Privacy Policy

内蒙古优讯通讯有限责任公司 ("we", "us") operates the uxtrade.net website and its companion WeChat Mini Program. This policy explains what information we collect while providing low-voltage security and communications system integration services, why we collect it, how we store and share it, and how you can exercise your rights.

Key points

• We collect information only to the extent necessary to provide enquiries, quotations, repair requests, accounts and content services.
• Contact details you submit are used to respond to your request; account details are used for sign-in and to let you view your own quotations.
• Some content is processed by third parties: text AI processing uses DeepSeek, image generation uses Alibaba Cloud Tongyi (Qwen) models, sign-in and phone-number verification use WeChat, asset storage uses Qiniu Cloud object storage, and quotation emails are sent through an SMTP mail service.
• We do not sell your personal information and do not provide it to third parties except as described in this policy or required by law.
• You may request access, correction or deletion of your information, and may ask us to close your account; channels and timelines are in Sections 9 and 11.

1. Scope and effective date

This policy applies to the uxtrade.net website (including mobile web pages and shared quotation pages) and to the "优讯通讯" WeChat Mini Program.

This policy takes effect on 2026-09-01; the current version is 1.0. We may update this policy for business or legal reasons, as described in Section 12.

2. What we collect and how

We collect the minimum necessary for the service, in the nine categories below. Each category corresponds to a feature that actually exists on this site.

2.1 Website account information (provided by you)

When you register on uxtrade.net we collect: name, mobile number, email address and password. Passwords are stored as an irreversible hash; we do not keep and cannot recover your plaintext password.

When you sign in, we verify the email and password hash and issue a sign-in credential (cookie) to your browser so the server can recognise your session.

• Purpose: create the account, authenticate sign-in, pre-fill your contact details on enquiry forms, and let you view quotations issued to you.
• If you do not provide it: you cannot register or sign in, but you may still browse the site anonymously and submit an enquiry.

2.2 Enquiry and contact forms (provided by you; anonymous submission allowed)

The "Contact us / Get a quote" form collects: name (required), telephone (required), email (optional), company name (optional) and a free-text description of your requirement (optional). The form also contains a human-invisible "honeypot" field used only to detect automated spam; normal users never fill it in.

If you are signed in, the form tries to pre-fill your name, phone and email from your account.

• Purpose: contact you, understand your requirement, generate a quotation number and follow up.
• Please note: do not enter sensitive personal information unrelated to the business (such as ID numbers, bank card numbers or health information) in the requirement field.

2.3 Quotations, contracts and share links

To issue a quotation or contract we record in our business system: customer name, contact telephone, email, company name, project or requirement description, plus line items, amounts and terms text.

When a quotation or contract is sent to you as a share link, that link carries a random share token. Anyone holding the link can view the content, so please do not forward it to unrelated parties. Sharing can be disabled.

• Purpose: issue quotations and contracts, reconcile accounts, provide after-sales service and warranty traceability.

2.4 Repair requests, online consultation and Mini Program enquiries

Online repair request: the equipment and fault description you submit, contact person, telephone, and the random token link used to access that repair ticket.

Online consultation: the nickname and message content you enter in the web chat window. When a new consultation arrives we send an internal alert to our support staff through WeCom.

WeChat Mini Program enquiry: to keep enquiries traceable, submitting an enquiry inside the Mini Program requires sign-in; the enquiry record is linked to your Mini Program account and its source is noted in the requirement description.

• Purpose: accept repair requests, track tickets, answer consultations and process enquiries.

2.5 WeChat Mini Program account information (with your authorisation)

When you sign in inside the Mini Program, WeChat returns a random user identifier (openid) that is isolated per Mini Program; we use it to create your Mini Program account. If you use the WeChat nickname and avatar capabilities, we store the nickname and avatar address you confirm and submit.

When you tap "Get phone number" and complete WeChat's quick phone verification, we receive and store your mobile number. Whether to authorise this is your choice; declining does not affect browsing or online consultation.

The Mini Program sign-in credential is stored in your device's local storage so you do not need to sign in again next time; signing out clears that credential.

• Purpose: identify you inside the Mini Program, attribute enquiries and repair requests, contact you after sales, and display account information.
• If you do not provide it: you cannot submit enquiries or repair requests inside the Mini Program, nor synchronise account information.

2.6 Images and files you upload

Images and files you provide when changing your avatar or communicating with us (for example photos of a fault site or drawings) are uploaded and stored in our object storage for support communication, quotation and after-sales purposes.

Please do not upload sensitive personal information unrelated to the business, or information belonging to others.

• Purpose: fault diagnosis, confirming a solution, and after-sales records.

2.7 Access logs (collected automatically)

To keep the site available and secure (detecting attacks, scraping and abnormal access) and to produce rough statistics on traffic sources, our servers automatically record access logs containing: IP address, request path and query parameters, request method, browser/device identifier (User-Agent), referring page (Referer) and the time of access.

We use the IP address for coarse location resolution (country, province, city, ISP) to judge the visitor's region and apply security policy (for example blocking malicious IPs).

The admin console has a separate visitor statistics module used to review traffic trends; it is not used for advertising or cross-site tracking.

• Purpose: security and rate limiting (per-IP anti-abuse limits), rough traffic statistics, and judging the visitor's region.

2.8 Article view counting (de-identified)

To count genuine reads of news articles and avoid double counting, we compute a salted hash (SHA-256) of the visitor's IP and keep only the first 16 characters as a de-identified marker, used to decide whether the same person has already been counted. We do not retain plaintext IP addresses for counting purposes.

The browser also stores a per-article "already counted" flag in session storage to avoid repeated reporting within a page.

• Purpose: content popularity statistics.

2.9 Cookies and local storage

We use a small number of necessary cookies and browser storage entries. There are no third-party advertising or cross-site tracking SDKs.

• Language preference cookie (yx_locale): remembers the interface language you chose; valid for about one year.
• Sign-in cookie: the session credential for website accounts and Mini Program sessions, used to keep you signed in; it becomes invalid after sign-out.
• Session storage (sessionStorage): temporary state such as whether this article has been counted in the current session; it disappears when the tab is closed.
• Local storage (localStorage): used only in the admin console to keep unsaved editing drafts; not used on the public site.
• You can clear or block cookies in your browser settings. After clearing or blocking, the language preference and sign-in state must be set again; other browsing features are unaffected.

For visitors outside mainland China: on your first visit a cookie and privacy notice appears at the bottom of the page, where you can choose "Accept" or "Necessary only". Your choice is stored locally in your browser and can be cleared at any time.

3. How we use the information and when we share it

We use information to: respond to enquiries and consultations, issue quotations and contracts, accept and track repair requests, authenticate accounts, provide after-sales service and warranty, keep the site secure and prevent abuse, produce content popularity statistics, and comply with legal obligations (such as filing records and cooperating with lawful investigations).

We do not use your personal information for automated decision-making that produces significant effects for you (such as automated price discrimination or automated refusal of service).

3.1 We do not sell personal information

We do not sell your personal information and do not share it for third-party advertising. We provide it to third parties only: with your consent; where a necessary service listed in this policy is performed by a processor (see 3.2); or where required by law or by a judicial or administrative authority acting through lawful procedure.

3.2 Third-party processors and sharing list (actual data flows)

The list below covers the third parties currently integrated into this site and the data they process. Each "trigger" occurs only when that feature is actually used; it does not happen on every visit.

• Text AI processing · DeepSeek (api.deepseek.com): data processed is the text submitted to generate or translate quotation copy, organise product documentation, and produce article and image prompts; this may include your project and requirement description, company name, product names and specifications. Trigger: when we generate quotation or article drafts internally, or when you ask us to translate a quotation into another language.
• Image AI processing · Alibaba Cloud Tongyi series (DashScope, dashscope.aliyuncs.com, including Qwen-Image and Wanx): data processed is the text prompt submitted for image generation; prompts are produced by the text model from internal material and normally contain no contact details. Trigger: when we generate website or article images.
• WeChat authorisation and phone verification · Tencent WeChat: data processed is the sign-in code, openid, the nickname and avatar you authorise, the mobile number returned by quick phone verification, and the current page URL required for WeChat JS-SDK signing. Trigger: when you sign in inside the Mini Program, authorise your phone number, or use WeChat sharing.
• Asset object storage and delivery · Qiniu Cloud (qiniu.com): data processed is the image, audio/video and text asset files we upload, including photos and avatars you provide. Trigger: when assets are uploaded or displayed.
• Email delivery · our configured SMTP mail provider: data processed is the recipient address, subject, and the body and attachments of quotations or contracts. Trigger: when we send you a quotation, contract or notice by email.
• IP geolocation · IP location query services and a local IP database: data processed is the visitor's IP address (to look up country, province, city and ISP). Trigger: when an access log entry is recorded.
• Front-end script loading · Tencent (WeChat JS-SDK at res.wx.qq.com): the script runs when the page loads and may obtain ordinary browser information and your IP address; we use its capabilities only for in-WeChat sharing.
• WeCom notification · Tencent WeCom: when a new online consultation arrives we send an internal alert to our support staff through WeCom (the alert is the consultation event, not the full conversation). Trigger: when a new consultation session starts.

We have not integrated any third-party advertising or cross-site behavioural tracking SDK. If we add third-party services in future, we will update this policy and list them here.

4. More about cookies and similar technologies (for visitors outside mainland China)

This site serves visitors in mainland China and abroad. By default we use only the technical means necessary to provide the service, and we do not deploy advertising trackers before you make a choice.

On your first visit a notice bar appears at the bottom of the page explaining that we use necessary cookies and local storage. You can choose "Accept" or "Necessary only"; the choice is recorded locally in your browser. If you choose "Necessary only", functional cookies (language, sign-in) are still used as needed, because they are a prerequisite for providing the service.

5. Where information is stored

The website, admin console and business database are deployed on servers we manage; the primary database is a relational database.

Static assets (images, audio/video, text assets) are stored in Qiniu Cloud object storage; if Qiniu is not available the system automatically falls back to a local directory on the server.

When overseas third-party AI services are used, or when visitors outside mainland China access the service, the relevant requests may involve cross-border transfer. We carry out such transfers in compliance with applicable legal requirements.

6. Retention periods

We retain information for the shortest period necessary for the purpose (or longer where the law requires).

• Enquiries, quotations, contracts and correspondence: during the service relationship and for 3 years afterwards (after-sales, warranty and reconciliation).
• Account information: while the account exists; after you close it, as described in Section 9.
• Mini Program account information (openid, nickname, avatar, phone): while the account exists; deleted or anonymised after closure.
• Access logs (including IP): no longer than 6 months, then deleted or aggregated into IP-free statistics.
• De-identified article view markers: no longer than 12 months.
• Repair records: 1 year after the warranty period ends.

After these periods we delete or anonymise the information so that it can no longer identify you.

7. How we protect information

We apply measures proportionate to the risk: passwords are stored as hashes; the admin console and user-facing interfaces are separated and access-controlled; administrative endpoints verify request origin to reduce cross-site request forgery risk; sign-in, registration, enquiry and phone-binding endpoints are rate limited against abuse; and malicious IPs can be blocked.

We do not promise absolute security under all circumstances. There is no zero-risk method of transmitting or storing data over the internet; please keep your account password safe and avoid sending sensitive information through public channels.

If a personal information security incident occurs, we will take remedial action promptly as required by law and, where necessary, inform you through a site notice or your registered contact details of the basic facts, possible impact, measures taken and steps you can take to protect yourself.

8. Your rights

Within the scope of applicable law you have the following rights over your personal information. We may verify your identity first so that information is not disclosed to someone else.

• Access and copy: you can view the name, email and phone in your account on the account page; other records can be requested by email.
• Correct and complete: account information can be changed by you or corrected through our support channel; please contact us to correct errors in business records.
• Delete: you may ask us to delete information where the purpose has been fulfilled, you have withdrawn consent, or we processed it unlawfully.
• Withdraw consent: you may withdraw phone-number or WeChat authorisation at any time; withdrawal does not affect processing already carried out on the basis of consent.
• Close your account: see Section 9.
• Object or restrict: to the extent applicable law allows, you may ask us to restrict our processing of your information.
• Explanation and complaint: you may ask us to explain this policy, and may complain through the channels in Section 11.

9. Account closure and data deletion (channels and timelines)

Website account: there is currently no self-service closure button on the website. Please send a closure request from your registered email address to sales@uxtrade.cn with the subject "Account closure". After verifying your identity we will process it, normally within 15 working days, and reply by email.

WeChat Mini Program account: self-service closure is not yet available inside the Mini Program. Please contact our support channel (telephone 0471-3683776, email sales@uxtrade.cn); after verification we will delete or anonymise your Mini Program account information (openid, nickname, avatar, phone number).

Consequences of closure: you will no longer be able to sign in, and unfinished matters linked to the account (such as an enquiry or repair request in progress) may no longer be viewable online. To comply with legal obligations, handle disputes or maintain security, we may retain a minimal necessary record (for example a concluded contract, or logs we must keep by law); retention periods are in Section 6.

Data export: self-service export is not yet available. You can request it by email from your registered address; we will provide your account information and the quotation records in your name in a commonly readable format. Parts involving other people's information or trade secrets cannot be provided.

We state the position honestly: there is currently no "one-click closure" or "one-click export" button on the site, and the channels above are the only available route. We will add in-page entries once the capability is in place.

10. Protection of minors

Our services are aimed at business customers and adult individual users; minors are not our target users.

If you are under 18, please use this service with the consent and guidance of a guardian; if you are under 14, a guardian must submit information or operate the account on your behalf.

If we discover that we have collected a child's personal information without verifiable guardian consent, we will delete the relevant data as soon as possible. Guardians may request deletion through the channels in Section 11.

11. How to contact us

For personal information matters (access, correction, deletion, closure, complaints, or an explanation of this policy), please contact:

• Entity: 内蒙古优讯通讯有限责任公司
• Privacy and legal email: sales@uxtrade.cn
• Complaint and report email: sales@uxtrade.cn
• Telephone: 0471-3683776
• Address: Hohhot, Inner Mongolia, China
• Website filing: 蒙ICP备2026005797号-2

We verify identity first after receiving a request and normally reply within 15 working days; if the matter is complex and needs more time, we will tell you why and give an expected timeframe.

12. Updates to this policy

We may update this policy. When we do, we will change the version number and effective date shown on this page.

For material changes — such as a wider collection scope, a change in the parties we share with, or a change in how you exercise your rights — we will give advance notice through a prominent notice on the site and, where necessary, seek your consent again.

Current version: 1.0; effective date: 2026-09-01.

13. Language versions and status

This policy is available in Simplified Chinese, English, Russian and Mongolian. If a translation conflicts with the Simplified Chinese version, the Simplified Chinese version prevails.

This text is an engineering-level compliance draft that describes the system's actual data processing. We recommend legal review before it is treated as the final public text.

Appendix: Common Legal Terms (applying to all agreements and policies on this site)

This appendix contains the common terms of our Privacy Policy, Cookie Policy, Terms of Service, Disclaimer, Acceptable Use Policy, Intellectual Property and Trademark Notice, Children's Privacy Notice, Data Subject Rights and Account Closure Notice, Report and Infringement Complaints page and Accessibility Statement. It is displayed together with each of those documents.

Appendix 1. Identity and contact details of the controller

• Personal information handler (data controller): 内蒙古优讯通讯有限责任公司
• Registered address: Hohhot, Inner Mongolia, China
• Website: uxtrade.net
• General business contact: sales@uxtrade.cn; 0471-3683776
• Dedicated privacy and legal affairs mailbox: sales@uxtrade.cn
• Reports and infringement complaints: sales@uxtrade.cn; 0471-3683776
• Website filing (ICP): 蒙ICP备2026005797号-2

For the processing activities described in these documents, we are the "personal information handler" within the meaning of the Personal Information Protection Law of the People's Republic of China and the "controller" within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR).

Our main establishment is in the territory of the People's Republic of China. If applicable foreign law requires us to appoint a local representative (for example under Article 27 GDPR) or a data protection officer, we will make that appointment in accordance with the law and publish it on this page. Until such an appointment is made, you may contact us directly at sales@uxtrade.cn and we will handle your request ourselves.

Appendix 2. Processing activities, categories of data and legal bases

The list below sets out the processing activities we actually carry out, the categories of data involved and the corresponding legal bases (Article 6(1) GDPR).

• Account registration and sign-in — Data: name, mobile number, email address, password hash, session identifier. Legal basis: necessary for the performance of the service contract you request (Article 6(1)(b)); protecting account and system security is our legitimate interest (Article 6(1)(f)).
• Quotation and contact forms — Data: name, telephone number, email address, company name, description of requirements. Legal basis: necessary to take steps at your request prior to entering into a contract (Article 6(1)(b)). The form also contains a hidden "honeypot" field that only detects automated spam submissions; genuine visitors never fill it in and it is not your personal data.
• Quotations, contracts and after-sales reconciliation — Data: customer name, contact telephone, email address, company name, project or requirement description, quotation line items and amounts, share token. Legal basis: performance of a contract (Article 6(1)(b)); after-sales and warranty traceability is our legitimate interest (Article 6(1)(f)).
• Online repair requests and online enquiries — Data: contact person, telephone number, equipment and fault description, enquiry nickname and message content. Legal basis: performance of a contract or steps taken at your request (Article 6(1)(b)).
• WeChat Mini Program sign-in, nickname/avatar and mobile number authorisation — Data: sign-in code, openid, the nickname and avatar URL you confirm, mobile number. Legal basis: your consent (Article 6(1)(a)). You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.
• Sending quotations and contracts by email — Data: recipient email address, subject line, body and attachments. Legal basis: performance of a contract (Article 6(1)(b)).
• Access logs and security protection — Data: IP address, request path and query parameters, request method, User-Agent, referrer, access time, and coarse IP-derived country, province/city and network operator. Legal basis: safeguarding service and network security and preventing attacks and abuse is our legitimate interest (Article 6(1)(f)); it also falls within the grounds permitted under Article 13 of the Personal Information Protection Law of the People's Republic of China, as further specified by Chinese law.
• Article popularity statistics (de-identified) — Data: a de-identified identifier consisting of the first 16 characters of a salted hash of the visitor's IP address. Legal basis: measuring content popularity is our legitimate interest (Article 6(1)(f)). The identifier contains no plaintext IP address and is not linked to any account.
• Content and asset management — Data: articles, product information, cases and illustrations that we write, photograph, generate or use under licence (some illustrations are generated by AI from text prompts). Legal basis: performance of a contract and our freedom to conduct business (Article 6(1)(b) and (f)).
• Compliance with legal obligations — Data: the minimum scope required by the competent authorities (filing information, material lawfully requested). Legal basis: legal obligation (Article 6(1)(c)).
• Handling reports and infringement complaints — Data: complainant identity and contact details, evidence of rights, URL of the content complained about. Legal basis: legal obligation and our legitimate interests (Article 6(1)(c) and (f)).

If we later introduce non-essential cookies or marketing communications, we will obtain your consent first and list them here. We do not subject you to automated decision-making that produces legal effects or similarly significantly affects you (for example automated price discrimination or automated refusal of service).

Appendix 3. Processors and third-party recipients

We engage the following third parties on a data-minimisation basis. They process data on our instructions and act as processors within the meaning of Article 28 GDPR. Each "purpose" arises only when the relevant function is actually used; it does not occur on every visit.

• Qiniu Cloud (object storage and content delivery): processes images, audio/video and text asset files, including avatars and on-site fault photographs that you upload. Purpose: asset storage and accelerated delivery.
• DeepSeek (api.deepseek.com; text generation and translation): processes text we submit, which may include quotation copy, product information, article drafts and image prompts, together with the project and requirement descriptions, company names and product specifications contained in them. Purpose: text generation, material drafting and multilingual translation.
• Alibaba Cloud Tongyi Qianwen / DashScope (including Qwen-Image and Tongyi Wanxiang; image generation): processes the text prompts we submit. Purpose: generating illustrations for the website and articles. Prompts are normally produced by a text model from internal material and generally do not contain your contact details.
• Tencent WeChat (Mini Program sign-in, fast mobile number verification, JS-SDK sharing): processes the sign-in code, openid, the nickname and avatar you authorise, the result of fast mobile number verification and the current page URL required for JS-SDK signatures. Purpose: identity within the Mini Program and sharing capabilities inside WeChat.
• Tencent WeCom (internal customer-service alerts): processes an event notification when a new online enquiry arrives (it does not contain the full conversation). Purpose: enabling our staff to respond promptly.
• The SMTP email service provider we configure (email delivery): processes the recipient address, subject line, and the body and attachments of quotations or contracts. Purpose: sending you quotations, contracts and notices.
• IP geolocation services (ipapi.co, ip-api.com) and a local IP database (ip2region): process the visitor's IP address, or country and region information derived from it. Purpose: identifying the region of origin, selecting the site language and applying security policies.
• CDN / reverse proxy and server hosting services: host the website, database and backups and process access request logs. Purpose: providing network connectivity, availability and disaster recovery.

Apart from the processors listed above, situations where you have given consent, and situations required by laws or by a lawful request of a judicial or administrative authority, we do not provide your personal information to any third party. We do not sell your personal information and we do not share it for third-party advertising purposes. We have not integrated any third-party advertising or cross-site behavioural tracking SDK.

Appendix 4. Cross-border transfers

• Your personal information is primarily stored and processed on servers located in the territory of the People's Republic of China; static assets are stored in a domestic object storage service (Qiniu Cloud).
• If you access or use our services from outside China, your personal information will be transferred to and processed in China. Such transfers are subject to Article 44 et seq. GDPR. We implement contractual and organisational safeguards for those transfers in accordance with applicable law and will put in place the required transfer mechanisms where the law so requires.
• Where we use service providers outside China to process text or prompts, the relevant text is transferred to those providers' systems. We submit only the text necessary for the processing purpose and seek to avoid submitting sensitive personal information unrelated to our business.
• Because using our services necessarily involves transferring data to China, please do not submit personal information if the law of your jurisdiction does not permit such a transfer. You may still browse the public content anonymously.

Appendix 5. Retention periods

• Account information (website membership and WeChat Mini Program): for as long as the account exists; deleted or anonymised after account closure.
• Enquiries, quotations, contracts and correspondence: for the duration of the service relationship and for 3 years afterwards (needed for after-sales support, warranty, reconciliation and limitation defences).
• Repair records: 1 year after the warranty period expires.
• Access logs (including IP address, User-Agent, request path and time): no longer than 6 months, after which they are deleted or aggregated into statistics that no longer contain IP addresses.
• De-identified identifiers used for article view counting: no longer than 12 months.
• Report and infringement complaint materials: 1 year after the matter is closed, for review and dispute handling.
• Records we must keep by law (for example concluded contracts, accounting vouchers, logs that authorities require us to retain): retained for the period prescribed by law, which may be longer than the periods above.

Once a retention period expires we delete or anonymise the data so that it can no longer be linked to you. These periods reflect our current system implementation and business needs and do not exhaust every situation required by law; where a longer retention period applies to a particular item of data, we will explain the specific basis.

Appendix 6. Your rights

To the extent provided by applicable law, you have the following rights in relation to your personal information. The methods of exercise, supporting documents and response times are set out in the Data Subject Rights and Account Closure Notice.

• Information and access: to learn whether we process your information and to obtain a copy.
• Rectification: to have inaccurate or incomplete information corrected or completed.
• Erasure: to have your personal information deleted in the circumstances provided by law.
• Restriction of processing: in certain circumstances, to require us to store the data without processing it further.
• Objection: to object to processing we carry out on the basis of legitimate interests.
• Data portability: to receive the information you provided to us in a structured, commonly used, machine-readable format.
• Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Not to be subject to solely automated decision-making.
• Complaint: you have the right to lodge a complaint with the personal data protection supervisory authority in your country or region (for example a national data protection authority in the EU/EEA, the UK Information Commissioner's Office, or the Cyberspace Administration of China and its local offices). If you contact us first at sales@uxtrade.cn, we will do our best to resolve the matter directly.

Exercising these rights will not lead us to refuse you service or treat you in a discriminatory way. To protect your information, we may verify your identity before acting on a request.

Appendix 7. Security measures

We apply technical and organisational measures appropriate to the risk. The measures listed below are all actually in place on this site; we do not list measures we have not implemented.

• Encryption in transit: the site is served over HTTPS and sends HSTS (Strict-Transport-Security) together with X-Content-Type-Options, Referrer-Policy, Permissions-Policy and a report-only Content Security Policy (CSP Report-Only).
• Password protection: account passwords are stored as salted bcrypt hashes; we neither store nor can recover your plaintext password.
• Role separation: administrator and ordinary member roles are separated, and the admin interface and member interface authenticate independently. Administrative write operations validate the request origin (Origin/Referer) to reduce cross-site request forgery risk.
• Anti-abuse: sign-in, registration, enquiry and mobile number binding endpoints are rate limited; malicious IP addresses can be blocked.
• Access logging: IP address, User-Agent, request path and time are recorded for security auditing, troubleshooting and rate limiting.
• Least privilege: assets are stored in object storage with restricted access paths, and administrative accounts are limited to authorised personnel.

There is no zero-risk solution for transmission over the internet or for storage. We do not promise absolute security in all circumstances. If a personal data security incident occurs, we will take remedial measures promptly in accordance with the law and, where the law requires it, inform you by a notice on this site or through the contact details you provided, describing the nature of the incident, its possible impact, the measures taken and the steps you can take to protect yourself.

Appendix 8. Changes, effective date and version

• Current version: 1.0; effective date: 2026-09-01.
• How we notify changes: we update the version number and effective date on this page and publish them here. For material changes — such as an expansion of the scope of collection, a change in the recipients of personal information, a change in cross-border transfer arrangements, or a change in the way you can exercise your rights — we will give advance notice by a prominent notice on the site and, where necessary, ask for your consent again.
• Previous versions are available on request.

Appendix 9. Governing law and dispute resolution

• The formation, validity, interpretation and dispute resolution of the agreements and policies on this site are governed by the laws of the mainland of the People's Republic of China.
• Disputes arising out of these terms should be resolved through friendly negotiation. If negotiation fails, the dispute shall be submitted to the competent people's court at our domicile (Hohhot, Inner Mongolia Autonomous Region).
• Note for users outside China: the governing law and jurisdiction provisions above do not exclude rights that you enjoy under mandatory provisions of the law of your country or region and that cannot be excluded by agreement, including your rights as a data subject under the GDPR and your right to lodge a complaint with your local supervisory authority. Where mandatory law in your jurisdiction requires local law to apply, that law applies to the extent it is mandatorily applicable.

Appendix 10. Language versions

Our agreements and policies are available in Simplified Chinese, English, Russian and Mongolian. The Simplified Chinese version prevails. The English, Russian and Mongolian versions are reference translations provided for convenience; in the event of ambiguity, omission or inconsistency between a translation and the Simplified Chinese version, the Simplified Chinese version prevails.

The language-precedence clause is a choice of law matter and takes effect once confirmed by the company; if the company decides on a different arrangement, the wording published on this page as updated will apply.

Appendix 11. Relationship between the documents

Our Privacy Policy, Cookie Policy, Terms of Service, Disclaimer, Acceptable Use Policy, Intellectual Property and Trademark Notice, Children's Privacy Notice, Data Subject Rights and Account Closure Notice, Report and Infringement Complaints page and Accessibility Statement together constitute the entire agreement between you and us regarding your use of the platform. Each document applies to the specific matters it governs. If any document conflicts with this appendix on the identity of the controller, legal bases, processors and third-party disclosures, cross-border transfers, retention periods, data subject rights, security measures, changes and effective date, governing law or language precedence, this appendix prevails; on the specific matters governed by a particular document, that document prevails. If any provision is held invalid or unenforceable, the validity of the remaining provisions is not affected.