Privacy and Security

Dear users:

Thank you for visiting the official website of China Decoration Co., Ltd. (www.sinodecor.com, hereinafter referred to as the "official website"). China Decoration's official website is operated by China Decoration Co., Ltd. We are well aware of the importance of personal information to you and will do our best to protect your personal information. We will, in accordance with the requirements of national laws and regulations, abide by the principles of consistent rights and responsibilities, clear purpose, choice of consent, minimum adequacy, openness and transparency, ensure security, and subject participation to protect your personal information. In order to help you understand what personal information we have collected from you through our official website, and how we use, save, share and transfer this information when you use our official website, we hereby formulate the "China Decoration Official Website Personal Information Protection Policy" (hereinafter referred to as "this policy"). Please read this policy carefully, especially what is shown in bold. If you have any questions, comments or suggestions, you can contact us through the contact information in Section 11 of this policy.

This policy will help you understand the following:

1. The scope of this policy

2. Exceptions to Authorized Consent

How we use cookies and similar technologies

4. How we store your personal information

5. How we share, transfer and publicly disclose your personal information

6. How we protect your personal information

7. YOUR RIGHTS

8. Protection of Minors' Personal Information

9. Changes and Amendments to this Policy

10. How to contact us

11. Entry into force of this policy

1. the scope of this policy

This policy applies to the services we provide to you through the official website. In particular, this policy does not apply to services provided to you by other third parties. For example, third-party services or websites that you link to through official websites. You understand that these services are provided to you independently by third parties, who will be solely responsible for the processing of your personal information in accordance with their policies or user agreements.

We may establish specific service or product personal information protection policies, statements, notices, etc. (hereinafter referred to as "specific policies") for specific online or offline services or products. Where there are special provisions in other specific policies, such specific policies shall prevail; where not, this policy shall prevail.

2. how we collect and use your personal information

"Personal information" refers to all kinds of information recorded electronically or otherwise that can identify a specific natural person or reflect the activities of a specific natural person, either alone or in combination with other information.

"Personal sensitive information" refers to personal information that may endanger personal and property safety once leaked, illegally provided or abused, and can easily lead to personal reputation, physical and mental health damage or discriminatory treatment.

When you use the official website, we will collect and use personal information necessary to provide related services in the following ways; if you do not use this function, we will not collect the corresponding information.

1. Browse the official website

When you browse the official website through a computer or mobile device, we will collect the following information from you:

a) Technical information, such as Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in type and version, operating system and platform, and other technologies you use on your device to access the official website.

B) Usage information, such as information about how you use our websites, products and services.

2. Apply for a trial of our products and services

When you request to try our products and services on the official website, we need to collect your name, position, email address, contact number, company name, company address, industry, project name and key demand description to understand your specific needs.

We may also use the above information to (I) process and respond to questions and comments from you or your institution;(ii) provide information about products and services that may be of interest to you or your institution; and (iii) solicit information and feedback from you or your institution, including through research and surveys.

3. Business cooperation

When you apply for business cooperation with us, we need to collect your name, position, email address, contact number, country/region, industry, company name, specific requirements for business cooperation, etc. to understand your specific needs and contact you for business cooperation.

4. Apply for the position we offer.

When you choose to send your resume to us to apply for our position, we will obtain your WeChat login authorization with your consent and collect your mobile phone number. You can also choose to register directly through your mobile phone number without providing WeChat login authorization. We need to collect your identity information and resume information, such as your name, date of birth, gender and native place, your educational background, work experience and contact information, etc., to get a preliminary understanding of your situation.

Please note that we also collect, use and share aggregate data, such as statistical or structural data. Aggregated data may come from your personal information, but it is not personal information because it does not directly or indirectly identify you, and we have the right to use it for any legitimate purpose (for example: we may aggregate your usage information, to find out how many users access specific website functions, research consumer and market preferences, improve existing products and services, financial forecasts and modeling) If we merge or associate aggregated data with your personal information so that it can directly or indirectly Identify you, we will treat the merged information as personal information and will treat it in accordance with the provisions of this statement.

Exceptions 3. Authorized Consent

1. in connection with our performance of obligations under laws and regulations;

2. related to national security and national defense security;

3. Related to public security, public health, major public interests;

4. Related to crime investigation, prosecution, trial and execution of judgment, etc;

5. For the purpose of safeguarding the life, property and other major legitimate rights and interests of the subject of personal information or other individuals, but it is difficult to obtain your own consent;

6. The personal information collected is disclosed to the public by yourself;

Collecting personal information from legally publicly disclosed information, such as legitimate news reports, government information disclosure and other channels;

8. It is necessary to maintain the safe and stable operation of the products or services provided, such as the detection and disposal of product or service failures;

9. Necessary for legitimate news reporting;

10. When it is necessary for an academic research institution to carry out statistics or academic research based on the public interest and provide the results of academic research or description to the outside world, the personal information contained in the results is de-identified;

11. Other circumstances stipulated by laws, regulations or national standards.

4. how we use cookies

To ensure that our products work properly, we store small data files called cookies on your computer or mobile device. A cookie usually contains an identifier, a site name, and some numbers and characters. With the help of cookies, the product can store data such as your preferences. We will not use cookies for any purpose other than those described in this policy. You can manage or delete cookies according to your preferences. For more information, see AboutCookies.org. You can clear all cookies stored on your computer, and most web browsers have the ability to block cookies. But if you do, you need to change the user settings yourself every time you visit our official website.

5. how we store your personal information

The personal information we collect and generate in the People's Republic of China will be stored in the People's Republic of China territory.

We only store your personal information for the period necessary for the purpose of this policy and within the time limit required by laws and regulations.

If we stop the operation of the official website and related services, we will promptly stop the activities of continuing to collect your personal information, and will stop the operation notice in the form of an announcement. At the same time, the personal information we store is deleted or anonymized.

6. how we share, transfer and publicly disclose your personal information

(I) sharing

We do not share your personal information with any company, organization or individual, except in the following circumstances:

1. We will share your personal information with other parties with your express consent.

2. We may share your personal information in accordance with laws and regulations, litigation dispute resolution needs, or in accordance with the requirements of administrative and judicial organs in accordance with the law.

3. To the extent permitted by laws and regulations, it is necessary to share your personal information in order to protect us, our affiliated companies or partners, you or other Chinese decoration users or the public interest, property or safety from damage.

4. Sharing with our affiliates. In order for us to provide services to you, we may share your personal information with our affiliates. However, we will only share the necessary personal information, and the use of your personal information by affiliated companies is subject to this policy, or the policies of affiliated companies that have been authorized by you and provide your personal information with the same level of protection as this policy. We and our affiliates will strictly abide by the personal information and data security protection system and policy of China decoration.

(II) transfer

We will not transfer your personal information to any other company, organization or individual, except in the following cases:

1. Obtain your explicit consent or authorization in advance;

2. Provide in accordance with applicable laws and regulations, requirements of legal procedures, mandatory administrative or judicial requirements;

3. Comply with the relevant agreements signed with you (including online signed electronic agreements and corresponding platform rules) or other legal documents provided;

4. As our business develops, we and our affiliates may engage in mergers, acquisitions, asset transfers or other similar transactions. If the transaction involves the transfer of your personal information, we will require new companies, organizations and individuals holding your personal information to continue to be bound by this policy, otherwise we will require the companies, organizations and individuals to re-obtain your authorization and consent.

(III) public disclosure

We will only disclose your personal information in the following circumstances:

(1) with your explicit consent;

2. Legal-based disclosure: We may publicly disclose your personal information in the event of mandatory requirements by law, legal process, litigation or government authorities.

7. how we protect your personal information

We attach great importance to the security of your personal information and have taken industry-standard security measures to protect the personal information you provide from unauthorized access, public disclosure, use, modification, damage or loss. We will take all reasonable and feasible measures to protect your personal information.

1. China Decoration has set up a special person in charge of personal information protection, who is responsible for handling various matters related to products and services related to China Decoration that may involve users' personal information, as well as planning and formulating company policies, reviewing user use agreements for each product, and supervising The working principle and information processing mechanism of each product.

2. We have carried out the grading evaluation of information security level protection. We have formulated the overall policy and security strategy of information security work according to the requirements of information security level protection, established a security management system covering the host, data, application, management and other aspects, established the Information Security Management Committee and the Information Security Executive Committee, and established the System Platform Department as the functional department of product security management, the responsibilities, division of labor and skill requirements of various departments and positions within the safety management organization have been clarified, and clear management norms for personnel recruitment and resignation have been formulated.

3. We will encrypt the transmission and storage of the identifiable personal sensitive information, and the encryption strength meets the security requirements to ensure the confidentiality of the data. Our application system provides functions such as identity authentication, user identity uniqueness check, role-based access control, etc., uses HTTPS security protocol for communication, sets the maximum number of concurrent session connections, and can detect and alarm the system service level is reduced to a predetermined minimum. We deploy an access control mechanism on the service side, adopt the principle of minimum authorization for staff who may have access to your personal information, and regularly check the list of visitors and access records. Our Server Operating SystemAnd database system password complexity requirements, the use of SSH security protocol for remote management, strictly limit the access rights of the default account, and modify the default password, audit records are comprehensive and cover all users.

4. The server systems where we store users' personal information are all security-reinforced operating systems, and we will audit and monitor server operations.

5. We regularly organize training on laws and regulations related to personal information protection for our staff to strengthen their awareness of user privacy protection.

6. We have developed contingency plans for cyber security incidents and have allocated sufficient resources to ensure the implementation of the contingency plans. We have conducted training on emergency plans and emergency incident drills every year. If our physical, technical or management protection measures are unfortunately damaged, we will start the emergency plan in time to prevent the expansion of security incidents, report to the national competent authorities in accordance with the requirements of laws and regulations, and timely take reasonable and effective ways such as push and announcement to inform you of the basic situation, possible impact, measures already taken or measures to be taken.

8. your rights

During your use of the official website, you can access and manage your personal information in the following ways:

(I) inquiry and correction of your personal information

You can contact us to inquire and correct your personal information through the contact information in Article 11 below.

(II) delete your personal information

You have the right to request us to delete your account registration information when:

1. We have illegally collected your personal information without asking for your consent.

2. Our processing of your personal information violates the requirements of laws and regulations.

3. We use and process your personal information in violation of our agreement with you.

You no longer use our products or services.

We cease to provide services to you.

You can contact us through the method provided in Article 11 of this policy to request the deletion of your personal information, and we will reply within 15 working days. When we delete your personal information from the server, we may not immediately delete the corresponding data from the backup system, but will delete the information when the backup is updated.

(III) withdraw your consent

Each business function requires some basic personal information to complete. For the collection and use of additional collected personal information, you can give or withdraw your authorized consent at any time. Your withdrawal does not affect our previous processing of your personal information, but we will not continue to process your personal information. You can change the scope of your consent by contacting us through the contact information in Article 11 below.

(IV) account cancellation

You can cancel your previously registered account for recruitment at any time. You can cancel your account by contacting us through the contact information in Article 11 below.

(V) obtaining a copy of your personal information

You can obtain a copy of your personal information by contacting us through the contact details in Article 11 below.

On the premise that the relevant technology is feasible, if the data interface has been matched, we can also directly transfer a copy of your personal information to the third party you specify according to your request.

9. how we handle children's personal information

Our products, websites and services are primarily intended for adults. Children under the age of 14 may not use our products or services without the consent of their parents or guardians.

Where a child's personal information is collected with parental consent, we will only use or disclose this information to the extent permitted by law, with the express consent of a parent or guardian, or as necessary for the child's protection.

If we find that we have collected personal information from a child without obtaining prior, verifiable parental consent, we will try to delete the data as soon as possible.

10. Changes and Amendments to this Policy

Our personal information protection policy may change. We will not limit your rights under this Policy without your express consent.

We will provide significant notice of material changes to this Policy. You can also visit the official website at any time to check the latest policies.

Material changes referred to in this policy include, but are not limited:

Significant changes have taken place in our service model. Such as the purpose of processing personal information, the type of processing personal information, the use of personal information, etc;

2. We have undergone significant changes in control, etc. Such as changes in owners caused by mergers and acquisitions, etc;

3. The main object of personal information sharing, transfer or public disclosure changes;

Significant changes in your rights to participate in the processing of personal information and the manner in which they are exercised;

When the department responsible for handling personal information security, contact methods and complaint channels change;

6. When the personal information security impact assessment report indicates that there is a high risk.

Your continued use of our Site after such changes and revisions will be deemed to be your consent to the changes and revisions to this Policy.

11 How to Contact Us

China Decoration Co., Ltd. is the main operator of the official website and the controller of your personal information. If you have any questions, comments, suggestions or complaints about our policies and the processing of your personal information, please send CNDC@sinodecor.com an email or call [01065269998] to contact us.

Under normal circumstances, we will reply to your request within 15 working days.

How this policy comes into effect

This policy version is updated on September 14, 2023 and will come into effect on September 14, 2023.