Privacy Policy of Guangzhou Chiyi Technology Co., Ltd.

We (referring to Guangzhou Chiyi Technology Co., Ltd., hereinafter referred to as "we", "us", or "the Company") deeply understand the value of your personal information and always regard the protection of your privacy and security as the lifeline of our business operations. We follow the principles of lawfulness, legitimacy, necessity, and integrity, and are committed to building a transparent and trustworthy data processing environment. This Privacy Policy aims to clearly explain to you how we collect, use, store, and protect your personal information when you visit our platforms or use our services, as well as the rights you have in this regard. Please read and fully understand the entire content of this policy before using our products or services.

1. How We Collect and Use Your Information

We will collect and use your personal information based on the necessity of providing services and with your explicit consent. Specific scenarios are as follows:

(1) Account Registration and Management

To help you become a registered user of ours and enjoy membership services, you need to provide basic registration information, including: your chosen nickname, mobile phone number or email address, and login password. This information is necessary for the performance of the service contract. If you refuse to provide it, you will not be able to complete account creation, but this will not affect basic functions such as browsing our products.

In addition, to enhance your service experience, you may voluntarily choose to provide the following additional information: your real name, gender, date of birth, occupation, interests, etc. Such information helps us recommend more suitable products or activities for you. Your failure to provide it will not affect your use of basic services.

(2) Product and Service Display

When you browse our website or application, to display product or service information to you, we collect your device information (including device model, operating system version, unique device identifier), browser type, and log information (including IP address, access time, browsing history, click records). This information is used to optimize interface display, analyze user preferences, and provide more personalized content recommendations.

(3) Transaction and Order Processing

When you choose to purchase goods or services, the system will generate an order. This process requires you to provide the consignee's name, shipping address, and contact number so that we can complete the delivery. If payment is involved, you will also need to provide payment account information, which will be transmitted directly to a third‑party payment processor; we do not store sensitive information such as your payment password.

(4) Customer Service and After‑Sales Support

When you contact our customer service team, you may need to provide relevant order information, contact details, and a description of your issue. We collect this information to verify your identity, respond quickly to your requests, and improve service quality. Some communication content may be recorded and archived for training and improvement purposes.

(5) Security Assurance and Risk Control

To protect the security of your account and transactions, we may collect your network usage habits, device environment information, abnormal operation behaviors, etc., to identify risks and prevent fraud. This information is used only for security analysis and not for any other commercial purpose.

2. Use of Cookies and Similar Technologies

To ensure the normal operation of our website and enhance user experience, we store small text files called Cookies on your device. Cookies help us remember your login status, preference settings, and count visits. You can manage or clear Cookies through your browser settings. However, please note that disabling Cookies may cause some functions to not work properly.

In addition, we may use technologies such as pixel tags and web beacons to count page visit effectiveness and understand whether emails have been opened, so as to optimize marketing strategies. These technologies do not read any other personal information of yours.

3. Sharing, Transfer, and Public Disclosure of Information

We undertake that, except in the following circumstances, we will not share your personal information with any third party without your consent:

Legal requirements: We may disclose your information in accordance with laws, regulations, or the requirements of administrative or judicial authorities.

Affiliated companies: To provide you with unified services, your information may be shared within the affiliated companies of Guangzhou Chiyi Technology Co., Ltd., but only to the extent necessary and subject to this Privacy Policy.

Authorized partners: Some services (such as logistics and delivery, payment processing, data analysis) are provided by our authorized partners. We will sign confidentiality agreements with them, requiring them to process information only in accordance with our instructions and to implement adequate security measures.

Business transfer: In the event of a merger, acquisition, asset restructuring or similar transaction, your personal information may be transferred as part of the assets. We will require the recipient to continue to comply with this Privacy Policy or to obtain your consent again.

Public disclosure: We will publicly disclose your information only with your explicit consent or when required by law.

4. Storage and Protection of Information

Storage location: Personal information collected and generated by us within the territory of the People's Republic of China will be stored on servers located within China. If cross‑border transfer is necessary for business purposes, we will obtain your consent in accordance with law and ensure that the recipient has adequate data protection capabilities.

Storage period: We retain your information only for the shortest period necessary to achieve the purposes described in this Privacy Policy, unless otherwise required by law or with your further consent.

Security measures: We use industry‑leading encryption technologies (such as SSL/TLS), access controls, firewalls, intrusion detection, and other means to prevent information leakage, tampering, or loss. We regularly provide privacy and security training to our employees and audit data processing activities.

Security incidents: If a personal information security incident unfortunately occurs, we will immediately activate our emergency response plan and promptly notify you of the basic circumstances, possible impact, measures taken and recommendations via email, SMS, in‑site message, etc., and report to the regulatory authorities as required.

5. Your Rights

You have the following rights regarding your personal information:

Right of access: You may log into your account at any time to view your profile, order history, favorites, and other information.

Right of rectification: If you find any incorrect information, you may modify it in your account or contact customer service for assistance.

Right of deletion: You may request that we delete your personal information in the following circumstances:

Our processing violates the law;

We collect information without your consent;

We process information in breach of our agreement;

You close your account;

We no longer provide services.

We will evaluate your request and delete the information if conditions are met, except where retention is required by law.

Right to withdraw consent: For collection of non‑essential information, you may withdraw your consent at any time through your account settings. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to deletion/closure: You may apply to close your account through [Account Settings / Contact Customer Service]. After closure, we will stop providing services to you and delete or anonymize your information, unless otherwise provided by law.

Right to obtain a copy: Where technically feasible, you may request a copy of your personal information or ask to have it transmitted to a third party designated by you.

Responding to requests: You may exercise the above rights using the contact information at the end of this Privacy Policy. To ensure security, we may need to verify your identity. We will respond to your request within 15 business days. We may refuse unreasonable, repetitive, or overly technically demanding requests and provide an explanation.

6. Protection of Minors' Information

We attach great importance to the protection of minors' personal information. If you are a child under the age of 14, you must ask your parent or guardian to carefully read this Privacy Policy before using our services, and use them only with their consent. We collect and use children's information only as permitted by law, with the explicit consent of a guardian, or as necessary to protect the child. If we discover that we have collected a child's information without prior verifiable parental consent, we will delete that information promptly.

7. Updates to the Privacy Policy

This Privacy Policy may be amended from time to time due to changes in laws and regulations or business adjustments. The updated version will be published on our website with the effective date indicated. If the revision involves significant changes (such as changes in the scope of information collection or sharing partners), we will also notify you prominently via pop‑up windows, email, etc. Your continued use of the services after the changes will be deemed as your acceptance of the revised Privacy Policy.