Update Date: September Day, 20, 2025
Effective Date: October Day, 20, 2025

General Provisions

1.To regulate the processing of personal information by BEIJING WINDHILL TECHNOLOGIES CO., LTD. (hereinafter referred to as "WINDHILL" or "we") in website operation, protect the personal information rights and interests (hereinafter referred to as "you") regarding your personal information, this Policy is formulated in accordance with the Personal Information Protection Law of the People's Republic of China, Data Security Law of the People's Republic of China and other relevant laws and regulations.

2.This Policy applies only to the collection, storage, use, sharing, transmission and disclosure of your personal information by us through our official website (https://www.windhilltech.com), and does not apply to third-party websites or services (including third-party platforms linked to this website).

3. Definitions

(1) Personal Information: Refers to information recorded in electronic or other forms that can identify a specific natural person individually or in combination with other information and reflect the person's activities, such as  name, address, phone number, email address, etc.

(2) Non-Personal Information: Refers to information that cannot identify a specific natural person individually or in combination with other information, such as browser type, operating system version, and number of website visits.

(3) Cookies: Refers to small text files sent by the website server to your computer or mobile device, used to store user preferences, login status and other information to facilitate user identification during subsequent visits.

Collection and Acquisition of Personal Information

1.Collection Principles: Adhere to the principles of "legality, propriety, and necessity". We do not proactively collect your personal information through the website, and only obtain it under the following circumstances:

(1)Voluntary provision by you: Personal information you actively fill in and submit when registering an account, submitting an inquiry request, participating in market research, or placing an order for products or services.

(2)Circumstances permitted by law: Situations where personal information may be collected without your consent in accordance with relevant laws and regulations (e.g., when necessary for performing statutory duties or obligations).

2. Scope of Collection

(1) Information you voluntarily provide: May include name, contact phone number, email address, delivery address, company name, demand description, etc., subject to the actual content you submit.

(2) Relevant information collected automatically: When you access this website through telecommunications services, we will automatically collect network interaction information, including Internet Protocol (IP) address, access time (including start and end times), duration of access, path of visited web pages, information about the telecommunications service provider used, etc. Such information will be managed under the category of personal information.

Rules for the Use of Personal Information

1.Purpose of Use: The use of personal information is strictly limited to the following purposes, and will not be used beyond the scope without your explicit consent or legal authorization:

(1)Responding to your needs: Including replying to inquiries, processing orders, providing product/service quotes, delivering goods or services, etc.

(2)Maintaining customer relationships: Analyzing your business needs, optimizing product functions and service quality, and enhancing user experience.

(3)Standardized operation needs: Conducting market research (e.g., online surveys) to understand user preferences, or pushing product and service information relevant to your needs (including order-related notifications) to you.

2. Restrictions on Use: If you explicitly refuse to support customer relationship maintenance activities such as direct marketing and market research through your personal information, we will immediately stop the relevant use, record your choice, and ensure that your personal information will no longer be processed for such purposes.

Sharing and Disclosure of Personal Information

1.Internal Sharing: To achieve the use purposes agreed in this Policy, your personal information may be shared among affiliated enterprises worldwide; however, before sharing, we will ensure that the affiliated enterprises comply with this Policy and relevant laws and regulations, and adopt security protection measures of the same level.

2.Disclosure to Third Parties: Disclosure of your personal information to third parties is strictly restricted. We will not sell, lease, or provide your personal information to non-affiliated third parties except under the following statutory or agreed circumstances:

(1) With your explicit written consent or authorization;

(2) Necessary for performing the contract between you and us (e.g., providing necessary delivery information when entrusting a third-party logistics service provider to deliver goods);

(3) Disclosure to relevant authorities is required in accordance with legal provisions, instructions from competent authorities, or rulings of judicial organs;-

(4) Necessary for initiating litigation, responding to litigation or arbitration proceedings, and safeguarding our legitimate rights and interests;

(5) Necessary for preventing illegal acts such as fraud and cyberattacks, and protecting the security of the website system and the legitimate rights and interests of you or other users (e.g., responding to intentional attacks on the information technology system of this website).

3. Notice on Third-Party Services: If we entrust a third party to process your personal information (e.g., third-party customer service, data analysis institutions), we will sign a written agreement with the third party, clarify the processing authority, scope, and security responsibilities, and supervise the third party's processing activities to ensure that personal information is not abused.

Collection and Use of Non-Personal Information

1. Scope of Automatic Collection: When you access this website, we will automatically collect non-personal information, including but not limited to: type and version of Internet browser, type and version of operating system, domain name of the previous website visited before accessing this website, number of website visits, average duration of a single visit, number of web pages viewed in a single visit, etc.

2. Method of Use and Sharing: The collected non-personal information may be used for gathering website operation data, analyzing user access behavior, and optimizing website content and functions; it may also be shared with global branches without obtaining your additional consent (as such information does not have personal identifiability).

Rules for the Use of Cookies

1. Functions of Cookies: To enhance your visiting experience, when you browse this website, we may send Cookies to your computer or mobile device, mainly for:

(1) Identifying your user identity to avoid repeated logins during your next visit (e.g., saving login status);

(2) Recording your browsing preferences (e.g., frequently used pages, operation habits) to provide personalized website content recommendations;

(3) Counting website access data to optimize website loading speed and function design.

2. User's Right to Choose: You can manage the use of Cookies by adjusting your Internet browser settings, including:

(1) Deleting Cookies already stored on your hard drive;

(2) Setting the browser to block all Cookies;

(3) Configuring the browser to send you a prompt before Cookies are saved, letting you to choose whether to permit them.

Please note: If you disable Cookies, some website functions (such as login and personalized recommendations) may not work properly, and you shall bear any inconvenience arising therefrom.

Protection of Minors' Personal Information

1. Principle of Special Protection: We attach great importance to the protection of minors' personal information, and only process minors' personal information within the scope permitted by law. Before processing, in accordance with the requirements of applicable laws and regulations, we will first obtain the consent of the minor's guardian (the specific age definition of "minor" shall be subject to the provisions of relevant laws and regulations).

2. Protection Measures: If a guardian discovers that a minor has provided personal information to us without consent, the guardian may contact us through the contact method specified in the part of this Policy “User's Rights and Methods of Exercise”. After verifying the guardian's identity, we will immediately stop processing the minor's personal information and delete the relevant information as required by the guardian.

Security Assurance of Personal Information

1. Security Protection Measures: We adopt comprehensive security measures combining technology and management to protect the security of your personal information, specifically including:

(1) Technical level: Adopting technologies such as encrypted transmission (e.g., HTTPS protocol), data desensitization, access permission control, and firewalls to prevent unauthorized access, tampering, or leakage of personal information;

(2) Management level: Establishing a ledger for personal information processing, clarifying internal processing authorities, conducting regular employee information security training, and formulating emergency plans for data security incidents.

2. Assurance of Information Accuracy: We take reasonable measures to ensure that your personal information is accurate and complete, and promptly correct and supplement inaccurate information in accordance with your request.

3. Response to Security Incidents: In the event of a security incident such as leakage, loss, or tampering of personal information, we will immediately activate the emergency plan, take remedial measures, and in accordance with the requirements of relevant laws and regulations, notify you and the regulatory authorities (if necessary) within the prescribed time limit, explaining the cause of the incident, the scope of impact, and the remedial measures.

Disclaimer for Third-Party Links

This website may contain links to third-party websites or services (such as partner websites, industry information platforms, etc.). Such links are provided only to facilitate your access to more information. We do not assume any responsibility for the content, privacy policies, data processing behaviors, or service quality of third-party websites, nor are we liable for any losses you may suffer due to the use of third-party websites or services. It is recommended that you carefully read the privacy policies and user agreements of third-party websites before accessing them.

User's Rights and Methods of Exercise

1. User's Rights: In accordance with relevant laws and regulations, you enjoy the following rights regarding your personal information:

(1) Right of Access: Requesting us to provide information about the processing of your personal information and relevant details;

(2) Right of Correction: Requesting us to correct your inaccurate or incomplete personal information;

(3) Right of Deletion: Requesting us to delete your personal information under statutory circumstances (e.g., the purpose of information collection has been achieved, you withdraw your consent, etc.);

(4) Right to Withdraw Consent: You may withdraw your consent to the processing of personal information at any time (however, the withdrawal of consent does not affect the legality of information processing activities based on consent before the withdrawal);

(5) Right of Complaint and Suggestion: Putting forward questions or suggestions regarding the implementation of this Policy and the processing of personal information.

2. Methods of Exercise: If you need to exercise the above rights, you may contact us via email, with the specific method as follows:

(1) Contact Email: info@windhilltech.com

(2) Email Subject: You must indicate "Privacy Policy Related Request" in the "Subject" field, and specify your name, contact information, and the specific content of your request (e.g., "Access Personal Information", "Correct Email Address", etc.) in the body of the email to facilitate our quick verification of your identity and processing of your request.

3. Response Time Limit: After receiving your request, we will complete the identity verification within the time limit stipulated by laws and regulations, process the request according to its content, and feedback the processing result to you through the contact information you provided.

Update and Notification of the Policy

1. Update Principle: We will update this Privacy Policy in a timely manner based on changes in laws and regulations, adjustments to website business functions, or changes in user needs. The updated Policy content will be more conducive to protecting your rights and interests regarding personal information, and will not reduce or exempt us from our statutory responsibilities.

2. Notification Method: 30 days before the update of this Policy, we will send a notice to you through the announcement on the homepage of the website; the updated Policy will be officially published on the designated page of this website (e.g., "About Us - Privacy Policy") and will take effect from the date of publication.

3. User Confirmation: If you continue to use this website after the updated Policy takes effect, it shall be deemed that you have fully read, understood, and accepted the content of the updated Policy; if you do not agree to the updated Policy, you shall immediately stop using this website and related services, and request us to delete your personal information through the method specified in the part of this Policy “User's Rights and Methods of Exercise”.

Dispute Resolution and Applicable Law

1. Applicable Law: The formation, performance, interpretation, and dispute resolution of this Privacy Policy shall all be governed by the laws and regulations of the People's Republic of China (excluding conflict of laws rules).

2. Dispute Resolution: If any dispute arises between you and us regarding the implementation of this Policy, it shall first be resolved through friendly negotiation; if negotiation fails, either party shall have the right to sue in the people's court having jurisdiction over the place where WINDHILL is located.

Contact Information

If you have any questions, suggestions, or complaints regarding this Privacy Policy, you may contact us through the following method:

(1) Contact Email: info@windhilltech.com

(2) Contact Subject: Please indicate "Privacy Policy Consultation/Complaint" in the email subject to facilitate our timely handling.

WINDHILL will record your consultation, suggestion, or complaint and reply within 15 working days (unless otherwise specified by laws and regulations).

This Privacy Policy shall take effect from the date of issuance.