Privacy Policy

1. Introduction

Chengdu Siwangyuan Technology Co., Ltd. (hereinafter referred to as "the Company," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, use our services, or otherwise interact with us. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website at www.siwangyuan.shop (the "Site") or use any of the services offered by the Company.

We operate in full compliance with applicable data protection laws and regulations, including but not limited to the Personal Information Protection Law of the People's Republic of China (PIPL), the General Data Protection Regulation (GDPR) of the European Union, and other relevant international privacy frameworks. By accessing our Site or using our services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with the practices described in this policy, please do not access the Site or use our services. We reserve the right to update or modify this Privacy Policy at any time, and we will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date.

2. Information We Collect

We collect several types of information from and about users of our Site and services, including:

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you fill out forms on our Site, communicate with us via email or phone, subscribe to newsletters, request quotes, or otherwise interact with our services. This information may include:

• Contact Information: Your full name, email address, phone number, company name, job title, and mailing address.
• Inquiry Information: Details about your project requirements, service interests, technical specifications, and any other information you choose to share with us.
• Communication Records: Records of correspondence between you and our team, including emails, chat messages, and call recordings where permitted by applicable law.
• Account Information: If you create an account on our platform, we may collect your username, password, and profile preferences.

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain information about your device and usage patterns, including:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage Data: Pages visited, time spent on each page, click patterns, referring URLs, search queries, and other navigation data.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience and analyze Site traffic. Please see Section 6 for more details about our use of cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, such as business partners, analytics providers, payment processors, and social media platforms (when you interact with our social media pages). We combine this information with data we already hold about you for the purposes described in this policy.

3. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

• Service Delivery: To provide, maintain, and improve our services, including processing your inquiries, responding to your requests, and delivering the solutions you have engaged us for.
• Communication: To communicate with you about your account, our services, updates, technical notices, security alerts, and support messages.
• Marketing: To send you marketing communications about our services, industry insights, events, and promotions that may be of interest to you, subject to your consent where required by applicable law. You may opt out of marketing communications at any time.
• Site Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and user experience of our Site.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests, and to enforce our Terms of Service and other legal agreements.
• Security: To detect, prevent, and respond to fraud, security incidents, and other potentially harmful activities.
• Business Operations: For internal business purposes such as data analysis, auditing, research, and development of new services.

4. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA) or the United Kingdom, we process your personal information based on the following legal grounds under the GDPR:

• Consent: Where you have given us explicit consent to process your personal information for specific purposes, such as receiving marketing communications. You have the right to withdraw your consent at any time.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and interests. Our legitimate interests include improving our services, ensuring Site security, and conducting business analytics.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

• Service Providers: We may share your information with trusted third-party service providers who assist us in operating our business, such as cloud hosting providers, email delivery services, analytics platforms, payment processors, and customer relationship management (CRM) systems. These providers are contractually bound to use your information only as necessary to provide services to us and in accordance with this Privacy Policy.
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or use of your personal information.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process, such as a court order, subpoena, or government investigation. We will make reasonable efforts to notify you in advance of such disclosure, unless prohibited by law.
• Protection of Rights: We may disclose your information to protect the rights, property, or safety of the Company, our users, or others, including investigating and preventing fraud or security incidents.
• With Your Consent: We may share your information with third parties when we have obtained your explicit consent to do so.

6. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze Site traffic, and understand where our visitors come from. Cookies are small text files that are stored on your device when you visit a website.

6.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the operation of our Site and enable core functionality such as security, network management, and accessibility. They cannot be disabled in our systems.
• Analytics Cookies: These cookies help us understand how visitors interact with our Site by collecting and reporting information anonymously. We use this data to improve our Site's performance and user experience.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences.
• Marketing Cookies: These cookies are used to track visitors across websites to display relevant advertisements and measure the effectiveness of our marketing campaigns.

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to block or delete cookies, but please note that some features of our Site may not function properly without them. For more information about managing cookies, visit www.aboutcookies.org.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the information and the context in which it was collected.

Generally, we retain contact information and inquiry records for the duration of our business relationship plus a reasonable period thereafter (typically 3-5 years) to address any follow-up questions or disputes. Usage data and analytics information are retained for a shorter period, typically 12-26 months. When personal information is no longer required, we securely delete or anonymize it.

In some circumstances, we may retain your personal information for longer periods where required by applicable law or where we have a legitimate business need to do so, such as for fraud prevention or regulatory compliance.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest using industry-standard algorithms
• Regular security assessments, vulnerability scanning, and penetration testing
• Strict access controls based on the principle of least privilege
• Employee training on data protection and privacy best practices
• Secure data centers with physical access controls and environmental protections
• Incident response and breach notification procedures

While we take all reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to maintain and improve our security practices.

9. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your own, including China and other jurisdictions where we or our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

When we transfer your personal information internationally, we take appropriate safeguards to ensure that it receives an adequate level of protection. For transfers from the EEA or UK to countries not deemed adequate by the European Commission, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms. For transfers of personal information of Chinese residents, we comply with the security assessment, certification, or standard contract requirements under PIPL and related regulations.

By submitting your personal information to us, you acknowledge and agree to these international transfers. You may request a copy of the appropriate safeguards by contacting us using the details in Section 15.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to our processing of your personal information, including for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal information violates applicable law.

To exercise any of these rights, please contact us using the information provided in Section 15. We will respond to your request within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity before processing your request.

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, USA, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information. Under these laws:

• You have the right to know what personal information we collect, use, disclose, and sell about you.
• You have the right to request that we delete personal information collected from you, subject to certain exceptions.
• You have the right to opt out of the sale of your personal information. We do not sell your personal information.
• You have the right to non-discrimination for exercising your CCPA/CPRA rights.
• You have the right to request correction of inaccurate personal information.
• You have the right to limit the use and disclosure of sensitive personal information.

To exercise your California privacy rights, please contact us using the information in Section 15. We will verify your identity using information you provide and may request additional information to confirm your identity. You may designate an authorized agent to make a request on your behalf.

12. Children's Privacy

Our Site and services are not directed at children under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without verifiable parental consent, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us immediately.

13. Third-Party Links

Our Site may contain links to third-party websites, plugins, and applications, including social media platforms and external resources. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date at the top. In some cases, we may provide additional notice, such as an email notification or a prominent notice on our Site. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our Site or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should stop using our Site and services and contact us to request deletion of your personal information.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us using the following information:

Chengdu Siwangyuan Technology Co., Ltd.
Address: Jinyan Road No.10, Wuhou District, Chengdu, Sichuan, China
Email: support@siwangyuan.shop
Phone: 18907452271
Website: www.siwangyuan.shop

For data protection matters specifically, you may contact our Data Protection Officer (DPO) at the email address above. We will acknowledge receipt of your inquiry within 3 business days and respond substantively within the timeframe required by applicable law. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.