Privacy Policy

This Privacy Policy is issued by Pingxiang North Latitude 30 E-commerce Co., Ltd. (“we”, “us”), and explains how we collect, use, share and protect the personal information you provide when visiting https://cntinworld.com and placing orders. For the purposes of the GDPR, we act as the “data controller” of your personal data.

• Account data: name, email address, telephone number, login credentials and company name (for business customers).
• Order and transaction data: shipping address, order details, amounts, currency, invoicing details and correspondence.
• Payment data: collected and processed directly by licensed payment institutions. We never store, process or transmit your full card number, CVV or expiry date; we only receive tokenised data such as card brand, last four digits and the authorisation result.
• Content you upload: images, logos, copy and artwork submitted for packaging design, AI generation and sampling.
• Device and log data: IP address, browser and device type, operating system, access time, page views, click behaviour and referring pages.
• Cookies and similar technologies: see Section 6.

We do not sell your personal information. We share it only to the extent necessary for the purposes above, with the following categories of recipients, each bound by equivalent confidentiality and security obligations:

• Licensed payment institutions: Airwallex, WorldFirst (Alipay Merchant Services) and PayPal — for payment authorisation, settlement, risk control and refunds.
• Logistics and customs providers: DHL, FedEx, UPS, China Post and freight forwarders — for delivery and customs declaration.
• Cloud and technology providers: hosting, object storage, CDN, transactional email and customer-service platforms.
• Professional advisers and authorities: accountants, lawyers, and judicial or administrative authorities where required by law.

Our servers and operations team are located in the People’s Republic of China. If you are located in the EEA, the UK or elsewhere, your personal data will be transferred to and processed in China. For transfers from the EEA/UK we rely on the European Commission’s Standard Contractual Clauses (Decision 2021/914) and the UK International Data Transfer Addendum, supplemented by encryption in transit, access controls and data minimisation.

You can refuse or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may prevent login and checkout from working.

• Account data: for the life of the account, and no more than 12 months after closure.
• Order and transaction records: 10 years from completion, to meet statutory tax and accounting requirements.
• Customer-service correspondence: 24 months from the last contact.
• Website logs and analytics data: no more than 26 months.

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”): request deletion in the circumstances provided by law.
• Right to restriction: request that we restrict processing in certain circumstances.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests, and to direct marketing at any time.
• Right to withdraw consent: withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to lodge a complaint with the data protection authority in your country.

• Right to know: the categories, sources, purposes and recipients of personal information we collect.
• Right to delete and to correct the personal information we hold about you.
• Right to opt out of “sale” or “sharing”: we do not sell your personal information, nor share it for cross-context behavioural advertising, so no “Do Not Sell or Share My Personal Information” link is required.
• Right to limit use of sensitive personal information: we do not use sensitive personal information for the restricted purposes listed in the CPRA.
• Right to non-discrimination: exercising these rights will not result in different pricing or service levels.

This website is intended for business customers and adult consumers. We do not knowingly collect personal information from children under 16 (under 13 in the United States). If we become aware that we have inadvertently collected such information, we will delete it promptly. Parents or guardians who become aware of such a case should contact us.

We enforce HTTPS/TLS encryption across the entire site, apply access control and least-privilege management to our databases, store passwords using irreversible hashing, and carry out regular security reviews and backups. Payment processing is handled by PCI DSS Level 1 certified institutions — see our Payment Security page.

If we make material changes to this policy we will publish them on this page and update the effective date, notifying you by email where appropriate.