Privacy Policy

Introduction

This website is operated by Suizhou Yudeng E-Commerce Co., Ltd. and provides information about computer systems design and computer integrated systems design services. The company recognises that privacy is an important concern for every visitor, client, and business partner. This policy describes the categories of information that may be collected, the purposes for which the information is used, the circumstances under which it may be shared, and the rights available to individuals whose information we handle.

This policy applies to personal information collected through this website, including information provided through the contact form, email messages, telephone calls, and any other communication channel listed on the website. It also applies to information collected during the delivery of design and integration services, including project documentation, system credentials handled under separate agreements, and correspondence between the company and its clients.

The services described on this website are developed and operated by the developer GemLight. GemLight acts under the direction of the company and follows the practices set out in this policy. The words we, our, and us in this policy refer to Suizhou Yudeng E-Commerce Co., Ltd. together with the developer GemLight acting on its behalf. This policy is written in plain language so that individuals can understand exactly what happens to their information before they choose to share it.

Information We Collect

We collect information that you provide directly to us and information that is gathered automatically when you use the website. The categories of information collected are limited to what is necessary for the operation of the website and the delivery of our services.

Information you provide directly includes your name, your email address, your telephone number if you choose to give it, the subject of your enquiry, the content of any message you send, and any other details you include in correspondence. When you engage us for a design or integration project, we may also collect your company name, billing address, tax identification number, project requirements, and the names and contact details of team members involved in the project.

Information gathered automatically includes technical data such as your browser type, operating system, device model, screen resolution, the date and time of your visit, the pages you view, the length of your visit, the referring website, and your approximate geographic region derived from your IP address. This automatic information is collected in aggregate where possible so that it cannot be used to identify a specific person on its own.

We do not intentionally collect sensitive categories of information such as racial origin, political opinions, religious beliefs, health data, or biometric identifiers. If you volunteer sensitive information in a message, it will be handled with the same care as other personal information and deleted when it is no longer needed.

How We Collect Information

Personal information is collected through several channels. First, the contact form on this website collects the name, email address, subject, and message that you submit. The form is designed to submit directly to our team where the connection allows, and to fall back to your own email client when it does not. Either way, the message reaches our inbox at team@gemlight.mom and is treated as correspondence.

Second, information is collected through email. When you write to us, the content of your message, your address, and any attachments you include are stored in our correspondence records. Third, information is collected by telephone. Calls are not recorded by default, but notes may be taken to ensure that the details of your request are not lost.

Fourth, information is collected automatically by the web server and by the analytics tools used to measure website performance. This automatic collection uses the technical capabilities of your browser and device. The information collected in this way is used to keep the website secure, to diagnose faults, and to understand which parts of the website are most useful to visitors.

We do not purchase personal information from third-party data brokers, and we do not collect information from sources other than the channels described above unless you have chosen to share information with us in another way.

How We Use Information

We use the information we collect for clear and limited purposes. The primary purpose is to respond to enquiries about our services, to provide quotations, and to deliver the design and integration services that you request. This includes preparing proposals, scheduling workshops, producing architecture documentation, and communicating project updates to the contacts you nominate.

We also use information to operate and improve the website. Aggregated technical data helps us understand which pages are useful, which devices our visitors use, and where the website could be made faster or clearer. This analysis is performed at a level that does not identify individual visitors.

We use contact details to send administrative messages that relate to your project or your enquiry. These messages include confirmations, invoice notices, and important updates about the services you have requested. Where you have given consent, we may send occasional newsletters or service announcements that you can opt out of at any time with a single reply.

We do not sell personal information to third parties, and we do not use personal information for purposes that are materially different from those described in this policy without obtaining your consent first.

Lawful Basis for Processing

We process personal information only where we have a lawful basis to do so. The main basis is performance of a contract. When you request a quotation or engage us to deliver services, the processing of your contact details and project information is necessary to enter into and perform that agreement with you.

We also rely on legitimate interest as a basis. Responding to enquiries, maintaining the security of the website, preventing fraud, and analysing aggregate website usage are all activities that serve the legitimate interests of the company without overriding your fundamental rights and freedoms. Where we rely on this basis, we balance our interests against your privacy expectations and keep the information used to a minimum.

Consent is the basis for certain processing activities, such as the use of non-essential analytics cookies and the sending of optional newsletters. Where consent is used, it is obtained clearly before the activity begins and can be withdrawn at any time without penalty.

Finally, legal obligation is a basis for processing where the law requires us to keep records, respond to lawful requests, or report certain events to the relevant authorities. In such cases we comply with the law but do not use the information beyond what the obligation requires.

Cookies and Similar Technologies

Cookies are small text files placed on your device by a website so that the website can recognise your browser on return visits. Our website uses a small number of cookies and similar technologies for essential and analytical purposes.

Essential cookies keep the website functional, for example by remembering preferences that you have expressed. These cookies are placed automatically because the website cannot operate reliably without them. Analytical cookies help us understand how the website is used so that we can improve it over time. These cookies are only placed where you consent to them through the settings of your browser or where the tool is configured in a privacy-preserving way.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, and to receive a warning before a new cookie is set. If you disable cookies, the website will continue to work, but some non-essential features may behave differently. Blocking essential cookies may prevent certain parts of the website from functioning correctly.

We do not use cookies to build advertising profiles of visitors, and we do not share cookie data with advertising networks.

How We Share Information

We keep personal information confidential and share it only in the limited circumstances described in this section. We do not sell, rent, or trade personal information to any third party for marketing purposes.

We share information with service providers that help us operate the website and deliver our services. These providers include hosting companies, email delivery services, payment processors, and cloud infrastructure providers. Every provider is bound by a contract that restricts the use of information to the purpose of the service they provide and requires them to protect the information with appropriate safeguards.

We share information within the team that delivers your project. Project engineers, designers, and support staff at GemLight have access to the information needed to complete the work, and each member of the team is required to keep that information confidential.

We may disclose information where the law requires it. This includes responding to a valid court order, a government request made under the law, or an investigation into unlawful activity. We will review every request carefully and disclose only the minimum information required, and we will inform you where we are permitted to do so.

International Data Transfers

This website is operated from China, and the company is registered in China. Some of the service providers that help us operate the website store and process data in other countries. As a result, personal information may be transferred to, and stored in, jurisdictions outside your own.

Where data is transferred across borders, we take steps to ensure that it receives an adequate level of protection. These steps include entering into contracts with the receiving parties that require them to apply safeguards equivalent to the standards described in this policy, and selecting providers that maintain recognised security certifications.

You should be aware that the privacy laws of the destination country may differ from those of your own country. By providing personal information through this website, you acknowledge that the information may be transferred to and processed in China and in the countries where our service providers operate.

We will not transfer personal information to a party that cannot demonstrate the ability to protect it, and we will notify you if our transfer arrangements change in a way that affects your information.

Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as the law requires. The retention period depends on the type of information and the purpose for which it was collected.

Correspondence related to an enquiry is kept for a reasonable period after the enquiry is resolved so that we can answer follow-up questions and avoid duplicating work. Project documentation is retained for the duration of the contract and for a reasonable period afterwards to support warranties, audits, and future maintenance work. Financial records, including invoices, are retained for the period required by tax and accounting law.

Automatically collected technical data is retained in aggregated form for analytics purposes and is purged on a regular schedule. Individual log records are kept only as long as they are needed for security monitoring and fault diagnosis.

When information is no longer needed, it is deleted or anonymised so that it can no longer be linked to you. We review our retention schedules at least once a year and update them when our practices or the law change.

Data Security

We apply a range of technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration, and disclosure. These measures reflect the sensitivity of the information and the risks associated with processing it.

On the technical side, we protect the website with encrypted connections, keep software updated, restrict administrative access to named individuals, and monitor systems for unusual activity. Data stored at rest is protected according to its sensitivity, and passwords and credentials are never stored in plain text.

On the organisational side, access to personal information is limited to team members who need it to perform their duties. Every team member receives training on privacy and confidentiality, and access rights are reviewed and removed promptly when a team member changes role or leaves the team.

No method of transmission over the internet and no method of electronic storage is completely secure. While we work to protect personal information using reasonable and industry-standard measures, we cannot guarantee its absolute security. If a breach occurs that affects your information, we will notify the relevant authorities and, where required by law, notify you without undue delay.

Your Privacy Rights

You have rights over the personal information we hold about you. These rights apply in full where the law of your country grants them, and we will honour them as far as we are able in all cases.

You have the right to access the information we hold about you and to receive a copy of it in a readable format. You have the right to request that inaccurate information be corrected, and the right to request that information be deleted where it is no longer needed or where its processing is not justified. You may also request a restriction on processing, or object to processing that is based on legitimate interest.

You have the right to data portability, which allows you to receive the information you provided in a structured, machine-readable format and to move it to another service provider. You have the right to withdraw any consent you have given at any time, without affecting the lawfulness of processing that happened before the withdrawal.

To exercise any of these rights, contact us using the details in the final section of this policy. We will respond to a valid request within one month, as required by law. We may ask you to confirm your identity before acting on a request, and we will never charge a fee for a first request. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Privacy for Children

This website and its services are designed for businesses and professional users. They are not directed at children, and we do not knowingly collect personal information from children under the age of 16.

If we learn that we have collected personal information from a child without verifiable consent from a parent or guardian, we will delete that information as soon as possible. If you believe that a child has provided personal information to us, please contact us at team@gemlight.mom so that we can investigate and remove the information promptly.

We encourage parents and guardians to supervise the online activity of children in their care and to discuss the importance of not sharing personal information online. Our commitment to the protection of young people is the same as our commitment to all users: information is collected only where necessary, used only for the stated purpose, and deleted when it is no longer needed.

Third-Party Links and Services

This website may contain links to websites and services operated by third parties, such as industry publications, professional networks, and tool providers. These third parties have their own privacy policies, which govern the information they collect. When you follow a link to a third-party website, the privacy policy of that website applies to your activity on it.

We include links to help visitors find useful resources, but we do not control the content or privacy practices of third-party websites. We encourage you to read the privacy policy of every website you visit, including those reached through links on this website.

The services we deliver may involve the use of third-party platforms chosen by our clients. Information shared with those platforms is governed by the agreements between the client and the platform provider. Our role is to configure and operate the integration in a way that minimises the information exposed, and to document the data flows clearly for the client.

Your Choices and Preferences

You have control over the information you provide and the messages you receive. You are never required to provide more information than is needed to answer your enquiry, and you can choose which details to include in your correspondence.

If you receive marketing or newsletter messages from us, you can opt out at any time by following the unsubscribe instructions in the message or by replying with a request to be removed. Opting out of marketing messages does not affect the administrative messages related to an active project or contract.

You can choose not to use the contact form and instead write to us directly at team@gemlight.mom or call +13855522318. The amount of information you share is always your choice, and we will not penalise you for providing less information than a form requests.

If you would like to review the information we hold about you, correct it, or ask questions about any choice described in this section, contact us using the details below and we will respond promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our technology, or the law. When we make material changes, we will revise the effective date at the top of this page and, where appropriate, notify you through the contact details we hold.

We encourage you to review this policy periodically so that you stay informed about how we protect the information we collect. Continued use of the website after a change to this policy means that you accept the updated policy, unless the law requires a more explicit form of consent.

Older versions of this policy are retained in our records so that we can answer questions about how your information was handled at a particular time. If you have a question about a specific version, mention the effective date when you contact us.

How to Contact Us

If you have any questions about this Privacy Policy, about the information we hold about you, or about your privacy rights, please contact us through any of the channels below. We are committed to responding to every request promptly and honestly.

Company: Suizhou Yudeng E-Commerce Co., Ltd.

Address: No. 205 Jiaotong Avenue, Dongcheng, Zengdu District, Suizhou - 441300, China

Email: team@gemlight.mom

Phone: +13855522318

Website: https://www.gemlight.mom

When you contact us about a privacy matter, please describe the request clearly and provide enough information for us to locate the relevant records. We will confirm your identity where needed, handle your request in accordance with the law, and respond within one month of receiving a complete request.