English 
简体中文 
To protect the privacy and personal information security of all settled merchants and registered buyers (hereinafter collectively referred to as "Platform Users") of Sinoali B2B Foreign Trade Steel Platform (hereinafter referred to as the "Platform"), and to regulate the collection, use, storage, transmission, disclosure and other related behaviors of personal information on the Platform, this Privacy Statement is formulated in accordance with the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China, the E-Commerce Law of the People's Republic of China and relevant international data protection rules.
This Privacy Statement applies to all Platform Users who use the Platform's services and carry out steel foreign trade transactions on the Platform. By registering, logging in, using the Platform's services and participating in transactions on the Platform, the Platform User is deemed to have fully read, understood and voluntarily accepted all the terms of this Statement, and voluntarily agreed that the Platform will process their privacy and personal information in accordance with the provisions of this Statement.
I. Definition and Collection Scope of Privacy and Personal Information
1. Privacy and personal information refer to various information recorded in electronic or other forms that can identify the personal identity of the Platform User alone or in combination with other information, including but not limited to personal name, contact information, ID card information, enterprise entity information, bank account information, transaction records, browsing records, communication records, etc.
2. The Platform only collects necessary privacy and personal information of Platform Users for the purposes of performing platform services, ensuring transaction security and conducting foreign trade business in compliance with regulations. It adheres to the principles of legality, propriety and necessity, does not collect information irrelevant to platform services, and does not use one-time general authorization, default authorization and other methods to force or disguisedly force users to agree to information collection.
3. Collection methods include but are not limited to: information actively submitted by users during registration, information automatically generated in the process of using platform services, information obtained by the platform from legal channels with user authorization, and other necessary information collected for performing platform services and operating in compliance with regulations.
II. Rules for the Use of Privacy and Personal Information
1. The Platform only uses the collected privacy and personal information for platform services and related purposes, including but not limited to: user identity verification, account management, transaction matching, communication and docking, order performance, after-sales service, dispute handling, platform operation optimization, compliance review and relevant notification push.
2. The Platform will strictly use the user's privacy and personal information in accordance with the provisions of this Statement and relevant laws and regulations. Without the user's written consent, it shall not be used for purposes irrelevant to platform services or beyond the agreed scope.
3. When collecting and using users' sensitive personal information, the Platform will obtain the user's consent item by item, and clearly inform the necessity of processing sensitive personal information and its impact on personal rights and interests.
III. Storage and Protection of Privacy and Personal Information
1. The Platform will adopt security technologies and management measures that meet industry standards, establish a sound information security management system, encrypt and store the user's privacy and personal information, strictly control it to prevent information leakage, tampering, loss and abuse, and take technical means such as electronic signature, data backup and fault recovery to ensure the integrity and security of data and the authenticity of original data.
2. The Platform will strictly limit the scope of personnel who can access the user's privacy and personal information, conduct information security training and management for relevant personnel, clarify confidentiality obligations, and violators will bear corresponding responsibilities.
3. The storage period of users' privacy and personal information will be strictly implemented in accordance with relevant laws and regulations and platform rules, and will only be retained for the shortest period necessary for performing platform services and operating in compliance with regulations. After the expiration of the period, it will be deleted or anonymized in accordance with the law; the retention period of users' business licenses and personal identity information records shall be not less than three years from the date of the user's registration and cancellation on the Platform, and the retention period of commodity and service information and transaction information shall be not less than three years from the date of transaction completion.
IV. Transmission and Disclosure of Privacy and Personal Information
1. The Platform will strictly protect the user's privacy and personal information. Without the user's written consent, it will not disclose, sell, rent or transfer the user's privacy and personal information to any third party, except as otherwise provided by laws and regulations.
2. To perform platform services, ensure transaction security, operate in compliance with regulations or protect the legitimate rights and interests of users, the Platform may transmit the user's necessary privacy and personal information to relevant partners (such as logistics, payment, certification institutions, etc.) within the necessary scope. Relevant partners shall strictly abide by confidentiality obligations and shall not arbitrarily use or disclose such information.
3. When the Platform carries out cross-border e-commerce and provides user information to overseas parties, it will strictly abide by the relevant national regulations on cross-border data flow, perform relevant declaration and evaluation obligations, ensure the security of data outbound, and comply with the relevant requirements of the Provisions on Promoting and Regulating Cross-border Data Flow; if the data collected and generated in international trade, cross-border transportation and other activities is provided to overseas parties and does not contain personal information or important data, it shall be exempted from the relevant declaration procedures in accordance with the provisions.
4. The Platform may disclose the user's privacy and personal information in accordance with the law without obtaining the user's consent separately when required by laws and regulations, government department supervision, judicial organ investigation and evidence collection, or to protect the legitimate rights and interests of the Platform and users and maintain public interests.
V. User's Rights
1. Platform Users have the right to inquire about, correct and supplement their own privacy and personal information, and have the right to request the Platform to delete their privacy and personal information (except as otherwise provided by laws and regulations).
2. Users can submit applications for the above rights through the designated channels of the Platform. After verifying the user's identity, the Platform will promptly handle them in accordance with relevant laws and regulations and platform rules, and shall not set unreasonable conditions for user information inquiry, correction, deletion and user cancellation.
3. Users have the right to withdraw their consent to the Platform's collection and use of their privacy and personal information. After withdrawing consent, the Platform will no longer collect or use the user's relevant information, but this will not affect the validity of the information that the Platform has legally processed before the withdrawal.
4. When a user cancels their account, the Platform will immediately delete the user's information; if it is required to be retained in accordance with the provisions of laws and administrative regulations or the agreement between both parties, it shall be handled in accordance with such provisions.
VI. Third-Party Service Description
The Platform may contain links to third-party services (such as payment, logistics, certification, etc.). The collection and use of users' privacy and personal information by third-party services shall follow the third party's own privacy policy and have no connection with the Platform. When Platform Users use third-party services, they need to carefully read the third party's privacy policy and bear relevant risks on their own.
VII. Liability and Exemption
1. The Platform will strictly perform the provisions of this Privacy Statement and make every effort to ensure the security of users' privacy and personal information. If the user's privacy and personal information are leaked, tampered with or lost due to the Platform's intent or gross negligence, resulting in losses to the user, the Platform will bear corresponding liability in accordance with the law.
2. Losses such as leakage and loss of privacy and personal information caused by non-platform reasons such as improper operation by the user (such as account leakage, password loss, unauthorized disclosure of personal information to third parties, etc.), third-party infringement, and force majeure shall be borne by the user themselves, and the Platform shall not be liable.
3. Platform Users guarantee that the submitted privacy and personal information is true, legal and complete. If the user submits false information resulting in losses to themselves or third parties, the user shall bear full responsibility on their own, and the Platform shall not be liable.
VIII. Supplementary Provisions
1. Matters not covered by this Privacy Statement shall be handled in accordance with relevant laws and regulations, platform rules and international data protection practices.
2. The Platform may revise this Privacy Statement in accordance with industry development, policy adjustments, technological upgrades and operational needs. After revision, it will be announced through the official channels of the Platform and will take effect automatically after the announcement period expires.
3. Platform Users shall pay close attention to the updates of this Privacy Statement. If losses are caused by failure to timely understand the revised content, they shall be borne by the user themselves.
4. This Privacy Statement shall be interpreted by the Platform operator and shall take effect from the date of issuance.
