Privacy Policy
Contents
In short
- We collect what you type into an inquiry, sample request or order, plus basic technical logs. We use it to quote, ship and support — not to build advertising profiles.
- We take no payments on this Site. Orders are settled offline by bank transfer, so we never collect card numbers.
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
- You can ask us for a copy, a correction or a deletion at [email protected]; we answer within 30 days.
This summary is for orientation only. The sections below are the operative text.
1. Who we are
Chisi New Materials Co., Ltd. ("CHISI", "we", "us", "our") manufactures thermoplastic polyurethane (TPU) paint protection film, colour PPF, automotive window film, headlight film, and the installation and cutting tools that go with them. We are the controller of the personal information described in this policy.
We are established in Shenzhen, Guangdong, China. For anything in this policy:
- Email: [email protected] — please put "Privacy request" in the subject line
- WhatsApp / phone: +86 177 9630 1276
- Post: Data Protection, Chisi New Materials Co., Ltd., Shenzhen, Guangdong, China. Write to us first and we will give you the full street address for courier delivery.
2. What this policy covers
This policy applies to personal information we collect through our website at https://www.filmodm.com and any domain that resolves to it (the "Site"), including inquiry forms, sample requests, catalogue downloads, newsletter sign-ups, account registration and order handling.
It does not cover third-party websites we link to, or the way a distributor or installer handles your data after we introduce you.
If you contact us on behalf of a company, we process your business contact details as described here. Information about your employer's commercial relationship with us may be governed by a separate supply agreement.
3. Information we collect
| Category | What it includes | How we get it |
|---|---|---|
| Inquiry and quotation details | Name, company, business email, phone or WhatsApp number, destination market, product interest, cooperation type, annual volume, timeline, samples requested, free-text notes | You enter them in the inquiry form, or send them by email, WhatsApp, WeChat or at a trade show |
| Account details | Name, company, email, hashed password, order history | You create an account |
| Order, shipping and export details | Billing company, delivery address, receiving contact and phone, customs and export documentation, invoice records | You place an order or request samples |
| Order, settlement and remittance records | Invoice number, amount, currency, remittance reference, settlement status | Created when an order is agreed and settled offline. We do not take card payments on the Site and do not collect card numbers |
| Correspondence | Emails, WhatsApp and WeChat messages, meeting notes, quotations, complaints and their resolution | Our exchanges with you |
| Technical and security data | IP address, browser and device type, pages requested, timestamps, referring URL, cookie identifiers | Collected automatically when you load a page |
| Marketing preferences | What you asked to receive, opt-in and opt-out records, consent timestamps | Your choices on the Site and in our emails |
We do not intentionally collect special category data — health, biometric, political, religious or trade-union information — and we ask you not to send it to us. If you send a document that contains more personal data than we need (for example, an unredacted ID or a staff list), we will delete the surplus.
4. How we use information and our legal bases
| What we do | Why we are allowed to do it |
|---|---|
| Answer inquiries, prepare quotations, arrange samples and colour decks | Legitimate interests in responding to a business request, and steps taken at your request before a contract |
| Produce, ship and document orders, including export and customs paperwork | Performance of a contract with you or your company |
| Keep accounting, tax, customs and export records | Legal obligation |
| Send catalogues, price lists and product updates you asked for | Consent, or legitimate interests where you are an existing business contact — every message carries an opt-out |
| Protect the Site, prevent fraud, abuse and scraping, keep security logs | Legitimate interests in keeping our systems and your data safe |
| Understand which products and pages buyers actually read, in aggregate | Legitimate interests in improving our catalogue and content. We use aggregated measurement only and do not build advertising profiles |
| Establish or defend legal claims, respond to authorities | Legitimate interests, or legal obligation |
We do not carry out automated decision-making that produces legal or similarly significant effects about you, and we do not use your information to train third-party advertising models.
Where we rely on legitimate interests, we have balanced our interest against your rights and expect the impact on you to be minimal: you are a business contact, the data is limited to what you sent us, and you can object at any time (see section 10).
5. Cookies and similar technologies
We use a small number of cookies. Strictly necessary cookies run the Site — cart, language, security and your consent choice. Anything non-essential is only set after you press Accept all in the consent bar; if you press Reject all, only necessary cookies remain.
The full list, including names and lifetimes, is in our Cookie Policy.
6. When we share information
We share personal information only with recipients who need it for the purposes above:
- Hosting, CDN and security — the infrastructure that serves the Site and filters malicious traffic
- Storefront platform — the ecommerce system that runs the Site and stores inquiry and order records
- Email and workspace providers — for correspondence and quotations
- Banks — where an order is settled by bank transfer, the buyer's bank and ours receive the invoice and remittance details needed to reconcile it. Payments are handled offline; no card data passes through the Site
- Freight forwarders, couriers and customs brokers — to deliver goods and clear export
- Professional advisers — auditors, lawyers, insurers, where necessary and under confidentiality
- Authorities and courts — where the law requires it, or to establish or defend a legal claim
We do not sell personal information. We do not share it for cross-context behavioural advertising, and we do not disclose it to advertising networks or data brokers.
Every processor acts under a written contract and only on our instructions. Where a recipient is itself a controller — a customs authority, for example — it applies its own rules.
7. International transfers
We are based in China, and the providers above may process data in China, the EU/EEA, the United Kingdom, the United States and other countries where they operate. That means your data may leave the country you contacted us from.
Where personal data protected by the GDPR or UK GDPR is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where relevant, and we apply supplementary measures: encryption in transit, access control, least-privilege accounts and a review of the destination's legal environment.
You can ask for a copy of the relevant safeguards at [email protected].
8. How long we keep information
| Record | Retention period | Why |
|---|---|---|
| Inquiry and quotation records, sample requests | 24 months from the last contact | To pick up a conversation where it stopped and to evidence what was quoted |
| Customer, order, invoice, customs and export records | 7 years after the transaction | PRC accounting, tax and export rules |
| Consent records | 3 years after consent was given or withdrawn | To show we had a lawful basis |
| Security and server logs | 90 days | Incident investigation |
| Marketing subscriptions | Until you unsubscribe, then 30 days in a suppression list | To make sure we do not contact you again by accident |
| General correspondence not linked to an order | 24 months | Continuity of the relationship |
When a period ends, we delete or anonymise the data. We keep it longer only where a legal hold, an ongoing claim or a regulator requires it — and then only for that purpose.
9. How we protect information
- TLS/HTTPS on every page of the Site
- A CDN in front of the Site with web application firewall, DDoS mitigation and origin IP masking
- Access limited to the staff who need it, on named accounts, with least privilege
- Backups and vendor review before a new processor is added
No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your personal data and the law requires notification, we will inform you and the competent authority without undue delay, and tell you what we know and what we are doing about it.
10. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and receive a copy
- Correct data that is wrong or incomplete
- Delete data we no longer need
- Restrict how we use it while a question is open
- Object to processing based on legitimate interests
- Port data you gave us, in a machine-readable format
- Withdraw consent at any time, without affecting what happened before
- Complain to a supervisory authority
How to exercise them. Email [email protected] with "Privacy request" in the subject, or message +86 177 9630 1276. Describe what you want and which email or company the request relates to.
We reply within 30 days. If a request is complex we may extend by up to 60 days and will tell you why before the first 30 days expire. We may ask for information to confirm your identity — no more than we need, and we will not ask for a passport copy to answer a simple question.
Marketing. Every marketing email has a one-click unsubscribe. You can also reply "stop" on WhatsApp. Transactional messages about an open order are not marketing and will still be sent.
California residents. We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA/CPRA. You have the right to know, delete, correct, and to be free from discrimination for exercising those rights. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit.
EEA and UK. You may lodge a complaint with your national supervisory authority, or in the UK with the Information Commissioner's Office. We would appreciate the chance to resolve it with you first.
11. Children
The Site is a business tool for buyers, distributors and installers. It is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us information, contact us and we will delete it.
12. Changes to this policy
We review this policy at least once a year, and whenever we change a material supplier, add a product line or enter a new market. The current version always sits at /pages/privacy-policy with its version number and date.
For material changes we post a notice on this page and, where we hold your email and the change affects you, write to you at least 14 days before the change takes effect.
| Version | Date | Change |
|---|---|---|
| 1.0 | 29 October 2026 | First publication |
13. How to contact us
Chisi New Materials Co., Ltd. — Shenzhen, Guangdong, China
Email: [email protected] (subject: "Privacy request")
WhatsApp / phone: +86 177 9630 1276
We aim to acknowledge every privacy request within two working days.