Privacy Policy

Last updated: December 1, 2025
Effective: December 1, 2025

Controller: Zobonsol Import & Export Co.,Ltd. (“we”, “us”, or “the Company”)
Registered office: No.152, Zhaoxian Street, Shouguang City, Shandong Province,China.

Privacy contact: yjz@zobonsol.com

Tel: +86 15165665774
Service region: Global

1. Introduction

This Privacy Policy explains how Guangzhou Zobonsol Import & Export Co.,Ltd. collects, uses, stores, discloses, and protects personal data when you visit our websites, use our products or services, contact us, or otherwise interact with us. If you are located in a jurisdiction with additional privacy rights (for example the EU/EEA, UK, or certain U.S. states), additional rights and protections may apply to you as described below.

2. Scope

This Policy applies to personal data we collect:

• directly from you (for example, via forms, email, or phone),
• automatically when you use our sites or services (for example via cookies and analytics),
• from third parties where applicable (for example, partners or service providers).

3. Categories of Personal Data We Collect

We may collect the following categories of personal data:

• Identity & contact data: name, job title, company name, postal address, email address, telephone number.
• Communications: messages you send to us (e.g., contact form submissions, emails).
• Transactional data: order, contract, invoice and payment information (where applicable).
• Technical & usage data: IP address, device identifiers, browser type, operating system, pages visited, referring URL, timestamps, analytics and cookies-derived data.
• User-provided files: CVs, attachments, or other documents you upload.
• Other information: any other information you voluntarily provide.

4. Purposes of Processing & Legal Basis

We process personal data for the following purposes and on the following legal bases:

• To provide and operate our services; to respond to inquiries and fulfill contracts (performance of a contract and/or pre-contractual measures).
• To improve our services, perform analytics, and maintain security (our legitimate interests).
• To send marketing communications (with your consent where required; you may withdraw consent at any time).
• To comply with legal and regulatory obligations (legal obligations).
• To protect our legal rights and investigate abuse or fraud (legitimate interests).

If you are located in the EU/EEA/UK, our legal bases will include performance of contract, legitimate interests, legal obligations, and consent where required by law.

5. Sharing and Disclosure

We do not sell or rent personal data. We may disclose personal data to:

• Service providers and subprocessors who provide hosting, cloud storage, analytics, CRM, payment, email and marketing, logistics, and other business services. These parties act as processors and are bound by contractual obligations (Data Processing Agreements) to process data only on our instructions and to implement appropriate safeguards.
• Professional advisors such as lawyers, auditors, or accountants when necessary.
• Authorities or other third parties where required by law or to protect our legal rights, property or safety.
• In the event of a corporate transaction (e.g., merger, acquisition, or sale of assets) personal data may be transferred as part of the transaction; we will require that any acquirer honor the commitments in this Policy.

6. Cross-border Transfers & Data Storage Location

Data storage: We store and process personal data within the People’s Republic of China. We use domestic servers and/or domestic cloud service providers for storage and processing.

Cross-border transfers: Because we provide services globally, personal data originating from jurisdictions outside China (e.g., EU/UK/California) that is uploaded or synchronized to our servers in China may constitute a cross-border transfer. For such transfers we will implement appropriate legal and technical safeguards, which may include:

• entering into recognized transfer mechanisms where applicable (for example, Standard Contractual Clauses (SCCs) for transfers from the EU/EEA/UK),
• performing and documenting a Transfer Impact Assessment (TIA) for material transfers,
• implementing technical safeguards (encryption in transit and at rest, key management, strict identity and access controls, least-privilege access, and audit logging),
• entering into Data Processing Agreements (DPAs) with processors and limiting sub-processors, and
• obtaining data subject consent where required or completing any required regulatory security assessments or filings.

If you would like a summary of the protections applied to a specific transfer, please contact us at caiya@lomoment.com.

7. Retention

We retain personal data only as long as necessary for the purposes set out in this Policy and to comply with legal obligations. Typical retention periods include:

• Contact and inquiry records: 3 years from last interaction.
• Contracts and financial records (invoices, payment records): 7 years or as required by law.
• Analytics and logs: 24 months, then deleted or anonymized.
• Marketing consents and preferences: until you withdraw consent.

Retention periods may vary depending on legal requirements and business needs. When data is no longer required, we delete it or anonymize it in a secure manner.

8. Cookies & Tracking

We use cookies and similar tracking technologies to operate our websites, improve user experience, analyze usage, and deliver tailored advertising. Cookies fall into categories such as:

• Strictly necessary cookies (required for core site functionality),
• Performance/analytics cookies (to analyze and improve site performance),
• Functional cookies (to remember preferences),
• Marketing/advertising cookies (to deliver and measure ads).

Non-essential cookies (analytics and marketing) are used only with your consent where required. You can manage cookie preferences through our cookie banner and your browser settings; blocking cookies may affect site functionality.

9. Your Rights & How to Exercise Them

Depending on your jurisdiction, you may have rights including:

• the right to access copies of your personal data,
• the right to correct inaccurate or incomplete data,
• the right to request deletion or restriction of processing,
• the right to object to processing (including profiling),
• the right to data portability (where applicable),
• the right to withdraw consent (where processing is based on consent).

To exercise your rights, contact us at caiya@lomoment.com. We may require reasonable proof of identity to process requests. We will respond to valid requests within applicable legal timeframes (for many jurisdictions this is within 30 days; we may extend where permitted by law and will notify you if an extension is required).

If you are in a jurisdiction with a supervisory authority (e.g., EU/EEA/UK), you may also lodge a complaint with your local data protection regulator.

10. Security

We implement organizational and technical measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. Measures include:

• encryption in transit (TLS) and at rest where appropriate,
• access controls and least privilege,
• identity and access management (IAM),
• audit logs and monitoring,
• regular security assessments and penetration testing,
• secure backups and disaster recovery,
• staff training on data protection.

No system is completely secure. In the event of a data breach affecting personal data, we will take remedial steps and, where required by law, notify affected individuals and regulators.

11. Minors

Our services are not directed at minors under the age of 14. We do not knowingly collect personal data from children under that age. If we become aware that we have collected personal data of a minor without verified parental consent, we will take steps to delete the information as soon as possible.

12. Automated Decision-Making

We do not normally make decisions based solely on automated processing that would produce legal or similarly significant effects for individuals. If we do use such processing, we will provide information about the logic involved, the significance and the envisaged consequences, and provide an option for human review where required.

13. Data Breach Response

If a data breach occurs, we will promptly investigate, contain and remediate the issue, assess the risk to individuals, and notify affected data subjects and relevant supervisory authorities where required by applicable law. We will document the breach, remedial actions taken, and any follow-up measures.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Policy with a revised “Last updated” date. For material changes, we will provide prominent notice (for example via email or a website notice) as appropriate.

15. Governing Law

This Policy is governed by the laws of the People’s Republic of China. Where applicable, and to the extent reasonably practicable, we will comply with local laws of other jurisdictions when processing data of individuals in those jurisdictions (for example GDPR, CCPA/CPRA obligations) and will provide relevant disclosures and mechanisms as required.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: yjz@zobonsol.com
Tel: +86 15165665774

Address: No.152, Zhaoxian Street, Shouguang City, Shandong Province, China