Bucalu Data Protection and Privacy Agreement

Overview

Guangdong Bucalu Curtain Wall,Window &Door System Co.,Ltd . (hereinafter referred to as " Bucalu " , "we", "our") will protect your personal data very carefully and strictly abide by the relevant provisions of the Internet Security Law of the People's Republic of China.

We use the information you share with us to improve our services and your experience. This Privacy Policy is designed to give you a clear understanding of how we collect and use your information, our commitment to protecting your information, and the choices you have to manage your information and privacy. This Privacy Policy applies to the various services provided to you by the Bucalu official website. If other Bucalu applications and products do not come with this Privacy Policy link, but contain a different link from the Bucalu Data Protection and Privacy Policy, they will be governed by that Data Protection and Privacy Policy.

The data subjects covered by this Agreement include private users who visit Bucalu’s official website, official WeChat public account and Bucalu ’s business partners.

Last updated: May 1, 2024 .

If you have any questions, comments or suggestions, please contact us via the following contact information: Email: info@bucalu.com Hotline: 400 830 1300 This agreement will help you understand the following: How we collect and use your personal information How we use COOKIE and similar technologies How we share, transfer and publicly disclose your personal information How we protect your personal information your rights How we handle minors’ personal information How your personal information is transferred globally How to update this agreement How to Contact Us Bucalu is fully aware of the importance of personal information to you and will do its best to protect your personal information. We are committed to maintaining your trust in us and abiding by the following principles to protect your personal information: the principle of consistency of rights and responsibilities, the principle of clear purpose, the principle of choice and consent, the principle of minimum sufficiency, the principle of ensuring safety, the principle of subject participation, the principle of openness and transparency, etc. At the same time, Bucalu promises that we will take corresponding security protection measures to protect your personal information in accordance with the requirements of laws and regulations. Please read and understand this Privacy Agreement carefully before using our products or services. If you choose to use our services, it means that you fully understand the entire content of this Privacy Agreement and agree that Bucalu collects, uses, stores and shares your personal information in accordance with this Privacy Agreement. If you do not agree to this Privacy Agreement or any part of it, you can immediately stop using our services.

How we collect and use your personal information

1.1 Private users

In order to better provide services to private users, Bucalu and authorized Bucalu partners need to collect the following information to answer your questions, process and perform your consultation requests, technical management, maintenance services and services provided on the Bucalu official website. If you agree to our privacy policy, it means that you agree that Bucalu may provide your personal information to Bucalu 's partners . Contact you by phone: If you agree to our privacy policy and provide us with your phone number when making a consultation request, we will contact you by phone and then forward your consultation request to our partner companies in order to check the accuracy of your information, discuss your project, and be able to refer you to the appropriate professional company. Bucalu and third parties control personal information including: a) Establish a third-party product or service access management mechanism and workflow, and, if necessary, establish a security assessment mechanism to set access conditions; b) The security responsibilities of both parties and the personal information security measures to be implemented should be clearly defined through contracts or other means with third-party product or service providers; c) Products or services provided by third parties should be clearly marked to the personal information subject; d) The platform’s third-party access contracts and management records should be properly retained to ensure that they are available for review by relevant parties; e) Third parties should be required to obtain authorization and consent from the subject of personal information to collect personal information in accordance with the relevant requirements of this Standard, and verify the means of implementation when necessary; f) Third-party products or services should be required to establish mechanisms to respond to requests and complaints from personal information subjects, so that they can be queried and used by personal information subjects; g) Third-party product or service providers should be supervised to strengthen personal information security management. If it is found that third-party products or services have not implemented security management requirements and responsibilities, rectification should be urged in a timely manner, and access should be terminated if necessary; h) If products or services are embedded in or connected to third-party automation tools (such as code, scripts, interfaces, algorithm models, software development tool kits, applets, etc.), the following measures should be taken: 1) Carry out technical testing to ensure that its personal information collection and use behavior complies with the agreed requirements; 2) Audit the collection of personal information by automated tools embedded or accessed by third parties, and promptly cut off access if any behavior beyond the agreement is discovered. Contacting You by Email: If you agree to our Privacy Agreement and provide us with your email address when making your consultation request, we will notify you via email on our Services regarding the current status of your consultation request. Advertising and Advertising Consent: If you explicitly inform us that you consent to the use of your personal data for advertising purposes, Bucalu will inform you about Bucalu products and services by email, post or phone . If you have agreed to the above purposes of use but no longer wish to receive advertisements or surveys from Bucalu in the future , you can revoke your consent at any time by unfollowing Bucalu's official WeChat public account . Your data will be deleted. If you have questions, please contact Bucalu . Please send an email to info@bucalu.com

1. 2 Data processing when accessing the Bucalu website

In order to conduct data analysis and research and improve the services we provide to you, we may collect information when you interact with our brands, websites and applications, and how you use such brands, websites and applications. Bucalu may automatically collect information sent to us through your browser and store it in our server log files. The shelf life is 180 days. This information includes: Browser type/version Operating system used. Referrer URL (previously visited website) The computing hostname (IP address) used to access this website Server request time Bucalu does not use this data to identify specific groups of people or compile this data with other data sources. These data are used for internal statistical analysis only.

1. 3 Other uses

When we want to use information for other purposes not stated in this statement, we will ask for your consent in advance. When we want to use the information collected for a specific purpose for other purposes, we will ask for your consent in advance.

1.4 Exceptions to obtaining authorized consent

The collection of your personal information does not require your authorization and consent in the following situations: Related to national security and national defense security; Relevant to public safety, public health, and major public interests; Relevant to criminal investigation, prosecution, trial and judgment execution, etc.; For the purpose of protecting the life, property and other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain your consent; The personal information collected is disclosed to the public by you on your own initiative; Collecting personal information from legally disclosed information, such as legal news reports, government information disclosure, etc. Necessary for entering into and performing a contract at your request; Necessary for maintaining the safe and stable operation of the products or services provided, such as discovering and handling product or service failures; Necessary for legitimate news reporting; academic research institutions conduct statistical or academic research based on public interests and provide the results of academic research or descriptions to the public , they shall de-identify the personal information contained in the results; Related to our performance of obligations prescribed by laws and regulations. Other circumstances prescribed by laws and regulations. If we cease operating our website or services, we will promptly stop collecting your personal information, notify you of the cessation of operations by individual delivery or announcement, and delete or anonymize the personal information we hold.

How we use cookies and similar technologies

2.1 Cookies

Cookies are small files temporarily stored on a visitor's computer and/or mobile device, which can make it easier to access our platform. Cookies can also help us determine which areas of the services we provide are most popular, so as to improve the services we provide to you. You can choose to have personal data stored in Cookies, such as when you want to enter a protected website and/or client application platform, so that you can save time without having to re-enter your user name and password. We promise that we will not use Cookies for any other purpose other than the purposes described in this Privacy Policy. You can also visit our platform without selecting Cookies. Most browsers and/or mobile devices have the function of automatically accepting Cookies. You can prevent Cookies from being stored on your computer and/or mobile device by selecting the "Do not accept Cookies" option through the settings of your browser and/or mobile device. To find out how Cookies work on your computer and/or mobile device, please refer to the instructions of the browser and/or mobile device manufacturer. However, if you choose not to accept Cookies, some functions may be restricted when visiting our website.

2.2 Baidu analysis statistics

Bucalu website may use Baidu Analytics, a website analytics service of Baidu Inc. ("Baidu"). Baidu Analytics uses "Cookies", which are text files stored on your computer that can be used to analyze the use of the website. The information generated by cookies about the use of this website is usually transmitted to and saved on one of Baidu's servers. With the permission of the website operator, Baidu will use this information to analyze website usage in order to generate reports on website activities and further provide services related to website usage and Internet usage to the website operator. The IP address data transmitted by your browser within the scope of Baidu services will not be aggregated with other data from Baidu. You can disable Cookies by setting the appropriate settings on your browser software. We would like to inform you that disabling cookies may result in the inability to use some functions of the website. How we share, transfer and publicly disclose your personal information

3.1 Sharing

We treat your personal information with caution and confidentiality. Your data will not be transferred or sold to individuals or third party companies not affiliated with Bucalu . the following circumstances and other circumstances that you have expressly agreed to otherwise: share your personal information in situations stipulated by laws and regulations, legal procedures, litigation, or mandatory requirements from government authorities . Your personal information may be shared with Bucalu 's parent or affiliated companies. We will only share personal information that is necessary and subject to the purposes agreed in this Privacy Agreement. Private users: With your explicit consent, we will forward the personal data you enter to a specialist dealer company that collaborates with our company and is located in your area in order to provide a service that provides expert advice and/or purchases, maintenance or repairs. This specialist partner will be asked to contact you within a fixed time frame in order to be able to provide the expert advice and/or quotation you request. For this purpose, Bucalu or its partners will contact you by email and/or telephone. Share with service provider. We send information to other types of service providers (such as server hosting companies, courier companies, payment service providers, website management services and credit rating companies) that support our business globally, including the provision of technical infrastructure services , analyze how our services are used, measure the effectiveness of advertisements and services, provide customer service, facilitate payment, or conduct academic research and surveys. We will sign strict confidentiality agreements with companies, organizations and individuals with whom we share personal information, requiring them to handle personal information in accordance with our data protection specifications, this Privacy Agreement and any other relevant confidentiality and security measures.

3.2 Transfer

transfer your personal information to other parties after obtaining your explicit consent ; When changes such as acquisitions, mergers, reorganizations, and bankruptcies occur, we will handle it in accordance with the following requirements: a) Inform the personal information subject of the relevant situation; b) The changed personal information controller shall continue to perform the responsibilities and obligations of the original personal information controller. When determining the purpose of using personal information, the express consent of the subject of personal information should be obtained again; c) If it goes bankrupt and there is no successor, the data will be deleted.

3.3 Public disclosure

We will only publicly disclose your personal information under the following circumstances: obtaining your explicit consent; Disclosure based on law: We may publicly disclose your personal information when required by law, legal proceedings, litigation, or when required by competent government authorities.

4. How we protect your personal information

We have used security measures that meet industry standards to protect the personal information you provide and prevent it from being accessed, disclosed, used, modified, damaged or lost without authorization. We will take all reasonable and feasible measures to protect your personal information. We will use encryption technology to ensure the confidentiality of data; we will use trusted protection mechanisms to prevent data from being maliciously attacked; we will deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we will hold security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information. In the use of data, we strictly adhere to the principle of least authorization for operators who are authorized to access data, so that they can only access the minimum personal information required for their authority, and only have the minimum data operation permissions required to complete their duties. In addition, we set up an approval process for important data operations, and separated the roles of security managers, data operators, and auditors. In terms of data transmission, we use strong encryption to protect the transmitted data. We also use strong encryption to protect the data during the localized storage process. We will take all reasonably practicable measures to ensure that no irrelevant personal information is collected. We will only retain your personal information for the period necessary to fulfill the purposes stated in this statement, unless an extension of the retention period is required or permitted by law. The Internet is not an absolutely secure environment, and emails, instant messaging, and other communication methods with users are not encrypted. We strongly recommend that you do not send personal information through such methods. Please use a complex password to help us ensure the security of your account. The Internet environment is not 100% secure. We will do our best to ensure or guarantee the security of any information you send to us. If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering, or destruction of information, which in turn damages your legitimate rights and interests, we will bear the corresponding legal liability. After an unfortunate personal information security incident occurs, we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, and the steps you can take to prevent and reduce risks on your own. Suggestions, remedies for you, etc. We will promptly notify you of the incident-related information through emails, letters, phone calls, push notifications, etc. When it is difficult to inform the personal information subjects one by one, we will issue announcements in a reasonable and effective manner. At the same time, we will also proactively report the handling of personal information security incidents in accordance with the requirements of regulatory authorities.

5.Your rights

For us, fair competition and transparency are of utmost importance. We want to be transparent about the information we collect and strive to provide you with easy choices to access, edit or delete your information, or exercise any other rights you may have regarding your information. In accordance with relevant Chinese laws, regulations, and standards, as well as common practices in other countries and regions, we guarantee that you can exercise the following rights over your personal information:

5.1 View and copy your personal information

You have the right to review and copy your personal information, except for exceptions provided by laws and regulations. If you want to exercise your right to review and copy data, you can do so in the following ways: Account Information - If you wish to access or edit your account profile information and payment information, change your password, or change your address book information, you can do so by visiting the Bucalu official website HYPERLINK "http://www.bucalu.com.cn" at www.bucalu.com and the Bucalu official WeChat public account . If you are unable to access the personal information we hold about you through our website, you may at any time, without incurring any fees, request access to such information, other than your password information, by contacting our customer service as follows: Email: info@bucalu.com Hotline: 400 830 1300 respond to your access request within 30 days . Special reminder: after receiving your access request, we will verify your identity (see "Article 5.7" of this Agreement) and provide you with an overview of the information we have about you if the verification is successful.

5.2 Correct your personal information

When you discover an error in the personal information we process about you, you have the right to ask us to make a correction. You can apply for correction through the methods listed in "5.1 Access to Your Personal Information". If you are unable to correct this personal information through our website, you can contact our customer service through the following methods at any time and make a request to correct such personal information except password information, and no fees will be incurred in the process: Email: info@bucalu.com Hotline: 400 830 1300 respond to your correction request within 30 days . Special reminder: after receiving your correction request, we will verify your identity (see "Article 5.7" of this Agreement) and assist you in completing the correction of your personal information if the verification is passed.

5.3 Deleting your personal information

In the following circumstances, we will proactively delete personal information; if it is not deleted, you can request us to delete the personal information: If our handling of personal information violates laws and regulations; If we collect and use your personal information without your consent; If our processing of personal information violates our agreement with you; If you no longer use our services or products, or you cancel your account; If we no longer provide services to you; Your personal information retention period has expired; Withdrawal of consent by an individual. If we decide to respond to your deletion request, we will also notify the entities that obtained your personal information from us and require them to delete it promptly, unless otherwise provided by laws and regulations, or these entities obtain your independent authorization. If the retention period stipulated in laws and administrative regulations has not expired, or deletion of personal information is technically difficult to achieve, we should stop processing other than storing and taking necessary security protection measures. Please be aware that when you delete information from our services, we may not delete the corresponding information from the backup system immediately, but we will delete the information when the backup is updated . If you need to delete, please contact Email: info@bucalu.com Hotline: 400 830 1300

5.4 Change the scope of your authorization and consent or withdraw your authorization and consent

Each business function requires some basic personal information to be completed (see "Part 1" of this statement). For the collection and use of additional personal information, you can give or withdraw your authorization through settings on the Bucalu official website and Bucalu official WeChat public account or by contacting our customer service . When you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw your consent will not affect the previous processing of personal information based on your authorization. If you do not want to receive marketing information from us, you can cancel at any time. All of our marketing communications include an easy way for you to opt out of future communications, such as a link where you can unsubscribe. You can also choose to unsubscribe from information from specific channels (such as emails or text messages). The unsubscribe methods are listed in the information you receive through these channels. Some of our (mobile) applications may also send you information, including push messages. You can disable these messages by changing your phone or app settings, or you can choose to delete the app to stop receiving messages. If you no longer wish to receive all communications from us and do not want us to use your information for marketing purposes, you can send a request using the unsubscribe link included in the communications you receive, or you can contact us Email: info@bucalu.com Hotline: 400 830 1300

5.5 Personal information subject cancels account

You can cancel your previously registered account at any time. You can do this by yourself in the following ways: contact us Email: info@bucalu.com Hotline: 400 830 1300 After canceling your account, we will stop providing services to you and delete your personal information according to your request, unless otherwise provided by laws and regulations.

5.6 Constraint information system automatic decision-making

In some business functions, we may make decisions solely based on non-human automated decision-making mechanisms including information systems, algorithms, etc. If these decisions significantly affect your legal rights and interests, you have the right to ask us for an explanation, and we will also provide appropriate relief.

5.7 Respond to your above request

For security reasons, you may be required to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. We will respond within thirty days. If you are not satisfied, you can also complain through the following channels: Email: info@bucalu.com Hotline: 400 830 1300 for reasonable requests, but we will charge a certain cost for repeated requests that exceed reasonable limits. We may reject requests that are unreasonably repeated, require too many technical means (such as developing a new system or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are extremely impractical (such as those involving information stored on backup tapes). In the following circumstances, we will be unable to respond to your request in accordance with laws and regulations: Directly related to national security and national defense security; Directly related to public safety, public health, and major public interests; Directly related to criminal investigation, prosecution, trial and execution of judgment; There is sufficient evidence that you have subjective malice or abuse of rights; Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations; Involving trade secrets.

6. How do we handle personal information of minors?

Minors may not create their own Bucalu account without the consent of a parent or guardian. If you are a minor, we recommend that you ask your parents or guardians to read this Privacy Policy carefully and use our services or provide information to us with the consent of your parents or guardians. For the collection of personal information of minors through the use of our products or services with the consent of their parents or guardians, we will only use, share, and transfer them when permitted by laws and regulations, with the explicit consent of their parents or guardians, or when necessary to protect the minors. or disclose this information.

7. How your personal information is transferred globally

In principle, the personal information we generate or collect in the People's Republic of China will be stored in the People's Republic of China. We may, on the premise of complying with relevant laws and regulations (for example, obtaining your separate consent), transfer and store your personal information to overseas servers or to affiliated companies or reliable companies located in other countries or regions. third parties to process your personal information on our behalf. You should be aware that many countries do not provide the same legal protection for your personal information that you may enjoy in your country of origin. When your personal information is stored in another country or region, the courts, law enforcement agencies or security agencies of that country or region may access your personal information in accordance with the laws of that country. Subject to these lawful access requirements, we commit that anyone processing your personal information outside your country of origin will be required to take steps to protect your personal information and will only be authorized to process your personal information in accordance with Bucalu 's instructions. information.

8. Updates to the Privacy Agreement

We may update this Privacy Agreement from time to time as we add new products and applications, improve our current products and services, and as technology develops and laws are revised. You can determine when this Privacy Agreement was last revised by checking the "Last updated" date at the top of this page. Once we publish the revised Privacy Agreement, any changes therein will be effective immediately. If these changes are material, we will send you a notice and, if required by applicable law, obtain your consent. We will not reduce your rights under this Privacy Agreement without your explicit consent . We will post any changes to this Agreement on this page. For major changes, we will also provide more prominent notices (including for some services, we will send notifications by email or mobile phone text messages to explain the specific changes in the privacy agreement). Major changes referred to in this agreement include but are not limited to : Significant changes to our service model. Such as the purpose of processing personal information, types of personal information processed, how personal information is used, etc.; We have undergone significant changes in our ownership structure, organizational structure and other aspects. Such as changes in owners caused by business adjustments, bankruptcy mergers, etc.; The main recipients of personal information sharing, transfer or public disclosure change; There are significant changes in your rights to participate in the processing of personal information and how to exercise them; When our responsible department, contact information and complaint channels for handling personal information security change; When the personal information security impact assessment report indicates that there is a high risk. We will also archive older versions of this Agreement for your review.

9. How to contact Bucalu

If you have any questions, comments or suggestions about this Privacy Agreement, please contact us through the following methods: Hotline: 400 830 1300 We have set up a dedicated department for personal information protection. You can contact it through the following methods: info@bucalu.com . Under normal circumstances, we will respond within thirty days. If you are not satisfied with our response, especially if our personal information processing behavior has harmed your legitimate rights and interests, you can also seek a solution by filing a lawsuit with the court with jurisdiction over the defendant's domicile.