transaction date Tax and accounting regulations
Contract Documentation 10 years after contract termination Legal and compliance requirements
Website Analytics 26 months from last visit Business analytics and improvement
Marketing Communications 3 years from last interaction Business development purposes
Product Design Files Indefinite (archived) Intellectual property protection

Data Disposal

When retention periods expire, we securely dispose of personal information using approved methods:

  • Physical documents: Cross-cut shredding and secure disposal
  • Electronic data: Secure deletion and disk wiping
  • Backup media: Physical destruction or degaussing

6. Your Rights

Access and Information

  • Right to Access: Request copies of your personal information
  • Right to Know: Understand how we process your data
  • Right to Portability: Receive your data in a structured format

Control and Correction

  • Right to Rectification: Correct inaccurate personal information
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Limit how we use your information

Preferences and Objections

  • Right to Object: Object to certain processing activities
  • Right to Withdraw Consent: Withdraw previously given consent
  • Marketing Preferences: Opt-out of marketing communications

Exercising Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section. We will respond to your request within 30 days and may require verification of your identity before processing your request.

Note: Some rights may be limited in certain circumstances, such as when we have a legal obligation to process your information or when processing is necessary for the performance of a contract.

7. International Data Transfers

As a global manufacturing company, we may transfer your personal information to countries outside of your home country, including to China where our manufacturing facilities are located. We ensure appropriate safeguards are in place for these transfers:

Transfer Safeguards

  • Adequacy Decisions: Transfers to countries with adequate data protection laws
  • Standard Contractual Clauses: EU-approved model clauses for data protection
  • Binding Corporate Rules: Internal policies for intra-group transfers
  • Additional Measures: Technical and organizational security measures

Compliance Framework

We comply with major data protection regulations including:

GDPR CCPA PIPL LGPD

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website:

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending email notifications to active business partners
  • Displaying prominent notices on our website for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about our information practices.