RIXI Medical Privacy Policy

1. Policy Revisions

2. Information We Collect

• Full name
• Email address
• Mobile phone number
• Other information you proactively provide when using the Service (such as consultation content, order-related information, etc.)

3. Purposes of Information Use

1. Marketing and promotion: Sending you updates on our products, preferential activities, industry trends, and other information to help you stay informed of relevant news in a timely manner;
2. Targeted advertising: Displaying advertisements for products or services that are more in line with your interests based on your needs and usage habits, so as to enhance your browsing experience;
3. Order management: Processing your product purchases and consultation orders, including order confirmation, logistics arrangement, after-sales service follow-up, etc., to ensure the smooth completion of your transactions;
4. Other purposes with your consent: If we need to use your information for purposes other than those specified above, we will obtain your explicit consent in advance, and will only use the information for the specific purposes authorized by you after obtaining your consent (unless otherwise required by laws and regulations).

4. Information Sharing Rules

1. Advertising service cooperation: To provide targeted advertising or marketing promotion services, we may share necessary non-identifiable core information (such as your product preferences) with cooperative advertising service providers. However, we will require such third parties to use the information only for the purpose of fulfilling the cooperation and not to retain the information beyond the cooperation period;
2. Legal and regulatory compliance requirements: We may disclose your information in accordance with the law when facing the following situations:
   
   • Complying with applicable laws, regulations, court judgments, or other legitimate legal procedures;
   • Enforcing the agreements signed between you and us (including this Privacy Policy) to protect the legitimate rights and interests of both parties;
   • Responding to claims made by third parties that your use of the Service infringes their legitimate rights, in order to resolve disputes;
3. Corporate mergers and asset transfers: In the event of a merger, acquisition, asset transfer, or other transaction involving the Service or our company, your information will be transferred to the new owner as part of the transaction assets. The new owner shall continue to abide by the privacy protection principles of this Policy to protect your information rights and interests.

5. Information Retention Period

1. Regular retention period: If your user account is inactive, or the information has fulfilled the intended purpose for which it was collected (such as completion of order processing, conclusion of consultation services), we will retain your personal information for 90 days to 2 years. After the expiration, the information will be deleted or anonymized in accordance with regulations;
2. Circumstances for extended retention: If it is necessary to extend the retention period for the following legitimate reasons, we will retain the information within the scope of compliance:
   
   • Obligations to keep records and file reports as required by laws and regulations (such as retention of financial records and transaction vouchers);
   • Needs to protect legitimate rights and interests (such as dispute resolution, fraud prevention, enforcement of legal rights, etc.);
3. Anonymized information processing: Residual anonymous information and aggregated statistical information (such as user geographical distribution, product preference statistical data) that cannot directly or indirectly identify your identity after processing may be stored by us indefinitely. Such information will be used for non-identifiable purposes such as business analysis and product optimization.

6. Your Rights

1. Right of access: The right to inquire whether we hold your personal information and the specific circumstances of the collection, use, sharing, etc. of such information;
2. Right of correction and deletion: If you find that your personal information is incorrect, incomplete, or no longer needs to be retained, you have the right to request us to correct or delete such information;
3. Right of replication and transfer (data portability right): The right to request us to provide a copy of your personal information, or to transfer your information to another legal entity designated by you if technically feasible;
4. Right to restrict or object to processing: The right to request us to restrict the processing of your personal information (for example, when the accuracy of the information is in doubt) or object to the processing of your information for marketing purposes in accordance with statutory circumstances;
5. Right to withdraw consent: If you have previously agreed to our processing of your information, you have the right to withdraw such consent at any time (by submitting an application through the contact information specified in this Policy). After withdrawal, we will stop the relevant information processing, but this will not affect the validity of the processing actions completed based on the legitimate consent before the withdrawal;
6. Right to complain: If you believe that our information processing actions violate laws, regulations, or this Policy, you have the right to file a complaint with the local data protection supervision authority and other statutory departments.

7. Cookies and Similar Tracking Technologies

8. Information Security Protection

• Encrypted data storage: Sensitive personal information (such as mobile phone numbers, email addresses) is processed using encryption technology to reduce the risk of information leakage;
• Access permission control: Strictly restricting internal personnel’s access rights to your information, and only authorizing personnel in necessary positions to access the information when performing their job duties;
• Security technology updates: Regularly updating network security protection systems and vulnerability detection tools to prevent security incidents such as cyber attacks and data leakage.

9. Contact Information for Complaints and Data Protection Officer

• Company Name: RIXI Medical (the specific full name of the company will be supplemented based on actual operation information)
• Contact Address:3rd Floor, Stairway A, Block 6,Guangdong New Light Source Industry Base core area within the C Zone, Foshan, Guangdong Province, China
• Email Address: rixi@riximedical.com
• Contact Phone Number: 0086-757-81763959