Who we are
This notice explains how Ambitune Biochem handles personal information collected through ambitune.cn. It covers the inquiry form, the market report subscription, and the technical records our web host keeps automatically.
The controller of that information is Ambitune Biochem Corp, registered at No. 6055 Jinhai Highway, Building 11, 5th Floor, Fengxian District, Shanghai, China, Unified Social Credit Code 91310120MAD8M2P29R.
We sell ingredients business to business. We do not knowingly collect information about consumers or from anyone under 16, and nothing on this site is directed at them.
Who this notice applies to
It applies to you if any of the following is true:
- You visit ambitune.cn.
- You send us an inquiry, ask for a sample, or request documents.
- You buy ingredients from us, or work for a company that does.
- You subscribe to our market report.
- You are a contact at one of our producing plants, laboratories, forwarders or other suppliers.
By personal data we mean any information from which a living person can be identified, directly or together with other information we hold. Business contact details — your name, job title, work email and work phone — are personal data even though they belong to your professional life.
What we collect
What you give us, plus the ordinary technical records any website generates.
| What | Where it comes from | Why |
|---|---|---|
| Name, company, business email, destination port or city, Incoterm, indicative quantity, specification notes | The inquiry form, or an email you send us | To quote, and to run the resulting order |
| First and last name, company, country, state or province, business email, phone | The market report subscription form | To send the monthly market report |
| Correspondence and the record of it | Email, phone, video calls, trade shows | To keep track of an ongoing commercial relationship |
| IP address, browser and device type, pages viewed, timestamps | Automatically, from our web host's logs | Security, fault diagnosis, and aggregate traffic figures |
The forms on this site ask for business contact details only. Please do not send us personal information we have not asked for — and never send bank details, passwords or identity documents through a web form.
How we collect it
Most of it comes directly from you: through the forms on this site, by email or phone, at a trade show, or in the course of an order.
We also receive information from your own colleagues — for example when a purchasing manager gives us the name of the QA contact who should receive a certificate of analysis.
Why we use it, and for how long
We use personal data only where the law allows. Under the EU and UK GDPR, and equivalent provisions elsewhere, these are the grounds we rely on and how long each record is kept.
| Who you are | What we hold | Why | Lawful basis | Kept for |
|---|---|---|---|---|
| Inquirer | Name, company, business email, destination, Incoterm, quantity, specification notes | To quote and to answer technical questions | Steps taken at your request before entering a contract | 24 months from last contact |
| Customer contact | Name, job title, work address, work email, work phone, order and shipping records | To perform the contract, ship the goods and invoice | Contract; and legal obligation for customs, tax and traceability records | 10 years after the transaction |
| Market report subscriber | First and last name, company, country, state or province, business email, phone | To send the monthly market report | Consent | Until you unsubscribe |
| Supplier or service-provider contact | Name, job title, work email, work phone, company | To qualify plants, obtain documents and manage the supply chain | Contract; legitimate interests in running our supply chain | 10 years after the relationship ends |
| Website visitor | IP address, browser and device type, pages viewed, timestamps | Security, fault diagnosis, aggregate traffic figures | Legitimate interests in keeping the site available and secure | 24 months |
Where we rely on legitimate interests, we have weighed those interests against your rights and you may object at any time. Where we rely on consent, you may withdraw it at any time without affecting what we did before you withdrew it. We do not sell personal data, and we do not use it for automated decision-making that produces legal effects.
When a retention period ends we delete the record or anonymise it so it can no longer be linked to you.
International transfers
We source in China and sell worldwide, so information you give us is accessed from countries other than your own. Our offices and our order, product and customer master data are in China. Our customer relationship records are held in Zoho CRM on servers in the United States. Our email and file storage sit in a Microsoft 365 tenant operated by a group company and registered in China, on Microsoft's worldwide cloud. Where personal data leaves the European Economic Area or the United Kingdom, we make the transfer only where one of the following applies: the destination is covered by an adequacy decision of the European Commission or the UK government; or we have entered into the European Commission's Standard Contractual Clauses with the receiving organisation, together with a transfer risk assessment; or, for transfers out of the United Kingdom, an International Data Transfer Agreement or the UK Addendum to those clauses. You can ask us for a copy of the safeguards in place.
Your rights and how to complain
Depending on where you live, you have some or all of the following rights over the personal data we hold about you:
- To be informed — to know what we collect, why, and who we share it with. That is what this notice is for.
- Of access — to receive a copy of the personal data we hold about you.
- To rectification — to have incomplete or inaccurate information corrected.
- To erasure — to ask us to delete your personal data, where no legal obligation requires us to keep it.
- To object — to processing we base on legitimate interests, and to direct marketing at any time and without giving a reason.
- To restrict processing — to have us hold the data but stop using it while a question about it is resolved.
- To portability — to receive data you gave us in a machine-readable format, or have it sent to another provider.
- Not to be subject to solely automated decisions producing legal or similarly significant effects. We do not make such decisions.
- To withdraw consent — at any time, where consent is the basis we relied on.
Write to privacy@ambitune.cn to exercise any of them. There is normally no fee. We will respond within one month, and will tell you if we need longer because the request is complex. We may need to verify who you are before we act.
If you are not satisfied, you can complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office. In the European Economic Area it is the authority in the country where you live, where you work, or where the problem occurred — the European Data Protection Board publishes the list of national authorities. We would ask you to raise it with us first, so we have the chance to put it right.
Security
Information sent through this site travels over an encrypted connection. Access to our business systems is limited to staff who need it and protected by individual accounts. No system is perfectly secure, so if a breach affects you and is likely to put your rights at risk, we will tell you and the relevant regulator within the time the law allows.
Changes to this notice
We update this notice when our practices or the law change. The date at the top shows the current version. Material changes will be announced on this page before they take effect, and subscribers to the market report will be told by email.
Contact us
Data protection inquiries
privacy@ambitune.cn
Ambitune Biochem Corp
No. 6055 Jinhai Highway, Building 11, 5th Floor,
Fengxian District, Shanghai, China