Data Subject Rights and Account Closure

内蒙古优讯通讯有限责任公司 (referred to below as "we", "us" or "our") operates the uxtrade.net website and the accompanying "优讯通讯" WeChat Mini Program. This notice expands and operationalises Section 8 ("Your Rights") and Section 9 ("Account Closure and Data Deletion") of our Privacy Policy. It explains, item by item, which data subject rights you can exercise, through which channel you can make a request, what materials we need, how long we normally take to reply, and in which cases we may be unable to grant a request. The legal bases for these rights, together with international transfers, retention periods and security measures, are set out in the "Appendix: Uniform Legal Terms" at the end of this page and are not repeated here.

1. What this page covers

The law grants you rights of information, access, copying, rectification, erasure, restriction of processing, objection to processing, withdrawal of consent and complaint. How those rights are worded in the statutes is set out in the "Appendix: Uniform Legal Terms" at the end of this page. This page answers a more practical question: on the uxtrade.net website and in the "优讯通讯" Mini Program, how can you actually exercise these rights today?

So that this page does not mislead you, we state three facts about the current state of the product up front:

• There is currently no self-service account closure. Neither the website nor the Mini Program has a "close my account" button. Closure must be requested through the human channel described in Section 3 below.
• There is currently no self-service data export. There is no "export my data" entry point anywhere, so copying and data portability requests must also be made by email.
• What the member centre can do by itself is limited. After signing in, the /account page lets you view the name, email address and phone number held in your account, and log out. Everything else requires contacting us.

We will build closure and export entry points into the website and the Mini Program once the conditions allow, and will update this page accordingly. Until those entry points go live, the channels described on this page are the only ones available.

2. Which rights you can exercise

Each item below sets out whether you can act by yourself, how to submit the request, what materials are required, and how long a reply takes. Unless stated otherwise, all requests are made to our legal and privacy mailbox at sales@uxtrade.cn.

2.1 Information and access (right of access)

What you can do yourself: after signing in to the website, the /account page lets you view the name, email address and phone number stored in your account.

What requires an email request: enquiry records, quotations and contract records, repair (after-sales) records, material you have uploaded, and access logs linked to your account are not currently shown in a self-service view. Please write from your registered email address to sales@uxtrade.cn. In our reply we will explain the source of the information, the purposes of processing, any disclosures to third parties, and the approximate retention arrangements. Where content concerns another person's personal data, our trade secrets, or information that may not lawfully be disclosed, we will provide it in excerpted or redacted form, or explain why we cannot provide it.

2.2 Copying and data portability

Current position: there is no self-service export. Please apply by email from your registered address and tell us the format you would prefer. We will provide your account information and the quotation records held under your name in a commonly used, readable and machine-readable format (for example CSV, JSON or PDF).

The following cannot be provided: content that contains another person's personal data, our trade secrets and internal risk-control information, content protected by third-party intellectual property rights, and content whose disclosure is prohibited by law or administrative regulation. We will try to meet your reasonable needs through redacted or summarised material. Portability requests in principle cover information you have provided to us yourself, and information we process on the basis of your consent or the performance of a contract.

2.3 Rectification and completion

Account information: fields you can edit in the member centre, such as your name, email address and phone number, should be corrected by you directly. If a field cannot currently be edited on the page, write from your registered email address describing the correction, and we will update it after verification.

Business records: if a quotation, contract or repair record contains something that does not match the facts (for example a wrong contact person or project description), please write to us stating the error and the correct content. After verification we will correct it and, to the extent necessary and feasible, notify the recipients who previously received that information.

2.4 Erasure (right to be forgotten)

You may ask us to erase your personal data in the following situations:

• the purposes of processing have been achieved, or the data is no longer necessary for the service;
• you withdraw your consent and there is no other lawful basis for processing;
• we processed your information in breach of the law or of our agreement with you;
• we stop providing the relevant service and there is no longer any need to keep the data.

Please distinguish "erasure of personal data" from "account closure": closing an account is not the same as erasing every record. The minimum records required to comply with legal obligations (for example retention needed for contracts already concluded, and logs and vouchers that must lawfully be kept), to handle disputes, or to ensure security will be retained for the retention periods set out in the "Appendix: Uniform Legal Terms" at the end of this page, and will be deleted or anonymised once those periods expire.

Where the law prevents erasure, we will clearly tell you the reason why the data cannot be erased, and we will stop all processing other than storage and restriction of processing.

2.5 Restriction of processing

You may ask us to restrict the processing of your information (for example, to store it without using it for any other purpose) where: you contest the accuracy of the data and we are verifying it; you consider the processing unlawful but do not want the data erased; you have objected to processing and we are assessing whether your objection is well founded; or the data is no longer needed for processing but you still need it to establish, exercise or defend legal claims.

2.6 Right to object

Where processing is based on our "legitimate interests", you have the right to object. In our case the typical example is the security analysis of access logs (used to detect malicious traffic and keep the site secure). Once we receive an objection we will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

About marketing: we state openly that this platform does not currently send marketing pushes or marketing text messages, and does not run advertising based on user profiles. There is therefore no "objection to marketing" scenario here. If we introduce such activities in future, we will first obtain your consent as required by law and add the objection channel here.

2.7 Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time. This includes WeChat login authorisation, phone-number authorisation, and the submission of an avatar and nickname. There are two ways to withdraw: cancel this Mini Program's authorisation yourself on the WeChat side (see Section 5), or write to us asking us to erase the corresponding information. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal, nor does it affect processing we carry out on other legal bases, such as performance of a contract or compliance with a legal obligation.

2.8 No decisions based solely on automated processing

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. This platform does not practise automated price discrimination, and does not automatically refuse service to anyone purely by algorithm; quotation and contract terms are confirmed by a human. If such mechanisms are introduced in future, we will inform you in advance and provide for human intervention and for you to express your point of view.

2.9 Complaints

You may complain to us first at sales@uxtrade.cn, or complain directly to the personal data protection supervisory authority in your country or region — for example a national data protection authority in an EU or EEA member state, the UK Information Commissioner's Office (ICO), or the Cyberspace Administration of China and its local offices. If you are willing to contact us first, we will do our best to resolve the matter through that prior dialogue. Making a complaint to us does not affect your right to turn to a supervisory authority.

2.10 No discrimination

Exercising any of the rights above will not result in service being refused to you, and will not lead to discriminatory treatment in price, response time or service quality. We will not restrict your ordinary business dealings on the ground that you have made a rights request.

3. How to submit a request

Channel: our legal and privacy mailbox, sales@uxtrade.cn. Please use a subject line in the form "Personal data rights request + type of request" (for example "Personal data rights request - access" or "Personal data rights request - erasure"), and set out in the body which right you wish to exercise and exactly what you are asking for, so that we can route it quickly. Please note: for business enquiries, quotations and repairs, contact us at 16604712005 or sales@uxtrade.cn. Do not send rights requests to the business mailbox, as they may be handled as ordinary commercial correspondence and delayed.

Identity verification: to prevent someone else from impersonating you, we verify the identity of the requester first. Our usual practice is to ask you to write from your registered email address and to provide the last four digits of your registered phone number or other verifiable information. For high-risk operations such as erasure, data export or account closure, we may require stronger verification (for example a call-back to the phone number you registered). Verification is only used to prevent others from obtaining your information and is not used for any other purpose.

Requests made on behalf of someone else: if you are acting for another person, you must provide a written authorisation (power of attorney) signed by the data subject, together with identity documents for both the data subject and yourself. If authorisation materials are missing, we will ask you to complete them.

Requests by a guardian for a minor: materials proving the guardianship relationship are required (for example a household register, a birth certificate or a notarised guardianship document). The detailed position and the list of acceptable documents are set out in "Children's Personal Information Protection" (a dedicated page on this site, path /[locale]/children).

Response time: after receiving a complete request we normally reply within 15 working days. If the matter is complex and more time is needed, we will tell you the reason for the extension and the expected response time. If your request is unclear, we will first confirm the details with you; that confirmation period does not count towards the time limit above.

Fees: in principle free of charge. For manifestly repetitive requests, requests that clearly exceed a reasonable scope, or requests that are manifestly unfounded, we may refuse, or we may charge a reasonable fee proportionate to the cost of processing after clearly informing you in advance and giving reasons.

4. When we may refuse, or refuse in part

Data subject rights are not absolute. In the following situations we may refuse a request, refuse it in part, or meet your reasonable needs in another way:

1. we cannot verify your identity, or the requester cannot show that they are entitled to act for the data subject;
2. the request is manifestly unfounded or clearly excessive (for example, repeated identical requests within a short period);
3. granting the request would adversely affect the rights and freedoms of others (other data subjects);
4. the law or an administrative regulation requires us to retain the information, or prohibits us from providing it to you;
5. the request concerns our trade secrets, or content protected by third-party intellectual property rights;
6. providing the information would obstruct ongoing judicial, administrative or law-enforcement proceedings.

If we refuse a request in whole or in part, we will give you our reasons and tell you that you may complain to the supervisory authority named in Section 2.9 of this page. Where the refusal is because the law prevents erasure or disclosure, we will also explain the scope of what we must continue to retain and the basis for retaining it.

5. Account closure

Closing your account unbinds your email address and phone number from the account and makes it impossible to sign in. The following explains how closure works for the website account and for the WeChat Mini Program account.

5.1 Website account

Current position: there is no self-service closure button on the site. Please send a closure request from your registered email address to sales@uxtrade.cn, with the subject "Account closure", stating in the body the email address or phone number associated with the account and a clear intention to close it. After verifying your identity we will process the request, normally within 15 working days, and reply by email with the outcome.

5.2 WeChat Mini Program account

Current position: there is no self-service closure entry point inside the Mini Program. Please raise the request through our customer-service channels: by phone on 16604712005, or by email to sales@uxtrade.cn, telling us your Mini Program nickname and phone number. After verification we will delete or anonymise your Mini Program account information, including openid, nickname, avatar and phone number.

Important: closing the Mini Program account does not automatically revoke the authorisation granted on the WeChat side. To revoke the authorisation, you must also cancel this Mini Program's authorisation in WeChat under "Settings - Privacy - Authorisation Management". This step can only be carried out by you inside the WeChat client; we cannot do it on your behalf.

5.3 Consequences of closure

• the account can no longer be used to sign in, and the associated login session will become invalid;
• ongoing matters linked to the account (for example an enquiry in progress, a quotation share link already issued, or a repair work order that is not yet complete) may no longer be viewable or trackable online, so please save the information and documents you need beforehand;
• obligations under contracts already concluded, together with the corresponding after-sales and warranty responsibilities, are not discharged by closure. Closing an account is not the same as terminating a contract.

5.4 Retention and deletion boundaries after closure

Once closure has been processed, your account data and Mini Program account information will be deleted or anonymised. At the same time, the minimum records required by law or necessary for handling disputes (for example contracts already concluded and evidence of their performance, logs that must lawfully be kept, and necessary financial vouchers) will be retained for the retention periods set out in the "Appendix: Uniform Legal Terms" at the end of this page, and deleted or anonymised when those periods expire. After the retention period ends we will no longer use that information in a form that identifies you.

6. The current position on closure and data export

We repeat this here so that there can be no misunderstanding: neither the uxtrade.net website nor the "优讯通讯" Mini Program currently offers a self-service closure or self-service data export button. The member centre page can only display your name, email address and phone number and log you out, and the "Me" page of the Mini Program has no closure entry either. The human channels described in Sections 3 and 5 are the only way to have these requests handled today.

This reflects the current state of the product's capabilities, not a refusal on our part to perform our obligations. We will build closure and export entry points into the website and the Mini Program when conditions allow, and will update this page at that time. Until then, requests made to sales@uxtrade.cn or to our customer-service phone line will be handled in the manner and within the timescales promised on this page.

7. Minors

Our services are aimed at business customers and adult individual users, and are not directed at minors. If you are under 18, please use these services with the consent and guidance of a guardian; if you are under 14, a guardian must submit information or operate the account on your behalf.

Where a guardian wishes to access, rectify or erase a minor's information, or to close the account, please write to sales@uxtrade.cn and provide evidence of the guardianship relationship. Our age thresholds, guardian-consent requirements and dedicated processing rules are set out in "Children's Personal Information Protection" (a dedicated page on this site, path /[locale]/children).

8. Security reminders

Rights requests are sensitive operations, because if someone impersonates you they may be able to access, export or even delete your information. Please note the following:

• always make your request from your own registered email address, and do not use an unknown third party to act for you;
• we will never ask you for your account password, SMS verification code, bank card number or payment password by email or telephone. Anyone who asks for such details while offering to "help you close your account" or "help you export your data" is not us;
• check the sending domain and contact details, and be alert to phishing emails that impersonate us;
• if you suspect that someone is making a request in your name, tell us immediately on 16604712005 or at sales@uxtrade.cn; we will suspend processing and verify again;
• account closure and data export are irreversible, so before submitting a request please make sure you have backed up the quotations, contracts and repair information you need to keep.

9. Changes, contact and the Appendix

We may update this notice. When we do, we will change the version number and effective date on this page and publish them here. For material changes such as a change to the request channels, the response times, or the way you exercise your rights, we will give you advance notice by a prominent notice on the page.

For personal data protection matters (access, copying, rectification, erasure, restriction of processing, objection, withdrawal of consent, account closure and complaints), please contact our legal and privacy mailbox at sales@uxtrade.cn. In urgent cases you may also call 16604712005 or write to our complaints mailbox at sales@uxtrade.cn. For business enquiries and repairs, please use 16604712005 or sales@uxtrade.cn.

Information about the controller, legal bases, third-party processors, international transfers, retention periods, security measures, changes and effectiveness, governing law and language of authority is set out in the "Appendix: Uniform Legal Terms" at the end of this page. Current version: 1.0; effective date: 2026-09-01. The Simplified Chinese version of this page is authoritative; other language versions are reference translations.

Appendix: Common Legal Terms (applying to all agreements and policies on this site)

This appendix contains the common terms of our Privacy Policy, Cookie Policy, Terms of Service, Disclaimer, Acceptable Use Policy, Intellectual Property and Trademark Notice, Children's Privacy Notice, Data Subject Rights and Account Closure Notice, Report and Infringement Complaints page and Accessibility Statement. It is displayed together with each of those documents.

Appendix 1. Identity and contact details of the controller

• Personal information handler (data controller): 内蒙古优讯通讯有限责任公司
• Registered address: Hohhot, Inner Mongolia, China
• Website: uxtrade.net
• General business contact: sales@uxtrade.cn; 16604712005
• Dedicated privacy and legal affairs mailbox: sales@uxtrade.cn
• Reports and infringement complaints: sales@uxtrade.cn; 16604712005
• Website filing (ICP): 蒙ICP备2026005797号-2

For the processing activities described in these documents, we are the "personal information handler" within the meaning of the Personal Information Protection Law of the People's Republic of China and the "controller" within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR).

Our main establishment is in the territory of the People's Republic of China. If applicable foreign law requires us to appoint a local representative (for example under Article 27 GDPR) or a data protection officer, we will make that appointment in accordance with the law and publish it on this page. Until such an appointment is made, you may contact us directly at sales@uxtrade.cn and we will handle your request ourselves.

Appendix 2. Processing activities, categories of data and legal bases

The list below sets out the processing activities we actually carry out, the categories of data involved and the corresponding legal bases (Article 6(1) GDPR).

• Account registration and sign-in — Data: name, mobile number, email address, password hash, session identifier. Legal basis: necessary for the performance of the service contract you request (Article 6(1)(b)); protecting account and system security is our legitimate interest (Article 6(1)(f)).
• Quotation and contact forms — Data: name, telephone number, email address, company name, description of requirements. Legal basis: necessary to take steps at your request prior to entering into a contract (Article 6(1)(b)). The form also contains a hidden "honeypot" field that only detects automated spam submissions; genuine visitors never fill it in and it is not your personal data.
• Quotations, contracts and after-sales reconciliation — Data: customer name, contact telephone, email address, company name, project or requirement description, quotation line items and amounts, share token. Legal basis: performance of a contract (Article 6(1)(b)); after-sales and warranty traceability is our legitimate interest (Article 6(1)(f)).
• Online repair requests and online enquiries — Data: contact person, telephone number, equipment and fault description, enquiry nickname and message content. Legal basis: performance of a contract or steps taken at your request (Article 6(1)(b)).
• WeChat Mini Program sign-in, nickname/avatar and mobile number authorisation — Data: sign-in code, openid, the nickname and avatar URL you confirm, mobile number. Legal basis: your consent (Article 6(1)(a)). You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.
• Sending quotations and contracts by email — Data: recipient email address, subject line, body and attachments. Legal basis: performance of a contract (Article 6(1)(b)).
• Access logs and security protection — Data: IP address, request path and query parameters, request method, User-Agent, referrer, access time, and coarse IP-derived country, province/city and network operator. Legal basis: safeguarding service and network security and preventing attacks and abuse is our legitimate interest (Article 6(1)(f)); it also falls within the grounds permitted under Article 13 of the Personal Information Protection Law of the People's Republic of China, as further specified by Chinese law.
• Article popularity statistics (de-identified) — Data: a de-identified identifier consisting of the first 16 characters of a salted hash of the visitor's IP address. Legal basis: measuring content popularity is our legitimate interest (Article 6(1)(f)). The identifier contains no plaintext IP address and is not linked to any account.
• Content and asset management — Data: articles, product information, cases and illustrations that we write, photograph, generate or use under licence (some illustrations are generated by AI from text prompts). Legal basis: performance of a contract and our freedom to conduct business (Article 6(1)(b) and (f)).
• Compliance with legal obligations — Data: the minimum scope required by the competent authorities (filing information, material lawfully requested). Legal basis: legal obligation (Article 6(1)(c)).
• Handling reports and infringement complaints — Data: complainant identity and contact details, evidence of rights, URL of the content complained about. Legal basis: legal obligation and our legitimate interests (Article 6(1)(c) and (f)).

If we later introduce non-essential cookies or marketing communications, we will obtain your consent first and list them here. We do not subject you to automated decision-making that produces legal effects or similarly significantly affects you (for example automated price discrimination or automated refusal of service).

Appendix 3. Processors and third-party recipients

We engage the following third parties on a data-minimisation basis. They process data on our instructions and act as processors within the meaning of Article 28 GDPR. Each "purpose" arises only when the relevant function is actually used; it does not occur on every visit.

• Qiniu Cloud (object storage and content delivery): processes images, audio/video and text asset files, including avatars and on-site fault photographs that you upload. Purpose: asset storage and accelerated delivery.
• DeepSeek (api.deepseek.com; text generation and translation): processes text we submit, which may include quotation copy, product information, article drafts and image prompts, together with the project and requirement descriptions, company names and product specifications contained in them. Purpose: text generation, material drafting and multilingual translation.
• Alibaba Cloud Tongyi Qianwen / DashScope (including Qwen-Image and Tongyi Wanxiang; image generation): processes the text prompts we submit. Purpose: generating illustrations for the website and articles. Prompts are normally produced by a text model from internal material and generally do not contain your contact details.
• Tencent WeChat (Mini Program sign-in, fast mobile number verification, JS-SDK sharing): processes the sign-in code, openid, the nickname and avatar you authorise, the result of fast mobile number verification and the current page URL required for JS-SDK signatures. Purpose: identity within the Mini Program and sharing capabilities inside WeChat.
• Tencent WeCom (internal customer-service alerts): processes an event notification when a new online enquiry arrives (it does not contain the full conversation). Purpose: enabling our staff to respond promptly.
• The SMTP email service provider we configure (email delivery): processes the recipient address, subject line, and the body and attachments of quotations or contracts. Purpose: sending you quotations, contracts and notices.
• IP geolocation services (ipapi.co, ip-api.com) and a local IP database (ip2region): process the visitor's IP address, or country and region information derived from it. Purpose: identifying the region of origin, selecting the site language and applying security policies.
• CDN / reverse proxy and server hosting services: host the website, database and backups and process access request logs. Purpose: providing network connectivity, availability and disaster recovery.

Apart from the processors listed above, situations where you have given consent, and situations required by laws or by a lawful request of a judicial or administrative authority, we do not provide your personal information to any third party. We do not sell your personal information and we do not share it for third-party advertising purposes. We have not integrated any third-party advertising or cross-site behavioural tracking SDK.

Appendix 4. Cross-border transfers

• Your personal information is primarily stored and processed on servers located in the territory of the People's Republic of China; static assets are stored in a domestic object storage service (Qiniu Cloud).
• If you access or use our services from outside China, your personal information will be transferred to and processed in China. Such transfers are subject to Article 44 et seq. GDPR. We implement contractual and organisational safeguards for those transfers in accordance with applicable law and will put in place the required transfer mechanisms where the law so requires.
• Where we use service providers outside China to process text or prompts, the relevant text is transferred to those providers' systems. We submit only the text necessary for the processing purpose and seek to avoid submitting sensitive personal information unrelated to our business.
• Because using our services necessarily involves transferring data to China, please do not submit personal information if the law of your jurisdiction does not permit such a transfer. You may still browse the public content anonymously.

Appendix 5. Retention periods

• Account information (website membership and WeChat Mini Program): for as long as the account exists; deleted or anonymised after account closure.
• Enquiries, quotations, contracts and correspondence: for the duration of the service relationship and for 3 years afterwards (needed for after-sales support, warranty, reconciliation and limitation defences).
• Repair records: 1 year after the warranty period expires.
• Access logs (including IP address, User-Agent, request path and time): no longer than 6 months, after which they are deleted or aggregated into statistics that no longer contain IP addresses.
• De-identified identifiers used for article view counting: no longer than 12 months.
• Report and infringement complaint materials: 1 year after the matter is closed, for review and dispute handling.
• Records we must keep by law (for example concluded contracts, accounting vouchers, logs that authorities require us to retain): retained for the period prescribed by law, which may be longer than the periods above.

Once a retention period expires we delete or anonymise the data so that it can no longer be linked to you. These periods reflect our current system implementation and business needs and do not exhaust every situation required by law; where a longer retention period applies to a particular item of data, we will explain the specific basis.

Appendix 6. Your rights

To the extent provided by applicable law, you have the following rights in relation to your personal information. The methods of exercise, supporting documents and response times are set out in the Data Subject Rights and Account Closure Notice.

• Information and access: to learn whether we process your information and to obtain a copy.
• Rectification: to have inaccurate or incomplete information corrected or completed.
• Erasure: to have your personal information deleted in the circumstances provided by law.
• Restriction of processing: in certain circumstances, to require us to store the data without processing it further.
• Objection: to object to processing we carry out on the basis of legitimate interests.
• Data portability: to receive the information you provided to us in a structured, commonly used, machine-readable format.
• Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Not to be subject to solely automated decision-making.
• Complaint: you have the right to lodge a complaint with the personal data protection supervisory authority in your country or region (for example a national data protection authority in the EU/EEA, the UK Information Commissioner's Office, or the Cyberspace Administration of China and its local offices). If you contact us first at sales@uxtrade.cn, we will do our best to resolve the matter directly.

Exercising these rights will not lead us to refuse you service or treat you in a discriminatory way. To protect your information, we may verify your identity before acting on a request.

Appendix 7. Security measures

We apply technical and organisational measures appropriate to the risk. The measures listed below are all actually in place on this site; we do not list measures we have not implemented.

• Encryption in transit: the site is served over HTTPS and sends HSTS (Strict-Transport-Security) together with X-Content-Type-Options, Referrer-Policy, Permissions-Policy and a report-only Content Security Policy (CSP Report-Only).
• Password protection: account passwords are stored as salted bcrypt hashes; we neither store nor can recover your plaintext password.
• Role separation: administrator and ordinary member roles are separated, and the admin interface and member interface authenticate independently. Administrative write operations validate the request origin (Origin/Referer) to reduce cross-site request forgery risk.
• Anti-abuse: sign-in, registration, enquiry and mobile number binding endpoints are rate limited; malicious IP addresses can be blocked.
• Access logging: IP address, User-Agent, request path and time are recorded for security auditing, troubleshooting and rate limiting.
• Least privilege: assets are stored in object storage with restricted access paths, and administrative accounts are limited to authorised personnel.

There is no zero-risk solution for transmission over the internet or for storage. We do not promise absolute security in all circumstances. If a personal data security incident occurs, we will take remedial measures promptly in accordance with the law and, where the law requires it, inform you by a notice on this site or through the contact details you provided, describing the nature of the incident, its possible impact, the measures taken and the steps you can take to protect yourself.

Appendix 8. Changes, effective date and version

• Current version: 1.0; effective date: 2026-09-01.
• How we notify changes: we update the version number and effective date on this page and publish them here. For material changes — such as an expansion of the scope of collection, a change in the recipients of personal information, a change in cross-border transfer arrangements, or a change in the way you can exercise your rights — we will give advance notice by a prominent notice on the site and, where necessary, ask for your consent again.
• Previous versions are available on request.

Appendix 9. Governing law and dispute resolution

• The formation, validity, interpretation and dispute resolution of the agreements and policies on this site are governed by the laws of the mainland of the People's Republic of China.
• Disputes arising out of these terms should be resolved through friendly negotiation. If negotiation fails, the dispute shall be submitted to the competent people's court at our domicile (Hohhot, Inner Mongolia Autonomous Region).
• Note for users outside China: the governing law and jurisdiction provisions above do not exclude rights that you enjoy under mandatory provisions of the law of your country or region and that cannot be excluded by agreement, including your rights as a data subject under the GDPR and your right to lodge a complaint with your local supervisory authority. Where mandatory law in your jurisdiction requires local law to apply, that law applies to the extent it is mandatorily applicable.

Appendix 10. Language versions

Our agreements and policies are available in Simplified Chinese, English, Russian and Mongolian. The Simplified Chinese version prevails. The English, Russian and Mongolian versions are reference translations provided for convenience; in the event of ambiguity, omission or inconsistency between a translation and the Simplified Chinese version, the Simplified Chinese version prevails.

The language-precedence clause is a choice of law matter and takes effect once confirmed by the company; if the company decides on a different arrangement, the wording published on this page as updated will apply.

Appendix 11. Relationship between the documents

Our Privacy Policy, Cookie Policy, Terms of Service, Disclaimer, Acceptable Use Policy, Intellectual Property and Trademark Notice, Children's Privacy Notice, Data Subject Rights and Account Closure Notice, Report and Infringement Complaints page and Accessibility Statement together constitute the entire agreement between you and us regarding your use of the platform. Each document applies to the specific matters it governs. If any document conflicts with this appendix on the identity of the controller, legal bases, processors and third-party disclosures, cross-border transfers, retention periods, data subject rights, security measures, changes and effective date, governing law or language precedence, this appendix prevails; on the specific matters governed by a particular document, that document prevails. If any provision is held invalid or unenforceable, the validity of the remaining provisions is not affected.