Privacy Policy

This Privacy Policy describes how ArkGoing Technology Co., Ltd. ("we", "us", "our") collects, uses, and protects personal data when you use our cross-border e-commerce platform, internal management systems, and related services (collectively, the "Services").

1. Data We Collect

• Account data: email address, username, encrypted password, phone number (optional).
• Transaction data: order history, payment metadata (we do not store full card numbers).
• Communication data: emails sent/received through our services, support tickets.
• Technical data: IP address, browser type, device identifiers, usage logs.

2. How We Use Your Data

• To provide, operate, and maintain the Services.
• To send transactional emails (verification codes, security alerts, account notifications).
• To send marketing emails — only to users who have explicitly opted in (see our Email Consent Policy).
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations.

3. Legal Basis (GDPR)

For users in the European Economic Area, we process personal data on the following legal bases:

• Contract — processing necessary to provide the Services you requested.
• Consent — for marketing emails and optional data collection (you may withdraw at any time).
• Legitimate interests — for fraud prevention and service security.
• Legal obligation — to comply with applicable laws.

4. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Account data is deleted within 30 days of an account closure request.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers (e.g., email delivery vendors, cloud hosting) who process data on our behalf under written agreements.
• Authorities, where required by law or to protect our legal rights.

6. International Transfers

Your data may be processed in countries other than your own, including jurisdictions with different data protection laws. We ensure such transfers comply with applicable law (e.g., Standard Contractual Clauses for transfers out of the EEA).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact support@assetchitanda.sbs.

8. Security

We implement reasonable technical and organizational measures to protect personal data, including TLS encryption in transit, hashed passwords, and access controls. However, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our Services. Continued use after the effective date constitutes acceptance.

---

隐私政策

本隐私政策说明方舟出海科技有限公司（"我们"）在您使用我们的跨境电商平台、内部管理系统及相关服务（统称"服务"）时，如何收集、使用和保护您的个人数据。

一、我们收集的数据

• 账户数据：邮箱地址、用户名、加密密码、手机号（可选）。
• 交易数据：订单历史、支付元数据（我们不存储完整银行卡号）。
• 通信数据：通过我们服务发送/接收的邮件、客服工单。
• 技术数据：IP 地址、浏览器类型、设备标识、使用日志。

二、我们如何使用您的数据

• 提供、运营和维护服务。
• 发送交易型邮件（验证码、安全提醒、账户通知）。
• 向已明确订阅的用户发送营销邮件（详见 邮件同意政策）。
• 检测、防范和处理欺诈、滥用和安全问题。
• 遵守法律义务。

三、合法依据（GDPR）

对于欧洲经济区用户，我们基于以下合法依据处理个人数据：

• 合同 —— 提供您请求的服务所必需的处理。
• 同意 —— 营销邮件与可选数据收集（您可随时撤回）。
• 合法利益 —— 防欺诈与服务安全。
• 法律义务 —— 遵守适用法律。

四、数据保留

我们仅在实现本政策所述目的所必需的期限内保留个人数据，法律另有要求的除外。账户数据在收到账户关闭请求后 30 天内删除。

五、数据共享

我们不出售您的个人数据。仅在以下情形共享：

• 服务提供商（如邮件投递商、云托管），其依据书面协议代我们处理数据。
• 政府机构，法律要求或为保护我方合法权益时。

六、跨境传输

您的数据可能在您所在国家以外的地区处理，包括数据保护法律不同的司法管辖区。我们确保此类传输符合适用法律（如 EEA 数据出口所依据的标准合同条款）。

七、您的权利

根据您所在地区，您可能有权：

• 访问、更正或删除您的个人数据。
• 限制或反对处理。
• 数据可携带权。
• 随时撤回同意（不影响此前合法处理）。
• 向监管机构投诉。

如需行使上述权利，请联系 support@assetchitanda.sbs。

八、安全

我们采取合理的技术和组织措施保护个人数据，包括传输中的 TLS 加密、密码哈希、访问控制。然而，互联网上没有任何传输方式是 100% 安全的。

九、政策变更

我们可能不时更新本隐私政策。重大变更将通过邮件或服务上的显著通知告知。在生效日期后继续使用即视为接受。