How we collect, use, and protect your personal data
Last updated: 30 July 2026Changzhou Best Supply Chain Management Co., Ltd. ("BEST", "we", "us", "our") is the data controller for the personal data collected through this website (bestalumsupply.com). Our registered address is Building 5, 900 Chenfeng Road, Jintan District, Changzhou, Jiangsu, China. For any privacy-related request, please contact us at sales@bestalumsupply.com.
We collect personal data only when you voluntarily provide it to us, or through limited technical means described below. The categories are:
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Respond to your inquiry and provide a quotation | Inquiry form fields | Contract / pre-contractual steps (Art. 6(1)(b)) |
| Customer relationship management & order processing | Contact details, correspondence | Contract (Art. 6(1)(b)) |
| Comply with export-control, customs, and accounting obligations | Inquiry, invoice, shipping records | Legal obligation (Art. 6(1)(c)) |
| Improve our website (page traffic, click patterns) | Anonymised analytics | Consent (Art. 6(1)(a)) — opt-in only |
| Marketing communication about new products or services | Email address | Consent (Art. 6(1)(a)) — separate opt-in |
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
This website uses cookies in three categories:
You can change your choice at any time by clearing your browser's site data for bestalumsupply.com and reloading the page — the cookie banner will appear again and let you re-select categories.
We share personal data only with the following categories of third parties, and only the minimum data necessary for the stated purpose:
We are based in China and may transfer your personal data to recipients in the European Economic Area (EEA), United Kingdom, United States, Southeast Asia, the Middle East, and other regions in the course of providing quotations, manufacturing, and shipping. Where required by GDPR or equivalent laws, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission (Module 1 / Module 2, as applicable) — or any successor mechanism — together with supplementary technical and organisational measures (encryption in transit, access control, minimisation, contractual processor safeguards) to ensure your data remains protected to a standard that is essentially equivalent to EU/UK law.
For cross-border transfers from the People's Republic of China, we comply with the Personal Information Protection Law of the People's Republic of China (PIPL, in force since 1 November 2021) and any security assessment, standard-contract filing, or certification that may be required by the Cyberspace Administration of China (CAC) for the volume and sensitivity of personal information transferred. We will not transfer personal information out of China to a recipient in a country or region that has not been recognised by CAC as providing an adequate level of protection, unless the relevant statutory exemption (consent, necessity of contract performance, employee management, emergency response, etc.) applies and the necessary assessment has been completed.
| Category | Retention period |
|---|---|
| Inquiry form submissions (no order placed) | 12 months from last contact, then deleted |
| Customer records (orders placed) | 7 years from last transaction, in line with tax & accounting obligations |
| Analytics data (Google Analytics 4) | 14 months, then auto-deleted by GA4 |
| Cookie consent records | Until you withdraw consent or 12 months of inactivity |
If you are located in the EEA, UK, or California, you have the following rights with respect to your personal data:
To exercise any of these rights, contact us at sales@bestalumsupply.com. We will respond within 30 days. There is no fee for reasonable requests.
For any privacy-related request, please reach us by:
We may update this policy from time to time to reflect changes in our practices, our services, or applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be highlighted on the homepage banner for at least 14 days before they take effect.
This website is intended for business professionals and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16 (or such higher age as may be required by the law of your jurisdiction — for example, under the U.S. Children's Online Privacy Protection Act (COPPA) or Article 8 of the GDPR). If we learn that we have inadvertently collected personal data from a child, we will delete it as soon as reasonably practicable. If you believe that a child has provided us with personal data, please contact us at sales@bestalumsupply.com.
BEST does not use your personal data for any decision that produces legal effects concerning you or that otherwise significantly affects you, based solely on automated processing (Article 22 GDPR, Section 70 of PIPL). Our quotation, CRM, and shipping workflows involve human review by our sales and logistics teams. Where any future feature might involve such automated decisions, we will provide a separate notice and obtain any consent required by law.
We maintain technical and organisational measures appropriate to the risk of the personal data we process, including but not limited to: encryption of data in transit (HTTPS / TLS 1.2+); role-based access controls within our sales and engineering teams; access logging; least-privilege principles; employee training on data handling; incident-response procedures; and regular review of the sub-processors listed in Section 5. In the event of a personal-data breach that is likely to result in a high risk to your rights and freedoms, we will notify the competent supervisory authority (and, where required, affected individuals) within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR and applicable Chinese law.
If you wish to raise a concern, exercise any of the rights in Section 8, or escalate an unresolved privacy complaint to a senior officer, please contact our Data Protection Coordinator at sales@bestalumsupply.com. Our postal address is: Data Protection Coordinator, Changzhou Best Supply Chain Management Co., Ltd., Building 5, 900 Chenfeng Road, Jintan District, Changzhou, Jiangsu, China.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority — for example, the European Data Protection Board (EDPB) acting through your national supervisory authority, the Information Commissioner's Office (ICO) in the United Kingdom, the California Attorney General's Office, the Cyberspace Administration of China (CAC), or any other competent regulator in your jurisdiction.
