OVAN Screens · 澳安商贸 — Privacy and collection notice

1. Who handles the information and how to contact us

OVAN Screens · 澳安商贸 is operated by 安义县澳安商贸商行（个体工商户）. For privacy requests, access, correction, deletion or complaints, contact 771464875xzt@gmail.com. For product, order or after-sales enquiries, contact ovanscreens@gmail.com. This document describes the website's handling arrangements; it does not declare that every Australian Privacy Principle applies to every activity without considering the actual business and applicable law.

Business telephone: +86 17757186704; telephone support language: Chinese. Business contact address: No. 34, Pengtang Village Group, Bakou Village, Changjun Township, Anyi County, Nanchang, Jiangxi, China; postcode 330500. Privacy requests should use the designated privacy email so their handling can be recorded.

2. Information collected and where it comes from

You provide your name, email, telephone, delivery address and postcode; opening measurements, selected configurations, site descriptions, photos, messages and after-sales evidence. The website also keeps submitted quote versions, confirmations, delivery updates and necessary payment/receipt references. Account verification and security records can include session identifiers, verification times and rate-limit or request-security information. Service providers may process technical connection logs under their own arrangements. We do not ask you to send a PayPal password, full payment-card details or identity documents through order messages. Please avoid including unrelated people, documents, private rooms or other unnecessary personal details in site photos.

3. Why the information is needed and what happens if it is not provided

Information is used to verify access to your own orders, assess measurements and installation suitability, prepare and revise quotes, communicate about the order, arrange payment and delivery when enabled, and handle after-sales matters and disputes. Necessary records also support fraud prevention, account security, reconciliation and applicable legal obligations. Without the required contact, delivery, measurement or photo information, we may be unable to assess, quote, deliver or support the requested product. Submitting an enquiry is not placing or paying for an order.

4. Who receives information

Authorised OVAN personnel can access information needed for their work. Cloudflare provides website hosting, access controls, database and file storage. Resend provides transactional email delivery, including sign-in codes and, only when enabled, order/receipt emails; replies and business correspondence are handled through our designated Gmail mailboxes. PayPal processes checkout information and payments only when the relevant payment service is enabled. Necessary specifications and delivery details may be shared with the manufacturer, carrier, customs or fulfilment providers for the agreed order. Their identity and any material delivery or import arrangements should be made clear in the quote/order communications before fulfilment. We do not sell order photos or treat them as public marketing material. Disclosures required by applicable law, or reasonably necessary to protect legal rights, may also occur.

5. Overseas processing and provider information

The operating business handles orders in China. International service providers may process information outside Australia. Cloudflare supplies global hosting, access, database and object-storage services under its processing arrangements; a fixed country for every database, image, log or backup has not been independently established, and no Australia-only storage or regional restriction is promised. Resend states that stored data is held in the United States; an email sending region is not a storage-location guarantee. Google states that information may be processed on servers around the world, including outside the user's country. PayPal describes processing and storage in the United States and other countries under its own privacy statement. Necessary manufacturing, carriage and customs recipients and material destination/import arrangements are identified in quote or fulfilment communications before the relevant disclosure. Provider processor lists and applicable safeguards may change. Practical country information should be kept current; this notice does not claim to enumerate every infrastructure location or give blanket consent to undisclosed transfers. Questions or requests about a particular disclosure can be sent to the privacy contact.

6. Login, preferences and access protection

Necessary website and Cloudflare authentication cookies/sessions support sign-in, security and order access. The language/region preference may be stored in a cookie and browser local storage. Customers must use their own verified account; knowing another order number does not authorise access to its records or images. Merchant administration remains separately protected. We use access controls and other reasonable safeguards, but do not promise absolute security, end-to-end encryption or Australian-only storage. Do not share sign-in codes or send account passwords to OVAN.

7. Retention proposals and their limits

The operating retention periods are 7 days from the last edit for an unsubmitted draft, and 7 days from the last effective communication for an enquiry that has not resulted in a purchase, including contact details, measurements and site media. The period for completed-order specifications, quotes, confirmations, after-sales records and site media is 18 months from formal order placement. These periods trigger a retention review, not unconditional erasure. Information needed for an active quote, unfinished delivery, warranty claim, dispute or legal obligation is protected for as long as the relevant need continues; necessary accounting, tax and transaction evidence follows the applicable legal requirements, not an invented universal 18-month limit. When information is no longer needed and no retention exception applies, it should be securely deleted or de-identified. Initially this is an operator-reviewed process, including requests sent to the privacy email; this release does not assert that automated deletion jobs are running. Mailboxes, attachments, local working copies and backups must also be considered. Resend describes 30-day email/log retention for its Free, Pro and Scale plans and a separate backup cycle. Other provider backups and records follow their applicable arrangements; removing an active record does not promise immediate removal of every copy. Temporary upload staging has a separate lifecycle. None of these periods shortens consumer rights or justifies destroying relevant evidence during an open matter.

8. Access, correction, deletion and complaints

Email the privacy contact with the order reference and a clear request. We will verify only the information reasonably needed to protect the account and assess the request. We aim to respond within a reasonable period and explain the progress if further checks are necessary; no universal fixed response deadline is promised here. A deletion request is checked against fulfilment, dispute and legal-retention needs, including copies held in correspondence and backups. If a request cannot be fully granted, we will explain the applicable reason and available review or complaint options. Where Australian privacy law applies, you may also contact the Office of the Australian Information Commissioner. Other rights and complaint avenues depend on the law applicable to the circumstances.

9. Photos, optional marketing and public examples

Order photos are used for assessment, fulfilment and after-sales support. Signing in, submitting an enquiry, confirming a proposal or paying does not authorise public case studies, advertising or ongoing marketing. Any such use needs a separate clear and optional choice, unticked by default, with its scope recorded. Refusing it does not affect purchasing or after-sales support. This release does not activate marketing consent or public-photo publication.

10. Document versions and transaction records

For new submissions, the server records the collection-notice version supplied with the form; that is not proof of reading or marketing consent. A new proposal retains its attached terms, privacy document and applicable manual references, version identifiers and integrity hashes. Confirmation records the displayed language, confirmation statement and exact proposal/document references; later website updates do not silently replace that record. Existing historical orders are not retroactively labelled as policy acceptance. These approved documents will receive a separate effective version and actual publication date for new proposals. Historical records will not be rewritten; payment safeguards remain in place.