Privacy Policy — Data Protection & Cookies

1. Who we are

The data controller of this website is Shanghai Newmeen Medical Co., Ltd. (“Newmeen”, “we”), 3rd Floor, Building 6, No. 537 Songda Road, Qingpu District, Shanghai 201703, China. For any privacy question or request write to privacy@newmeen.com; for general enquiries, info@newmeen.com. We answer privacy requests within 30 days.

2. What data we collect

Enquiry data — contact person, company name, business e-mail, phone or WhatsApp number, country, estimated quantity, product of interest and your message. Only what you type into a form on this site.
Technical data — IP address, browser type and the date and time of your request, kept in server logs for security and rate limiting (the number of submissions per IP is limited to stop spam).
Analytics data — only if you accept analytics cookies (see section 4).

3. Why we use it

To answer your enquiry and prepare a quotation — pre-contractual steps you asked for, and our legitimate business interest (GDPR Art. 6(1)(b) and (f)).
To keep the website secure and prevent abuse — legitimate interest (GDPR Art. 6(1)(f)).
To measure traffic — only with your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

4. Cookies

This site uses essential cookies only: a session cookie, a security token that protects our forms, and a memory of your language choice. They are required for the site to work and are not used to track you. We do not run advertising or cross-site tracking cookies. If analytics is enabled in the future, those cookies will be set only after you accept them in the cookie banner shown on your first visit; you can also block or delete cookies in your browser settings at any time.

5. Who we share it with

Your data stays inside the companies that operate this website: our hosting provider and our e-mail provider process it on our behalf under data processing agreements. We never sell or rent personal data. We may disclose data if we are legally required to do so, for example by a court order.

6. International transfers

Our servers and service providers may be located outside your country, including in China. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses or an adequacy decision, as applicable, to keep the level of protection the GDPR requires.

7. How long we keep it

Enquiry data is kept for as long as our business relationship lasts and for any statutory retention period that applies afterwards — for example accounting and customs records — and is then deleted. Server logs are rotated and kept for a limited period only.

8. Your rights

Access — ask for a copy of the personal data we hold about you.
Rectification — ask us to correct anything inaccurate.
Erasure — ask us to delete your data, where no statutory retention applies.
Restriction and objection — ask us to limit or stop using your data.
Portability — receive the data you gave us in a machine-readable format.
Withdraw consent — at any time, for anything we do on the basis of consent.
Complain — to the data protection authority in your country.

To exercise any of these rights, write to privacy@newmeen.com. We reply within 30 days. If you are in the EEA or the UK, you can also lodge a complaint with your supervisory authority. Rights that apply specifically to your country are listed in section 11 below.

9. Security

The site runs over HTTPS/TLS, database access uses parameterised queries, access to enquiry data is limited to the export team members who need it, and files that must not be public — database configuration, logs, SQL dumps — are blocked from web access.

10. Children

This is a business-to-business website. It is not intended for anyone under 16, and we do not knowingly collect data from children.

11. Regional disclosures and local rights

This policy applies to everyone who uses this website. Because our buyers and partners are located in many jurisdictions, the paragraphs below set out the additional rights and disclosures required by the privacy laws of specific regions. Where a local law gives you stronger protection than this policy, that law prevails. Newmeen is the data controller of the enquiry data collected through this website; where we process personal data on behalf of a customer under a contract, the terms of that contract and of any separate data processing agreement apply.

European Economic Area, United Kingdom and Switzerland (GDPR, UK GDPR and FADP) — We rely on the following legal bases: your consent (cookies, marketing e-mails), legitimate interests (answering enquiries, securing the website, improving our services) and performance of a contract (preparing quotations and fulfilling orders). You may object at any time to processing based on legitimate interests. Transfers outside the EEA, the UK or Switzerland are protected by Standard Contractual Clauses or an adequacy decision, and you may lodge a complaint with your local supervisory authority.
California, United States (CCPA and CPRA) — In the twelve months before this page was updated we collected the following categories of personal information: identifiers and contact details (name, company, e-mail address, phone number, IP address), professional information (your role and employer) and internet activity (pages viewed, cookies). We collect them only to answer enquiries, prepare quotations and operate and secure the website. We do not sell personal information and we do not share it for cross-context behavioural advertising, with or without payment. You have the right to know, access, correct, delete and port your information, to opt out of any future sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. To submit a request, write to privacy@newmeen.com; we respond within 30 days.
Canada (PIPEDA) — We collect, use and disclose personal information only with consent where required, for purposes a reasonable person would consider appropriate in the circumstances, and we keep it only as long as needed. You may withdraw consent at any time, subject to legal or contractual restrictions, and may complain to the Office of the Privacy Commissioner of Canada.
Brazil (LGPD) — We process personal data on the legal bases of consent, legitimate interest, performance of a contract and legal obligation. You may request confirmation of processing, access, correction, anonymisation, portability, deletion or information about sharing, and you may complain to the Autoridade Nacional de Proteção de Dados (ANPD).
China (PIPL) — Personal information handled through this website is processed in the People's Republic of China. Where the law requires separate consent, including for cross-border transfers, we obtain it before processing, and transfers are made under a security assessment, a certification or a standard contract filed with the competent authority. You may request access to, a copy of, correction or deletion of your personal information, and may withdraw consent at any time.
Japan (APPI) — We notify you of the purpose of use before or when we collect personal information, and we use it only within that purpose. We do not provide personal data to third parties without your consent, except where the Act on the Protection of Personal Information permits it. Requests for disclosure, correction or deletion are handled as the Act requires.
Singapore, Thailand, Malaysia and the Philippines (PDPA) — We collect, use and disclose personal data only with consent or deemed consent, for purposes we have notified to you, and we take reasonable steps to keep it accurate and protected. You may access and correct your data, withdraw consent and ask how your data has been used; we notify the relevant authority and affected individuals of breaches that cause significant harm.
South Africa (POPIA) — Shanghai Newmeen Medical Co., Ltd. acts as the responsible party; our Information Officer can be reached at privacy@newmeen.com. We collect personal information only with your knowledge and for a specific, lawful purpose. You may request access to or correction of your information and may complain to the Information Regulator of South Africa.
Australia and New Zealand (Privacy Act 1988 and Privacy Act 2020) — We handle personal information under the Australian Privacy Principles, including transparent collection, use and disclosure, data quality, security and cross-border disclosure safeguards. You may request access to or correction of your information and complain to the Office of the Australian Information Commissioner; in New Zealand, to the Office of the Privacy Commissioner.
Russian Federation (Federal Law No. 152-FZ) — Personal data of Russian nationals is collected, recorded, systematised, accumulated, stored, clarified (updated, amended) and extracted using databases located in the Russian Federation. Processing is otherwise carried out in accordance with Federal Law No. 152-FZ on Personal Data, and you may withdraw consent and request deletion at any time.

To exercise any right described above or in section 8, write to privacy@newmeen.com from the e-mail address associated with your enquiry. We may ask you to confirm your identity before acting on a request; authorised agents must attach written permission from you. Requests are free of charge unless they are manifestly excessive or repetitive, and we answer within 30 days, extendable once by a further 30 days where a request is complex; we will tell you if that happens.

12. Changes to this policy

The date at the top of this page shows when the policy was last revised. If a change materially affects how we use your data, the updated policy will be posted here before the change takes effect.