Privacy Policy

1. Who we are (the controller)

The website yimeiqi.com is operated by Hangzhou Meiqi Technology Co., Ltd., headquartered in Hangzhou, China. For the personal data described in this policy, Hangzhou Meiqi Technology Co., Ltd. is the data controller within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”).

• Company: Hangzhou Meiqi Technology Co., Ltd. (founded July 2015)
• Registered address: [registered address], Hangzhou, Zhejiang, People’s Republic of China
• Contact for privacy matters: mqservice@i-align.com (subject line “Privacy”)

EU representative. As we are not established in the European Union, we have appointed a representative in the EU under Article 27 GDPR: [name and address of EU representative to be inserted once appointed]. EU data subjects may also contact the controller directly at the email address above.

2. What this website collects

This is a static informational website. It sets no cookies, uses no analytics or tracking scripts, carries no advertising, and embeds no third-party services that would collect data about your visit. Web fonts and images are served from this website itself.

There is no registration or contact form on this site. If you contact us by email (for example at mqservice@i-align.com), we receive the personal data you choose to send us — typically your name, your email address and the content of your message.

Like virtually every website, our hosting infrastructure may automatically record standard technical log data (IP address, date and time of access, pages requested, browser and operating system type) for the purposes of operating, securing and diagnosing the website. These logs are kept for no longer than [30 days — to be confirmed with the hosting provider] and are not merged with other data.

Clinicians who submit patient or treatment data through our Case Portal or by other agreed channels do so as controllers of that data in their own right; in that case this policy describes our role as processor, and the applicable terms are set out in our processing agreement.

3. Why we process data, and on what legal basis

• Answering your enquiries (product information, finding a provider, press or partnership requests) — Art. 6(1)(b) GDPR (steps at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in operating our business and responding to requests).
• Health care and treatment planning — where a treating clinician shares patient-related data with us for the purpose of designing or manufacturing a custom-made device, we process that data as a processor under Art. 9(2)(h) GDPR (provision of health care and treatment) on the clinician’s instructions.
• Securing and operating the website — technical log data is processed under Art. 6(1)(f) GDPR (our legitimate interest in keeping the site available and secure).
• Compliance with legal obligations — Art. 6(1)(c) GDPR, where retention or disclosure is required by law.

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Cookies and similar technologies

This website sets no cookies and uses no similar local-storage technologies, so no cookie consent is requested or required. Details are set out in our Cookies notice.

5. Recipients and international transfers

We share personal data only with:

• service providers that help us operate this website and our email ([hosting provider / email provider to be listed]), each bound by a data-processing agreement;
• logistics and manufacturing partners strictly where needed to fulfil an order placed through a clinician;
• public authorities, where we are legally required to disclose data.

As our company and infrastructure are located in the People’s Republic of China, personal data collected from the EU will generally be transferred to a country outside the EEA. Such transfers are made only with appropriate safeguards — in particular the European Commission’s Standard Contractual Clauses, supplemented where necessary by additional measures — or under another lawful transfer mechanism under Chapter V GDPR.

6. How long we keep data

Email correspondence is kept only as long as necessary to handle your request and any follow-up, and thereafter only where retention is required or permitted by applicable law. Technical log data is deleted automatically within the period stated in section 2. Clinical and manufacturing records connected to an ordered device are retained in accordance with the medical-device record-keeping obligations that apply to the manufacturer.

7. Your rights

If you are in the EU/EEA, subject to the conditions of the GDPR you have the right to:

• request access to the personal data we hold about you (Art. 15);
• have inaccurate data rectified (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20, where processing is based on contract or consent);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise any of these rights, write to mqservice@i-align.com (subject line “Privacy”). We will respond within one month. You also have the right to lodge a complaint with a data-protection supervisory authority in your EU member state — in particular in the member state of your habitual residence or place of work.

8. Data security

This website is served over encrypted connections (HTTPS). Access to correspondence and to clinical data is limited to the staff who need it for their duties, and clinical data relevant to device design and manufacture is handled within our quality-management system.

9. Changes to this policy

We may update this policy as the site and our European rollout develop. The date below shows the current version.

10. Contact

Hangzhou Meiqi Technology Co., Ltd., Hangzhou, Zhejiang, China — privacy contact: mqservice@i-align.com. Last updated: 3 November 2026.