Privacy Policy

1. Overview and Scope

Zhongtian Cloud Oxygen (Shenzhen) Health Technology Co., Ltd. ("ZTCLOUDOXY," "we," "us," or "the Company") highly values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit this website (www.ztcloudoxy.com) and use our products and services.

This policy applies to all websites, mobile applications, social media pages, and related products and services operated by ZTCLOUDOXY. Please read this policy carefully before using our services. Continuing to use this website means that you agree to the terms of this Privacy Policy.

This policy is formulated in accordance with applicable laws and regulations, including the Personal Information Protection Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide Voluntarily

When you contact us through website forms, phone, email, or other methods, we may collect the following information:

• Identity information: name, company name, job title
• Contact information: phone number, email address, mailing address
• Inquiry information: product needs, use scenarios, budget range
• Transaction information: order details, payment records, logistics information
• Feedback information: product reviews, complaints and suggestions, after-sales service records

2.2 Information Collected Automatically

When you visit this website, our servers may automatically record the following technical information:

• Device information: device type, operating system, browser type and version
• Network information: IP address, internet service provider, access method
• Browsing information: pages visited, visit time, duration, click path
• Location information: approximate geographic location based on IP address (country/city level)
• Source information: referring website, search keywords

2.3 Information from Third-Party Sources

In some cases, we may obtain your information from the following third-party sources:

• Business partners and distributors
• Business-card exchanges at industry exhibitions and events
• Publicly available business information databases
• Social media platforms, only when you actively interact with us

3. Purposes of Use

We collect and use your personal information only for the following purposes:

Purpose	Legal Basis
Handling your product inquiries and quotation requests	Contract performance / legitimate interests
Providing product sales, installation, and after-sales services	Contract performance
Sending product updates, industry news, and marketing information	Your consent
Improving website functionality and user experience	Legitimate interests
Conducting data analysis to optimize products and services	Legitimate interests
Complying with legal and regulatory obligations	Legal obligation
Preventing fraud and protecting cybersecurity	Legitimate interests / legal obligation
Processing applications from partners and distributors	Contract performance

We will not use your personal information for purposes incompatible with the purposes above. If we need to use your information for a new purpose, we will obtain your consent in advance.

4. Sharing and Disclosure

We do not sell your personal information. We may share your information with third parties in the following circumstances:

4.1 Service Providers

We may engage the following types of service providers to process your information. These providers are bound by strict data-processing agreements:

• Website hosting and cloud-computing service providers
• Email and communications service providers
• Payment processing and logistics delivery providers
• Data analytics and website optimization tool providers
• Customer relationship management (CRM) system providers

4.2 Legal Requirements

We may disclose your information as required by law in the following cases:

• Complying with applicable laws, legal procedures, or mandatory government requests
• Enforcing our Terms of Use or other agreements
• Protecting the rights, property, or safety of ZTCLOUDOXY, users, or the public
• Protecting personal safety in emergencies

4.3 Corporate Transactions

If ZTCLOUDOXY is involved in a merger, acquisition, asset sale, or bankruptcy liquidation, your personal information may be transferred as part of the transaction assets. We will notify you before such transactions are completed and ensure that the recipient continues to comply with this Privacy Policy.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device to record your preferences and browsing behavior. We use cookies and similar technologies to improve your browsing experience.

5.2 Types of Cookies We Use

Cookie Type	Purpose	Necessary?
Necessary cookies	Required for basic website functions such as page loading and security verification	Yes
Functional cookies	Remember language preferences, regional settings, and other personalized options	No
Analytics cookies	Collect anonymous statistics to help us understand website usage	No
Marketing cookies	Used to display advertising content relevant to your interests	No

5.3 Cookie Management

You can manage or delete cookies through your browser settings. Please note that disabling necessary cookies may affect normal website functionality. Most browsers accept cookies by default, but you can change this option in your browser settings.

6. Data Storage and Security

We use industry-standard technical and organizational measures to protect your personal information, including but not limited to:

• Encrypted transmission: this website uses SSL/TLS encryption to protect data transmission
• Access control: access to personal information is strictly limited to authorized personnel
• Data backup: regular backups are performed to prevent data loss
• Security audits: regular security assessments and vulnerability testing are conducted
• Employee training: employees handling personal information receive data-protection training
• Physical security: data centers are equipped with physical access controls and environmental monitoring systems

Although we do our best to protect your information, internet transmission cannot be guaranteed 100% secure. If a data security incident occurs, we will notify affected users and relevant regulators in a timely manner as required by law.

7. Data Retention

We retain your personal information only for as long as necessary to achieve the purposes for which it was collected:

• Inquiry records: retained for 3 years from the last interaction
• Transaction records: retained for 5 years from transaction completion, according to tax and accounting regulations
• After-sales service records: retained for 2 years after the product warranty expires
• Website access logs: retained for 12 months
• Marketing communications records: retained until you unsubscribe

After the retention period expires, we will securely delete or anonymize your personal information.

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to know: understand how we collect and use your personal information
• Right of access: obtain a copy of the personal information we hold about you
• Right to rectification: request correction of inaccurate or incomplete personal information
• Right to deletion: request deletion of your personal information in specific circumstances
• Right to restrict processing: request restrictions on processing your personal information
• Right to data portability: obtain your data in a structured, commonly used, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw previously given consent at any time without affecting the lawfulness of processing before withdrawal
• Right to complain: lodge a complaint with a data protection regulator

To exercise any of these rights, please contact us using the contact details at the end of this policy. We will respond within 15 business days after receiving your request.

9. Protection of Minors

Our products and services are not directed to minors under 16 years old. We do not knowingly collect personal information from minors under 16. If we discover that we have collected information from a minor without parental or guardian consent, we will delete the relevant data as soon as possible.

If you are the parent or guardian of a minor and believe your child has provided personal information to us, please contact us immediately.

10. International Data Transfers

ZTCLOUDOXY's products and services cover more than 130 countries and regions worldwide. In providing services, your personal information may be transferred to, processed, or stored in countries or regions outside mainland China.

When conducting international data transfers, we will take the following safeguards:

• Sign legally compliant data-processing agreements with data recipients
• Ensure that recipient countries or regions provide adequate data protection levels
• Use standard contractual clauses (SCCs) or other approved transfer mechanisms
• Apply encryption and access controls to transferred data

For users in the European Economic Area (EEA), we commit to taking appropriate safeguards under GDPR requirements when transferring your data outside the EEA.

11. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our information-processing practices or legal and regulatory updates. Major changes will be notified by:

• Posting an update notice prominently on this website
• Emailing registered users
• Updating the "Last Updated" date at the top of this page

We recommend that you review this Privacy Policy regularly to stay informed about our latest privacy protection measures. Major changes will be notified at least 30 days before taking effect.

12. Contact Us

If you have any questions, comments, or suggestions about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us through the following methods:

• Data Protection Officer email: privacy@ztcloudoxy.com
• Company email: info@ztcloudoxy.com
• Phone: 86-755-83235513
• Mailing address: ZTCLOUDOXY Data Protection Department, 5F, Block AB, Tianji Building, Tian'an Cyber Park, No.10 Tairan 5th Road, Futian District, Shenzhen, Guangdong, China

We will do our best to respond within 15 business days after receiving your request. If the matter is complex, we may need an additional 15 business days and will notify you in advance.