Privacy

FacFox Privacy Policy

Effective and last updated: September 9, 2026

FacFox provides on-demand manufacturing, including 3D printing, CNC machining, molding and related services. This policy explains how we handle personal information when you browse our website, request a quote, submit a design, place an order, use our model tools or contact us.

At a glance: We use information to respond to you and deliver the services you request. Manufacturing may require sharing relevant information with production partners and delivery providers. You can ask to access, correct or delete your personal information, unsubscribe from marketing, and manage optional tracking. Design confidentiality and a signed non-disclosure agreement (NDA) are separate from your statutory privacy rights.

Who is responsible · Information we collect · Purposes and legal bases · Design files and model tools · Recipients · Cookies and choices · International processing · Retention · Your rights · Contact us

1. Who is responsible and what this policy covers

FacFox is a brand operated by Hangzhou Chizha Technology Co., Ltd. (杭州叱咤科技有限公司), based in Hangzhou, Zhejiang, China. References to “FacFox,” “we,” “us” and “our” in this policy mean this company. We are the controller, or personal information handler under applicable law, for the processing purposes we determine. Our privacy contact is info@facfox.com.

This policy covers facfox.com and FacFox quotation, order, support and model-processing services that link to it. A service-specific notice may explain additional processing for a particular feature. The FacFox Shop privacy notice describes that store’s processing. Independent payment, delivery and other third-party services also provide their own notices for processing they control. A separate notice or commercial contract cannot remove privacy rights that applicable law gives you.

Business contact details can be personal information even when supplied on behalf of a company. If we process personal information contained in a customer’s project solely on that customer’s documented instructions, the respective roles and obligations must be addressed in the applicable processing agreement; an NDA alone is not a substitute for that agreement.

2. Information we collect and its sources

The information involved depends on the services you use. We receive it directly from you, from an authorized colleague or customer representative, from service providers involved in your transaction, and automatically through use of our websites.

Required fields are identified in the relevant workflow. Without information necessary to prepare a quote, manufacture a part, take payment or deliver an order, we may be unable to provide that service. Optional marketing and advertising permissions are not a condition of obtaining a quote or placing an order.

3. Purposes and legal bases

We use personal information for the purposes below. Where the EU or UK GDPR applies, the corresponding legal bases are:

• Responding to your enquiry, providing an account, quoting, evaluating a design, manufacturing, payment, delivery and after-sales support: taking steps at your request or performing a contract with you. Where you act for a business customer rather than being the contracting individual, our legitimate interest is administering that business relationship.
• Protecting accounts and services, investigating misuse, diagnosing technical issues and maintaining service reliability: legitimate interests in operating a secure and reliable business, balanced against your rights; legal obligation where a particular law requires the processing.
• Accounting, tax, customs, regulatory requirements and legally required records: compliance with applicable legal obligations. Establishing, exercising or defending legal claims may also involve legitimate interests.
• Newsletters and promotional communications: consent where required, or another basis specifically permitted by applicable marketing law. A request for a quote or an order is not by itself permission for unrelated marketing.
• Optional analytics, advertising and related device storage/access: consent where required, and applicable opt-out rights. A legitimate interest does not override a legal requirement for cookie or marketing consent.

Where Chinese law or another applicable law requires a different legal basis, separate consent or additional information, those requirements apply. We do not treat “legitimate interests” as a general legal basis under China’s Personal Information Protection Law. Visiting this website or acknowledging this policy does not itself provide consent to every processing activity.

4. Design files, model analysis and sensitive information

CAD files, drawings and prototypes may contain valuable confidential information even where they contain no personal information. Submitting a file does not transfer ownership of your design to FacFox. The service terms and any NDA address intellectual property and confidentiality; this policy addresses personal information. Providing a file for quotation or manufacture does not itself authorize unrelated public disclosure, advertising use or general-purpose AI model training.

Project assessment and fulfilment may require access by relevant staff, manufacturing partners and technical service providers. Use only the information needed for your project: remove unnecessary names, signatures, contact details and identifying metadata before submitting files. If your project needs special access restrictions, regulated processing or a signed NDA, arrange these with us before sending the material through the relevant service.

The 3D Model Analyzer supports browser-local processing for supported workflows. Cloud conversion or advanced repair sends the selected files and necessary processing information to the server when you authorize that operation. Local analysis and cloud processing are different: do not assume every workflow remains on your device. Website connection and security logs can still be created when you visit the tool.

Some content workflows offer AI-assisted text generation. When used, the text selected by that workflow can be sent to its configured AI service. This is distinct from geometric model analysis and does not mean all CAD files are sent to an AI provider. Do not include customer secrets or personal information that is unnecessary for the requested text task. We must provide any additional notice and obtain any consent required before introducing a new use or recipient.

Please do not submit patient-identifiable medical scans, biometric identification data, government identity documents or other sensitive personal information through ordinary quote or upload channels unless we have specifically agreed an appropriate process. The availability of a manufacturing service for medical applications is not confirmation that the standard upload workflow is suitable for regulated patient data. Where processing sensitive information is necessary, additional legal conditions, safeguards and, where required, separate consent apply.

5. Who may receive personal information

We disclose information relevant to the purpose and service involved, rather than giving every recipient access to all customer data:

• Manufacturing and fulfilment partners: relevant models, drawings, specifications, instructions and information needed for production, inspection or fulfilment.
• Payment and financial service providers: information needed to process payments, refunds, transaction verification and accounting. Available payment methods are identified in the transaction workflow.
• Carriers, freight and customs providers: delivery contact details, destination, parcel and customs information. Carriers can include DHL, FedEx or UPS, depending on the shipment. Withholding necessary delivery information can prevent shipment.
• Hosting, infrastructure, security and technical providers: information needed to host, maintain, troubleshoot, protect or process data for the requested service.
• Communications and support services: contact details and message content needed for email delivery, support and permitted marketing. These services include Mailjet and the support tools used in our contact and order workflows.
• Analytics and advertising providers: relevant device, online identifier and interaction information, subject to the choices and law described below. Our main website integrations include Google Analytics, Google Ads and ShareThis social-sharing tools.
• Professional advisers and authorities: information reasonably necessary for advice, legal claims or a valid legal obligation. We assess the legal basis and scope of an official request; this policy does not grant unrestricted permission to disclose your communications.
• Parties to a business transaction: information necessary for a proposed or completed merger, acquisition, financing or asset transfer, subject to appropriate confidentiality and applicable legal requirements. A change of ownership does not remove existing statutory privacy protections.

Providers processing information on our behalf must be subject to appropriate instructions and data-protection obligations. Some recipients, such as carriers and payment providers, also determine their own legally required processing. Where applicable law requires recipient-specific disclosure or separate consent, that must be supplied or obtained for the relevant disclosure. Contact us for information about recipients relevant to your service.

6. Cookies, analytics, advertising and privacy choices

Essential cookies or similar technologies support functions such as login, security, transactions and remembering choices. Optional technologies can measure visits and advertising or personalize ads. These may involve online identifiers, IP addresses, browser information, pages visited and interaction events.

On the main website, use “Privacy choices” at the bottom of the page to accept or reject optional Google and ShareThis tracking, or choose analytics and advertising separately. These integrations remain inactive until the relevant purpose is enabled. You can reopen the controls and withdraw permission at any time. The choice is stored in your browser for up to 180 days; clearing browser storage or using another browser may require a new choice.

When your browser sends Global Privacy Control (GPC), the main website’s controls keep advertising disabled. Other FacFox applications, including the order platform and Shop, have separate integrations and may have different controls; a choice here is not a verified preference change across every subdomain or device. Contact us to exercise an account-level or broader statutory opt-out. Browser settings can also block or remove cookies, although doing so can affect essential functions.

ShareThis can use browsing and sharing information for audience profiling and advertising; see the ShareThis privacy notice. Its main-site integration is included in the advertising choice. Google may process information under its own terms. See Google’s explanation of data from partner sites and Google’s advertising controls. Those tools do not replace your rights against FacFox. Cookie durations vary by service and configuration; browser storage controls show the cookies currently present. Where law requires consent or an opt-out, we must respect that requirement irrespective of the technology used.

Advertising disclosures can be a “sale,” “sharing” or targeted advertising under some privacy laws even without a monetary payment. We therefore do not rely on an unqualified “we never sell personal information” statement to describe advertising integrations. See the regional rights below.

7. Service messages and marketing

Messages about your requested quote, order, payment, delivery, security or support are service communications. You can unsubscribe from promotional emails using their unsubscribe link or by emailing info@facfox.com. Opting out of marketing does not cancel your order or prevent necessary service messages. We may retain a minimal suppression record to avoid sending further marketing to an opted-out address.

8. International processing and transfers

FacFox operates from China and serves customers internationally. Information submitted for a quote, production or support can be accessed and processed in China. Providers involved in hosting, communications, payment, analytics or delivery may process relevant information in other countries, including the United States and countries involved in your shipment. The applicable locations depend on the service and recipient; privacy laws may differ from those in your country.

Visiting the website is not blanket consent to international transfers. Where a transfer is restricted by applicable law, a valid transfer mechanism and any required additional safeguards must be in place. Depending on the circumstances, these may include an applicable adequacy decision, EU Standard Contractual Clauses with the necessary assessment and supplementary measures, a UK International Data Transfer Agreement or Addendum, or a narrowly applicable statutory exception. Listing these mechanisms does not mean each mechanism applies to every FacFox transfer.

For transfers governed by Chinese law, we must assess the applicable transfer conditions and exemptions, provide the required information about overseas recipients, and obtain separate consent where required. An exemption from a filing or assessment requirement is not a general exemption from personal-information protection duties. Contact us for details of the destination, recipient and safeguards applicable to your transaction, including how to obtain a copy or explanation of relevant safeguards subject to lawful redactions.

9. How long information is kept

Retention depends on the purpose, the information involved, the applicable legal requirements and any relevant dispute. We do not use account closure or a marketing unsubscribe as the sole trigger for deciding whether information is still needed.

• Enquiries and unsuccessful quotes: for handling the enquiry and a proportionate follow-up period, taking account of the project status and last meaningful contact.
• Project files and order records: for assessment, production, delivery, after-sales support, agreed repeat-order needs and applicable recordkeeping or claim periods. Retention can differ by file type, workflow and backup; contact us for the criteria applicable to your project.
• Payment, invoice, tax and customs records: for the mandatory period under the laws applicable to the record and transaction, including after account closure when required.
• Accounts and support communications: for managing the relationship, resolving relevant issues and meeting applicable obligations; remaining necessity must be reviewed when the relationship ends.
• Security logs and technical records: for a period proportionate to troubleshooting, security investigations and applicable duties; a specific incident or legal hold may justify longer retention.
• Marketing and privacy preferences: for the applicable permission and, where needed, a minimal record of withdrawal, suppression or request handling.

When the relevant purposes and legal retention needs end, information should be deleted or genuinely anonymized. If deletion must be deferred because of a legal duty or a technical backup limitation, we must explain the applicable reason and restrict further processing as required by law. Deletion from active systems does not mean every backup is overwritten immediately. Retained copies must not be used to restart an activity you have lawfully stopped.

10. Security and incident handling

Personal information requires technical and organizational safeguards appropriate to its sensitivity and the processing risk, including access management, secure transmission, system maintenance and incident handling. No website or transmission method can guarantee absolute security. This limitation does not exclude our legal duties or your rights. Please use a unique password and avoid sending passwords or full payment-card information in ordinary email or chat.

If a personal-data incident occurs, we will investigate, take appropriate containment and remediation measures, and notify authorities and affected individuals where required by applicable law. Notification timing depends on the relevant law and risk: for example, the GDPR can require notification to the supervisory authority within 72 hours of awareness and communication to affected individuals without undue delay where the applicable risk threshold is met. A fixed ten-business-day period does not replace these obligations.

11. Your choices and privacy rights

Depending on the law applicable to you and the processing, you may request access to and a copy of personal information, correction, deletion, restriction, portability, an explanation of processing, withdrawal of consent, or an objection to particular processing. You can also ask to close your account. These rights can have legal exceptions, such as necessary tax records or the protection of another person’s rights. Withdrawing consent does not invalidate processing already lawfully carried out.

Email info@facfox.com with the right you wish to exercise, the service involved, and enough information to locate the relevant account or transaction. You do not need to quote a legal provision. Please do not send identity documents or passwords with your initial request. We may ask for proportionate verification through an existing account, email address or transaction reference; an authorized agent may need to demonstrate authority. Requests to opt out of sale, sharing or targeted advertising are not subject to the same identity-verification requirements as requests to disclose personal records.

We respond within the time required by applicable law and explain a refusal or any permitted extension. Requests are normally free; a charge or refusal is permitted only where the law allows it and with an explanation. You can complain to the competent regulator without first contacting us. Where a right of appeal applies, reply to our response or email us with “Privacy appeal.” We will explain the appeal outcome and available regulatory escalation.

12. Additional regional information

European Economic Area and United Kingdom

Where the EU or UK GDPR applies, you have the relevant rights listed above, including the right to object to processing based on legitimate interests and to object to direct marketing at any time. We generally respond within one month, subject to lawful verification, clarification and extension rules; where an extension is allowed, we explain it within the applicable initial period. You may complain to a supervisory authority, including in the EEA country where you live or work or where an alleged infringement occurred, or to the UK Information Commissioner’s Office. Contractual governing-law provisions do not remove those rights.

Mainland China

Where the Personal Information Protection Law applies, you may exercise applicable rights to know and decide about processing, restrict or refuse processing, access and copy information, correct or supplement information, request deletion, withdraw consent and request an explanation of processing rules. We will handle requests in a timely manner and explain any refusal. Sensitive information, children’s information and overseas disclosures are subject to additional requirements where applicable. You may complain or report concerns to the competent personal-information protection authority and pursue remedies provided by law.

California and other US states

Where the relevant state privacy law applies to FacFox and the processing, rights may include knowing the categories and specific pieces of personal information collected, their sources and purposes, and the categories of recipients; access, correction, deletion and portability; opting out of sale, sharing and targeted advertising; and applicable limits on sensitive-information use or certain profiling. We will not unlawfully discriminate against you for exercising a privacy right.

The categories described in Section 2 include identifiers, contact and transaction records, commercial information, internet or network activity, approximate geolocation, professional information, and personal information contained in communications and project files. Sections 3 and 5 explain their purposes and recipient categories, and Section 9 explains retention criteria. Information supplied or disclosed during a particular period depends on the services and permissions involved; you can request the applicable historical information.

Do Not Sell or Share My Personal Information / Opt Out of Targeted Advertising: use the main website’s Privacy choices to disable advertising and/or send your request to info@facfox.com. The main website’s advertising control also recognizes GPC as explained in Section 6. Tell us the relevant service if your request concerns the order platform, Shop or another application.

For covered California requests to know, delete or correct, the usual response period is 45 calendar days, with a further 45 days only where legally permitted and notified. Applicable opt-out deadlines are shorter; we do not apply the 45-day disclosure-request period to an opt-out. The existence of a US visitor alone does not establish that every state statute applies; statutory scope, thresholds and exemptions must be assessed.

13. Children and information about other people

Our manufacturing and business services are not directed to children. We do not knowingly solicit children’s personal information through ordinary business workflows. If you believe a child has provided information, contact us so we can assess and take the legally required steps, including deletion or an appropriate parental-consent process. US COPPA rules concern children under 13 in covered circumstances; under China’s Personal Information Protection Law, information about children under 14 is sensitive personal information. Other laws may impose different age or guardian requirements.

If you submit another person’s information, provide only what is necessary and ensure there is a lawful basis and any required notice or permission. This does not transfer our own legal responsibilities to you.

14. Automated tools and public content

Automated quoting and geometric analysis can use project inputs to estimate price, process options or technical characteristics. These outputs have limitations and may need review. Contact us if an automated result affecting your order needs explanation or human review. Where a decision falls within statutory protections for solely automated decisions with legal or similarly significant effects, the applicable safeguards and rights apply.

Reviews, comments or case studies that you choose to publish can be visible to others. Do not include private details in a public submission. Submitting a private quote or order is not the same as choosing publication. External links and third-party embeds can involve processing by their operators; review the relevant notice before using them.

15. Changes to this policy

We will post updates here and revise the date above. Material changes will receive additional notice appropriate to their significance and applicable law. If a change requires new consent, we must obtain it before the relevant processing. Continued use of the website does not automatically authorize a new incompatible purpose or waive your statutory rights. An update to this policy does not amend an already signed NDA or data-processing agreement.

16. Contact us

Hangzhou Chizha Technology Co., Ltd. (杭州叱咤科技有限公司)
Hangzhou, Zhejiang, China
Email: info@facfox.com
Telephone: +86 571 28222413
Support: Contact FacFox

Use “Privacy request,” “Privacy complaint” or “Privacy appeal” in the subject if helpful. We can provide the appropriate correspondence details for your request. Please include the service and nature of your enquiry, and avoid sending unnecessary sensitive information.

NDA and design confidentiality

Privacy rights and protection of confidential designs address different issues. If you need a non-disclosure agreement for a project, use the separate NDA signing service or contact FacFox before submitting confidential files.

Review the agreement presented in that workflow, including its parties, permitted disclosures, duration, remedies and dispute terms, before signing. This page does not execute an NDA, grant a signature on your behalf, or amend any agreement already signed. The terms of an executed agreement continue to govern that agreement, subject to applicable mandatory law.

For personal information, read the Privacy Policy. A confidentiality agreement does not replace a required data-processing agreement or international-transfer mechanism.