Preface

Personal Information Protection Policy

1. All employees fully recognize the importance of personal information protection. Personal information is collected, used, and provided only to the extent necessary to achieve the Company’s business purposes, in a lawful, fair, and necessary manner, and is never used beyond the original purpose. If use beyond the original purpose is genuinely required, your consent will be obtained again before such use.
2. We comply with laws, regulations, national standards, and the Company’s internal rules on personal information protection, and handle personal information in good faith. We monitor legal updates, communicate relevant requirements to our employees and partners, and ensure joint compliance.
3. Reasonable technical and administrative safeguards are in place against leakage, loss, or destruction of personal information. Regular inspections are conducted; identified violations, incidents, and accidents are corrected promptly, and preventive measures are taken against weaknesses. We also provide ongoing information security training to employees and partners.
4. Complaints and inquiries concerning the Company’s handling of personal information and its protection rules are handled promptly and appropriately from the moment they are received. Related mechanisms and processes are continuously improved to remain effectively responsive.
5. To regulate the use of personal information and protect it effectively, the Company supervises and audits compliance with internal rules, promptly identifies violations, incidents, accidents, and weaknesses, and has management review them. Review results are reflected in management measures and internal rules to continuously improve the personal information protection management system. All such improvements are based on the Personal Information Protection Law of the People’s Republic of China and other applicable laws.