Privacy policy

1.1 This Privacy Policy (the “Policy”) explains how we collect, use, store, share and protect your personal information when you use the Yizhou Industrial flexible customization (POD) cloud platform and related services, and the rights you have.

1.2 This Policy applies to information we collect through our website (including PC and mobile web pages), application programming interfaces (APIs), WeChat mini programs and other channels through which we provide services.

1.3 Before using our services, you must carefully read and fully understand this Policy in its entirety. If you disagree with any part of this Policy, you must immediately stop using our services. By starting to use our services, you indicate that you fully understand and agree to this Policy.

1.4 “Personal information” in this Policy means information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding information that has undergone anonymization. “Sensitive personal information” means personal information whose disclosure, unlawful provision or misuse may endanger personal or property safety and is highly likely to cause harm to reputation, physical or mental health, discriminatory treatment or similar consequences. Examples include identification document numbers, mobile phone numbers, bank account numbers, property information and transaction information.

To provide high-quality flexible customization and supply chain management services, we need to collect and process the following categories of information:

2.1 Account sign-up and verification information: When you sign up for an account, we collect your mobile phone number (for sign-in with a verification code), chosen username and password. If you choose business real-name verification, we also collect information such as your company name, Unified Social Credit Code, a scanned duplicate of the business license, and the legal representative’s name and identification number.

2.2 Order and transaction information: When you create orders, top up or make purchases on the platform, we record your order details (including product SKUs, quantities and amounts), payment methods, transaction reference numbers, account balance changes and similar information.

2.3 Logistics and shipping information: For dropshipping fulfillment, we need to collect end-consumer recipient details or have them automatically synced through your store’s API, including recipient names, contact phone numbers and full delivery addresses. We will mask this information in strict accordance with electronic shipping label encryption specifications.

2.4 Design assets and creative content: Digital content you upload to the platform, such as design drafts, artwork and 3D preview models. This data is used only to complete the production and display tasks you specify.

2.5 Device and log information: To keep the platform secure and troubleshoot issues, we may automatically collect your device model, operating system version, browser type, IP address, access dates and times, page browsing records, crash logs and similar information when you use our services.

2.6 Third-party platform authorization information: When you choose to link a store on a third-party e-commerce platform, such as Douyin Shop or Taobao, we use that platform’s open APIs, with your explicit authorization, to obtain store names, store IDs, order data and similar information for automatic order synchronization and fulfillment.

We collect your information to provide better, safer and more personalized services. Specific purposes include:

• User authentication and account management: Verify your registered identity, maintain and manage your account information, and protect account security, for example by detecting unusual sign-ins.
• Order fulfillment and logistics services: Receive and process production orders, coordinate printing, quality inspection, packaging, dispatch and the entire fulfillment process, generate electronic shipping labels and provide logistics tracking.
• Settlement and financial management: Process financial transactions such as top-ups, purchases and refunds, and generate statements and invoices.
• System security and risk control: Detect, prevent and address fraud, illegal activities and security incidents, and protect the rights and interests of the platform and users.
• Service improvement and statistical analysis: Compile and analyze platform usage statistics to improve our products and service quality. Aggregates use de-identified data; account-linking rules for visit analytics are described above.
• Customer service and communication: When you contact us, we use your information to respond to inquiries, complaints or suggestions. We may also send service notifications, such as notices of system upgrades or order status changes.
• Legal and regulatory requirements: Use your information to comply with applicable laws, regulations, regulatory provisions, court orders or mandatory requirements of government authorities.

We understand our duty to keep personal information confidential and will not sell your information. We may share your personal information with third parties only in the following circumstances:

4.1 Logistics carriers: To ship products, we need to provide recipient details (name, address and contact phone number) to partner couriers such as ZTO, YTO and Yunda in the form of encrypted electronic shipping labels. Each courier will process this information according to its own privacy policy.

4.2 Payment service providers: When you top up or make a payment, we need to send necessary information such as the transaction amount and order number to third-party payment channels, such as Alipay and WeChat Pay, to complete the payment. We will not provide your account password or other unrelated information to payment channels.

4.3 Affiliates: Your personal information may be shared among our affiliates so that we can jointly provide services through a unified account system and carry out necessary business coordination. We will share only necessary personal information, subject to the restrictions stated in this Policy.

4.4 Legal or regulatory requirements: We may need to disclose your personal information as required by laws and regulations, for litigation or disputes, or to comply with binding lawful orders from administrative or judicial authorities. In these circumstances, disclosure will follow the procedures and scope prescribed by law.

4.5 Sharing with consent: With your prior explicit consent, we may share your information with other third parties.

5.1 Storage location: Personal information collected and generated in our operations within the People’s Republic of China will be stored within China. Our servers are deployed on state-certified cloud computing infrastructure, such as Tencent Cloud, with comprehensive physical and virtual network security capabilities.

5.2 Retention period: Unless laws or regulations provide otherwise (for example, the E-commerce Law requires a retention period of at least three years from completion of a transaction for product, service and transaction information), we retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy. Once that period expires, we will delete the information or apply anonymization.

5.3 Security measures: We use security technologies and management measures commonly adopted in the industry to protect your information, including but not limited to:

• Store user passwords and sensitive fields using irreversible encryption (bcrypt / SHA-256).
• Encrypt data throughout transmission using HTTPS/SSL/TLS protocols.
• Apply strict data access controls and permission management so that only authorized personnel can access the relevant data.
• Conduct regular security assessments and vulnerability scans, and promptly address security risks.
• Establish emergency response plans for data security incidents and, in the event of a data breach, promptly notify affected users and regulators as required by law.

5.4 Handling security incidents: Although we have taken reasonable security measures, please understand that absolute security cannot be guaranteed on the internet. If a personal information security incident occurs, we will promptly notify you, as required by law, of the basic facts and possible effects, measures we have taken or will take, recommendations for preventing and reducing risks yourself, and remedies available to you.

6.1 Use of cookies: To keep the website working properly and improve your experience, we store small data files called cookies on your computer or mobile device. Cookies usually contain identifiers, site names, numbers and characters. They allow us to keep users signed in, remember preferences and provide similar functions.

6.2 Session tokens: We use session management based on JWT (JSON Web Token) or server-side sessions to keep you signed in. These tokens contain encrypted user identification information used to verify your identity as you browse different pages.

6.3 Local storage: We may use browser local storage technologies, such as localStorage, to cache some non-sensitive interface configuration information and speed up page loading.

6.4 Your choices: Most web browsers provide cookie management features. You can adjust browser settings to clear or block cookies. Please note that disabling cookies may prevent some platform functions from working properly, such as keeping you signed in.

Under Chinese laws and regulations, you have the following rights regarding your personal information:

7.1 Right to inquire and access: You may view and access your submitted profile information, order records, top-up and purchase records, and similar information through the “Personal center” or “Account settings” pages in the console.

7.2 Right to correct and supplement: If you find errors or omissions in your personal information, you may correct or complete it through the platform. If you cannot change certain information yourself, contact customer service for assistance.

7.3 Right to deletion: You may request that we delete your personal information in the following circumstances:

• We collect or use your personal information in violation of laws, regulations or our agreement with you.
• We share or transfer your personal information to third parties in violation of laws, regulations or our agreement with you.
• You have closed your account.
• We permanently stop providing products or services.

After you submit a deletion request, we will complete verification and processing within fifteen working days. After deleting personal information, we may not immediately remove the corresponding information from backup systems, but will remove it when those systems are updated. Information that must be retained under laws and regulations is excluded.

7.4 Right to account closure: You may request to close your account by contacting customer service. Before we close your account, we need to verify your identity and account security status and confirm that the balance is zero, there are no unfinished orders and other conditions are met. Once closure is complete, we will stop collecting and using your personal information. Information that laws and regulations require us to keep will be kept only for the required retention period, will not be used for any other purpose, and will be deleted when that period expires.

7.5 Right to withdraw consent: You can withdraw your earlier consent to our collection and processing of information by unlinking third-party platform authorizations, disabling device permissions or similar means. We will stop processing the corresponding personal information after you withdraw consent. Withdrawal does not affect the validity of processing already carried out with your consent before withdrawal.

8.1 This platform provides B2B supply chain services to businesses and merchants and, in principle, does not provide services to minors under eighteen years of age.

8.2 If we discover that we have collected personal information from children under fourteen without prior verifiable guardian consent, we will take measures such as deletion as soon as possible.

8.3 If you are a minor’s guardian and have questions about the minor’s personal information, contact us using the details published in this Policy.

9.1 Our servers and data storage facilities are currently all located within the People’s Republic of China. In principle, we do not transfer your information outside the country.

9.2 If future business development, such as overseas logistics integration or expansion of cross-border e-commerce, makes it necessary to transfer your personal information outside the country, we will strictly comply with the Personal Information Protection Law of the People’s Republic of China and relevant regulations. Transfers will take place only after the necessary security assessments have been completed and your separate consent has been obtained.

9.3 During cross-border transfers, we will ensure that your personal information receives the same level of protection as within the country through measures such as signing standard contractual clauses and conducting personal information protection impact assessments.

10.1 We may update this Privacy Policy from time to time. When there are substantive changes, such as an expanded scope of information collection or changed purposes of use, we will publish an updated version on the platform and notify you through in-platform notifications, pop-ups, email or similar channels.

10.2 For major changes, we will also provide a more prominent notice, for example by asking you to confirm your consent again. Major changes include, but are not limited to:

• Major changes to our service model, such as the purposes of personal information processing, the types of personal information processed or how it is used.
• Major changes in control, such as a change of information controller resulting from a merger, acquisition or restructuring.
• Changes in the main recipients of personal information sharing, transfer or public disclosure.
• Major changes to your rights to participate in personal information processing or the ways you exercise those rights.

10.3 We will archive and retain previous versions of this Policy for your reference.

If you have questions, comments or suggestions about this Privacy Policy or the protection of your personal information, or wish to exercise any of the rights above, contact us using the following details:

We will generally respond within fifteen working days of receiving your request. If you are dissatisfied with our response, particularly if you believe our personal information processing has harmed your lawful rights and interests, you may also seek a resolution by bringing proceedings before the People’s Court with jurisdiction over the domicile of Shandong Yizhou Industrial Co., Ltd.