Last Updated: January 1, 2025
Company: 枝江市旧只商贸有限公司 (Jiu Zhi)
Developer: Jiu Zhi
Address: 枝江市董市镇大横街一巷3号二楼(自主申报), Yichang - 443000, China (CN)
Email: info@jiuzhi.lol
Phone: +1 (351) 235-3396
Website: https://www.jiuzhi.lol
This Privacy Policy governs the manner in which 枝江市旧只商贸有限公司, operating under the developer name Jiu Zhi (hereinafter referred to as "Jiu Zhi," "we," "us," or "our"), collects, uses, maintains, and discloses information collected from users (each, a "User" or "you") of the https://www.jiuzhi.lol website and any associated services, products, or applications (collectively, the "Service"). This policy applies to all aspects of your interaction with our digital ecosystem, including but not limited to browsing, account registration, purchase transactions, customer support communications, and any other engagement with our platform. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This document outlines our practices regarding data collection, processing, storage, and sharing, and it is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), the Personal Information Protection Law (PIPL) of the People's Republic of China, and other relevant international, federal, and state regulations. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our Service immediately. We reserve the right to update or modify this Privacy Policy at any time without prior notice, and your continued use of the Service following any changes constitutes acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. This policy is effective as of the date stated above and supersedes all previous versions.
Our Service is operated from our registered address in Yichang, China, but we serve users globally. As such, we must navigate a complex web of legal obligations across multiple jurisdictions. This Privacy Policy is intended to provide transparency and clarity regarding our data practices, regardless of where you are located. We recognize that privacy is a fundamental right, and we strive to implement industry-leading standards to safeguard your data. This includes adherence to principles such as data minimization, purpose limitation, storage limitation, integrity and confidentiality, and accountability. We have designated a Data Protection Officer (DPO) who can be reached at info@jiuzhi.lol for any privacy-related inquiries or concerns. Our DPO is responsible for overseeing our compliance with data protection laws and ensuring that your rights are respected. In the following sections, we will detail the specific categories of information we collect, the methods of collection, the purposes for which we use your data, the legal bases that justify such processing, and the measures we take to protect your information. We will also explain your rights regarding your personal data and how you can exercise them. This comprehensive approach is designed to empower you with knowledge and control over your digital footprint while using our Service.
It is important to note that this Privacy Policy applies exclusively to information collected through our Service and does not apply to any third-party websites, applications, or services that may be linked to or from our platform. We are not responsible for the privacy practices of such third parties, and we encourage you to review their respective privacy policies before providing any personal information. Additionally, this policy covers both online and offline data collection, including information you provide through customer support channels, email communications, telephone calls, or postal mail. We are committed to maintaining the confidentiality, integrity, and availability of your data, and we have implemented robust technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction. Our security protocols are regularly reviewed and updated to address emerging threats and vulnerabilities. By using our Service, you consent to the data practices described in this Privacy Policy, and you represent that you are at least 18 years of age or the age of majority in your jurisdiction. If you are under the age of 18, you may not use our Service without the consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions) without verifiable parental consent, as further detailed in Section 12 of this policy.
We collect various types of information in connection with the operation of our Service, the provision of our products and services, and the improvement of user experience. This information can be broadly categorized into personal information (also known as personally identifiable information or PII) and non-personal information. Personal information refers to any data that can be used to identify, contact, or locate a specific individual, either alone or when combined with other information. Non-personal information includes aggregated data, anonymized data, and other data that does not directly identify a natural person. The specific categories of information we collect are detailed below, and we ensure that our collection practices are lawful, fair, and transparent. We only collect information that is necessary for the purposes outlined in this policy, and we do not engage in indiscriminate data hoarding. Our goal is to minimize the amount of personal data we process while still delivering a high-quality, personalized experience.
The personal information we may collect includes, but is not limited to: your full name, email address, postal address (including street, city, state/province, postal code, and country), telephone number (including mobile and landline), payment card details (such as credit or debit card numbers, expiration dates, and CVV codes, though these are processed by our secure payment gateway partners and not stored by us in plaintext), billing and shipping addresses, account login credentials (username and password), demographic information (such as age, gender, and occupation), and any other information you voluntarily provide to us through forms, surveys, or communications. We may also collect information about your preferences, interests, and feedback regarding our products and services. In addition, we collect certain technical information automatically when you access our Service, including your Internet Protocol (IP) address, browser type and version, operating system, device type and model, unique device identifiers, mobile network information, referring URLs, pages viewed, time spent on pages, clickstream data, and other usage statistics. This technical data helps us diagnose server problems, administer the Service, analyze trends, and improve overall functionality.
We also collect information from third-party sources, such as social media platforms (if you choose to log in or share content through those platforms), payment processors, shipping carriers, and public databases. For example, if you sign up for an account using your Google or Facebook credentials, we may receive your name, email address, and profile picture from that platform, subject to your privacy settings on that platform. We may also obtain credit information from credit bureaus for fraud prevention and credit assessment purposes, but only where permitted by law. Additionally, we collect information about your interactions with our customer support team, including recordings of phone calls (with your consent where required), transcripts of live chats, and copies of email correspondence. This information is used to improve our service quality, train our staff, and resolve disputes. We also collect information related to your transactions, such as order history, product reviews, and return/exchange records. All information collected is stored securely and retained only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. We take care to ensure that the information we collect is accurate, complete, and up-to-date, and we provide mechanisms for you to correct or update your information as described in Section 11.
We employ a variety of methods to collect information from and about our users, ensuring that each collection point is clearly communicated and, where required, subject to your consent. The primary method of collection is through direct interactions: when you voluntarily provide information to us by filling out forms on our website, registering for an account, subscribing to our newsletter, placing an order, participating in a survey or contest, posting a review, or contacting us via email, phone, or live chat. In each of these instances, you are knowingly providing us with your personal data, and we will indicate which fields are mandatory and which are optional. Mandatory fields are necessary for us to provide the requested service or fulfill a transaction, while optional fields allow you to enhance your experience or receive additional benefits. We will not collect personal information without your knowledge, and we will always inform you of the purposes for which the data is being collected at the point of collection.
We also collect information automatically through the use of cookies, web beacons, pixels, log files, and other tracking technologies. Cookies are small text files that are stored on your device by your web browser when you visit a website. They allow us to recognize your device, remember your preferences, and analyze how you interact with our Service. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until you delete them). The types of cookies we use include strictly necessary cookies (required for the functioning of the Service), performance cookies (to analyze usage and improve performance), functional cookies (to remember your choices and personalize your experience), and targeting/advertising cookies (to deliver relevant advertisements and measure their effectiveness). You can control the use of cookies through your browser settings, but disabling certain cookies may affect the functionality of our Service. We also use web beacons (also known as clear GIFs or pixel tags) in our emails and on our website to track open rates, click-through rates, and other engagement metrics. These technologies help us measure the effectiveness of our communications and improve our content.
Additionally, we collect information from third-party sources as described in Section 2. This includes data from social media platforms when you use social login features, from payment processors to confirm transaction details, from shipping carriers to track deliveries, and from analytics providers (such as Google Analytics) to understand user behavior and demographics. We may also collect information from public sources, such as government records or business directories, to verify your identity or comply with legal obligations. In some cases, we may combine information collected from different sources to create a more comprehensive profile of our users, but we do so only in accordance with applicable law and with appropriate safeguards in place. We also collect information through our customer support interactions, including call recordings and chat transcripts, which are used for quality assurance, training, and dispute resolution. We ensure that all collection methods are transparent, and we provide you with choices regarding the collection of your data, such as opting out of non-essential cookies or withdrawing consent for certain processing activities. Our goal is to collect only the minimum amount of data necessary to achieve the specified purposes, and we regularly review our collection practices to ensure compliance with evolving legal standards.
To provide clarity and granularity, we categorize the information we collect into several distinct types, each with its own handling requirements and legal implications. The first category is Identity Information, which includes data that can directly identify you as an individual. This encompasses your full legal name, alias, username, marital status, title, date of birth, gender, national identification number (such as a social security number, passport number, or national ID card number), and any other identifier that is unique to you. We collect this information primarily for account creation, identity verification, fraud prevention, and legal compliance purposes. For example, we may need your full name to process a shipment or your date of birth to verify that you are of legal age to purchase certain products. We treat identity information with the highest level of confidentiality and security, and we limit access to it to only those employees and contractors who have a legitimate business need.
The second category is Contact Information, which includes data that allows us to communicate with you. This includes your email address, telephone numbers (home, mobile, and work), postal address (including street, city, state/province, postal code, and country), and any other contact details you provide. We use contact information to send you transactional communications (such as order confirmations, shipping updates, and invoices), marketing communications (if you have opted in), customer support responses, and important notices regarding changes to our Service or policies. We also use this information to verify your identity and prevent fraud. We take measures to ensure that your contact information is accurate and up-to-date, and we provide you with the ability to update it through your account settings or by contacting us directly. We do not sell your contact information to third parties for their own marketing purposes without your explicit consent.
The third category is Financial Information, which includes data related to your payment methods and transaction history. This includes credit or debit card numbers, bank account details, billing addresses, payment gateway tokens, transaction amounts, dates, and descriptions, and any other financial data necessary to process payments and prevent fraud. We do not store full payment card numbers on our servers; instead, we rely on PCI-DSS compliant third-party payment processors to handle the processing and storage of such data. We may retain limited financial information, such as the last four digits of your card number and the card type, for reference and fraud detection purposes. We also collect information about your purchase history, including items purchased, quantities, prices, discounts, and return/exchange records. This information is used for accounting, tax compliance, customer service, and business analytics. We implement strong encryption and access controls to protect your financial information from unauthorized access or disclosure.
The fourth category is Technical Information, which includes data collected automatically when you interact with our Service. This includes your IP address, browser type and version, operating system, device type and model, unique device identifiers (such as IMEI, MAC address, or advertising ID), mobile network information, screen resolution, language preferences, time zone, referring URLs, exit pages, clickstream data (the sequence of pages you visit), and other diagnostic data. We also collect information about your interaction with our emails, such as whether you opened an email or clicked on a link. Technical information is used to analyze trends, administer the Service, track user movements, gather demographic information, and improve the overall user experience. This data is typically aggregated and anonymized for analytical purposes, but we may link it to your personal information for purposes such as fraud detection or personalized recommendations. We use tools like Google Analytics, Hotjar, and other analytics services to collect and process this data, and we ensure that these providers are contractually bound to protect your data.
The fifth category is Profile Information, which includes data that you create or generate while using our Service. This includes your account username and password, profile picture, biography, preferences (such as language, currency, and notification settings), wish lists, shopping cart contents, product reviews and ratings, forum posts, comments, and any other user-generated content. We also collect information about your interactions with our content, such as pages viewed, products viewed, search queries, and items added to cart. Profile information is used to personalize your experience, recommend products or services, facilitate social interactions, and improve our Service. We treat this information as personal data and protect it accordingly. You have the ability to edit or delete much of your profile information through your account settings, and we provide tools to manage your privacy preferences.
The sixth category is Sensitive Information, which includes data that requires heightened protection due to its nature. This may include information about your health (such as allergies or medical conditions if you provide it in connection with a product inquiry), racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (such as fingerprints or facial recognition data), sexual orientation, and criminal records. We do not intentionally collect sensitive information unless it is voluntarily provided by you for a specific purpose (e.g., if you disclose a health condition to receive product recommendations) or if required by law. If we do collect sensitive information, we will obtain your explicit consent and implement additional safeguards, such as encryption and strict access controls. We will only process sensitive information for the purposes for which it was provided, and we will delete it as soon as it is no longer needed. We encourage you not to provide sensitive information unless absolutely necessary, and we will never require such information as a condition of using our Service.
We use the information we collect for a variety of purposes, all of which are aimed at providing, maintaining, improving, and personalizing our Service, as well as ensuring compliance with legal obligations and protecting our legitimate interests. The primary purposes for which we use your information include: processing transactions and fulfilling orders, including verifying your identity, processing payments, arranging shipping, and providing invoices and order confirmations; managing your account, including creating and maintaining your profile, authenticating your login, and providing customer support; communicating with you about your account, orders, and inquiries, as well as sending administrative messages, updates, and security alerts; sending marketing and promotional communications (with your consent where required by law), including newsletters, special offers, product recommendations, and event invitations; personalizing your experience on our Service, such as by displaying content and advertisements tailored to your interests and preferences; analyzing usage trends and behaviors to improve the functionality, performance, and design of our Service; conducting research and development to create new products, features, and services; detecting, preventing, and addressing fraud, security breaches, and other illegal or prohibited activities; complying with applicable laws, regulations, legal processes, and governmental requests; enforcing our Terms of Service and other agreements; and exercising or defending legal claims.
We also use your information for internal business purposes, such as data analysis, auditing, and reporting. For example, we may aggregate and anonymize data to generate statistical insights about our user base, which we may use for business planning, marketing strategies, and product development. We may also use your information to test and troubleshoot new features, to monitor the performance of our Service, and to ensure the security and integrity of our systems. In some cases, we may use your information to make automated decisions, such as credit checks or fraud risk assessments, but we will inform you when such decisions are made and provide you with the right to request human intervention or contest the decision. We ensure that all uses of your information are consistent with the purposes for which it was collected, and we do not use your information in a manner that is incompatible with those purposes without obtaining your consent. If we intend to use your information for a new purpose, we will update this Privacy Policy and, where required, seek your consent.
We also use your information to comply with our legal and regulatory obligations. This includes obligations under tax laws, anti-money laundering regulations, consumer protection laws, and data protection laws. For example, we may need to retain certain transaction records for accounting and tax purposes, or we may need to disclose information to law enforcement or regulatory authorities in response to a valid legal request. We also use your information to protect our rights, property, and safety, as well as the rights, property, and safety of our users and third parties. This includes enforcing our Terms of Service, investigating potential violations, and taking action against fraudulent or abusive behavior. We may also use your information to communicate with you about important changes to our Service, such as updates to this Privacy Policy or our Terms of Service, or to notify you of security breaches that may affect your data. In all cases, we strive to use your information in a manner that is proportionate, necessary, and respectful of your privacy rights.
We process your personal information only when we have a valid legal basis to do so, as required by applicable data protection laws. The legal bases we rely on vary depending on the specific processing activity and the jurisdiction in which you are located. For users in the European Economic Area (EEA), the United Kingdom, and other jurisdictions with similar data protection frameworks, the legal bases for processing are as follows: (a) Consent: We may process your personal information when you have given your explicit consent for a specific purpose, such as receiving marketing emails or using non-essential cookies. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. (b) Contractual Necessity: We may process your personal information when it is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. This includes processing your information to process an order, deliver a product, or provide customer support. (c) Legal Obligation: We may process your personal information when it is necessary for compliance with a legal obligation to which we are subject, such as tax reporting, anti-money laundering checks, or responding to a court order. (d) Legitimate Interests: We may process your personal information when it is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your interests, rights, and freedoms. Our legitimate interests include improving our Service, preventing fraud, ensuring network security, conducting business analytics, and marketing our products (subject to your opt-out rights). (e) Vital Interests: We may process your personal information when it is necessary to protect your vital interests or those of another person, such as in a medical emergency. (f) Public Interest: We may process your personal information when it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
For users in China, we process your personal information in accordance with the Personal Information Protection Law (PIPL) and other applicable regulations. The legal bases under PIPL include: (a) obtaining your consent; (b) where processing is necessary for the conclusion or performance of a contract to which you are a party; (c) where processing is necessary for the performance of a legal duty or statutory obligation; (d) where processing is necessary for responding to public health emergencies or protecting the life, health, or property safety of natural persons in an emergency; (e) where processing is carried out for news reporting, public opinion supervision, or other activities in the public interest, within a reasonable scope; (f) where processing is carried out within a reasonable scope of information that you have made public or that has been legally disclosed; and (g) other circumstances provided by laws and regulations. We ensure that our processing activities are consistent with the principles of lawfulness, legitimacy, necessity, and good faith, and we conduct privacy impact assessments for high-risk processing activities as required by law.
For users in California, we process your personal information in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Under these laws, we are required to disclose the categories of personal information we collect, the sources from which we collect it, the purposes for which we use it, and the categories of third parties with whom we share it. We do not sell your personal information for monetary consideration, but we may share it for cross-context behavioral advertising, which is considered a "sale" under the CCPA. You have the right to opt out of such sharing, as described in Section 11. We also process your sensitive personal information only for purposes that are necessary and permitted under the CCPA, such as to provide the Service, to ensure security and integrity, to perform services on our behalf, to verify quality and safety, and for short-term transient use. We will not use or disclose your sensitive personal information for any purpose other than those specified without your consent. We provide detailed information about your rights under the CCPA in Section 11 of this policy.
We may share your personal information with third parties in certain circumstances, but only when it is necessary for the purposes described in this Privacy Policy and in compliance with applicable law. We do not sell your personal information to third parties for their own marketing purposes without your explicit consent, except as permitted under the CCPA and similar laws for cross-context behavioral advertising, where you have the right to opt out. The categories of third parties with whom we may share your information include: (a) Service Providers: We engage trusted third-party companies and individuals to perform functions on our behalf, such as payment processing, order fulfillment, shipping, hosting, data analytics, email delivery, customer support, marketing, and security. These service providers are contractually bound to use your information only for the purposes of providing services to us and are prohibited from using it for their own purposes. We require them to implement appropriate technical and organizational measures to protect your data and to comply with all applicable data protection laws. Examples of service providers include payment gateways like Stripe and PayPal, shipping carriers like FedEx and DHL, cloud hosting providers like AWS and Alibaba Cloud, and analytics providers like Google Analytics.
(b) Business Partners: We may share your information with trusted business partners with whom we jointly offer products or services, or who provide complementary services. For example, if you purchase a product from our website that is fulfilled by a third-party partner, we may share your order details with that partner to facilitate delivery. We may also share information with partners for co-marketing activities, but only with your consent where required. We ensure that our business partners adhere to privacy standards that are at least as stringent as our own, and we enter into data processing agreements with them to govern the handling of your data. (c) Affiliates: We may share your information with our parent company, subsidiaries, joint ventures, or other companies under common control (collectively, "Affiliates"). We require our Affiliates to honor this Privacy Policy and to use your information only for the purposes described herein. If we undergo a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or control of your personal information, and we will ensure that the acquiring entity agrees to be bound by this Privacy Policy or a substantially similar policy.
(d) Legal and Regulatory Authorities: We may disclose your information to law enforcement, government agencies, courts, or other regulatory bodies when we believe in good faith that such disclosure is necessary to comply with a legal obligation, court order, subpoena, warrant, or other legal process; to protect our rights, property, or safety, or the rights, property, or safety of our users or others; to detect, prevent, or address fraud, security, or technical issues; or to enforce our Terms of Service or other agreements. We will make reasonable efforts to notify you of such disclosure unless prohibited by law or if doing so would compromise the purpose of the disclosure. (e) Public Forums: If you post information in public areas of our Service, such as product reviews, comments, or forum posts, that information may be viewed, collected, and used by other users and the public. We are not responsible for the privacy practices of third parties who may access such information, and we encourage you to exercise caution when sharing personal information in public forums. (f) With Your Consent: We may share your information with third parties for any other purpose with your explicit consent. We will obtain your consent before sharing your sensitive personal information or using your information for a purpose that is materially different from the purposes for which it was originally collected.
Your personal information may be transferred to, stored, and processed in countries other than your own, including but not limited to China, the United States, the European Union, and other jurisdictions where we or our service providers operate. The laws governing data protection in these countries may differ from the laws in your country of residence. However, we have implemented appropriate safeguards to ensure that your personal information receives an adequate level of protection wherever it is processed, in compliance with applicable data protection laws. For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we ensure that transfers of personal information to countries that have not been deemed to provide an adequate level of data protection are governed by standard contractual clauses (SCCs) approved by the European Commission, or other equivalent transfer mechanisms recognized under the GDPR. We have entered into SCCs with our service providers and affiliates to ensure that your data is protected to the same standard as within the EEA. You can request a copy of these SCCs by contacting us at info@jiuzhi.lol.
For users in China, we comply with the Personal Information Protection Law (PIPL) regarding cross-border data transfers. We will conduct a personal information protection impact assessment before transferring your data outside of China, and we will obtain your separate consent where required by law. We will also enter into contracts with the overseas recipients to ensure that they provide a level of protection that is at least equivalent to that required under the PIPL. We will inform you of the name and contact information of the overseas recipient, the purpose and method of processing, the types of personal information transferred, and the rights you have under the PIPL. We will also take measures to ensure that the overseas recipient does not further transfer your personal information to a third party without your consent. If we become aware that the overseas recipient has violated the PIPL or the terms of our contract, we will take immediate action to stop the violation and hold the recipient accountable.
We also comply with the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system, which provides a framework for the protection of personal information transferred among participating economies. We have implemented policies and procedures to ensure that your data is protected in accordance with the APEC CBPR principles, including accountability, notice, choice, collection limitation, use limitation, access and correction, security, and onward transfer. We are committed to resolving any complaints about our collection or use of your personal information. Individuals with inquiries or complaints regarding our privacy practices should first contact us at info@jiuzhi.lol. We will respond to your complaint within a reasonable timeframe. If we are unable to resolve your complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We will cooperate with applicable data protection authorities to resolve any disputes regarding the transfer of your personal information.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. The specific retention periods vary depending on the type of data and the context in which it was collected. For example, we retain your account information (such as your name, email address, and profile data) for as long as your account is active, and for a reasonable period thereafter to allow you to reactivate your account or to comply with legal obligations. If you close your account, we will delete or anonymize your personal information within a reasonable timeframe, unless we need to retain it for legitimate business purposes (such as fraud prevention, dispute resolution, or legal compliance) or as permitted by law. Transaction data (such as order history and payment records) is retained for at least the period required by tax and accounting laws, which is typically 5 to 7 years depending on the jurisdiction. We may retain aggregated or anonymized data indefinitely for analytical and business purposes, but such data will no longer be linked to your identity.
We also retain communications data, such as emails, chat transcripts, and call recordings, for a period of up to 3 years from the date of the communication, unless a longer retention period is necessary for legal or regulatory purposes. This allows us to maintain a record of our interactions with you for quality assurance, training, and dispute resolution. We retain marketing and preference data for as long as you remain subscribed to our communications, and we will delete or anonymize this data within a reasonable period after you unsubscribe. We retain technical data, such as logs and analytics, for a period of up to 26 months, after which it is aggregated or deleted. We periodically review our retention practices to ensure that we are not holding data longer than necessary, and we have implemented automated processes to delete or anonymize data that has reached the end of its retention period. In all cases, we ensure that data is securely disposed of when no longer needed, using methods such as secure deletion, shredding, or anonymization.
In some circumstances, we may be required to retain your personal information for longer periods due to legal, regulatory, or contractual obligations. For example, we may need to retain data to comply with a court order, to respond to a government investigation, or to defend against legal claims. We will inform you if we are required to retain your data beyond the standard retention period, and we will ensure that the data is securely stored and accessed only for the purposes for which it is retained. We also retain data in backup systems for disaster recovery purposes, but such data is subject to the same retention and deletion policies as the primary data. We have implemented data retention schedules that are reviewed and updated regularly to ensure compliance with evolving legal requirements and industry best practices. If you have any questions about our data retention practices, please contact us at info@jiuzhi.lol.
We take the security of your personal information seriously and have implemented a comprehensive set of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, destruction, or loss. Our security program is designed to comply with industry standards and regulatory requirements, including ISO 27001, PCI-DSS (where applicable), and the data protection laws of the jurisdictions in which we operate. We employ a defense-in-depth approach that includes multiple layers of security controls, such as firewalls, intrusion detection and prevention systems, encryption (both in transit and at rest), access controls, authentication mechanisms, and regular security audits and penetration testing. We use Transport Layer Security (TLS) 1.2 or higher to encrypt all data transmitted between your browser and our servers, and we use AES-256 encryption for data stored on our servers. We also implement strict access controls that limit access to personal information to only those employees, contractors, and service providers who have a legitimate business need to access it, and who are bound by confidentiality obligations.
We conduct regular security awareness training for all employees and contractors to ensure they understand their responsibilities regarding data protection and are aware of common threats such as phishing, social engineering, and malware. We also maintain incident response and breach notification procedures to quickly and effectively respond to any security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant data protection authorities without undue delay, and in any case within 72 hours of becoming aware of the breach, as required by the GDPR and other applicable laws. Our notification will include a description of the nature of the breach, the categories and approximate number of data subjects and records concerned, the likely consequences of the breach, and the measures we have taken or propose to take to address the breach and mitigate its potential adverse effects. We will also provide you with advice on how to protect yourself from potential harm, such as by changing your passwords or monitoring your accounts for suspicious activity.
Despite our best efforts, no security measure is 100% effective, and we cannot guarantee the absolute security of your data. However, we are committed to continuously improving our security posture and to promptly addressing any vulnerabilities that are identified. We encourage you to take steps to protect your own data, such as using strong, unique passwords for your account, enabling two-factor authentication if available, keeping your software and devices up to date, and being cautious about phishing attempts. If you have any questions about the security of our Service, or if you suspect that your data has been compromised, please contact us immediately at info@jiuzhi.lol. We will investigate your concerns and take appropriate action. We also maintain cyber liability insurance to cover costs associated with data breaches, including notification, credit monitoring, and legal defense. Our security program is reviewed and updated on a regular basis to address emerging threats and to incorporate new technologies and best practices.
Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to enabling you to exercise these rights and to responding to your requests in a timely and transparent manner. The rights available to you include, but are not limited to: (a) Right of Access: You have the right to request confirmation of whether we process your personal information, and if so, to access that information along with details about the purposes of processing, the categories of data processed, the recipients or categories of recipients, the retention period, and the source of the data. We will provide you with a copy of the personal information we hold about you in a commonly used, machine-readable format. (b) Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will make the correction promptly and notify any third parties with whom we have shared your data, where possible. (c) Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw your consent and there is no other legal basis for processing, when you object to processing and there are no overriding legitimate grounds, when the data has been unlawfully processed, or when deletion is required by law. We will assess your request and delete the data unless we have a legal obligation or legitimate interest to retain it.
(d) Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data (for a period enabling us to verify its accuracy), when the processing is unlawful and you oppose erasure and request restriction instead, when we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or when you have objected to processing pending verification of whether our legitimate grounds override yours. When processing is restricted, we will store the data but not process it further, except with your consent or for legal purposes. (e) Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance, where the processing is based on consent or contract and is carried out by automated means. We will provide the data directly to you or, where technically feasible, to the third party you designate. (f) Right to Object: You have the right to object to the processing of your personal information based on our legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You also have the right to object to processing for direct marketing purposes at any time, and we will comply without undue delay.
(g) Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into or performing a contract, is authorized by law, or is based on your explicit consent. In such cases, we will implement suitable measures to safeguard your rights, including the right to obtain human intervention, to express your point of view, and to contest the decision. (h) Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw consent by adjusting your account settings, unsubscribing from communications, or contacting us directly. (i) Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority in your jurisdiction if you believe that our processing of your personal information violates applicable law. We encourage you to contact us first so that we can attempt to resolve your concerns directly.
For users in California, the CCPA and CPRA provide additional rights, including: (a) Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting or selling the information, and the categories of third parties with whom we share the information. (b) Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. (c) Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information for monetary consideration, but we may share it for targeted advertising purposes. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link on our website or by contacting us. (d) Right to Correct: You have the right to request that we correct inaccurate personal information that we hold about you. (e) Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of your sensitive personal information to that which is necessary to perform the Service or as otherwise permitted by law. We will not use your sensitive personal information for any other purpose without your consent. (f) Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, such as by denying you goods or services, charging different prices, or providing a different level of quality. To exercise your rights, please submit a verifiable request to us at info@jiuzhi.lol. We will respond to your request within 45 days (or up to 90 days with notice) for CCPA requests, and within one month (or up to two months for complex requests) for GDPR requests. We may need to verify your identity before processing your request, and we may ask you to provide additional information to confirm your identity. We will only use the information provided in your request to verify your identity and to process the request.
Our Service is not intended for children under the age of 13 (or under the age of 16 in certain jurisdictions, such as the European Union and China), and we do not knowingly collect personal information from children without verifiable parental consent. If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at info@jiuzhi.lol. We will take steps to delete such information from our records as soon as possible. We define a child as any individual under the age of 13, or under the age of 16 in jurisdictions where that is the applicable age of digital consent, or under the age of majority as defined by local law. We comply with the Children's Online Privacy Protection Act (COPPA) in the United States, the GDPR provisions regarding child consent, and the PIPL provisions regarding the processing of minors' personal information. We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary to participate in that activity.
In the event that we need to collect personal information from a child for a specific purpose (such as to provide a service that is directed at children with parental consent), we will obtain verifiable parental consent before collecting, using, or disclosing such information. Methods of obtaining verifiable parental consent may include: providing a consent form to be signed by the parent and returned by mail, fax, or electronic scan; requiring the parent to use a credit card or other payment method for verification; having the parent call a toll-free telephone number staffed by trained personnel; having the parent connect via video conference; or using a government-issued ID for verification. We will provide parents with notice of our information practices with respect to children, including the types of information we collect, how we use it, and our disclosure practices. Parents have the right to review their child's personal information, to request that we delete it, and to refuse to permit further collection or use of their child's information. We will honor such requests and will not condition a child's participation in an activity on the disclosure of more information than is reasonably necessary.
We also comply with the PIPL's requirements regarding the processing of minors' personal information. Under the PIPL, we will obtain the consent of a minor's parent or guardian before processing the personal information of a minor under the age of 14. We will also establish special rules for the protection of minors' personal information, including designating a dedicated person to be responsible for the protection of such information, implementing stricter security measures, and conducting privacy impact assessments for processing activities that involve minors' data. We will not use minors' personal information for marketing or profiling purposes without parental consent. If we discover that we have inadvertently collected personal information from a child without proper consent, we will take immediate steps to delete that information and to notify the parent or guardian. We encourage parents and guardians to monitor their children's online activities and to educate them about the importance of protecting their privacy. If you have any concerns about our practices regarding children's privacy, please contact us at info@jiuzhi.lol.
Our Service may contain links to third-party websites, applications, plugins, or services that are not owned or controlled by us. This includes links to social media platforms (such as Facebook, Instagram, Twitter, and LinkedIn), payment processors (such as Stripe, PayPal, and Alipay), shipping carriers (such as FedEx, DHL, and UPS), analytics providers (such as Google Analytics and Hotjar), advertising networks (such as Google Ads and Facebook Ads), and other third-party services. We also integrate third-party APIs and SDKs into our Service to provide features such as social login, content sharing, and customer support chat. We are not responsible for the privacy practices or content of these third-party services, and we encourage you to review their privacy policies and terms of service before providing them with any personal information. The inclusion of a link to a third-party service does not imply endorsement or affiliation with that service.
When you interact with third-party services through our Service, you may be providing information directly to those third parties, and their collection, use, and disclosure of your information will be governed by their own privacy policies. For example, if you use the "Like" button on Facebook while on our website, Facebook may collect information about your interaction, subject to your Facebook privacy settings. Similarly, if you make a payment through our website, your payment card details will be processed by our payment gateway provider, and we will not have access to your full card number. We may receive certain information from these third parties, such as your name and email address if you log in using social media, but we will only use such information in accordance with this Privacy Policy. We also use third-party analytics services to collect and analyze information about how you use our Service. These analytics providers may use cookies and other tracking technologies to collect data about your online activities over time and across different websites. We do not control these third-party tracking technologies, and their use is subject to their own privacy policies.
We also use third-party advertising networks to display advertisements on our Service and on other websites. These advertising networks may use cookies, web beacons, and other tracking technologies to collect information about your browsing behavior in order to deliver targeted advertisements that are relevant to your interests. This practice is known as interest-based advertising or online behavioral advertising. You can opt out of interest-based advertising from many ad networks through the Digital Advertising Alliance's (DAA) opt-out tool (https://optout.aboutads.info) or the Network Advertising Initiative's (NAI) opt-out tool (https://optout.networkadvertising.org). You can also adjust your browser settings to block or delete cookies, but this may affect the functionality of our Service. We are not responsible for the effectiveness of these opt-out mechanisms. We also use third-party customer support platforms, such as Zendesk or Intercom, to manage our communications with you. These platforms may collect information about your interactions with our support team, including chat transcripts and email correspondence. We ensure that our contracts with these third-party service providers include data protection obligations that are consistent with this Privacy Policy.
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date, and by sending you an email notification (if we have your email address) or by displaying a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Service after the effective date of any changes constitutes your acceptance of the updated policy. If we make material changes that affect your rights or require your consent, we will obtain your consent before implementing those changes, where required by law.
Material changes may include, but are not limited to: changes in the types of personal information we collect; changes in the purposes for which we use your information; changes in the third parties with whom we share your information; changes in our data retention practices; changes in our security measures; changes in your rights; and changes in our contact information. We will provide you with a clear and conspicuous notice of such changes, and we will give you a reasonable period to review the changes before they become effective. If you do not agree with the changes, you may close your account and stop using our Service. We will also update our internal policies and procedures to reflect any changes to this Privacy Policy, and we will ensure that our employees and service providers are informed of and comply with the updated policy. We maintain a version history of this Privacy Policy, and you can request a copy of previous versions by contacting us at info@jiuzhi.lol.
We are committed to transparency and accountability in our data practices. If we become aware of any significant changes in the legal or regulatory landscape that affect our privacy practices, we will proactively update this policy and communicate with you as appropriate. We also conduct periodic reviews of our privacy program to ensure that it remains effective and compliant with applicable laws. If you have any questions or concerns about changes to this Privacy Policy, please contact us at info@jiuzhi.lol. We value your trust and are dedicated to protecting your privacy.
If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We have designated a Data Protection Officer (DPO) who is responsible for overseeing our compliance with data protection laws and for handling your privacy-related inquiries. You can reach our DPO and our privacy team using the following contact details:
Company Name: 枝江市旧只商贸有限公司 (Jiu Zhi)
Developer: Jiu Zhi
Address: 枝江市董市镇大横街一巷3号二楼(自主申报), Yichang - 443000, China (CN)
Email: info@jiuzhi.lol
Phone: +1 (351) 235-3396
Website: https://www.jiuzhi.lol
We will acknowledge receipt of your inquiry within 5 business days and will respond to your request within 30 days, or within the timeframe required by applicable law. If we need additional time to process your request, we will inform you of the reason and the expected extension period. We may ask you to verify your identity before processing certain requests, such as access or deletion requests, to ensure that we are not disclosing your information to an unauthorized person. We will only use the information you provide in your request to verify your identity and to process the request. We will not discriminate against you for exercising your privacy rights.
If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority. A list of EEA data protection authorities and their contact details can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en. If you are located in the United Kingdom, you can lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk. If you are located in China, you can lodge a complaint with the Cyberspace Administration of China (CAC) or other relevant authorities. If you are located in California, you can contact the California Attorney General's office at https://oag.ca.gov. We encourage you to contact us first so that we can attempt to resolve your concerns directly and amicably. We are committed to working with you to achieve a fair resolution of any privacy-related issues. Thank you for trusting Jiu Zhi with your personal information.