Privacy Policy

Introduction

Nostalgia Oak, operated by Chengdu Mei Nian Xun Gui Network Technology Co., Ltd., respects your privacy and is committed to protecting the personal data you entrust to us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at nostalgiaoak.autos or engage with our services. By using our website or services, you acknowledge and agree to the practices described in this policy. If you have any questions or concerns, please contact us using the information provided at the end of this document.

Information We Collect

Information You Provide

We collect information you voluntarily provide when you submit inquiries, request proposals, or communicate with us. This includes your name, email address, phone number, company name, and job title. We also collect project-related information including technical specifications, system requirements, architectural details, and operational context shared during consultations or engagements. We retain records of correspondence including emails, phone conversations, video conferences, and other communications channels.

Information Collected Automatically

When you visit our website, we automatically collect certain information including pages visited, time spent on each page, navigation patterns, referring URLs and search terms, browser type and version, operating system, IP address, device type and characteristics, and language preferences. This information is collected through cookies and similar tracking technologies as detailed in the Cookies section of this policy.

Third-Party Information

We may receive information about you from business partners, analytics providers, and publicly available sources where permitted by applicable law. Any third-party data received is handled in accordance with this Privacy Policy and applicable data protection regulations.

How We Use Your Information

We process personal data for the following purposes: to respond to your inquiries and provide information about our services; to evaluate project requirements and develop technical proposals and assessments; to communicate with you regarding your projects, service updates, and relevant industry insights where you have consented to receive such communications; to improve our website, services, and user experience through analytics and research; to comply with legal obligations, enforce our terms, and protect our rights and the rights of others; and to detect, prevent, and address technical issues, security incidents, or fraudulent activity. We will not process your personal data for purposes incompatible with those described in this policy without first obtaining your consent where required by law.

Legal Basis for Processing

For individuals in the European Economic Area, our processing of your personal data is based on the following lawful grounds under the General Data Protection Regulation: your consent where you have given clear consent for a specific processing purpose, such as accepting non-essential cookies or subscribing to marketing communications; contractual necessity where processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract; legitimate interests where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms, including improving our services, maintaining security, and communicating with clients about their engagements; and legal obligation where we must process your data to comply with applicable laws and regulatory requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze usage patterns, and improve your experience. Cookies are small text files stored on your device by your web browser. Essential cookies are required for core website functionality including session management and security and cannot be disabled. Analytics cookies help us understand how visitors interact with our site through aggregated, anonymous data about page views and navigation. Preference cookies remember your settings and preferences for a personalized experience on return visits. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For further information about the specific cookies we use, please contact us.

Data Sharing and Disclosure

We may share your personal data with trusted third-party service providers who assist us in operating our website, conducting our business, and delivering services. These providers are contractually bound to protect your data and may only use it for the specific purposes we authorize. They include hosting providers, analytics services, email delivery services, and customer relationship management platforms. We may share information with professional advisors including legal, accounting, and advisory professionals as necessary for business operations or compliance. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction and we will notify you of any change in control of your personal data. We may disclose information if required by law, legal process, or governmental request, or to protect our rights, property, or safety, or those of others. We do not sell your personal data to third parties. Any sharing is conducted in accordance with applicable data protection laws and under appropriate safeguards.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the nature of the data and the context in which it was provided. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the processing purposes, and applicable legal requirements. When data is no longer needed for any permitted purpose, we securely delete or anonymize it. In some circumstances, we may retain data for longer periods where required by law, regulation, or for the establishment, exercise, or defense of legal claims.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL protocols, secure server infrastructure with access controls, authentication mechanisms, and monitoring, regular security assessments, vulnerability testing, and penetration testing, employee training on data protection practices, privacy principles, and confidentiality obligations, and incident response procedures to detect, investigate, and address potential data breaches promptly and effectively. While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will take every reasonable step to safeguard your information and will notify you and relevant authorities as required by law in the event of a data breach.

Your Rights

Under GDPR (EEA Residents): You have the right to access your personal data and request a copy of the information we hold about you. You have the right to rectification to correct inaccurate or incomplete data without undue delay. You have the right to erasure, also known as the right to be forgotten, to request deletion of your personal data where there is no compelling reason for continued processing. You have the right to restrict processing in certain circumstances, such as where you contest the accuracy of the data or object to processing. You have the right to data portability to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller. You have the right to object to processing based on legitimate interests or for direct marketing purposes. You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Under CCPA (California Residents): You have the right to know what personal information we collect about you, including the categories and specific pieces of information. You have the right to request deletion of your personal information subject to certain exceptions. You have the right to opt out of the sale of your personal information. We do not sell personal information as defined by the CCPA. You have the right to exercise your CCPA rights without receiving discriminatory treatment from us for doing so.

To exercise any of these rights, please contact us at us@nostalgiaoak.autos. We will respond to your request within the timeframes required by applicable law, typically within 30 days. We may need to verify your identity before processing your request and may request additional information to confirm your identity.

International Data Transfers

Your personal data may be transferred to, stored, and processed in countries other than your own, including China and the United States, where our servers, data centers, and service providers are located. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer your data across borders, we implement appropriate safeguards to ensure your data receives adequate protection. These safeguards may include Standard Contractual Clauses approved by the European Commission, binding corporate rules, data processing agreements incorporating such clauses, or other lawful transfer mechanisms as required by applicable law. By using our website or services, you acknowledge that your information may be transferred to and processed in these countries.

Other Matters

Children's Privacy. Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without parental consent, please contact us immediately. We will take steps to delete such information as quickly as possible.

Third-Party Links. Our website may contain links to third-party websites, plugins, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal data.

Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Changes are effective upon posting the updated policy on our website with an updated effective date. For significant changes, we may provide additional notice through our website or by email. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Complaints. If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so that we can attempt to resolve your concerns directly. EEA residents may lodge a complaint with the supervisory authority in their country of residence. California residents may contact the California Attorney General's office for matters relating to CCPA compliance.

Contact Information