PRIVACY POLICY

Our promise:
your data is always yours.

This policy is issued in accordance with the EU General Data Protection Regulation (GDPR), People's Republic of China Personal Information Protection Law (PIPL), California Consumer Privacy Act (CCPA) and other applicable laws, and fully discharges ii3D's controller transparency obligations under Art.13/Art.14 GDPR.

Last updated: 2026-09-26Version: v1.0Compliance frameworks: GDPR · PIPL · CCPA

OUR 5 PROMISES

Before talking about what we do with data,we first drew 5 hard lines for ourselves.

Data Minimization

We collect only the minimum data strictly necessary for product operation. We never hoard extra data "just in case we need it later".

Zero Ad-Tracking

We do not drop third-party tracking cookies in your browser, build cross-site behavioral profiles, or run ad retargeting.

Clear Ownership

100% of your product models, configurator rules and order data remain yours — fully exportable whenever you ask.

In-Country Storage Option

Deploy nodes on Mainland-China cloud providers available by default. Keeps data in-jurisdiction for industry-level residency rules.

Withdraw Anytime

Revoke your cookie preferences at the bottom of this page with one click, or contact us to export / erase every record we hold on you.

§ 1 · CONTROLLER IDENTITY

Who is processing your data?

The "Data Controller" decides the purposes and means of processing. It is also the party you should directly contact to exercise your data subject rights.

Legal Name

Chinese legal name:深圳市璇玑动画科技有限公司

English legal name:Shenzhen XuanJi Animation Tech Co., Ltd.

Registered address:Shenzhen, Guangdong, P.R. China

Business / ICP License:粤ICP备18111411号

Data Protection Contact

Email (preferred channel):

privacy@ii3d.com

Commercial contact:

contact@ii3d.com

We commit to respond within 15 business days (Art.12(3) GDPR requires 30 days at most).

Dual-role notice:When ii3D acts as your 3D configurator technology vendor deploying a private or SaaS solution for you, ii3D acts legally as a "Data Processor" — all processing activities are carried out strictly under your written authorization and a signed Data Processing Agreement (DPA). When you browse this public website, ii3D acts as the "Data Controller" under the legal bases listed in § 4 below.

§ 3 · RETENTION PERIODS

How long do we keep your data?

We apply the "minimum necessary period" principle. Different purposes map to different retention, after which data is automatically deleted or anonymized in place.

Processing scenario
Maximum retention
Necessary cookies & session logs
Session / max 7 days
Language / theme preferences
180 days (matches Cookie Consent TTL)
Anonymous analytics
14 months (auto-aggregated after)
Forms & consultation leads
3 years (CRM hold) / withdraw anytime
Contracts & financial vouchers
Tax requirement: 10 years (P.R.C.) / per EU Member State

§ 4 · CROSS-BORDER TRANSFERS

Does data ever leave your region?If yes, under what safeguards?

Mainland China

Data stays in-country · domestic cloud provider · local compliance audit

EU / EEA Members

European Commission Standard Contractual Clauses 2021/914 + adequacy findings

Other Overseas Regions

PIPL Article 38 Standard Contract for Outbound Transfer + EU SCCs dual-cover

§ 5 · YOUR RIGHTS (GDPR Chapter 3)

As a data subject,you have these 8 rights.

Exercising any right below is free of charge. We will respond within 15 business days, and never later than the 30-day statutory window (extendable 60 days for complex cases per Art.12(3)).

Art.15

Right to Information & Access

You have the right to know which personal data we hold, the purposes, legal bases and categories of recipients, and to receive a free copy of it.

Art.16

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to demand correction or completion.

Art.17

Right to Erasure (to be Forgotten)

When statutory conditions are met — e.g. processing is no longer necessary, consent was withdrawn with no other lawful basis — you may request erasure.

Art.18

Right to Restriction of Processing

You can ask us to suspend processing (e.g. when you contest accuracy, processing is unlawful, or we no longer need the data).

Art.20

Right to Data Portability

For data we process automatically based on consent or contract performance, you can receive it in a structured, machine-readable format and hand it to another controller.

Art.21

Right to Object

When processing is based on legitimate interests or serves direct marketing, you can object at any time and we will stop — unless we can show overriding legitimate grounds.

Art.7(3)

Right to Withdraw Consent

You can withdraw any explicit consent at any time. Withdrawal does not affect the lawfulness of processing already carried out before it.

Art.77

Right to Lodge a Complaint

If you believe our handling of your data breaches applicable law, you may file a complaint with your Member State supervisory authority (DPA).

Instantly withdraw consent

Per GDPR Art.7(3), withdrawing consent must be as easy as giving it. The button below instantly re-opens ii3D's Cookie Preference Center so you can revoke any category — change takes effect immediately.

Updates to this policy

ii3D reviews this policy regularly, and updates the "Last updated" and "Version" badges at the top whenever:

  • material changes occur in our processing activities;
  • controller info, legal bases or supervisory requirements change;
  • you submit a reasonable policy suggestion and we decide to adopt it.

Lodge a supervisory complaint

If you are not satisfied with how we handle your personal data, you have the right to complain to any of the following authorities:

  • P.R.C.:Cyberspace Administration of China · cac.gov.cn
  • EU:Your Member State Data Protection Authority (DPA)
  • California:California Attorney General · oag.ca.gov