Privacy Policy

1. Introduction and Developer Identity

The website at www.cloudsage.mom and the services described on it are operated by Kunming Yunshengzhi Electronic Commerce Co., Ltd., trading as CloudSage Ecom. Throughout this policy the terms we, us and our refer to that company, and the terms you and your refer to any individual who visits our website, submits an enquiry, communicates with our team or otherwise interacts with our services.

CloudSage Ecom is the developer name under which our integrated systems work is presented, and the same company is responsible for the personal information described in this policy. Our registered and operating address is Room 507 Floor 5, Silver Plaza, No 219 Baoshan Street, Wuhua District, Kunming - 650000, China (CN). Our primary contact address for privacy matters is courier@cloudsage.mom and our contact telephone number is +13855430445.

We take a deliberately restrained approach to data. Because our work concerns instruments, sensors and control systems rather than consumer profiles, we collect only the information that is necessary to answer enquiries, deliver projects and keep our systems secure. We do not build advertising profiles, we do not sell personal information, and we do not operate tracking that follows you across unrelated websites.

2. Scope of this Policy

This policy applies to personal information that we collect through this website, through email and telephone communications, through project documentation and through the ordinary operation of our business. It also describes the limited circumstances in which we may process data on behalf of a client as part of an integrated system that we design, install or maintain.

This policy does not apply to websites or services operated by other organisations, even where we link to them or integrate with them. Similarly, it does not govern the internal data practices of our clients, who remain responsible for the personal information they control within their own operations. Where we act as a processor for a client, the client determines the purposes of processing and we act only on documented instructions, as described later in this policy.

If you are unsure whether this policy covers a particular interaction, please contact us using the details in the final section and we will explain the position clearly and promptly.

3. Information We Collect

The categories of personal information that we may collect include the following. First, identity and contact details such as your name, organisation, email address, telephone number and postal address, provided when you contact us or engage our services. Second, correspondence content, meaning the messages, specifications and attachments that you send to us and our replies to you.

Third, project information that arises during an engagement, such as site details, contact persons, access requirements and commissioning schedules. Fourth, technical information generated automatically when you use our website, including internet protocol address, browser type, device characteristics, referring page and pages visited during the session.

Fifth, information relating to payments and billing where a commercial relationship exists, such as company billing details and transaction references. We do not collect special categories of sensitive personal information, and we ask that you do not send us such information unless we specifically request it for a lawful purpose and explain why it is needed.

4. How We Collect Information

We collect personal information in several straightforward ways. We collect it when you complete the enquiry form on our contact page, when you send us an email, when you telephone our team, and when you exchange documents with us during a project. In each case the information comes directly from you or from the organisation you represent.

We also collect limited technical information automatically as you browse our website. This information is generated by your browser and by our hosting environment, and it is used to deliver pages reliably, to understand aggregate usage and to protect the site against abuse. It is not used to identify you personally except where necessary for security or where the law requires it.

Finally, we may receive information from a client or a partner where that party introduces you to us or asks us to work with your team on a project. When this happens we rely on the introducing party to have a lawful basis for sharing your details, and we treat the information in accordance with this policy from the moment we receive it.

5. Why We Use Personal Information

We use personal information for clearly defined and limited purposes. We use it to respond to your enquiries, to prepare proposals and quotations, to deliver and commission integrated systems, to provide support and maintenance, and to maintain accurate business records. We also use it to send you information that you have requested and to communicate about projects that are underway.

We use technical information to operate and secure our website, to diagnose faults, to measure aggregate traffic patterns and to improve the clarity and accessibility of our content. We may use contact details to send service notices or, where permitted, occasional updates about our work, and you may stop those communications at any time by contacting us or by using any unsubscribe instruction that we provide.

We do not use personal information for automated decision making that produces legal or similarly significant effects, and we do not use it to build behavioural advertising profiles. Where a new purpose arises that is not described here, we will inform you before we begin that processing and, where required, seek your consent.

6. Lawful Basis for Processing

Where applicable law requires a lawful basis, we rely on one or more of the following. We process information as necessary to take steps at your request before entering a contract and to perform a contract with you, for example when we deliver a commissioned system. We process information for our legitimate interests in running and improving our business, provided those interests are not overridden by your rights and freedoms.

We process information to comply with legal obligations, such as maintaining financial records, responding to lawful requests from authorities and meeting our regulatory duties as a company. We process information on the basis of your consent where you have given it, for example for optional marketing communications, and you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

When we process personal information on behalf of a client as part of an integrated system, the client is the controller of that information and is responsible for identifying the lawful basis. We act as a processor, follow the client written instructions and apply the security measures described later in this policy.

7. Cookies and Similar Technologies

Our website is designed to work with the minimum possible reliance on cookies. We may use a small number of strictly necessary cookies or local storage entries to remember interface preferences, such as whether a mobile navigation panel is open, and to protect forms against misuse. These mechanisms do not track you across other websites and are not used for advertising.

If we introduce analytical tools that rely on cookies, we will describe them here and, where the law requires it, ask for your consent before they are set. You can control cookies through your browser settings and can delete stored data at any time. Disabling essential cookies may affect the operation of certain parts of the website, but the core informational content will remain available to you.

We do not permit third party advertising networks to set tracking cookies through our pages, and we do not sell or rent any data derived from cookies or similar technologies to any party for any purpose.

8. Server Logs and Technical Data

Like most websites, ours is served by systems that record basic technical information for each request. These server logs may include the internet protocol address of the requesting device, the date and time of the request, the page or file requested, the response status and a limited amount of browser and device information. Logs are used to keep the service running, to investigate faults and to detect and prevent abusive or unlawful activity.

We retain server logs for a limited period that is no longer than necessary for these operational and security purposes, after which they are deleted or aggregated so that they no longer identify individual devices. We do not attempt to link log entries to named individuals except where a security incident or a lawful request requires investigation.

Technical data may be processed by our hosting and infrastructure providers on our behalf, under contracts that require them to protect the information and to use it only for the purposes we have specified.

9. How We Share Information

We do not sell personal information, and we do not trade it for advertising or marketing advantage. We share personal information only in the limited circumstances described below, and only to the extent necessary for the purpose at hand.

We may share information with service providers who help us operate our business, such as hosting providers, email providers and professional advisers, under written terms that restrict their use of the information. We may share information with a client or a partner where this is necessary to deliver a project that you are involved in and where you would reasonably expect it. We may share information where the law requires it, where a court or regulator issues a lawful order, or where disclosure is necessary to protect the rights, property or safety of our company, our clients or the public.

If our business is reorganised, merged or transferred, personal information may be transferred as part of that transaction. In such a case we will ensure that the receiving organisation is bound to protect the information in a manner consistent with this policy, and we will notify affected individuals where the law requires it.

10. Service Providers and International Transfers

Because our studio is located in China and our clients and systems may be located elsewhere, personal information may be processed in countries other than the one in which you are based. Where information moves across borders, we take steps to ensure that it remains protected, using contractual commitments and technical measures appropriate to the sensitivity of the information.

Our service providers are selected with care and are required to implement reasonable security safeguards, to process information only on our instructions and to notify us of any incident that affects the information they hold for us. We review these arrangements periodically and terminate relationships where a provider cannot meet our standards.

By using our website or contacting us, you understand that your information may be processed in a jurisdiction other than your own, subject always to the protections described in this policy and to any mandatory rights that apply to you under local law.

11. Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as the law requires. Enquiry correspondence is generally retained for a period that allows us to follow up and to keep a coherent record of our dealings, after which it is deleted or archived in a form that limits further use.

Project records, including commissioning documentation and calibration logs, may be retained for longer because they support the ongoing maintenance of systems and because they document work that may be reviewed years later. Where records contain personal information, we keep that information to the minimum necessary and separate it from purely technical data wherever possible.

Billing and financial records are retained for the periods required by applicable accounting and tax law. When a retention period ends, we delete or irreversibly anonymise the information so that it can no longer be associated with an individual.

12. Data Security

We protect personal information with a combination of organisational and technical measures. Access is limited to those members of our team who need the information to perform their work, and access rights are reviewed as roles change. We use reputable hosting and communication services, apply updates to the systems we control, and follow practices intended to reduce the risk of unauthorised access, loss or alteration.

No method of transmission or storage is completely secure, and we cannot promise absolute protection. We therefore focus on reducing risk to a level appropriate to the information we hold, on detecting incidents quickly and on responding to them responsibly. If we become aware of a breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities without undue delay as required by applicable law.

You also have a role in security. Please keep any credentials that we issue to you confidential, use a secure network when sending sensitive information and tell us promptly if you suspect that a communication claiming to be from us is not genuine.

13. Your Privacy Rights

Depending on where you live, you may have rights in relation to your personal information. These can include the right to be informed about how your information is used, the right to access a copy of the information we hold about you, the right to correct information that is inaccurate or incomplete, and the right to request erasure of information that is no longer necessary.

You may also have the right to restrict or object to certain processing, the right to data portability where processing is based on consent or contract, and the right not to be subject to a decision based solely on automated processing. Where we rely on consent, you have the right to withdraw it at any time.

To exercise a right, please contact us at courier@cloudsage.mom. We will respond within the timeframe required by applicable law and may ask you to verify your identity so that we do not disclose information to the wrong person. If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction, and we will cooperate fully with any such process.

14. Privacy for Children

Our website and services are intended for businesses and professionals, and they are not directed at children. We do not knowingly collect personal information from children, and we do not design our systems to gather data about minors. If you believe that a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.

Where our integrated systems are deployed in a setting that could involve children, for example a school or a public facility, we design those systems to collect the operational data that the deployment requires rather than personal information about individuals, and we work with the responsible organisation to ensure that appropriate safeguards are in place.

15. Third Party Links and Integrations

Our website may link to external sites and our systems may integrate with third party platforms, such as mapping services, communication tools or client managed infrastructure. We do not control the privacy practices of those third parties, and this policy does not cover them. We encourage you to read the privacy notices of any external service before providing personal information to it.

Where an integration is part of a project that we deliver, we document the data flows involved and work with the client to ensure that each party understands its responsibilities. The client, as controller of its own operational data, remains responsible for its own notices and for the lawful handling of information within its organisation.

16. Operational Data from Client Systems

Some of the systems we design and maintain generate operational data such as sensor readings, building points, vehicle positions and alarm events. Much of this data concerns equipment rather than people, but it can occasionally include personal information, for example when a vehicle position is linked to a named driver or when an access event is linked to an individual.

When we process such information, we do so as a processor on behalf of the client that controls the system. We follow the client documented instructions, apply appropriate security measures, assist the client in responding to individual rights requests and delete or return the information when the engagement ends, unless the law requires us to retain it.

We keep operational data separate from our own business records and restrict access to the engineers who need it to commission, monitor and maintain the system. We do not use client operational data for our own marketing or sell it to any third party.

17. Changes to this Policy

We may update this policy from time to time to reflect changes in our practices, our services or the law. When we make a material change, we will update the date at the top of this page and, where appropriate, provide a more prominent notice on the website or by email. We encourage you to review this policy periodically so that you remain informed about how we protect personal information.

Continued use of our website or services after an update takes effect indicates that you accept the revised policy to the extent permitted by law. Where a change requires your consent, we will ask for it separately rather than assume it.

18. How to Contact Us

If you have questions about this Privacy Policy or about how we handle personal information, please contact us using the details below. We welcome the opportunity to resolve any concern directly and promptly.

CloudSage Ecom, operated by Kunming Yunshengzhi Electronic Commerce Co., Ltd.
Address: Room 507 Floor 5, Silver Plaza, No 219 Baoshan Street, Wuhua District, Kunming - 650000, China (CN)
Email: courier@cloudsage.mom
Telephone: +13855430445

We will acknowledge privacy enquiries and aim to provide a substantive response within the period required by applicable law.