EN
CN

Privacy Notice

We attach great importance to your personal privacy. When you visit our website, please agree to all cookies being used. For more information on personal data processing, please visit the "TBEA Privacy Policy".

 

TBEA Privacy Policy


Effective Date: March 25, 2026
Update Date: March 25, 2026

 

TBEA Co., Ltd. and its subsidiaries and branches (hereinafter referred to as "TBEA" or "we") fully recognize the importance of personal information to you, and we are committed to protecting your personal information and privacy. This Privacy Policy applies to all TBEA websites and services that display, reference, or link to this Privacy Policy.

In addition to this Privacy Policy, when you use various websites and services, you will have the opportunity to read specific privacy notices or supplementary statements issued by TBEA for that particular product or service, and we recommend that you read them carefully. The privacy notice or supplementary statement for each product or service forms an important part of this Privacy Policy, and describes how that product or service handles your personal information, how you may exercise your data subject rights, the relevant data controller, and how to contact that controller. In the event of any inconsistency between a product privacy notice or supplementary statement and this Privacy Policy, the product privacy notice shall prevail; for matters not covered by the product privacy notice, this Privacy Policy shall apply.

Before using our websites or services, please read this Privacy Policy carefully so that you understand the following:

1.How we collect and use your personal information

2.How we share, transfer, and disclose your personal information

3.How we store your personal information

4.How we protect your personal information

5.Your personal information rights

6.How we use Cookies and similar technologies

7.Protection of minors' personal information

8.Cross-border transfer of personal information

9.Supplementary terms for the European Economic Area and the United Kingdom

10.Supplementary terms for the United States

11.How this Privacy Policy is updated

12.How to contact us

 

1 How We Collect and Use Your Personal Information

Personal information refers to all kinds of information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized information. When you browse our websites, use our services, or interact with us, we may collect your personal information. We comply with legal and regulatory requirements and follow the principles of lawfulness, legitimacy, necessity, and good faith, collecting only the minimum scope of personal information required to fulfill website and service functions, and the collected information will only be used for the purposes set out in this Privacy Policy. The personal information we collect and use varies across different webpages and service modules, as explained below. You are not required to provide personal information to us, but in certain cases, if you choose not to do so, we may be unable to provide you with the relevant products or services, or to respond to or resolve issues you encounter.

1.1 What Personal Information We Collect

The types of information we collect may vary across different modules on different webpages, as follows.

1.1.1 Website

When you browse our website, in order to continuously provide you with stable, high-quality service, with your consent, we will collect the following types of personal information:

(1) Device and network information: e.g., device type, device name or model, device identifier, operating system type and version, browser type and version, IP address, network service provider, etc.

(2) Log information: When you browse our website or use our services, we will automatically collect and store necessary log information, such as the time of each service access, the path of pages accessed, client IP address, event information (e.g., errors, crashes, restarts, upgrades), etc.

1.1.2 "Electrical Equipment" "Renewable Energy" "Innovation" and "Sustainable Development" Modules

This module provides product information displays. You may browse all product content and technical specifications as a guest without registering an account. If you need specific in-depth technical documents or product quotations, please contact us via the contact form in the "About Us" module, and our technical team will get in touch with you.

During your browsing of this module, beyond the aforementioned device and network information and log information, we do not actively collect any other personal information.

1.1.3 "About Us" Module

When you access this module, you may contact us via "Contact Us." In this context, in addition to the aforementioned device and network information and log information, we will also collect information related to your account registration, specifically including: name, job title, contact phone number, email address, city, and employer.

We use your information primarily to create an account for you, respond to your inquiries, and recommend products to you with your consent. The above information is not used to create a persistent user account; after your inquiry has been processed, the relevant data will be retained for the period specified in Section 3.2 of this Policy and then deleted.

1.1.4 Circumstances in Which We Obtain Your Personal Information Indirectly from Third Parties

If we obtain your information indirectly from a third party, we will require that third party in writing before collection to explain the source of the personal information and whether it has obtained your lawful authorization to collect, process, and provide us with your personal information. Except where expressly permitted by law, we will only collect your personal information from third parties after confirming that the third party has obtained your authorization and consent. If the scope of the third party's authorization does not cover our processing purposes, we will ourselves, or require the third party to, obtain your consent before processing your personal information.

1.2 Exceptions to the Requirement for Authorization and Consent

You fully understand that, in accordance with applicable laws and regulations, we may process (including collect, store, use, process, transmit, provide, disclose, delete, etc.) personal information without obtaining your authorization and consent in the following circumstances:

(1) When necessary for the performance of statutory duties or obligations;

(2) When necessary to respond to a public health emergency, or in an emergency to protect the life, health, and property safety of a natural person;

(3) Processing your personal information that you have voluntarily disclosed or that has been otherwise lawfully disclosed, within a reasonable scope in accordance with applicable laws and regulations;

(4) When necessary to conclude or perform a contract to which you are a party, or when necessary for human resources management in accordance with lawfully established labor rules and regulations and collective contracts concluded in accordance with the law;

(5) Processing your personal information within a reasonable scope for news reporting, public opinion supervision, and other acts conducted in the public interest;

(6) Other circumstances stipulated by applicable laws and regulations.

1.3 How We Process Your Personal Information

We will only use your personal information where we have a lawful basis for doing so. Depending on applicable local law, we may use your personal information on the following lawful bases: your consent; the necessity of performing or entering into a contract with you; the necessity of protecting your or another person's legitimate interests; the necessity of fulfilling statutory obligations; legitimate business interests; and other lawful bases, in order to achieve the following purposes:

(1) Providing services including website functions and demand response;

(2) Responding to business inquiries and technical support requests you submit via the contact form;

(3) Sending notifications of updates and installations for the website or services;

(4) With your consent or at your request, contacting you, sending you information about products and services you may be interested in, inviting you to participate in market research, or sending you marketing information;

(5) Syncing and storing data you upload or download, and the data required to perform uploads and downloads;

(6) Managing our contractual relationship with you and/or complying with legal obligations;

(7) Conducting data analysis to improve service efficiency;

(8) Conducting audits to verify that our internal processes operate as intended and comply with legal, regulatory, or contractual requirements;

(9) Preventing fraud and monitoring security risks, such as detecting and preventing cyberattacks or identity theft attempts;

(10) Complying with applicable local laws and regulations;

(11) Other purposes disclosed in product privacy notices.

 

2 How We Share, Transfer, and Disclose Your Personal Information

2.1 Entrusted Processing

Certain specific modules or functions in our products are provided by external vendors. For example, we may engage service providers to assist us in providing customer support. For companies and organizations to which we entrust the processing of personal information, we will enter into agreements with them specifying the purpose, duration, processing methods, types of personal information, protective measures, and the rights and obligations of both parties. We require them to process personal information in accordance with our requirements, this Privacy Policy, and any other relevant confidentiality and security measures, and we supervise the personal information processing activities of the entrusted parties.

2.2 Sharing

We will not share your personal information with any organization or individual, except in the following circumstances:

(1) With your prior explicit consent or authorization;

(2) When required by laws and regulations or pursuant to mandatory requirements from administrative or judicial authorities;

(3) To the extent required or permitted by laws and regulations, where necessary to protect the interests, property, or safety of us, you, other users, or the general public from harm;

(4) Sharing with our affiliates: We may share your personal information with our affiliates. However, we will only share necessary personal information, and such sharing is subject to the purposes stated in this Privacy Policy. Our affiliates will seek your consent again if they wish to change the purpose of processing personal information. If you need more detailed information about sharing among TBEA's affiliates, please contact us using the methods set out in this Privacy Policy.

(5) Sharing with authorized partners: Solely to achieve the purposes stated in this Privacy Policy, certain of our services will be provided by authorized partners. We may share certain of your personal information with partners to ensure smooth delivery of services to you. We will only share your personal information for lawful, legitimate, necessary, specific, and clearly defined purposes, and will only share the personal information necessary to provide the services. We will also enter into strict confidentiality agreements with partners, requiring them to process your personal information in accordance with this Policy and any other relevant confidentiality and security measures. Our partners are not authorized to use the shared personal information for any other purpose.

Currently, our authorized partners include: suppliers, service providers, and other partners. We share information with suppliers, service providers, and other partners who support the functions of our websites or services, including providing technical infrastructure services, employee recruitment, marketing activities, logistics, service quality monitoring, customer service, and payment facilitation.

2.3 Transfer

We will not transfer your personal information to any organization or individual, except in the following circumstances:

(1) With your prior explicit consent or authorization;

(2) When required by laws and regulations or pursuant to mandatory requirements from administrative or judicial authorities;

(3) In the event of a company merger, division, acquisition, asset transfer, or other similar transaction involving the transfer of personal information, we will inform you of the name or identity and contact information of the recipient, and require the new company holding your personal information to continue to be bound by this Privacy Policy and fulfill its personal information security protection obligations. Otherwise, we will require that company to seek your consent again.

2.4  Disclosure

As a general principle, we will not disclose your personal information, except in the following circumstances:

(1) With your prior explicit consent or authorization;

(2) When required by laws and regulations or pursuant to mandatory requirements from administrative or judicial authorities. In such cases, we will require the disclosing party to present valid legal documents corresponding to the request, and will take security measures that comply with laws and industry standards for the disclosed information.

 

3 How We Store Your Personal Information

3.1 Storage Location

We store your personal information in accordance with applicable laws and regulations. Our website servers are located within the People's Republic of China, and personal information generated when you access this website (including log data and information submitted via the contact form) is stored on servers within the People's Republic of China.

For users from the European Economic Area, the United Kingdom, this storage arrangement constitutes a cross-border transfer of personal data within the meaning of the GDPR (General Data Protection Regulation), and we have addressed this cross-border transfer with the safeguards required by applicable laws and regulations.

For users from the United States, we have taken necessary contractual and technical measures to ensure that your personal information is adequately protected within the People's Republic of China.

3.2 Retention Period

We will only retain your personal information for the duration your account is active or for the period necessary to provide services and technical support to you, unless a longer retention period is required or permitted by law for legitimate reasons. We will also retain your personal information for the period necessary to comply with applicable legal obligations, resolve disputes, and enforce agreements.

After the necessary retention period has expired, we will delete your personal information or anonymize it, unless otherwise required by law.

 

4 How We Protect Your Personal Information

We attach great importance to the security of personal information and take all reasonably practicable measures to protect your personal information.

4.1 Data Security Measures

We have adopted industry-standard security technologies and organizational measures to protect the personal information you provide, and to prevent it from unauthorized access, disclosure, use, modification, damage, or loss. We use encryption technology to store your personal information in encrypted form, and have established strict data access controls to ensure the security of your personal information. We will take all reasonably practicable measures to ensure that irrelevant personal information is not collected.

4.2 Security Incident Response

In the event of a personal information security incident, we will notify you promptly of the basic circumstances of the incident, its potential impact, the measures we have taken or plan to take, suggestions for you to independently prevent and reduce risks, and follow-up remediation measures, through means such as email, letter, telephone, or push notifications, as required by laws and regulations. If individual notification is impractical, we will adopt reasonable and effective means to issue a public announcement. At the same time, we will proactively report the handling of personal information security incidents to the regulatory authorities as required.

For users in the European Economic Area and the United Kingdom, in the event of a security incident involving your personal data, we will report it to the relevant supervisory authority within 72 hours of discovering the incident, and will notify you promptly if the incident is likely to result in a high risk to you.

Please note and understand that, due to limitations in technical means and the possible existence of various malicious attack threats, even if we do our utmost to strengthen security measures, we may not be able to completely eliminate security risks. Therefore, we strongly recommend that you proactively take measures to protect the security of your personal information. If you discover that your personal information you submitted on this website (particularly your contact details, or browsing interaction data) has been leaked or compromised, you should immediately contact us using the contact information listed in this Privacy Policy so that we can take appropriate measures in a timely manner.

 

5 Your Personal Information Rights

We attach great importance to your personal information rights, and in accordance with applicable laws and regulations, we guarantee that you may exercise the following rights over your personal information:

5.1 Accessing, Copying, Correcting, and Transferring Your Personal Information

You have the right to access, copy, correct, and transfer your personal information. You may access, copy, and correct your personal information through your account settings, or by contacting us using the methods set out in this Privacy Policy. If you need to transfer your personal information, we will provide a transfer path in accordance with the requirements of laws and regulations.

5.2 Deleting Your Personal Information

In the following circumstances, you may submit a request to us to delete your personal information:

(1) If our processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve;

(2) If you withdraw your consent;

(3) If you no longer use our services, have deregistered the relevant account, or the retention period has expired;

(4) If we terminate services and operations;

(5) If a law enforcement or judicial authority determines that we have processed your personal information in violation of laws, administrative regulations, or agreed terms;

(6) Other circumstances provided for by laws and administrative regulations.

After confirming your reasonable request and verifying your identity, we will complete subsequent processing in accordance with laws and regulations and your request, and will inform you of the results. We will also simultaneously notify other entities that have obtained your personal information from us to delete it promptly, unless otherwise provided by laws and regulations or those entities have obtained separate authorization from you. Please note and understand that, due to technical limitations, we may not be able to immediately delete the relevant information from backup systems. We will take necessary measures to ensure your personal information is securely stored and to prevent any further processing until the backup can be fully deleted or anonymized.

5.3 Changing or Withdrawing Your Authorization

Regarding the authorization for processing your personal information, you may contact us using the methods set out in this Privacy Policy to change the scope of your authorization or to withdraw your consent. Please note and understand that certain business functions require some necessary personal information to be completed; changing the scope of authorization or withdrawing consent may affect your continued use of the relevant functions or services, but will not affect the lawfulness or validity of our processing of your personal information based on your consent prior to the change or withdrawal, nor will it affect our processing of your personal information on other lawful bases.

5.4 Obtaining Our Response

In addition to the above methods, you may also submit requests to us using the contact methods listed in Section 12 of this Privacy Policy. We will actively respond to reasonable requests you make for the purpose of exercising your personal information rights. To ensure security, we may require you to provide written materials or otherwise verify your identity; we will respond to your request after receiving your feedback and verifying your identity.

We will respond to your request within the period specified by applicable laws and regulations. For your reasonable requests, we generally do not charge a fee; however, for requests that are repeated multiple times or exceed a reasonable scope, we may charge a certain cost fee as appropriate. For requests that are completely groundless, require excessive technical means, pose a risk to the legitimate rights and interests of others, or are highly impractical, we may decline them.

At the same time, please note and understand that, in accordance with legal and regulatory requirements, we may be unable to respond to your requests in the following circumstances:

(1) Directly related to national security or national defense security;

(2) Directly related to public security, public health, or significant public interests;

(3) Directly related to criminal investigation, prosecution, and trial;

(4) Where there is sufficient evidence of subjective malice or abuse of rights on your part;

(5) Where responding to your request would cause serious harm to your or another individual's or organization's legitimate rights and interests;

(6) Where responding to your request would prevent us from fulfilling our statutory obligations;

(7) Involving trade secrets;

(8) Other circumstances stipulated by laws and regulations.

 

6 How We Use Cookies and Similar Technologies

Our webpages and services may use Cookies, web beacons, and similar technologies to provide you with a good experience and to help us continuously improve our products and services. Cookies are small data files sent from a web server to your browser and stored on your computer or mobile device, usually containing identifiers, site names, and some numbers and characters. With Cookies, we are able to save your relevant data so that you do not need to re-enter it on each visit; we may also use traffic patterns, access patterns, and other information obtained through these technologies to simplify website navigation and help design our website to make your experience more efficient and enjoyable.

We will not use Cookies for any purposes other than those described in this Policy. You may manage or delete Cookies according to your preferences. Except for necessary Cookies, you may choose whether to allow us to use certain non-essential types of Cookies, and this will not affect your use of the basic functions of the website and services. Most web browsers have a function to block Cookies; you may clear all Cookies stored on your computer through your browser settings, or use your browser's private/incognito mode to access our website. However, doing so may mean that you need to personally change your user settings each time you visit our website; disabling Cookies may also affect your use of all or part of the functions of certain services. For detailed categories and descriptions of Cookies, please refer to our separately published Cookie Notice.

 

7 Protection of Minors' Personal Information

Our websites and services are not directed at minors. "Minors" as referred to in this Policy means: within the People's Republic of China, natural persons under the age of eighteen; in the European Economic Area, generally under the age of sixteen pursuant to Article 8 of the GDPR (which member states may lower to thirteen); and in the United States, children under the age of thirteen pursuant to the Children's Online Privacy Protection Act (COPPA). In the event that we inadvertently collect personal information of a minor, we will make every effort to delete the relevant information promptly upon discovery. If you find that we have collected a minor's personal information, please contact us using the contact information provided in this Privacy Policy and we will investigate immediately and delete the relevant information upon confirmation.

 

8 Providing Personal Information to Recipients Outside of China

At present, in the course of our operations, we do not provide personal information to any overseas counterparties or overseas third-party partners, and therefore there is no transfer of your personal information outside the People's Republic of China.

Our website servers are located within the People's Republic of China. When you visit this website and submit personal information to us, your personal data will be stored within the People's Republic of China. For users from outside China, this storage arrangement may constitute a cross-border data transfer under applicable law, and we handle it in accordance with the following compliance pathways:

(I) Outbound Transfer of Personal Information of Individuals Within China

Should there be a need in the future to provide your personal information to recipients outside of China due to company development or business expansion, we will strictly comply with relevant Chinese laws and regulations, fulfill all compliance obligations, and ensure the security of your personal information.

(II) Processing of Data of Users from the EEA / UK 

Personal data of users from the European Economic Area and the United Kingdom is stored on servers within the People's Republic of China. For this cross-border data transfer, we, as the sole data controller, directly receive and store your personal data without involving a transfer to an independent third-party data recipient.

(III) Processing of Data of Users from the United States

Personal information submitted by U.S. users through this website is stored on our servers located within the People's Republic of China; the processing does not involve an independent third-party data processor. We have implemented encrypted transmission and access control measures to ensure data security.

 

9 Supplementary Terms for the European Economic Area and the United Kingdom

This section is directed at users located in member states of the European Economic Area (EEA) and the United Kingdom (UK), and provides supplementary explanation regarding matters governed by the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and UK domestic legislation (UK GDPR). This section, together with the other sections of this Privacy Policy, forms the complete privacy notice; in the event of any conflict between this section and other sections, this section shall prevail with respect to users in the EEA and UK.

9.1 Data Controller

TBEA Co., Ltd. is the data controller responsible for processing your personal data under the EU General Data Protection Regulation. 

Data Protection Officer (DPO) email: tbeaoffice@tbea.com

Response timeline: acknowledgment within 5 business days of receiving a request, and a full response within one month.

9.2 Legal Basis for Processing Data

We process personal information for the purposes described in this Privacy Policy on the legal bases set out below. If a country/region does not require us to specifically state the legal basis for processing personal information, the legal bases listed under the law of that country/region may differ from the specific legal bases stated below, even if the processing purposes are similar.

Processing Activity

Legal Basis (Article 6 GDPR)

Purposes

Website access logs and technical data

Article 6(1)(f): Legitimate interests

Maintaining website security and service continuity

Responding to contact form business inquiries

Article 6(1)(b): Contractual necessity

Your submission of an inquiry constitutes a pre-contractual measure

Sending marketing information with your consent

Article 6(1)(a): Explicit consent

Prior withdrawable explicit consent required; you may unsubscribe at any time

Website analytics (anonymized statistics)

Article 6(1)(f): Legitimate interests

Data is anonymized

Fraud prevention and security monitoring

Article 6(1)(f): Legitimate interests

Protecting our legitimate interests and those of users

Complying with legal obligations

Article 6(1)(c): Legal obligation

Tax, audit, regulatory reporting, and other requirements

Regarding sensitive personal data: This website does not actively collect special categories of personal data as defined under Article 9 of the GDPR. If processing of such data is required for a specific service, we will obtain your explicit consent separately pursuant to Article 9(2) of the GDPR.

9.4 Your Personal Data Rights

Pursuant to the GDPR, you have the following rights over your personal data, which you may exercise at any time using the contact methods listed in Section 12 of this Policy:

(1) Right of access: You have the right to obtain confirmation as to whether we process your personal data, and to obtain a copy of your personal data and information about the processing, including the purposes of processing, categories of data, recipients, retention periods, and data sources.

(2) Right to rectification: You have the right to request that we correct inaccurate personal data concerning you and to complete incomplete personal data.

(3) Right to erasure / Right to be forgotten: You have the right to request that we erase your personal data in the following circumstances: the data is no longer necessary for the purposes for which it was collected; you withdraw consent and there is no other legal basis; the data has been unlawfully processed; or an erasure obligation exists under EU or member state law. Erasure requests may be limited where the data is necessary for the establishment, exercise, or defense of legal claims, or where statutory retention obligations apply.

(4) Right to restriction of processing: In certain circumstances (e.g., while you contest the accuracy of data), you have the right to request that we restrict the processing of your personal data to mere storage.

(5) Right to data portability: For personal data you have provided to us electronically and that is processed on the basis of consent or contractual necessity, you have the right to receive it in a structured, commonly used, machine-readable format, and to transmit it to another data controller.

(6) Right to object: You have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal data based on legitimate interests (Article 6(1)(f)); upon objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims. For processing for direct marketing purposes, you may object unconditionally and without providing reasons.

(7) Right to withdraw consent: For any processing activities based on your consent, you may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Withdrawal is as easy as giving consent.

(8) Rights related to automated decision-making: This website does not subject you to automated decision-making (including profiling) that produces significant legal effects. Should such functionality be introduced in the future, we will inform you and obtain necessary consent in accordance with Article 22 of the GDPR.

9.5 Data Retention Periods

Data Category

Retention Period

Basis/Purpose

Website access logs and device information

12 months

Security audit and service optimization needs (legitimate interests)

Contact form submissions

3 years after inquiry is processed

Dispute resolution and compliance evidence needs (legitimate interests)

Marketing consent records

3 years after un-subscription or withdrawal of consent

Compliance evidence needs

Cookie consent records

3 years

Compliance evidence needs

Contract-related correspondence data

5 years after contract termination

Applicable legal requirements

Data security incident records

5 years

GDPR Article 33 compliance obligation

9.6 How to Exercise Your Rights, Submit Requests, or File Complaints

If you have any comments or suggestions for us, you may send an email to tbeaoffice@tbea.com, or call 0086-400-687-1000 to report your situation and requirements.

If you believe that our processing of your personal data violates laws and regulations or this Privacy Policy, you may file a complaint with the Cyberspace Administration of China; you may also contact the supervisory authority in your country or region.

 

10 Supplementary Terms for the United States

This section is intended to inform residents of certain U.S. states, including California, Connecticut, Colorado, Utah, and Virginia, of specific rights they have with respect to their personal information pursuant to applicable state consumer privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

10.1 Categories of Personal Information We Collect and Purposes

We have not collected and will not collect any sensitive personal information in the past twelve months or for a certain period in the future. The categories of personal information we collect and their processing purposes are shown in the table below:

Category of Personal Information

Examples of Specific Content

Collected

Identifiers

IP address, email address (via contact form)

Yes

Customer records information

Name, contact phone number, employer, job title (via contact form)

Yes

Internet or network activity

Browsing history, pages visited, log information

Yes

Geolocation data

City/region-level location based on IP address (coarse-grained; precise location not collected)

Yes

Professional or employment-related information

Employer, job title (via contact form)

Yes

Sensitive personal information

This website does not collect sensitive personal information as defined by the CPRA

No

We use the above personal information for the business purposes set out in Section 1.3 of this Privacy Policy. In the past twelve months, we have used your personal information for the business and commercial purposes described in this Privacy Policy (particularly Section 1 above).

In the past twelve months, we may have disclosed the above categories of personal information to service providers (data processors) for the following business purposes: providing technical infrastructure services, customer relationship management, and data analysis. We do not sell your personal information (as "sell" is defined under the CCPA), nor do we share your personal information with unaffiliated third parties for cross-context behavioral advertising purposes ("sharing").

10.2 Your Rights

10.2.1 Right to Know and Right of Access

You have the right to know and obtain information about how we process your personal information, specifically including:

(1) The categories and specific content of personal information we have collected in the past twelve months;

(2) The categories of sources from which the above personal information was collected;

(3) The commercial or business purposes for which personal information was collected or used;

(4) The categories of service providers to whom we have disclosed personal information for business purposes, and the categories of third parties to whom we have sold or shared personal information for commercial purposes (if any);

(5) A copy of the specific personal information we hold about you.

When you exercise the right of access, we will provide a copy of your personal information in a structured, common, and machine-readable format to facilitate its transfer to another entity.

10.2.2 Right to Correct

You have the right to request that we correct inaccurate personal information we hold about you. We will take reasonable steps to correct it, taking into account the nature of the personal information and the purposes of processing, and will notify service providers to whom the relevant personal information has been disclosed to make corresponding corrections.

10.2.3 Right to Delete

You have the right to request that we delete personal information we have collected from you, and to notify our service providers to delete copies they hold.

Please note that the following circumstances constitute statutory exceptions, and we may deny a deletion request in whole or in part:

(1) Necessary to complete the transaction for which the personal information was collected, or to fulfill a contract with you;

(2) Necessary to detect security incidents, prevent fraud or other illegal activities, or hold the responsible parties accountable;

(3) Necessary to debug and fix errors affecting existing website functionality;

(4) Necessary to comply with applicable laws and regulations or fulfill statutory obligations;

(5) Used for internal business purposes consistent with the reasonable expectations when providing the personal information, and in a manner compatible with the context of collection.

10.2.4 Right to Opt Out

You have the right to opt out of the following processing activities:

(1) Sale of personal information: selling your personal information to third parties for monetary or other valuable consideration;

(2) Sharing of personal information: sharing your personal information with third parties for cross-context behavioral advertising purposes.

As stated above, we currently do not sell or share personal information. Should our policy change, we will place a "Do Not Sell or Share My Personal Information" link in a prominent location on our website and notify you in advance. This website also recognizes and honors Global Privacy Control (GPC) signals sent by browsers, treating them as valid opt-out instructions.

10.2.5 Right to Limit Use of Sensitive Personal Information

If we process sensitive personal information as defined by the CPRA, you have the right to limit our use and disclosure of sensitive personal information to purposes that are reasonably necessary to provide the services or goods you have explicitly requested, and to purposes additionally permitted by laws and regulations.

The personal information we currently collect through this website does not involve categories of sensitive personal information as defined by the CPRA (with the exception of account login credentials if any, which are used solely for account security purposes and not for any other use).

10.2.6 Right to Non-Discrimination

You will not be subject to discriminatory treatment from us for exercising any of the above rights. We will not, because you have exercised your privacy rights: refuse to provide you with goods or services; charge you different prices or rates; provide you with a different level of quality of goods or services; or imply that you will receive unfavorable treatment as a result.

10.2.7 How to Exercise Your Rights

When you need to exercise your privacy rights, you may send an email to tbeaoffice@tbea.com, or call 0086-400-687-1000 to report your situation and requirements.

Please note that when you contact us, we may need you to provide necessary personal information again in order to verify your identity. You have the right to designate an authorized agent to exercise rights on your behalf. If you choose to designate an authorized agent, that agent may contact us using the above methods, and will also need to verify their own identity and their authorization to act on your behalf.

 

11 How This Privacy Policy Is Updated

In order to provide you with better services, we will revise and update this Privacy Policy from time to time, and will publish and highlight it in a prominent location on the official website and relevant functional modules. If you do not agree with the modified Policy, you have the right and should immediately stop using this product or service. If you continue to use our products and services, it means that you have fully read, understood, and accepted the modifications we have made to the relevant provisions of this Policy. We will archive previous versions of this Policy for your reference.

 

12 How to Contact Us

The Risk Management and Legal Affairs Department of TBEA Co., Ltd. is exclusively responsible for responding to personal information rights requests. If you have any questions, comments, or suggestions about this Privacy Policy, please contact us through the following:

(1) Email: tbeaoffice@tbea.com

(2) Phone: 0086-400-687-1000

Under normal circumstances, we will respond within fifteen business days or within the period required under applicable laws. If you are not satisfied with our response, particularly if our personal information processing has harmed your legitimate rights and interests, you may also bring a lawsuit before a competent people's court, or file a complaint with the relevant regulatory authority or industry self-regulatory association. We welcome you to provide feedback and suggestions directly to us, and we will actively respond to your reasonable requests in accordance with laws and regulations.