PRIVACY POLICY

[Last updated: February 13th, 2026.]

1. Information We Collect

We collect information in the following categories, in compliance with applicable data protection laws:

Personal Information:

·    Identifiers: Name, email address, phone number, postal address, and account credentials provided during registration or service usage.

·    Financial Data: Billing information (e.g., credit card details) for processing transactions, stored only with secure encryption.

Usage Data:

·    Automatically collected technical data: IP address, browser type/version, device information (model, OS), pages visited, time spent, and interaction patterns.

·    Location Data: Approximate or precise location only with your explicit consent, where required by law.

Advertising Data:

·    Ad engagement metrics: Impressions, clicks, conversions, and demographic data (where permitted by local regulations).

·    Cross-device tracking data only with your opt-in consent (e.g., under GDPR's consent requirement for non-essential cookies).

Cookies & Tracking Technologies:

·    We use cookies, web beacons, and similar technologies to track user interactions, measure service performance, and enhance user experience. This includes:

·    Facebook Pixel: Tracks user behavior on our website to optimize advertising campaigns and measure conversion rates.

·    Conversion API: Transmits conversion data directly from our server to Meta platforms, improving the accuracy of ad performance tracking.

·    Retargeting: Displays personalized advertisements to users who have previously interacted with our website or services, in compliance with applicable laws.

·    You can manage cookie preferences through your browser settings or our cookie consent management tool, where available.

2. Legal Bases for Processing (GDPR/EEA Compliance)

For users in the European Economic Area (EEA), we process your data based on the following legal grounds:

·    Consent: For processing non-essential data such as cookies and personalized advertising, which you can withdraw at any time through your account settings or by contacting us directly.

·    Contract Performance: To provide and maintain services you requested (e.g., processing payments, delivering content).

·    Legitimate Interests: To optimize service functionality, prevent fraud, improve user experience, and conduct B2B sales follow-up communications, where our interests do not override your fundamental rights and freedoms.

·    Legal Obligation: To comply with tax laws, reporting requirements, or other mandatory regulations.

3. How We Use Your Information

We use your information only for the purposes specified at the time of collection, or as required by law:

Service Provision:

·    Deliver, maintain, and update our services (e.g., cloud storage, collaboration tools).

·    Process transactions and send order confirmations, invoices, and payment reminders.

Personalization:

·    Tailor content, recommendations, and features based on your usage patterns (with opt-out options for non-essential personalization).

Advertising:

·    Serve targeted advertisements based on your interests, where permitted by law (e.g., CCPA requires opt-out for "sale" of data to advertisers).

·    We use Meta Platforms technologies (Facebook, Instagram) to deliver personalized advertising and measure campaign effectiveness.

Analytics & Improvement:

·    Analyze usage data to enhance service performance, fix technical issues, and develop new features.

Legal Compliance:

·    Respond to legal requests, enforce our Terms of Service, and protect our rights, property, or safety.

4. Information Sharing & Disclosure

We share your information only in the following circumstances, with appropriate safeguards:

Service Providers:

·    Third-party vendors (e.g., payment processors, cloud hosting providers, customer support tools) who need access to data to perform services on our behalf. All providers are bound by strict confidentiality agreements and must comply with applicable data protection laws.

Advertising Partners:

·    Share anonymized or pseudonymized data with ad networks (including Meta Platforms) for targeted advertising, only with your consent (GDPR) or where you have not opted out (CCPA).

Legal Requirements:

·    Disclose data when required by law, regulation, or valid legal process (e.g., court orders, subpoenas). We will challenge requests that are overly broad or violate user privacy rights where permitted by law.

Business Transfers:

·    Share data in connection with mergers, acquisitions, or asset sales, with notification to users where required by law.

5. International Data Transfers

Your information may be transferred to countries outside your jurisdiction, including the United States. We ensure transfers comply with applicable laws through appropriate safeguards, which may include:

·    May include the EU-U.S. Data Privacy Framework, where applicable

·    Standard Contractual Clauses (SCCs): For transfers to countries not deemed "adequate" by the EU, where applicable.

·    Binding Corporate Rules (BCRs): For internal transfers within our corporate group, where applicable.

·    Localized Compliance: For users in specific jurisdictions, we ensure compliance with local cross-border transfer requirements, where applicable.

You may request a copy of our transfer safeguards by contacting our privacy team at [postmaster@mengdi.com.cn] or by contacting us directly.

6. Lead Forms & Marketing Communications

·    Voluntary Submission: When you submit information through lead generation forms (including those on Meta platforms), you do so voluntarily for the purpose of establishing B2B contact with our sales team.

·    Data Collected: Lead forms typically collect your name, email address, phone number, and company information.

·    Data Usage: The information you provide will be used solely for responding to your inquiry, providing quotations, and conducting follow-up communications related to our products and services.

·    No Data Resale: We will not sell, rent, or lease your personal data collected through lead forms to third parties for their own marketing purposes.

·    Opt-Out Rights: You may unsubscribe from our marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly at [postmaster@mengdi.com.cn]. No account is required to exercise this right.

7. Your Rights & Choices

Your rights vary by jurisdiction, but may include:

Global Rights (Applicable in Most Regions)

·    Access: Request a copy of personal data we hold about you.

·    Correction: Update inaccurate or incomplete personal information.

·    Deletion: Request erasure of your data (subject to legal exceptions like tax retention requirements).

·    Data Portability: Receive your data in a machine-readable format for transfer to another service provider.

Region-Specific Rights

·    GDPR (EEA): Right to restrict processing, object to processing based on legitimate interests, and withdraw consent at any time.

·    CCPA/CPRA (California): Right to opt out of the "sale" of your personal data, request disclosure of data collection practices, and non-discrimination for exercising your rights.

·    PIPL (China): Right to access, correct, delete, and restrict processing of personal data; right to data portability where technically feasible.

·    LGPD (Brazil): Right to data portability, request anonymization of data, and object to automated decision-making.

How to Exercise Rights: Contact us at [postmaster@mengdi.com.cn] or use our dedicated privacy portal (if available) or by contacting us directly. We will respond within the timeframe required by local law .

8. Data Security & Retention

·    Security Measures: We implement technical and organizational safeguards, including encryption (SSL/TLS), access controls, regular security audits, and employee training. However, no method of transmission over the internet is 100% secure.

·    Data Breach Notification: In the event of a data breach that poses a high risk to your rights, we will notify you and relevant authorities within the timeframe required by law .

·    Retention Periods: We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law or legitimate business needs. Data is securely deleted or anonymized once no longer needed.

9. Children's Privacy

·    COPPA (U.S.): Our services are not directed to children under 13. We do not knowingly collect data from children under 13. If we become aware of such collection, we will delete the data immediately.

·    GDPR (EEA): For users under 16, we require verifiable parental consent before processing personal data, except where permitted by law.

·    Local Variations: Comply with additional age requirements in other jurisdictions, where applicable.

10. Changes to This Policy

We may update this policy to reflect legal changes, service updates, or privacy best practices. We will notify you of material changes by:

·    Posting the updated policy on our website with a revised "Last Updated" date.

·    Sending direct notifications where required by law.

·    Providing a summary of key changes for transparency.

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

11. Contact Information

For questions, concerns, or to exercise your privacy rights, contact our Global Privacy Team:

·    Email: [postmaster@mengdi.com.cn]

·    Postal Address: [Jiaxing Mengdi Import and Export Co.,ltd], [17-18-19th Floor, Long Way Plaza,960 Cheng Nan Road,Jiaxing,Zhejiang,China]