Privacy Policy of essa.cn

Introduction

ESSA always pays high attention to the privacy and protection of user information.  During the process of the use and service on ESSA, we may collect or use your information. Through the article, <The Privacy Policy of ESSA>, we demonstrate how we collect, use, save, share, and transfer your information on ESSA, in addition, we provide the ways for users to visit, update, delete, and protect information.

The policy helps you know more about:

1. Why do we need to get user information?

2. What information do we collect?

3. How do we use your information?

4. How we protect your personal information?

5. Security incident disposal

6. In what situation, user information will be transferred to the third party?

7. How to contact us if users want to delete the information on ESSA?

8. Protection of minors' information

9. Notices and amendments

1. Why do we need to get user information?

For the information you provide, including word, picture, video, sound, and etc, you authorize Guangdong ESSA technology co,.ltd (hereinafter, referred to ESSA) ,other associated companies the globally exclusive right to use and the right to authorize the third party. This policy is issued by ESSA, and we officially ask for your authorization of your user information. Do you agree that ESSA and other associated companies to store, use, copy, revise, edit, publish, translate and transfer your user information or other derivative works, and including other known or unknown form, medium, or technology of works now or in the future. If you do not agree, you might not enjoy the products or services we provide, including:

User registration

Product information display, consult, and search

Placing order and order management

Necessary function that improves our product and service

E-mail pushing and notice of order

Customer service and after-sale service

2. What information do we collect?

For the good services on ESSA or relative services on other platforms，including recommending product for user needs, analysis on user behavior, personalized service, after-sale service, and etc. You authorize ESSA to transfer your information you provide or formed in the process of account registration, service, to the platform ESSA, account or others related service provider, or the information produced or formed in the process of registration, service from ESSA and other service providers.

The user information involved includes but not only limited to:

(1)    Basic user information ( user name, birthday, gender, phone number, country or region, e-mail)

(2)    The company the user works for ( region, purchase volume, company scale, currency)

Identification information of network identity (system account, IP address, e-mail address, and relevant password, code, or the answer to the code protection)

(3)    The internet record on ESSA (internet history, software history, click history)

(4)    Order information on ESSA (product, purchase volume, item number, logistic, contact and so on)

(5)    User location

(6)    User’s album and camera function (only for the function, search toy by photo)

(7)    Any information you provide to ESSA or other users in the process of providing product information, service, or transaction, in any information-public occation or by the form of e-mail, includes but not limit to data, text, software, music, sound, picture, painting, video, sentence, or other material.

3. How do we use your information?

According to this <Privacy Policy> ESSA will use your information we collect for the  use of product or service.

(1)    ESSA will process your information in the way of depersonalization with technology method, which disables one to identify users. In addition, database can be used and analyzed for commerce purpose, under the circumstance of not revealing personal information and depersonalized information.

(2)    Please be noticed that, ESSA is authorized to use your information in the process of our product or service, unless you delete or reject to allow us to collect your information. ESSA will stop using and delete your personal information after you cancel your account.

(3)    ESSA will perform statistics on our product and service, and might share your information with the third party or public to demonstrate the general trend of use of our product and service. However, this information does not contain any data that shows your identity.

(4)    If your personal information is shown, the sensitive information will be replaced or anonymized to protect the information security.

4. How we protect your personal information？

We highly value user information security , and takes all the practical measures to protect your user information.

(1)    We will take appropriate technical and organizational measures security protection measures, including reasonable systems and security technologies, to prevent unauthorized access, modification and loss of your personal information.

(2)    ESSA's network services are based on encryption techniques such as transport layer security protocols. ESSA provides browsing services through https and other methods to ensure the security of user data during transmission.

(3)    ESSA applies encryption techniques to save on an encrypted basis user's personal information and isolate it through isolation techniques.

(4)    ESSA adopts strict data access control and multiple identity authentication technologies to protect personal information and prevent data from being used illegally.

(5)    ESSA adopts code security automatic inspection and data access log analysis technology to conduct personal information security audits.

(6)    Other security measures taken by ESSA to protect personal information
ESSA manages and regulates the storage and use of personal information by establishing a data classification system, data security management specifications, and development specifications.

4.1 Other security measures taken by ESSA to protect personal information

(1) ESSA manages and regulates the storage and use of personal information by establishing a data classification system, data security management specifications, and development specifications.

(2) ESSA controls data security in an all-round way through signing confidentiality agreements with those who will access to the information, monitoring and auditing mechanisms.

(3) We only allow employees of ESSA and ESSA affiliates and partners to access personal information on a need-to-know basis and set strict access control and monitoring mechanisms for this purpose. We also bind all persons who may come into contact with your personal information with confidentiality obligations. Those who fail to fulfill the obligations may be subject to legal liabilities or have their relationship with ESSA terminated.

(4) We will take all reasonable and practical measures to avoid collecting uncorrelated personal information.

 (5) the Internet is not absolutely secure. Communication methods with other users, such as e-mail, instant messaging, and social software, cannot be fully encrypted. We recommend that you use complex passwords when using such tools, and take care to protect your personal information.

5. Security incident disposal

When trading goods or services with a third party through the ESSA website, you will inevitably disclose your personal information, such as contact details or postal address, to the counterparty or potential counterparties. Please properly protect your personal information and provide it to others only when necessary.

In order to deal with possible risks of leakage, damage, and loss of personal information, ESSA has established a number of systems to clarify the classification and grading standards for security incidents and security vulnerabilities and the corresponding processing procedures. ESSA has also established a special emergency response team for security incidents. It will, according to the requirements for the handling of security incidents, implement security plans for different security incidents, stop loss, conduct analysis, positioning and formulate remedial measures; moreover, it will trace to the source and crackdown in concert with the authorities .

In the event of a personal information security incident, we will inform you without undue delay (in accordance with applicable laws and regulations) of the basic information and possible impact of the security incident, measures we have taken or will take, suggestions on the precautions you can take to reduce risks, remedial measures for you, etc. We will also inform you on a timely basis by e-mail, letter, telephone, notice, etc., again in accordance with applicable laws and regulations When it is difficult to notify a personal information subject on an individual basis, we will issue an announcement in a reasonable and effective manner is made instead.

6. In what situation, user information will be transferred to the third party?

Apart from the situation stipulated explicitly by law, ESSA reserves the ownership of your information on ESSA, and ESSA has no obligation to reveal any information about your account to you or any designated third party.

You have been already aware completely that we collect, user your user information without your authorization or permission under the following circumstances:

(1)    Where requested by public authorities in furtherance of their powers or functions, including for national security, public safety, public health and major public interests;

(2)    Relating to criminal investigations, prosecutions, trials and execution of judgments;

(3)    For the purposes of protection of material legal rights and benefits such as the lives and properties of the personal information subject or other individuals where it is difficult to obtain the consent of the subject involved;

(4)    The personal information to be collected is made available by the subject of the personal information to the public;

(5)    your personal information is collected from legally disclosed information, such as legitimate news reports, government information disclosure, etc.;

(6)    Necessary for signing the contract as required by you;

(7)    Necessary for maintaining the safety and stable operation of the products and/or services provided, such as the detection and disposal of the fault at products and/or services;

(8)    Required for legal news reports;；

(9)    Necessary for academic research institutions to conduct statistical or academic research for public interest, to the extent that the personal information contained in the academic research or description results is de-identified;

(10) Other circumstances stipulated by laws and regulations.

7. How to contact us if users want to delete the information on ESSA?

If you have any question about protection of user information, or want to delete your information left on ESSA, please contact us by sending e-mail at cust@essa.cn, or call us at 00852 35005170. Your account will be frozen immediately, and your user information will be deleted within 90 days.

Alternatively, you can log in to the website and delete the account cancellation information yourself. Website address: www.essachina.com/member/admin/company-info/employee

8. Protection of minors' information

(1) ESSA attaches great importance to the protection of minors' personal information. If you are a minor under the age of 18, you must obtain prior written consent from your parent or legal guardian before using our products and/or services. ESSA protects personal information of minors in accordance with applicable laws and regulations.

(2) For the personal information of minors collected with the consent of parents or legal guardians, we will only use or publicly disclose it when permitted by laws, explicitly consented by the parent or guardian or required for protecting the child.

(3) If we find ourselves collecting personal information of a minor without the prior consent of a verifiable parent or legal guardian, we will try to delete it as soon as possible.

9. Notices and amendment

9.1

(1) To provide you with better services and with the development of ESSA’s business, this Policy will also be updated. We will remind you of the updates by releasing an updated version on ESSA website and mobile terminal. We also invite you to visit ESSA to keep abreast of the latest privacy policy.

(2) For significant changes, we will also announce in a noticeable manner, explaining specific changes to the Policy in a manner including but not limited to emails, text messages, or special tips on the browsing page.

9.2 For the purpose of the Policy, significant changes include but are not limited to:
（1）Significant changes in our service model, for example, the purpose of processing personal information, the types of personal information handled, the manner to use personal information, etc.;

（2） Major changes in ownership structure, organizational structure, and so on, such as changes in owner as a result of business adjustment, bankruptcy, mergers and other similar transactions;
（3）Changes in the main objects of personal information sharing, transfer or public disclosure;

（4）Major changes in your rights to participate in the processing of personal information and the way to exercise them;
（5）Any changes in the departments in charge of handling personal information security, contact information, and reporting channels;
（6）There is a high risk indicated in the personal information security impact assessment report.

9.3 We will also archive the old version of this Policy for your review.