Home page

Introduction
Shanghai Guozhan Shixin Exhibition Co., Ltd. (hereinafter referred to as “we,” “us,” or “our”) respects and protects your privacy. This Privacy Policy (“this Policy”) explains how we collect, use, store, and share your personal information when you use our website [website URL] and our services (collectively, the “Services”), as well as the relevant rights you are entitled to under applicable law.
Please read this Policy carefully before using our services. By using our services, you acknowledge that you have read and agree to this Policy. If you do not agree, please do not use our website or services.
We may update this policy from time to time. In the event of material changes, we will notify you in advance via [notification methods such as email or website announcements].

1. Data Controller
The data controller for this service is:
Company Name: Shanghai Guozhan Shixin Exhibition Co., Ltd.
Registered Address: Room 362, Zone B, Building 10, No. 199 Changjian Road, Baoshan District, Shanghai
Privacy contact email: siaexpochina@gmail.com
Data Protection Officer (DPO): Not yet appointed.

2. Personal Information We Collect
2.1 Information You Voluntarily Provide
Account Information: Name, Email, Password (encrypted storage), [Other Registration Fields]
Payment Information: transaction amount, payment status. We do not store the full card number—card data is processed by the payment processor (see Section 5).
Communication Records: Emails, tickets, and feedback you have sent to customer service.
2.2 Information We Collect Automatically
Devices and Networks: IP address, device model, operating system, browser type, time zone
Usage behavior: page visits, feature usage, operation logs, session duration
Log data: request time, error logs, performance metrics
Cookie Data: See Section 6 below.
2.3 Information from Third Parties
[If you use advertising networks, analytics providers, social platforms, etc., please list them]

3. How We Use Your Information
We use the information we collect for:
Providing, maintaining, and improving our services
Process transactions and send relevant notifications.
Detecting and preventing fraud and security incidents
Understand how users interact with our services to enable optimization.
Send service updates and (with your consent) marketing communications.
Fulfilling legal obligations and responding to lawful requests

4. Legal Basis for Processing Personal Data (Applicable to EU Users)
We process your personal information on the following legal bases:
Contract Performance: Necessary for the performance of the contract to which you are a party.
Legitimate Interests: Necessary for our legitimate business interests (such as service improvement and security protection) and do not override your privacy rights.
Legal obligation: Necessary for compliance with legal obligations.
Consent: Where you have explicitly consented (e.g., for marketing communications)

5. How We Share Your Information
We share your information with third parties in the following categories:
5.1 Service Provider
We share information with third-party service providers that assist us in operating our business, including but not limited to:
Payment processors (such as Stripe and PayPal) — process card data in accordance with PCI-DSS requirements.
Logistics carrier (if applicable) — receives name and address to complete delivery
Analytics service providers (such as Google Analytics) — help us understand how the service is used.
Cloud service providers—host our services and data
These providers may use your information only for the purposes we have specified and are obligated to safeguard it appropriately.
5.2 Legal Compliance and Rights Protection
We may disclose your information if required by law (such as in response to a court order, subpoena, or government request), or when we believe such disclosure is necessary to protect our rights, property, or safety, or those of others.
5.3 Business Transfer
If we engage in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of such transaction. We will notify you of any such changes by email and/or through a notice on our website.
We do not sell your personal information.

6. Cookies and Similar Technologies
We use cookies and similar technologies to:
Ensure the service runs normally.
Remember your preferences
Analyze service usage
(With your consent) for targeted advertising

7. Data Retention
We retain your personal information only for as long as necessary:
The period necessary to achieve the purposes set forth in this policy.
The period necessary to comply with legal obligations (such as tax and accounting record-keeping)
The time necessary to resolve disputes and enforce the agreement
The specific retention period is as follows: account data will be retained for three years after the account is closed.

8. Data Security
We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, alteration, or disclosure. However, please note that no method of internet transmission or electronic storage is 100% secure.

9. International Data Transfers
Your information may be transferred to and stored on servers located outside your country. We will ensure that such transfers comply with applicable data protection laws, including by using standard contractual clauses or other approved transfer mechanisms.

10. Your Privacy Rights
Depending on your jurisdiction, you may be entitled to some or all of the following rights:
10.1 Rights Applicable to Global Users
Right of Access: Request access to the personal information we hold about you.
Right to Rectification: Request correction of inaccurate personal information
Right to erasure (“right to be forgotten”): Request the deletion of your personal information under certain circumstances.
Right to restriction of processing: In certain circumstances, you may request that the processing of your personal data be restricted.
Right to data portability: Request that your data be transferred to another controller in a structured, commonly used, and machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: You may withdraw your prior consent at any time.
10.2 Rights Applicable to California Residents (CCPA/CPRA)
Learn about the categories and specific details of the personal information we collect, use, disclose, and sell.
Request to delete your personal information held by us
Opt out of the “sale” or “sharing” of personal information (for cross-context behavioral advertising)
Correct inaccurate personal information
Restrictions on the Use of Sensitive Personal Information
10.3 Rights Applicable to Residents of Other U.S. States
If you reside in a state that has enacted comprehensive privacy laws, such as Virginia, Colorado, or Connecticut, you are entitled to similar rights, including the rights to access, correct, delete, and opt out.
How to exercise your rights: Please submit your request via the contact email. We will respond within the time limits prescribed by law, typically 30–45 days. California residents may also submit requests through an authorized agent.
11. Children’s Privacy
Our services are not intended for children under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a minor, we will delete it as soon as possible.

12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last Updated” date at the top of the page. If the changes are material, we will notify you by email or through a notice on our website.

13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us via the following methods:
Email:siaexpochina@gmail.com
Address: Room 362, Zone B, Building 10, No. 199 Changjian Road, Baoshan District, Shanghai