Warning: Undefined array key "eAkjGQ" in /www/wwwroot/stage.erfeihua.com.cn/wp-content/mu-plugins/advanced-custom-fields-pro/includes/class-acf-internal-post-type.php on line 1 Privacy Policy – English – 尔膳
Introduction
We (hereinafter referred to as “we” or “this Application”) deeply understand the importance of personal information to you and will do our utmost to protect the security of your personal information. We are committed to maintaining your trust in us and adhering to the following principles in protecting your personal information: the principle of consistency between rights and responsibilities, the principle of clear purposes, the principle of choice and consent, the principle of minimum necessity, the principle of ensuring security, the principle of subject participation, and the principle of openness and transparency. At the same time, we promise that we will adopt corresponding security protection measures to protect your personal information in accordance with mature industry security standards.
Please read and understand this “Privacy Policy” carefully before using our products or services.
I. How We Collect and Use Your Personal Information
1.1 Types of Personal Information We Collect
Information Category
Specific Content
Collection Scenario
Account Information
Username, password, mobile phone number, email address
Registration/Login
Identity Verification Information
Real name, ID number, facial information
Real-name verification
Device Information
Device model, operating system, unique device identifier (IMEI/Android ID/OAID, etc.), IP address, MAC address
Automatically collected when using services
Log Information
Browsing records, operation records, search records, service usage records
Automatically collected when using services
Location Information
GPS location, base station information, Wi-Fi access point information
Location-based services
Payment Information
Bank card number, transaction records, payment time
Transaction and payment
Contact Information
Delivery address, emergency contact information
Logistics delivery/security services
Communication Content
Information you provide when contacting our customer service team
Customer service
1.2 How We Use Your Personal Information
We will only use your personal information for the following purposes:
Provide Products and Services: Complete registration, identity verification, order processing, logistics delivery, after-sales service, etc.
Security Protection: Identify account anomalies, prevent fraud, and ensure account and transaction security
Personalized Recommendations: Provide personalized content recommendations based on your browsing and purchase records
Service Improvement: Conduct data analysis to optimize product features and user experience
Compliance Requirements: Cooperate with regulatory investigations and enforcement activities
Communication: Send you service notifications, security alerts, and marketing information (you may unsubscribe from marketing information at any time)
1.3 Exceptions to Consent
In accordance with relevant laws and regulations, we do not need to obtain your consent to collect your personal information in the following circumstances:
Where it is directly related to national security or national defense security;
Where it is directly related to public security, public health, or significant public interests;
Where it is directly related to criminal investigation, prosecution, trial, and execution of judgments;
Where it is necessary to protect your or other individuals’ life, property, or other significant legitimate rights and interests, but it is difficult to obtain your consent;
Where the personal information collected is information that you have voluntarily disclosed to the public;
Where personal information is collected from legally publicly disclosed information;
Other circumstances as stipulated by laws and regulations.
II. How We Use Cookies and Similar Technologies
2.1 Use of Cookies
To ensure the proper functioning of the website and to provide you with a more convenient access experience, we store small data files called Cookies on your computer or mobile device. Cookies typically contain identifiers, site names, and some numbers and characters.
We will not use Cookies for any purposes other than those described in this Privacy Policy. You may manage or delete Cookies according to your preferences. For details, please visit AboutCookies.org. You can clear all Cookies stored on your computer, and most web browsers have a function to block Cookies.
2.2 Web Beacons and Pixel Tags
In addition to Cookies, we also use other similar technologies such as web beacons and pixel tags on our website. For example, the emails we send to you may contain links to content on our website. If you click on such links, we will track this click to help us understand your product or service preferences, so that we can proactively improve our customer service experience.
III. How We Share, Transfer, and Publicly Disclose Your Personal Information
3.1 Sharing
We will not share your personal information with any company, organization, or individual, except in the following circumstances:
Sharing with Explicit Consent: We will share your personal information with other parties after obtaining your explicit consent.
Sharing with Affiliated Companies: To facilitate our joint provision of services to you based on affiliated accounts, your personal information may be shared with our affiliated companies. We will only share necessary personal information and such sharing is subject to the purposes stated in this Privacy Policy.
Sharing with Authorized Partners: To achieve the purposes stated in this policy, certain services will be provided by authorized partners. We may share some of your personal information with our partners to provide better customer service and user experience. We will only share your personal information for legitimate, proper, necessary, specific, and explicit purposes, and will only share personal information necessary for providing services. Our partners have no right to use the shared personal information for any other purposes.
Sharing as Required by Law: We may share your personal information externally in accordance with laws and regulations, litigation and dispute resolution needs, or as required by administrative or judicial authorities in accordance with the law.
3.2 Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:
Transfer with explicit consent;
In the event of a merger, acquisition, or bankruptcy liquidation, or other circumstances involving merger, acquisition, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this policy. Otherwise, we will require such company, organization, or individual to seek your authorization and consent again.
3.3 Public Disclosure
We will only publicly disclose your personal information in the following circumstances:
With your explicit consent or based on your active choice;
If we determine that you have violated laws and regulations or seriously violated our relevant agreements and rules, or to protect the personal and property safety of us, our affiliated companies, users, or the public from infringement, we may disclose your personal information in accordance with laws and regulations or relevant agreements and rules with your consent.
IV. How We Protect Your Personal Information
4.1 Technical Measures
We have used security protection measures that comply with industry standards to protect the personal information you provide, to prevent unauthorized access, public disclosure, use, modification, damage, or loss of data. We will take all reasonable and feasible measures to protect your personal information:
Use encryption technology (such as SSL/TLS) to ensure data security during transmission;
Use encryption technology (such as AES-256) to encrypt sensitive personal information during storage;
Deploy network security equipment such as firewalls and intrusion detection systems;
Establish data classification and grading systems, data security management standards, and data security development standards.
4.2 Management Measures
Strictly limit the scope of personnel who have access to information and require them to comply with confidentiality obligations;
Regularly conduct security and privacy protection training courses to strengthen employees’ awareness of the importance of protecting personal information;
Develop emergency response plans for personal information security incidents and regularly organize drills.
4.3 Security Incident Handling
In the unfortunate event of a personal information security incident, we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedies for you. We will promptly notify you of the relevant circumstances of the incident by email, letter, telephone, push notification, or other means. When it is difficult to notify each personal information subject individually, we will take reasonable and effective ways to issue announcements.
V. Your Rights
In accordance with relevant laws, regulations, and standards of China, as well as common practices in other countries and regions, we guarantee that you may exercise the following rights over your personal information:
5.1 Access Your Personal Information
You have the right to access your personal information, except as otherwise provided by laws and regulations. You may access it yourself through the following methods:
Account Information: Log in and go to the “Personal Center” or “Account Settings” page
Order Information: Log in and go to the “My Orders” page
If you cannot access this personal information through the above links, you may send an email to [Contact Email] at any time, and we will respond to your access request within 15 working days.
5.2 Correct Your Personal Information
When you find that the personal information we process about you is inaccurate, you have the right to request us to make corrections. You may submit a correction request through the methods listed in “5.1 Access Your Personal Information,” and we will respond to your correction request within 15 working days.
5.3 Delete Your Personal Information
In the following circumstances, you may request us to delete your personal information:
If our processing of personal information violates laws and regulations;
If we collect and use your personal information without obtaining your consent;
If our processing of personal information violates our agreement with you;
If you no longer use our products or services, or if you have cancelled your account;
If we no longer provide products or services to you.
If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us, requesting them to delete it promptly, unless otherwise provided by laws and regulations, or unless these entities have obtained your independent authorization.
5.4 Change the Scope of Your Authorization and Consent
Each business function requires some basic personal information to be completed. For the collection and use of additional personal information, you may grant or withdraw your authorization and consent at any time.
You may operate by yourself as follows: Enter the WeChat Mini Program main page → System settings in the upper right corner → Settings → Change the corresponding device permissions to “Not Allowed,” thereby withdrawing your authorization for us to obtain your personal information.
After you withdraw your authorization, we will no longer process the corresponding personal information. However, your decision to withdraw authorization will not affect the personal information processing previously carried out based on your authorization.
VI. How We Handle Personal Information of Minors
We attach great importance to the protection of minors’ personal information. Our products, websites, and services are primarily intended for adults.
Minors should not create their own personal information subject accounts without the consent of their parents or guardians.
If we find that we have collected personal information from minors without prior verifiable consent from their parents or guardians, we will endeavor to delete the relevant data as soon as possible.
VII. How Your Personal Information Is Transferred Globally
In principle, personal information collected and generated within the territory of the People’s Republic of China will be stored within the territory of the People’s Republic of China.
As we provide products or services through resources and servers distributed globally, this means that after obtaining your authorization and consent, your personal information may be transferred to jurisdictions outside the country or region where you use the products or services, or may be accessed from these jurisdictions.
Such jurisdictions may have different data protection laws, or may not have established relevant laws. In such cases, we will ensure that your personal information receives sufficient equivalent protection within the territory of the People’s Republic of China. For example, we will request your consent for cross-border transfer of personal information, or implement security measures such as data de-identification before cross-border data transfer.
VIII. How This Policy Is Updated
Our Privacy Policy may be updated.
Without your explicit consent, we will not reduce the rights you are entitled to under this Privacy Policy. We will publish any changes to this policy on this page.
For significant changes, we will also provide more prominent notices (including, for certain services, sending emails explaining the specific changes to the Privacy Policy).
Significant changes referred to in this policy include but are not limited to:
Significant changes to our service model, such as the purposes of processing personal information, the types of personal information processed, and the ways in which personal information is used;
Significant changes in our ownership structure, organizational structure, etc., such as changes in owners caused by business adjustments, bankruptcy, mergers, and acquisitions;
Changes in the main objects of personal information sharing, transfer, or public disclosure;
Significant changes in your rights regarding personal information processing and the ways in which they are exercised;
Changes in the department responsible for personal information security, contact information, and complaint channels;
When the personal information security impact assessment report indicates a high risk.
IX. How to Contact Us
We have established a dedicated personal information protection department (or personal information protection officer). If you have any questions, opinions, or suggestions regarding this Privacy Policy, or if you wish to exercise your personal information rights, please contact us through the following methods:
Contact Email: [Your Contact Email]
Contact Phone: [Your Contact Phone]
Contact Address: [Your Company Address]
Personal Information Protection Officer: [Officer Name/Position]
Under normal circumstances, we will respond within 15 working days after verifying your identity. If you are not satisfied with our response, especially if our personal information processing actions have harmed your legitimate rights and interests, you may also seek solutions through the following external channels:
File complaints and reports with regulatory authorities such as cyberspace administration departments, telecommunications departments, and public security departments
File a lawsuit with the people’s court having jurisdiction over the defendant’s domicile or the place of contract performance
X. Miscellaneous
10.1 Definitions
Personal Information: Refers to various information related to an identified or identifiable natural person recorded in electronic or other forms, excluding information after anonymization processing.
Sensitive Personal Information: Refers to personal information that, once leaked or used illegally, is likely to cause harm to the personal dignity of a natural person or endanger personal or property safety, including biometric information, religious beliefs, specific identity, medical health, financial accounts, and行踪轨迹 information, as well as personal information of minors under the age of 14.
Anonymization: Refers to the process of processing personal information so that it is impossible to identify a specific natural person and cannot be restored.
10.2 Applicable Law
The establishment, effectiveness, performance, interpretation, and dispute resolution of this Privacy Policy shall be governed by the laws of mainland China (excluding conflict of laws rules).
10.3 Dispute Resolution
If any dispute or controversy arises between you and us, it shall first be resolved through friendly consultation; if consultation fails, you agree to submit the dispute or controversy to the people’s court having jurisdiction over the defendant’s domicile or the place of contract performance.
Please confirm again: You have fully read, understood, and accepted all the contents of this Privacy Policy. Once you begin to use our services, it means that you have agreed to this Privacy Policy.