New Miho Future Cultural & Creative Co., Ltd. is a toy manufacturer based in Dongguan, Guangdong, China. MIHOX is its international brand identity, not a separate legal entity. New Miho owns and operates the Meihui and Boyuan factories.

For the website, international inquiries and the personal data described here, New Miho is the primary contact and, where it determines the purposes and means of processing, the controller. The New Miho entity named in your quotation or contract is the controller for that contract. Meihui and Boyuan receive project information when needed for manufacturing and may act as separate controllers for their own statutory production, tax or customs records.

If you need to confirm which entity will contract with you before sending personal data, ask us first.

This policy applies when you:

• Visit newmiho.com or open a page hosted on it.
• Send an inquiry, brief, reference image or file link.
• Request a quotation, NDA, sample or factory visit.
• Communicate with our team by email, WhatsApp, video call or in person.
• Enter a manufacturing, packaging, quality or shipping project with us.

It does not cover third-party websites, social platforms, your own systems or employee HR data. Where an NDA, project contract or local law gives you stronger rights or imposes a different obligation, that document or law prevails for the relevant data.

We collect the information needed to review a project, manufacture a product and meet legal obligations. The categories are:

We collect this data directly from you, from colleagues who contact us about the same project, from service providers involved in the project, and automatically from your browser or device. Some fields are required to review a B2B inquiry; if they are not provided, we may not be able to quote or proceed.

Some project files may contain personal data, such as a person's name, likeness or voice. Those files are handled under the NDA and project contract in addition to this policy. We do not ask for government ID numbers, health data or other sensitive personal data through the website; please do not send them.

We use personal data only for the purposes below, or for a closely related purpose that is clear when the data is collected.

Where we rely on legitimate interests, we balance the business need against your rights and expectations. You can object to that processing at any time.

We do not make solely automated decisions that produce legal or similarly significant effects. A project decision is reviewed by the team.

We use cookies and similar technologies to run the site, understand its use and protect forms. Where consent is required, we use a consent tool (CookieYes) to collect and record your choice. Non-essential analytics or preference cookies are intended to load only after you choose to accept them. If you reject, only essential cookies should remain. We review the configuration when a plugin or tag changes.

Our current site tools may include Google Analytics / Site Kit, GTranslate, Cloudflare Turnstile and the CookieYes banner. Their loading depends on the consent configuration and the choice you make. If you believe a non-essential cookie loaded before your choice, contact us so we can investigate.

Our forms may use Cloudflare Turnstile to distinguish people from automated submissions. It may process technical signals such as IP address, browser and interaction data for security. We do not use it to build a marketing profile.

You can reopen Cookie Settings where the control is shown, or block and delete cookies through your browser. Blocking essential cookies may affect forms or site features. We configure analytics for aggregate measurement. If a tool is used for advertising, we will provide the required notice and choice before it is used for that purpose.

We do not sell personal information for monetary consideration. We share it only where there is a clear business, legal or security reason:

• Owned factories and project teams. Meihui, Boyuan and the relevant engineering, production, QC and shipping teams receive the information needed for the project.
• Service providers. Hosting, email, IT security, analytics, logistics, couriers, customs brokers, banks or payment providers and professional advisers, under confidentiality and data-protection terms.
• Legal and safety. Courts, regulators, customs, tax or law-enforcement authorities where required by law, or to protect rights, safety and security.
• Business transfer. A buyer or successor in a merger, acquisition or restructuring, subject to appropriate confidentiality.

We do not authorise service providers to use client data for their own advertising. Where a supplier processes data on our behalf, it is restricted to the documented purpose and required to apply appropriate safeguards. If a service is configured in a way that California law treats as “sharing”, we will provide the required notice and opt-out; contact us for the current configuration.

We are based in China and work with clients and service providers in other countries. Personal data may therefore be processed in China and in other locations where we or our providers operate.

We do not claim that every mechanism below applies to every transfer. The route depends on the data, the recipient, the destination and the legal thresholds. Before a transfer that requires a mechanism, we assess the route and implement the applicable mechanism. Where a mechanism is required and has been completed, we rely on it. The options may include:

• European Commission Standard Contractual Clauses and the UK Addendum, where applicable.
• Supplier due diligence, confidentiality terms and access controls.
• China PIPL mechanisms, such as a standard contract filing, certification or security assessment, only where the relevant threshold applies and the procedure has been completed.

Transfer mechanisms and safeguards depend on the data, the recipient and the destination. Contact us if you need more information about the route used for your project. This policy does not represent that every listed mechanism is in place for every transfer.

We keep personal data only for as long as needed for the purpose that justified collection, or for a longer period required by law, contract or a legal claim. The periods below are internal targets, not fixed promises. Actual retention depends on the project, the contract, the system, the backup cycle and the applicable legal requirement. We review and delete records when they are no longer needed.

When a retention period ends, we delete, anonymise or archive the data. Backups may retain copies for a limited cycle before they are overwritten. We may retain records where a legal hold, dispute, audit or statutory obligation applies.

We use administrative, technical and organisational measures designed to protect personal data and client files. These include:

• Role-based access and need-to-know permissions.
• Confidentiality undertakings for team members and relevant suppliers.
• Encryption in transit where supported, access logging and backups.
• Vendor review, incident response and periodic access reviews.

No method of transmission or storage is completely secure. If a security incident affects your personal data, we will investigate, contain it and notify you and the relevant authority where the law requires.

The rights available to you depend on where you live, the legal basis for processing and whether the relevant law applies to our processing. The list below is a summary, not a uniform global standard. Rights may be subject to exceptions and may not apply to every person or every record. Where the GDPR, UK GDPR, CCPA/CPRA, PIPL or another law applies, you may have some of the following rights:

If we engage in a sale or sharing that California law defines, we will provide the required opt-out and honour authorised agent requests. This policy does not remove any statutory opt-out. We do not currently use sensitive personal information to infer characteristics about you.

How to make a request

Email [email protected] with the subject “Privacy Request”. Include the email, company or project connected to the data so we can verify and locate it. We may ask for additional verification where needed. Authorised agents can submit requests with written authority.

We respond within the period required by applicable law. We do not charge a fee unless a request is manifestly unfounded or excessive. If we cannot fulfil a request, we explain the legal reason.

You may also complain to your local data-protection authority. In the EU or UK, this is the supervisory authority in your country. In China, you may contact the relevant cyberspace, market-regulation or consumer authority.

Marketing

We may send B2B updates about manufacturing guides, capabilities and services. You can opt out at any time using the unsubscribe link or by emailing us. Transactional messages about a live project are not marketing and may still be sent.

Children

Our website and services are intended for businesses and professional users, not for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided data, contact us and we will review and delete it where appropriate.

External links

Our site may link to YouTube, social platforms, certification pages or other third-party sites. Their privacy policies apply when you use them. We are not responsible for their content or data practices.

Changes

We review this policy periodically. When we make a material change, we update the effective date and publish the new version on this page. Where required, we provide additional notice. Continued use of the site after an update means the revised policy applies to future processing.

Contact

New Miho Future Cultural & Creative Co., Ltd.
MIHOX is its international brand identity.
Dongguan, Guangdong, China

Privacy requests are handled by the MIHOX project team for the New Miho entity responsible for your inquiry or contract. The contracting entity is named in your quotation or contract.

Postal address for privacy requests:

• MIHOX Privacy Contact, Meihui Factory, 1st Floor, Building A, No. 139 Yuquan Road, Huangdong Village, Fenggang Town, Dongguan, Guangdong, China. Please mark the envelope “Privacy Request”.

Factory addresses:

• Meihui: 1st Floor, Building A, No. 139 Yuquan Road, Huangdong Village, Fenggang Town, Dongguan, Guangdong, China.
• Boyuan: No. 129, Dongfeng Road, Jiuxiang Village, Qingxi Town, Dongguan, Guangdong, China.

Privacy: [email protected]
Project inquiries: Contact the project team.

If applicable law requires a Data Protection Officer or an EU/UK representative, the relevant contact details will be published here before the applicable processing begins.