Privacy Policy

Hunan Xinhongyuan Hi-Tech Co., Ltd. (hereinafter referred to as “our company”) recognizes that it is a corporate social responsibility to properly handle and protect information that can identify a specific individual, such as the name, address, and email address of customers, shareholders, directors, and employees (hereinafter referred to as “employees, etc.”) or information that contains a personal identification code (a personal identification code as defined in Article 2, Paragraph 2 of the Act on the Protection of Personal Information) (hereinafter referred to as “personal information”), and will implement the following measures.

Article 1 (Compliance with Laws and Regulations)

When handling personal information, we will comply with relevant laws and regulations and internal regulations regarding the protection of personal information.

Article 2 (Purpose of Use)

Our company will specify the purpose of use of personal information and will handle it to the extent necessary to achieve the purpose of use, and will not handle it beyond that scope. In addition, if the purpose of use of specific personal information is separately limited based on laws and regulations, we will not handle it for any purpose other than that purpose.

Article 3 (Acquisition of Personal Information)

When acquiring personal information, we will acquire it by proper and lawful means within the scope necessary for business.

Article 4 (Proper Management of Personal Information)

We will take measures to prevent unauthorized access, loss, destruction, falsification, and leakage of personal data (personal data as defined in Article 2, Paragraph 6 of the Act on the Protection of Personal Information). We will ensure that personal data is accurate and up-to-date within the scope necessary for the purpose of use, and will endeavor to delete it without delay when it is no longer necessary to use it.

Article 5 (Restrictions on Provision to Third Parties)

In principle, we will not provide personal data to third parties, except when we have obtained the consent of the customer or other individual, or when required by law. However, in the case of entrusting the handling of personal data within the scope necessary to achieve the purpose of use, in the case of mergers, etc., or when it is used jointly with a specific person specified separately, we may provide personal data to persons other than our company without the consent of the individual.

Article 6 (Handling of sensitive personal information)

We will not acquire sensitive personal information of customers, etc. (such as race, creed, social status, medical history, criminal history, facts of harm caused by crime, and other information that requires special consideration in handling to avoid unfair discrimination, prejudice, or other disadvantage to the individual) unless we have received the individual’s consent in advance or are required by law.

Article 7 (Supervision of contractors)

If we entrust the handling of personal data of customers, etc. to a third party, we will properly supervise the contractor to ensure safe information management by entering into a contract, etc.

Article 8 (Joint use)

Personal data of customers, etc., excluding shareholders, will be jointly used within our group.

Article 9 (Request for disclosure of personal information, etc.)

If you contact our office to request the disclosure, correction, addition, deletion, suspension of use, or erasure of personal data held by us, we will respond promptly within a reasonable range, unless otherwise specified by law.

Article 10 (Management System)

In order to strengthen our efforts to protect personal information throughout the company, we will continue to educate and raise awareness among employees.

Article 11 (Inquiries)

Inquiries regarding our personal information will be handled by our Management Department. Please access the inquiry desk here. (Hours of operation: Weekdays 9:00-17:30)

Privacy Policy Regarding “Personal Data Subject to the EU General Data Protection Regulation (GDPR)”

Article 1: Definitions

The following terms are defined in this Privacy Policy:

Article 2 Scope of Application of This Privacy Policy

Section 1 ：This Privacy Policy applies to the individual use of our website by users (“Website Users”) and the processing of personal data via our website to which applicable privacy laws apply. Our company is the administrator of such processing.

Section 2： Our website may contain third-party information (e.g., hyperlinks, banners, etc.). Our company does not manage such third-party information, and we are not responsible for third parties’ compliance with applicable privacy laws. We ask our website users to carefully read the privacy policies of the third-party websites they visit.

Article 3 ：Personal Data to be Collected

Section 1 ：Our company may obtain the following personal data from our website users.

Name, company/organization, department, job title, contact information, etc.

Section 2 ：Our company will not collect sensitive personal data such as passport information or health data through our website, except as provided for by applicable privacy laws.

Section 3 ：Our company will collect personal data when the following actions are taken by our website users.Inquiries through our website、Applications for employment through our website
Other uses of our website

Section 4: We process personal data only in accordance with applicable privacy laws as described in this Privacy Policy.

Article 4: Purpose and legal basis of data processing

Section 1: We collect and process personal data only for the purposes described below.

Performance of a contract or response to a pre-contract request from a website user: If a website user places an order through our website, we may process the user’s personal data to perform the contract. We will not process personal data beyond the extent necessary to perform the contract.

Communication: We may use the website user’s personal data to (i) contact you about our products and services, (ii) inform you of information important to the use of our website, and (iii) respond to complaints. The processing of such personal data is necessary for the performance of a contract and/or for the purposes of our legitimate interests in the course of ordinary business operations.
Marketing: We will always obtain your prior consent when contacting you by email for marketing purposes, unless it is about a product similar to one you have previously ordered. You have the right to stop receiving emails from us at any time. The processing of such personal data is necessary for the purposes of our legitimate interests in communicating with you and offering you similar products and services, or is based on your prior consent.

Customer service: If you use our customer service, we may use your personal data to provide you with customer service. The processing of such personal data is necessary for the performance of a contract and/or for the purposes of our legitimate interests in the ordinary course of business.

Applying for employment: If you apply for employment through our site, we may use your personal data to respond to your application. The processing of such personal data is necessary for the purposes of our legitimate interests in recruiting people to work for our group.

Section 2 If we intend to further process personal data for purposes other than the purpose of processing for which the personal data was collected, we will provide you with information on those other purposes and all relevant additional information before carrying out such processing.

Article 5 Transfer of personal data to third parties

We will share the personal data of our site users within our group.

Article 6 Security

To protect the personal data of our site users, we will take appropriate organizational and technical security measures to prevent unauthorized use, loss, or alteration of the personal data. In addition, we will grant access to the personal data only to employees, agents, contractors, and other third parties who need to access the data. These persons are bound by confidentiality obligations under their employment contracts or (data processing) contracts.

Article 7 Retention period

Section 1 ：We will not retain the personal data of our site users for longer than is necessary for the purpose of collecting the data.

Section 2 ：Users of our site may request us to delete their personal data at any time. In addition, we will delete personal data if it is no longer necessary in relation to the purpose for which it was collected or processed.

Article 8 Cookies

Section 1: We use cookies to ensure that our site functions properly.

Section 2: Cookies are information stored on the computer of our site users by the browser. We use different types of cookies for different purposes.

Functional cookies: These are cookies necessary for our site to function properly, including cookies necessary to create an account.

Analytical cookies: These are cookies that allow us to obtain information about how our site users use (parts of) our site. This allows us to improve our site and make it as relevant as possible to the interests and important matters of our site users. We use the data obtained through cookies only to analyze the use of our site.

Section 3: We use third-party cookies only for the purpose of improving the quality and effectiveness of our site.

Section 4: Most browsers are set to enable cookies by default. You can disable cookies or indicate when cookies are being sent by changing your browser settings. However, if cookies are disabled, features and services on our site and other sites may not function properly.

Article 9: Rights of our site users

Section 1: If the processing of personal data is based on consent, our site users have the right to withdraw consent related to their personal data at any time.

Section 2: Our site users have the right to request access to their personal data. This allows them to receive a copy of their personal data held by our company.

Section 3: Our site users have the right to request correction of their personal data held by our company. This allows us to correct any incomplete or inaccurate data held by our company about them.

Section 4: Our site users have the right to request the deletion of their personal data. This allows us to delete personal data that we continue to process without a legitimate reason.

Section 5: Our site users have the right to object to the processing of their personal data carried out by our company for legitimate interests. If we process personal data for direct marketing purposes, we will always accept your objection. If we process personal data for other purposes, we will cease processing the personal data unless there are compelling legitimate reasons (i) which override your interests, rights and freedoms, or (ii) which are related to the initiation, exercise or establishment of legal action.

Section 6: You have the right to request the restriction of the processing of your personal data.

Section 7: You have the right to request the transfer of your personal data to yourself or a third party. We will provide you or a third party designated by you with your personal data in a structured, commonly used, machine-readable format. Please note that this right applies only to automated information processed with your initial consent or used by us to perform a contract with you.

Section 8: There is no cost to you for exercising the above rights. We will provide you with information about the status of your request immediately and, in any case, within one month after receiving your request. Depending on the complexity and number of your requests, this period may be extended by another two months. In the event of an extension of the period, we will inform you of this within one month after receiving your request.

Article 9: If your request is manifestly unfounded or excessive, in particular in the case of repeated requests, we will charge you a reasonable fee or refuse to respond to your request.

Article 10: In addition to the above rights, you have the right to lodge a complaint at any time with a supervisory authority (in particular the supervisory authority of your place of residence, place of work or the EU member state where a violation of the GDPR is alleged to have occurred). However, we would like to give you an opportunity to respond to your complaint before you contact the supervisory authority, so please contact us in advance.

Article 10 Contact Information

If you have any questions or complaints, or wish to exercise any of the rights set out in Article 9 of this Privacy Policy, please contact us at the following details:

Contact: Hunan Xinhongyuan Hi-Tech Co., Ltd.
Address: No. 46 Jincheng Road, Economic Development Zone, Changsha City, Hunan Province
Contact: Please access from here.

Article 11 General Provisions

Section 1: We reserve the right to periodically revise this Privacy Policy. It is the responsibility of users of our website to regularly check the applicable provisions. This Privacy Policy was last revised in January 2025.

Section 2: If any provision of this Privacy Policy conflicts with laws and regulations, the relevant provision shall be replaced with a provision of the same intent that reflects the intention of the law to the extent permitted by law. In that case, the other provisions shall continue to apply without change.