Privacy Policy

1. Introduction

Beijing Yuansheng Tengyuan Technology Co., Ltd., operating under the trade name Yuan Sheng, with a registered address at Room 203, South Building, No. 1, Xingqiao Street, Qiaozhi Town, Huairou District, Beijing — 100000, China, is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and disclose the data we receive from visitors to our website at yuansheng.buzz and from individuals who engage with our services.

By accessing our website or providing your information to us, you acknowledge that you have read and understood the practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our website and refrain from sharing personal data with us.

Scope

This policy applies to all information collected through our website, email communications, contact forms, and any other channel through which you may interact with Yuan Sheng in the context of our technology consulting and computer systems design services. It does not extend to third-party websites that may be linked from our pages — we encourage you to review the policies of any external site you visit.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us through our website form, send us an email, or communicate with us by telephone, we may collect the following categories of information:

• Identity and contact data: your full name, email address, telephone number, company affiliation, and job title.
• Communication content: the subject, body, and any attachments included in your messages to us.
• Project details: information about your organization, technical requirements, and business objectives that you choose to share in the context of a prospective or active engagement.

2.2 Information Collected Automatically

When you visit our website, our hosting infrastructure and analytics tools may automatically collect certain technical information, including:

• Log data: your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of each request.
• Device information: device type, screen resolution, and language preferences.
• Usage patterns: page scroll depth, time on page, and click interactions — collected in anonymized, aggregate form.

We do not use browser cookies for tracking or advertising purposes on our website. Any temporary session identifiers that may be set by our hosting platform are strictly functional and expire when you close your browser.

2.3 Information We Do Not Collect

We do not collect, store, or process sensitive personal data (such as government identification numbers, financial account credentials, biometric data, or health information) through our website. We do not knowingly collect data from children under the age of 16. If you believe we have inadvertently received such data, please contact us immediately so we may delete it.

3. How We Use Your Information

We use the information we collect exclusively for the following purposes, each grounded in a legitimate business interest or your explicit consent:

• Responding to inquiries: to answer your questions, provide information about our services, and schedule consultations.
• Service delivery: to scope, plan, and execute technology consulting and systems design engagements that you have requested.
• Business communications: to send you proposals, contracts, invoices, project updates, and other communications directly related to an active or prospective business relationship.
• Legal compliance: to meet our obligations under applicable Chinese law, including tax regulations, data protection requirements, and lawful requests from governmental authorities.
• Website improvement: to analyze aggregate usage patterns and improve the performance, content, and user experience of our website.

We will never use your personal data for automated decision-making, profiling, or any purpose that produces legal effects concerning you without your explicit, prior consent. We do not sell, rent, or trade your personal information to any third party for any purpose.

4. Legal Basis for Processing

Our processing of personal data is conducted under the following lawful bases, as applicable under the Personal Information Protection Law of the People's Republic of China and other relevant regulations:

• Consent: where you have given clear, affirmative consent for us to process your data for a specific purpose — such as when you submit a contact form.
• Contractual necessity: where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
• Legitimate interests: where processing is necessary for our legitimate business interests — such as improving our services and responding to inquiries — and those interests are not overridden by your data protection rights.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation to which we are subject.

5. Data Storage and Retention

Your personal data is stored on secure servers located within the People's Republic of China. We implement appropriate technical and organizational measures — including encryption at rest and in transit, access controls, and regular security reviews — to protect your data against unauthorized access, alteration, disclosure, or destruction.

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention guidelines are as follows:

• Contact form submissions and correspondence: retained for the duration of the inquiry plus 24 months, after which they are securely deleted unless an ongoing business relationship exists.
• Client project data: retained for the duration of the engagement plus the applicable statute of limitations for contractual claims under Chinese law.
• Website analytics (anonymized): retained in aggregate for up to 26 months.

At the end of the applicable retention period, personal data is either irreversibly anonymized or securely deleted using industry-standard data sanitization methods.

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following limited circumstances:

• Service providers: we may share data with trusted third-party vendors who assist us in operating our website, hosting our infrastructure, or managing our business communications — provided those parties agree to keep your information confidential and process it only on our instructions.
• Legal requirements: we may disclose your information when required to do so by law, regulation, court order, or a valid and binding request from a governmental authority with proper jurisdiction.
• Business transfers: in the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction — subject to the same protections described in this policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not permit our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes in accordance with our instructions.

7. Cross-Border Data Transfers

As a company based in the People's Republic of China, your data is primarily stored and processed within mainland China. In certain circumstances — for example, when we use a globally distributed content delivery network or infrastructure provider — technical data may be transmitted across borders. In all such cases, we ensure that appropriate safeguards are in place, including standard contractual clauses and security assessments, to maintain a level of protection equivalent to that required under Chinese data protection law.

8. Your Rights

Under the Personal Information Protection Law of the People's Republic of China and other applicable regulations, you have the following rights regarding your personal data:

• Right of access: you may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with information about how and why it is processed.
• Right of rectification: you may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right of erasure: you may request the deletion of your personal data in certain circumstances — for example, when the data is no longer necessary for the purpose for which it was collected, or when you withdraw your consent.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have challenged.
• Right to data portability: you may request a copy of your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 11 below. We will respond to your request within 30 calendar days. We may need to verify your identity before fulfilling certain requests. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

9. Security

We take the security of your data seriously. We implement and maintain technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers.
• Encryption at rest for stored personal data.
• Role-based access controls that limit data access to personnel who require it for legitimate business purposes.
• Regular security assessments and vulnerability scanning of our infrastructure.
• Employee training on data protection obligations and secure handling practices.

However, no method of transmission over the Internet or method of electronic storage is entirely secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or for other operational reasons. When we make material changes, we will:

• Post the updated policy on this page with a revised effective date.
• Provide a prominent notice on our website for a reasonable period following the update.
• If the changes are significant and we have your contact information, notify you directly via email.

We encourage you to review this policy periodically. Your continued use of our website after the effective date of an updated policy constitutes your acceptance of the revised terms.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Data Protection Officer
Beijing Yuansheng Tengyuan Technology Co., Ltd.
Room 203, South Building, No. 1, Xingqiao Street,
Qiaozhi Town, Huairou District,
Beijing — 100000, China

Email: touch@yuansheng.buzz
Phone: +86 183 0825 6722

You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe that our processing of your personal data violates applicable law.