Privacy Policy



Release Date: December 24, 2024

Effective Date: December 24, 2024


【Gansu Sidun Information Technology Co., Ltd.】(hereinafter referred to as "we", "us" or "our") attaches great importance to the protection of personal information. This Privacy Policy applies to our websites, mobile applications (Android, iOS) and other related services. We abide by the principles of openness transparency, data minimization and data security when protecting your personal data, and comply with GDPR and applicable local data protection laws in your jurisdiction. Please read and understand this Privacy Policy carefully before using our websites, mobile apps and services.

Legal Bases for Data Processing: For users located in the European Economic Area (EEA), we process personal data based on one or more of the following legal grounds: ① your explicit consent; ② performance of a contract concluded with you; ③ compliance with our legal obligations; ④ our legitimate interests or the legitimate interests of third parties, provided such interests do not override your fundamental rights and freedoms. Where processing relies on your consent, you have the right to withdraw your consent at any time. Withdrawal shall not affect the lawfulness of processing carried out prior to withdrawal.

How We Collect and Use Your Personal Information

Personal information refers to any information that can identify a specific natural person. We collect and use your personal information only for the legitimate and explicit purposes stated in this policy, and will not process data beyond the necessary scope.

Data Retention Period: We retain personal information only for the period necessary to fulfil the purposes for which the data is collected. Account related data will be kept during the lifetime of your account. After account deletion, we will erase your personal data within a reasonable period except where mandatory legal retention requirements apply. Anonymized statistical and analytical data are not subject to these retention rules.

User Registration

To register an account via our website or mobile application, you are required to provide: email address, username and password.
You may optionally fill in information such as your full name to improve service experience. Such information is optional and will not affect basic functions of our website or APP.
The above mentioned data will be stored while you use our services. After your account is deactivated, we will delete your personal data in accordance with our rules.
Your data is stored on security servers selected by us. In case of cross border transfer of personal data, we will implement appropriate data protection safeguards and obtain required approvals as required by applicable law.

When personal data is transferred from the European Economic Area (EEA) to third party countries outside the EU/EEA, we adopt the EU approvedStandard Contractual Clauses (SCC 2021/914)as safeguards in compliance with requirements under the Schrems II ruling. You may request a copy of these safeguard documents by contacting us via the email address stated in this policy. If we appoint an EU based legal representative in the future, contact details will be updated and published within this policy.

Product Analytics and Service Optimization (Third Party SDK Statistics)

To improve user experience of our websites and mobile applications, we or our authorized statistical SDKs may collect non identifiable information including browser type, IP address, device identifier, device model, operating system version, session duration, language, time zone and network status. We will anonymize data where feasible and avoid excessive collection of sensitive device identifiers. Within mobile applications, certain permissions such as network status require your authorization before collection. You may disable relevant permissions in your device system settings at any time.

Categories of third party data recipients include cloud service providers, analytics vendors and technical operation suppliers. We enter into data processing agreements with these third parties to bind them to process data solely under our instructions.
Global Privacy Control (GPC): We respect and recognize the Global Privacy Control (GPC) signal sent by compatible browsers, which communicates your preference to opt out of sale and sharing of your personal information.

Sharing, Transfer and Public Disclosure of Your Personal Information

Sharing

We will not share your personal information with third parties without your explicit consent, except for the following circumstances:

  • Upon your explicit and voluntary consent;
  • To comply with applicable laws, legal procedures or valid mandatory requests issued by competent government authorities;
  • Sharing necessary data with our affiliated companies for purposes consistent with this Privacy Policy. We will seek your new consent if the purpose of processing changes;
  • Disclosing data to authorized service partners solely for delivering our services to you. We sign data confidentiality agreements with partners and require them to follow privacy security rules and only process data necessary for completing services.

Personal Information Sale Statement: We will not sell your personal information for commercial purposes. This statement does not cover necessary data delivery to service providers for performing contracted services.

Transfer

We will not transfer your personal information without your explicit consent, except for the following circumstances:

  • Upon your explicit consent;
  • In the event of merger, acquisition, asset sale or business liquidation. If personal information transfer occurs, we will require data recipients to continue complying with this Privacy Policy. Fresh consent will be obtained if the recipient intends to change processing purposes.

Public Disclosure

We will publicly disclose your personal information only under the following conditions:

  • Upon your explicit consent;
  • To comply with laws, judicial proceedings, litigations or valid mandatory requests issued by competent regulatory authorities.

How We Protect Your Personal Information

  • We adopt industry standard security measures including HTTPS/SSL encryption, access permission control and encrypted data storage to protect personal information against unauthorized access, modification, leakage and destruction. These security controls apply to both websites and mobile applications. Access to personal data is restricted to necessary staff who receive regular internal privacy security training.
  • We follow data minimization principles and retain personal information only for periods required to fulfil processing purposes, unless otherwise required by law.
  • No internet or mobile environment can guarantee absolute security. Please avoid transmitting sensitive personal data over unencrypted communication channels. Use strong passwords for account protection and keep your physical device secure to prevent unauthorized use of our applications.
  • In the event of personal data security incidents, we will take corrective actions in compliance with applicable law. Where necessary, we will notify users by email, website announcements or in app messages and complete regulatory reporting obligations as required.

Your Data Subject Rights

Pursuant to the GDPR and applicable local laws, you are entitled to the following rights: right of access, right of rectification, right to erasure, right to restriction of processing, right to data portability, right to withdraw consent and right to lodge complaints. You may exercise some rights via personal center functions on our website or mobile applications, or submit requests through our contact channels.

  • Right of Access: You may review your stored personal information within your account page on our website or mobile APP;
  • Right of Rectification: If you find inaccuracies in your personal data, you may modify relevant information directly in your account page;
  • Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data under the following conditions:
    • Personal data processing violates applicable law;
    • No valid legal ground exists for data processing;
    • Processing breaches our agreement with you;
    • You deactivate your account and discontinue using our services;
    • We terminate service provision.

    Account deactivation is subject to review. After completing deletion requests, we will notify relevant data recipients to erase your data where permitted by law. Data within system backups will be erased according to backup cycle policies and will not be retained indefinitely.

  • Right to Restriction of Processing: Under conditions defined by law, you have the right to require us to suspend processing of your personal data, for example when you contest data accuracy or processing is unlawful;
  • Right to Object: You may object at any time to processing based on our legitimate interests. Upon your objection we will cease such processing unless we can demonstrate compelling legitimate grounds overriding your rights. You hold an unconditional right to object to processing for direct marketing purposes;
  • Right to Withdraw Consent: You may withdraw any consent you previously granted for personal data processing. Withdrawal will not affect lawfulness of processing performed before withdrawal. You may also revoke app permissions within your device system settings.
  • Right to Data Portability: Where permitted by applicable law, you may request a copy of your personal data in a machine readable transferable format.
  • Right to Lodge a Complaint with Supervisory Authority: If you believe our personal data processing violates the GDPR, you have the right to file a complaint with the data protection authority of your EU member state of residence.

You may submit rights exercise requests via the contact email listed below. We will respond within time limits prescribed by applicable law. GDPR related requests will be responded to within 30 calendar days upon receipt. For California residents in the United States (subject to CCPA/CPRA), you additionally hold rights to: ① know categories of personal information we collect, use and share; ② request deletion of your personal data held by us; ③ correct inaccurate personal information; ④ be free from unlawful discrimination for exercising your privacy rights. California residents may submit requests via our contact email. We may verify your identity before processing requests. We may reject or charge reasonable administrative fees for repetitive or excessive requests permitted by law.

Updates to This Privacy Policy

We may update this Privacy Policy. Revised versions will carry updated release and effective dates and will be published on our website. For material revisions, we will try our best to notify you by email or in app notifications. Revised policies take effect upon publication.We will not deem your continued use of services as acceptance of revised terms. If you disagree with updated provisions, please discontinue all use of our services. Material revisions will require your explicit acknowledgement.

Contact Us

  • Company Name: Gansu Sidun Information Technology Co., Ltd.
  • Office Address: No.3 Tianma Avenue, Liangzhou District, Wuwei City, Gansu Province, China
  • Email for data protection and business inquiries: support@bokerpos.com
  • Email for reporting illegal and harmful content: support@bokerpos.com