1. How Enbrands Collects Your Personal Information

Personal information refers to various information related to an identified or identifiable natural person recorded electronically or by other means, excluding anonymized information. Sensitive personal information refers to personal information that, once leaked or used illegally, can easily harm the dignity of a natural person or endanger their personal or property safety. Personal information processor refers to organizations or individuals who autonomously determine processing purposes and processing methods in personal information processing activities.

We collect your personal information for necessary purposes during your interactions with us, such as to provide services to you. You can view the specific personal information collection scenarios below. If you refuse to provide the personal information required for a certain scenario, you will not be able to use that business function. We collect the following personal information in the following scenarios:

a) Account Registration, Login, and Profile Completion

For account registration, login, and profile completion, we collect relevant information. During registration, we collect account information (account name, account ID, password, related keys for user settings, account status), mobile number, email address, IP address, registration country/region. When completing personal information, you may optionally provide contact address, industry, nickname.

b) Shipping Address Management

When you use the shipping address management service, we may need to collect recipient name, detailed address, postal code, and mobile number.

c) Identity Verification

When you verify your identity using ID documents, we need to collect your name, ID document, and photo. You can also verify your identity using facial images, in which case we need to collect your name, ID document, facial photo, facial video. You can also verify your identity using bank account, in which case we need to collect your bank account, name, ID document, and photo.

d) Security Settings

To protect your account security and prevent risks such as account theft, when you use account security settings service, we collect your email and mobile number (for security verification and risk notification).

e) Service Ordering

When you purchase services, we need to collect your account information, order information, transaction information, and service information.

f) Billing Center

When you use billing center services (such as fund management, invoice management services), we need to collect your transaction information, billing information, order information, payment information (bank account name, bank account number, bank serial number), and invoice information.

g) Message Center

To push relevant notifications to you and implement new administrator permission configuration, when you use this service (including new administrator function), we collect your name, email address, mobile number, Webhook address, and corresponding keys (only for message push integration).

h) Support and Services

When you request our support or services through work order system, service hotline, intelligent customer service, reporting center, etc., we may need to collect your name or account information, email, mobile number, business information (such as company name, industry, position), your consultation records, call recordings, your cloud service operation logs, resource information (such as service resource name, configuration information, etc.), and content you actively submit to us (such as text, images, video).

i) Marketing Activities

When you book or participate in Enbrands activities, including but not limited to cloud service beta testing activities, promotional activities, market surveys or satisfaction surveys, we may need to collect your name, email, phone number, company name, industry, country or region, contact address. For certain activities involving rewards, we also need to collect your ID document, bank account.

j) Service Optimization, Risk Control, and Compliance Requirements

When you access or use our services, we automatically collect and record relevant information for service optimization, risk control, and compliance requirements, including but not limited to browsing records, access dates and times, search records, comments and likes operations, operation interaction records within a reasonable range, browser type, font settings, IP address, network connection status.

a) Involving national security and interests, social public interests;

b) Necessary for fulfilling statutory duties or statutory obligations;

c) Necessary for concluding and performing contracts where you are a party;

d) Necessary to respond to public health emergencies or protect your and others' life, health, and property safety in emergencies;

e) Processing personal information you have voluntarily disclosed to the public or other legally publicly disclosed personal information within a reasonable scope;

f) Processing your personal information collected from legally publicly disclosed information within a reasonable scope (such as legal news reports, government information disclosure channels);

g) Other circumstances stipulated by laws and regulations.

2. How Enbrands Uses Your Personal Information

2.1 We use your personal information for the following purposes:

a) Create and manage your account. With your consent or as necessary to fulfill contracts signed with you, when you use Enbrands services, we provide you with account registration, login, identity verification, permission management, and protection of account and service security.

b) Fulfill our contractual obligations to you. Such as processing your transactions or service requests, including orders, purchase requests, payments, and usage requests; providing delivery, activation, or verification services; providing maintenance services, customer service, and technical support; responding to your requests, inquiries, opinions, or suggestions about us; or providing you with partner services (such as training enablement, professional technical support, marketing, etc.).

c) Contact and communication. We will use your contact information to communicate with you according to the following rules:1. Necessary notifications (no separate consent required): sending notifications directly related to service fulfillment via email, phone, etc. (including financial reconciliation information, service activation/change/termination notifications, security risk alerts, operation announcements, compliance filing notifications, etc.); 2. Non-necessary notifications (your explicit consent required): sending activity invitations, benefit pushes, etc., you can unsubscribe at any time by following notification guidelines.

d) Respond to your interaction requests. With your consent, when you visit our website, participate in online or offline activities, request changes, or request information from us (such as service marketing materials, white papers, e-magazine subscriptions), and contact us about any questions or service information (such as providing technical support, providing us with opinions, suggestions, inquiries, etc.), we reply to your inquiries, opinions, or suggestions about us, or send you event gifts, etc.

e) Marketing. With your consent, sending you information about services you may be interested in; inviting you to participate in Enbrands activities (including promotional activities), market surveys, or satisfaction surveys; sending you marketing information. If you do not wish to receive such information, please refer to Article 7(c) below.

f) Provide personalized content and services for you. Based on your explicit consent, we can use automated or semi-automated tools to compliantly analyze your usage behavior data and relevant personal information to provide you with personalized user experiences (such as interface adaptation), personalized service recommendations (such as cloud service solutions that meet your needs).

g) To fulfill legal obligations, ensure reliable and secure service operation, and optimize services, we also use your personal information for the following purposes:

1) Troubleshoot errors when you choose to send us error details.

2) Protect the security of our services, customers, or users, execute and improve our loss prevention and anti-fraud programs.

3) Conduct internal audits and data analysis and research to improve our services.

4) Comply with and execute applicable legal requirements, relevant industry standards, or our policies.

2.2 Personalized Recommendations

After obtaining your consent, we provide you with personalized content recommendation functionality.

Function description: To show and recommend information with higher relevance to you, providing services that better meet your requirements. We will collect and use your personal information and automatically calculate and predict your preferences through algorithm models to match information or services you may be interested in. Below we will explain in detail how this personalized recommendation service works and how to disable this feature.

a) The scope of information and services we provide personalized recommendations includes but is not limited to displaying news, web pages, articles, and other graphic or video content, providing search results, recommending products, recommending service features, etc.

b) To provide you with personalized services, we may collect and analyze your behavior information when visiting Enbrands (such as your browsing records, access dates and times, search records, comments and likes, etc.), account information, device information (such as device model, device operating system), network information, IP address, order information, transaction information, service information, basic personal information (such as education, country/region, position).

c) We will train and provide feedback on the recommendation model based on your content browsing behavior during use, continuously adjusting and optimizing recommendation results to better provide you with quality content and services.

Please note that this personalized recommendation algorithm does not identify the real identity of specific natural persons, but only provides more relevant and rich information based on user behavior and characteristics.

3. How Enbrands Uses Cookies and Similar Technologies

Cookies and similar device information identification technologies are commonly used technologies on the internet. When you use our services, we may use relevant technologies to send one or more Cookies or anonymous identifiers (hereinafter referred to as "Cookies") to your device to collect, identify, and store information when you access and use this product. We promise not to use Cookies for any purpose other than those described in this privacy policy. We mainly use Cookies to ensure the safe and efficient operation of products and services, which can help us confirm the security status of your account and transactions, investigate crashes, delays, and related anomalies, and help you avoid repeating form filling and search content entry steps and processes.

At the same time, we may use Cookies to show you information or features you may be interested in and optimize your advertising choices. Most browsers provide users with the function to clear browser cache data. You can perform corresponding data clearing operations, or modify the degree of Cookie acceptance or refuse our Cookies. You may not be able to use services or corresponding functions that depend on Cookies due to these modifications.

4. How Enbrands Shares, Entrusts, Transfers, and Publicly Discloses Your Personal Information

4.1 Sharing

We will not share your personal information with third parties, except in the following circumstances:

a) Sharing with your explicit consent. After informing you of the third party's name or identity, contact method, processing purpose, processing method, and types of personal information, and obtaining your explicit consent, Enbrands will share information within your authorized scope with the third party you consent to;

b) Sharing necessary to fulfill relevant agreements signed between you and us (including agreements and platform rules) and other legal documents;

c) Sharing in statutory circumstances. Sharing your personal information as required by applicable laws and regulations, legal procedures, litigation/arbitration, government mandatory orders, regulatory requirements; such as to meet relevant laws and regulations on network real-name authentication requirements, sharing your personal information with relevant government agencies or their designated or recognized third parties;

d) Where legally required or permitted, it is necessary to provide your personal information to third parties to protect the interests, property, or safety of you, Enbrands, Enbrands users, or the public from harm;

e) Sharing your personal information where necessary to protect national security, public safety, and your and other individuals' significant legitimate rights and interests;

f) Personal information you have voluntarily disclosed or that we can obtain from other legally public channels;

g) We may share your personal information with our affiliates, and your personal information may be shared between our affiliate companies. We will only share necessary personal information, and such sharing is subject to the purposes of this statement. If affiliate companies want to change the processing purpose of personal information, they will seek your authorization and consent again. Furthermore, before providing information to affiliate companies, we will make commercially reasonable efforts to evaluate the legality, legitimacy, and necessity of information collected by that affiliate company. We will try our best to require affiliate companies to take protective measures for your information.

h) Sharing with business partners as necessary to provide services. We may share your order information, account information, and device information with partners and other third parties to ensure the successful completion of services provided to you. However, we will only share your personal information for legitimate, necessary, specific, and explicit purposes, and will only share personal information necessary to provide services. To ensure your personal information security and privacy, we have clearly defined through agreements the protection responsibilities, obligations, and requirements of partners for your personal information. Partners may have their own independent privacy policies and user agreements, and we recommend that you read and comply with third-party user agreements and privacy policies.

Third-party partners, such as independent software or service providers. As necessary to provide services, we may share your account information, contact information, order information, necessary transaction information, and transaction dispute information with third-party partners to fulfill your needs to purchase goods or services from them, and enable merchants to complete product sales, after-sales service, and service delivery. For example, when you purchase goods from other service providers on the Enbrands platform, we must share your information with third-party partners for the transaction to be completed.

In the above circumstances, we will inform you of relevant information about currently involved third parties. For more details, please refer to the "Third-Party Information Sharing List".

4.2 Entrusted Processing

We may entrust partners to process your personal information to provide you with corresponding services. We will sign agreements with entrusted partners requiring them to strictly process your personal information in accordance with our instructions, this statement, and any other relevant confidentiality agreements and take security measures. We will require our partners to have no right to use your personal information provided by us for any other purpose. Our entrusted partners include the following types:

a) Entrusted parties for goods or technical services. With your authorization, we may provide your personal information to entrusted parties who support this platform's functionality. This support includes:

Entrusted parties providing warehousing, logistics, customer service, and other services. When you purchase Enbrands services, we may provide your personal information to these entrusted parties, who will provide you with logistics delivery, identity verification, order payment, support services, customer service, survey responses, prize distribution, service recommendations, etc.

b) Service-type entrusted parties for advertising, research, analysis, follow-up, etc. Based on your authorization, we may provide your personal information to the following entrusted parties who provide services to you:

To provide you with better quality services, we may push commercial advertisements about Enbrands or related to Enbrands that you may be interested in based on your account information and basic personal information, and we may provide your personal information to advertising service partners.

To conduct user research, we may entrust research service entrusted parties to collect questionnaire response information and analyze research results.

We may entrust our affiliates (including but not limited to Shenzhen Enbrands Technology Co., Ltd.) to process your personal information for them to provide you with transaction support, service support, or security support, including invoicing, certification, auditing, payment processing, reconciliation, auxiliary account support, supply management, service procurement, and provision.

4.3 Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

a) Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;

b) When transfer of personal information is required due to restructuring, merger, division, dissolution, or declaration of bankruptcy, your personal information may also be disclosed to the transaction party.

4.4 Public Disclosure

We will not publicly disclose your personal information, except in the following circumstances:

a) After obtaining your separate consent, publicly disclose your personal information;

b) Circumstances requiring disclosure based on applicable laws and regulations, to protect national security, public safety, and your and other individuals' significant legitimate rights and interests, we may disclose your personal information. For example, when we believe disclosure is necessary or appropriate to prevent or protect against network threats, fraud, personal injury, or financial loss, or when it relates to an investigation of suspected or actual illegal activity.

We only disclose your personal information within the scope permitted by applicable laws and regulations and in accordance with this statement.

4.5 Third-Party SDKs

During your access or use of the Enbrands platform, some services need to be provided to you jointly by Enbrands and third-party partners, such as social sharing, etc. For this purpose, we have integrated software tool development kits (hereinafter referred to as "SDKs") or other similar applications from third-party partners. For more details, please refer to the third-party SDK list.

5. How Enbrands Protects Your Personal Information

We value the security of your personal information. We employ appropriate physical, administrative, and technical safeguards to protect your personal information. For example, we use encryption technology to ensure information confidentiality; we use protection mechanisms to prevent information from being maliciously attacked; we deploy access control mechanisms to ensure only authorized personnel can access personal information; and we hold security and privacy protection training to strengthen employee awareness of the importance of protecting personal information. We will do our best to protect your personal information, but please note that no security measures can be foolproof. To protect your personal information, we have taken the following measures:

a) Establish a privacy protection organization, clarify the data protection officer (DPO) and their responsibilities, and assess and manage personal information protection risks.

b) Develop data security and personal information protection policies, including security breach response, personal information leak management processes, etc., to ensure lawful and compliant processing of personal information in all aspects of collection, storage, use, transmission, provision, and disclosure, and to report and notify within 72 hours according to regulatory requirements in the event of data leaks or security incidents.

c) Hold security and privacy protection training courses, tests, and awareness activities to ensure employees understand personal information protection legal requirements and company internal standards, improving employee personal information protection awareness.

d) Follow the "minimum necessity principle" and "purpose limitation principle" in business design and data processing processes, collecting only personal information necessary to achieve business functions.

e) Implement access control, access control systems, and a series of measures to ensure physical security of data centers, preventing unauthorized access, damage, or interference with Enbrands infrastructure.

f) Deploy access control mechanisms, authenticate and manage hierarchical permissions for personnel accessing data according to business needs and personnel levels, ensuring only authorized personnel can access personal data.

g) Clearly define and assign network security roles and responsibilities, implement separation of duties based on risk assessment to reduce risk and prevent unauthorized personnel from using data processing systems.

h) Use recommended industry-standard protocols for encryption and pseudonymization of personal data during storage and transmission as appropriate to prevent data leaks and unauthorized access.

i) Degauss废弃 storage media before returning to warehouse to ensure software overwriting processing before disposal, preventing data leakage. Where this cannot be achieved (CDs, DVDs, etc.), physical destruction will be performed.

j) Implement appropriate operation and maintenance security management and technical measures, including identity authentication and access control, change and event management, vulnerability management, configuration management, event logging, continuous monitoring of network security events and threats, timely detection of anomalies, and proactive measures to ensure personal information cannot be read, copied, modified, or deleted by unauthorized persons.

k) Deploy DDoS protection systems, intrusion detection systems, and other protection mechanisms to protect networks from attacks, develop vulnerability management strategies, evaluation standards, and management processes to achieve full lifecycle management of security vulnerabilities. At the same time, regularly run vulnerability scanners to timely discover potential security vulnerabilities and take response measures.

l) Strictly select business partners and service providers, incorporate personal data protection requirements into commercial contracts, audits, and assessment activities.

m) Establish personal information subject rights response mechanisms to ensure users enjoy rights such as right to know, right to access, right to correction, right to deletion, right to withdraw consent, and data portability as provided by law. Users can submit relevant requests through official channels, and we will respond within the statutory time limit.

n) Once a security incident involving personal information is discovered, immediately activate emergency response mechanisms, take remedial measures, assess the scope of impact, and report to relevant competent authorities in a timely manner according to the requirements of Article 57 of the Personal Information Protection Law, and notify affected individuals.

Although we have a responsibility to protect your personal information, you also have a responsibility to properly keep your login information, including account ID and password, etc. If you discover that others are using your account ID to use the Enbrands website without your permission, please notify us immediately. You have the right to request us to suspend unauthorized use of your account.

We will do our best to protect your personal information, but no measures can be foolproof, and no service, website, information transmission, computer system, or network connection is absolutely secure.

To address possible risks such as personal information leakage, damage, and loss, Enbrands has developed multiple systems and control measures, clarifying classification and grading standards and corresponding processing procedures for security incidents and security vulnerabilities. Enbrands has also established a dedicated emergency response team for security incidents, activating security plans according to security incident handling specifications, performing loss mitigation, analysis, positioning, and remedial measure development for different security incidents.

6. Retention Period of Personal Information

We will retain your personal information for the period necessary for the purposes described in this statement, unless extended as required by law. The retention period may vary based on different processing purposes and services.

Generally, after you cancel authorization or cancel your account, according to applicable legal requirements or service agreement provisions, we will store or retain your personal information within the retention period. After your personal information exceeds the retention period, and there is no legal requirement for us to continue processing your specific personal information, we will delete your personal information or anonymize it according to applicable legal requirements. For example, we will save your registration information according to the period specified in relevant laws and regulations such as the "Cybersecurity Law of the People's Republic of China", with a retention period of six (6) months after you cancel your account. Your registration information includes name, mobile number, email, contact address, and account information (account name, account ID and password, keys).

7. How to Access or Control Your Personal Information

You should ensure that all personal information you submit is accurate. We will do our best to maintain the accuracy and completeness of your personal information and update your personal information in a timely manner based on the information you provide to us.

You have the right to submit requests for access, correction, deletion, etc. to Enbrands regarding relevant personal information retained by Enbrands (hereinafter collectively referred to as "requests").

You can easily modify the personal information we hold about you in the following ways:

a) Account information: If you use the Enbrands platform and want to add or update personal information related to your account, please visit the official website and log in to your account, and operate through the path "Personal Center" > "Personal Information Settings" (or corresponding function module).

b) Cookies: For Cookie management, please refer to our Cookie policy.

c) Message reception settings: If you use the Enbrands platform, please log in to your account and operate through the path "Personal Center" > "Message Notification Settings" > "Message Reception Management"; you can also directly click the "Inbox Icon" in the upper right corner of the account to enter and check/uncheck message channels you don't need to receive, such as email, SMS, system notifications, etc.

According to applicable laws and regulations, you may enjoy the following rights regarding your personal information:

a) The right to access your personal information held by us and obtain copies;

b) The right to request us to update or correct your personal information;

c) The right to request us to delete your personal information;

d) The right to object to our processing of your personal information;

e) The right to restrict our processing of your personal information;

f) The right to file complaints and reports with relevant government regulatory authorities.

Please note that these rights are not absolute and may be restricted according to applicable law. If you need our assistance in exercising the above request rights, please contact us through "How to Contact Enbrands" below.

Unless otherwise required by applicable laws and regulations, we will generally respond to your request within fifteen working days.

Please note that in some circumstances, your request may be rejected, for example, we cannot verify your identity, or your request exceeds the scope of rights granted by law. We will inform you in writing of the circumstances of your request being rejected and the reasons for rejection.

You can change the scope of our authorization to continue collecting personal information or withdraw your authorization. Your decision to withdraw consent or authorization will not affect personal information processing activities previously carried out based on your authorization. You can contact us through "How to Contact Enbrands" below for assistance.

In Enbrands-related services, you can also withdraw all authorizations for us to continue collecting your personal information by canceling Enbrands services.

You can apply to cancel Enbrands services in Enbrands-related services. After you cancel Enbrands services, we will stop providing services to you. Unless otherwise provided by laws and regulations, we will delete your personal information. After canceling Enbrands services, if you want to enjoy related services again, you need to re-activate Enbrands services. Your cancellation of the above Enbrands services is an irreversible action. Once you cancel Enbrands services, you will not be able to restore services provided by Enbrands bound to that account. Please operate with caution.

8. How Enbrands Handles Personal Information of Minors

Our services are intended for adults. Minors under the age of 14 may not create their own user accounts without the consent of a parent or guardian.

For personal information of minors under the age of 14 collected with parental consent, we will only use or disclose this personal information in circumstances permitted by law, with explicit consent from a parent or guardian, or as necessary to protect the minor under 14 years of age.

If Enbrands discovers that it has collected personal information of minors under the age of 14 without prior verifiable parental consent, it will attempt to delete the relevant personal information as soon as possible.

9. How This Statement is Updated

We may update or modify this statement from time to time based on changes in our services or personal information processing. If we update this statement, we will display the changed statement to you through announcements, pop-ups, etc. If we make any significant changes to this statement based on applicable laws and regulations, we will notify you through appropriate channels and re-obtain your consent.

10. How to Contact Enbrands

We have established a dedicated personal information protection department. You can contact them via [privacy@enbrands.com] (please indicate that it relates to [Enbrands] and explain the specific facts). We will respond as soon as possible. Please note that we may not respond to questions unrelated to this policy or your personal information rights.

If you are not satisfied with our response, especially if you believe our personal information processing practices have harmed your legitimate rights and interests, you can also seek resolution by filing a lawsuit with a court having jurisdiction over the defendant's domicile.

Last Updated: March 13, 2025