Thank you for supporting ACEBEAM. In order to protect your personal data when you enjoy shopping at acebeam.com, we draw up this privacy policy, which is actually a contract governing your use of our services. We are committed to transparency, accountability, and the highest standards of data protection in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Cookies and Similar Technologies

We use cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, offering and measuring advertisements, understanding user behavior, and providing a safer experience.

You can remove or reject cookies using your browser or device settings, but in some cases doing so may affect your ability to use our products and services.

1.1 Definition of Cookies

Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, phones, and other devices.

1.2 Types of Cookies

1.2.1 Strictly Necessary Cookies

In order to provide you with fundamental services of our website, such as visit our website or make a purchase, these cookies are essential. If you disable these cookies, we will not be able to fulfill your request.

1.2.2 Performance Cookies

This type collects anonymous information on how people use the site and the data is merged with other users to enable us to improve how the site operates.

1.2.3 Functionality Cookies

These cookies may remember the operations such as your preference so that we can provide you with better services and improve our operation models.

1.2.4 Targeting Cookies or Advertising Cookies

These cookies collect information about your browsing habits in order to make advertising more personalized to you.

1.2.5 Social Networking Cookies

These cookies are used to enable you to share pages and content on our websites and services through third-party social networking and other websites.

1.3 Cookies Placed by Third Parties

You may also encounter cookies on our websites that are placed by third parties.

1.4 Controlling and Opting-Out of Cookies

You can change the settings on your browser to prevent cookies being stored on your computer or mobile device without your explicit consent.

1.5 Other Similar Technologies

DPAPI (Data Protection Application Programming Interface) is a simple cryptographic application programming interface available as a built-in component in Windows 2000 and later versions of Microsoft Windows operating systems.

2. Your Rights

We take reasonable steps to ensure that your personal data is accurate, complete, and up to date. Based on protection for your privacy, you have the following rights:

Right of Access: You have the right to contact us to know whether or not your personal data is being processed.
Right to Rectification: You have the right to correct or delete your inaccurate personal data.
Right to Erasure: You have the right to obtain from us the erasure of personal data concerning yourself.
Right to Restriction of Processing: You have the right to set the restriction of processing.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to Object: You have the right to make your objection to processing of personal data.
Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing.

You may contact us to exercise your rights. We will respond to your request within 30 calendar days.

2.2 Data Retention

【REVISED】 We implement a structured data retention policy based on data category and legal requirements. Your personal data will be retained only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

The following outlines our specific retention periods by data category:

Data Category	Retention Period	Legal Basis
Account Registration Data (name, email, password)	Duration of account existence + 2 years	Contractual obligation; legitimate business interest
Transaction & Order Data (orders, invoices, payment details)	7 years from transaction date	Tax compliance; 5-year warranty; financial record-keeping
Shipping & Delivery Information	3 years from delivery confirmation	Contractual obligation; customer service
Customer Communications (emails, support tickets)	3 years from last interaction	Legitimate business interest
Marketing Subscription Data	Until unsubscribe + 30 days for deletion	Consent withdrawal; data purged within 30 days
Browsing & Analytics Data (cookies, IP addresses)	13 months (Google Analytics default)	Legitimate business interest
Safety & Security Logs	1 year	Security incident prevention

The highlighted retention periods above have been professionally revised to provide clear, legally-compliant timelines.

3. Disclosure of Personal Data

We make certain personal data available to strategic partners that work with us to provide our products and services or help us market to customers.

3.1 Service Providers

We share personal data with companies that provide services on behalf of us, such as website hosting, email services, marketing, auditing, fulfilling customer orders, data analytics, and customer service.

3.2 Corporate Affiliates and Corporate Business Transactions

We may share personal data with affiliated companies and business partners. In the event of a merger, reorganization, acquisition, or other business transaction, we may transfer personal data to the relevant third party.

3.3 Legal Compliance and Security

It may be necessary—by law, legal process, litigation, and/or requests from public and governmental authorities—for us to disclose personal data.

3.4 Legal Basis for EEA Residents

If you reside within the European Economic Area (EEA), our processing of your personal data will be justified under one of the following conditions: Consent, Contractual Necessity, Legal Obligation, Legitimate Interests, Vital Interests, or Public Task.

4. Data Processed by Third Party

4.1 Third Party Authorization

When you log in using Facebook, Twitter, Google, or VK at acebeam.com, we may obtain your login information automatically because these third parties have previously authorized us to collect your information.

4.1.2 PayPal

If you choose to pay through 'Checkout with PayPal', your personal data will be collected and processed by PayPal. Please review PayPal's privacy policy.

4.2 Other Third Parties

We may transfer your data to third parties related to Advertising & Marketing (Google, Facebook, Twitter, Amazon, Pinterest, TradeTracker) and Payment & Delivery (PayPal, Stripe, Adyen, etc.).

4.3 About Third Party Located in a Third Country

【REVISED】 While our research & development and manufacturing headquarters are located in Shenzhen, China, we are committed to ensuring that user data is stored and processed in a manner that respects the privacy rights of our global customer base.

For our primary e-commerce operations, all customer data, including user profiles, order information, and account data, is hosted on [CLOUDFLARE/AWS/OTHER] servers located in [United States / European Union] data centers, which are fully compliant with GDPR, SOC 2, and ISO 27001 standards.

For EEA residents, all international data transfers are conducted under Standard Contractual Clauses (SCCs), Adequacy Decisions, or Binding Corporate Rules (BCRs).

If you have concerns about how your data is processed or transferred across borders, please contact our Data Protection Officer at [email protected].

4.4 About Third-Party Websites

Our website may contain links to third-party websites. These websites have their own privacy policies.

5. Supplemental Privacy Notice for California Residents

This Supplemental Privacy Notice applies solely to California residents, in accordance with the CCPA and CPRA.

5.6 Rights - REVISED

【REVISED】 If you are a California resident, you may have the following rights under CCPA/CPRA:

Right to Know: Request categories of personal information collected
Right to Access: Request access to your information
Right to Delete: Request deletion of your information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out of Sale or Sharing: Opt-out of data sharing

DO NOT SELL OR SHARE MY PERSONAL INFORMATION

Acebeam Will Never Sell Your Personal Information for Money. We firmly believe in your right to privacy. We do not and will not sell your personal information to third parties for monetary compensation. However, we may share certain data with advertising partners for contextual and behavioral advertising purposes.

To exercise your right to opt-out: (1) Visit our dedicated opt-out page [Link to be provided], (2) Email us at [email protected], (3) Click the 'Do Not Sell or Share My Personal Information' link in our website footer.

Upon receiving your verified opt-out request, we will process your request within 15 business days.

6. Information Security

We use reasonable technical, administrative, and physical security measures to safeguard and help prevent unauthorized access to your data.

Our security measures include: Encryption (TLS 1.2/1.3), Access Controls (RBAC), Data Backup (encrypted off-site), Incident Response procedures, and Employee Training.

In the event of a security breach involving your personal data, we will: (1) Notify you via email within 72 hours of becoming aware of the breach, (2) Notify the relevant supervisory authority within 72 hours, (3) Document all security incidents and remedial actions taken.

7. Changes to this Privacy Statement

From time to time, we may update our Privacy Policy to reflect new or different privacy practices. We will place a prominent notice to our customers at least 30 days before we make material changes to the Privacy Policy.

8. Contact Instruction / Data Protection Contact

【REVISED】 For all privacy-related inquiries, requests, and concerns, please contact our dedicated Privacy Team:

Primary Contact Email: [email protected]

All inquiries regarding the following should be directed to this address:

Data access requests (GDPR Right of Access)
Data deletion requests (GDPR Right to Erasure)
Data portability requests
CCPA/CPRA consumer rights requests
"Do Not Sell or Share My Personal Information" requests
Security incident reports
DPO assistance requests
Privacy complaints

Response Time Commitment: Our Data Protection Team will acknowledge your privacy request within 5 business days and provide a substantive response within 30 calendar days.

Other Contact Information:

Addr: 3/F, No.2 Building, Yijiayang Industrial Park, Dalang, Longhua, Shenzhen 518100, Guangdong, China

Tel No.: +86-755-2303 6551

WhatsApp: 086-177 2249 6204

9. Terms of Use

[Link to Terms and Conditions]

Categories

Menu

Privacy Policy