1. Policy Explanation

This Privacy Policy informs all platform users how FactoryLink collects, uses, stores, protects, and shares user and company information, strictly adhering to the *Cybersecurity Law*, *Personal Information Protection Law*, *E-commerce Law*, and relevant laws and regulations concerning cross-border online services to protect user information security and privacy rights.

This policy applies to all registered users, visitors, and service users of the platform. Using the platform constitutes acceptance of all contents of this policy.

2. Scope of Information Collection

The platform only collects the minimum necessary information for its business operations and does not forcibly collect irrelevant privacy information:

2.1 Company Entity Information (Factory/Purchaser)
Business license information, company name, unified social credit code, legal representative information, factory address, business scope, production qualifications, company contact information, and corporate bank account information (for settlement purposes).

2.2 Personal Contact Information
Operator/Contact Person’s name, mobile phone number, email address, and job title, used for supply and demand matching, order communication, after-sales notifications, and service reminders.

2.3 Platform Behavior Information
User login records, browsing history, inquiry records, connection records, order operation records, service subscription records, and device access information (for system security protection only).

3. Purpose of Information Use

3.1 For account verification, qualification review, and onboarding authentication to confirm the legality and compliance of user entities;

3.2 For core platform services such as supply and demand matching, inquiry connection, order follow-up, and fulfillment tracking;

3.3 For sending necessary information such as service notifications, order reminders, policy updates, and compliance announcements;

3.4 For platform system optimization, function iteration, risk control, and investigation of violations;

3.5 For fulfilling the information retention and regulatory reporting obligations stipulated by laws and regulations.

The platform will never use user companies’ core business data or privacy information for unrelated commercial promotion, sales, or illegal traffic diversion.

4. Information Storage and Security Protection

4.1 Storage Period
Information will be continuously stored during the user’s normal account usage period; after account cancellation, the platform will clear non-legally retained information, and transaction compliance records will be retained for more than 3 years in accordance with the law to meet regulatory traceability requirements. 4.2 Security Protection
The platform employs encrypted storage, access control, firewall protection, and data backup technologies to build a secure operation and maintenance system, preventing user information leakage, tampering, loss, and theft.

The platform has established an internal information management system, strictly prohibiting staff from privately accessing, exporting, or disclosing user privacy information. Those who violate this rule will bear legal responsibility.

5. Information Sharing and Disclosure Rules

5.1 Scenarios Where No Authorization is Required

1. Information required to be disclosed by laws, regulations, judicial organs, and regulatory departments;

2. Necessary information to be disclosed for handling user transaction disputes and verifying violations;

3. Factory, product, and enterprise information that users voluntarily disclose or actively display to the public.

5.2 Scenarios Requiring User Authorization
Except for the above-mentioned legally mandated scenarios, the platform will not share or transfer user privacy information or core business information to any third-party institutions, enterprises, or individuals. Prior written authorization from the user is required for any cooperative sharing.

6. User Privacy Rights

6.1 Right to Know: Users can check all information they have stored on the platform.

6.2 Right to Correct: Users can modify their information independently or contact platform customer service for correction if it is incorrect or changed.

6.3 Right to Deletion: Users can apply for the deletion of non-statutory information.

6.4 Right to Withdraw Authorization: Users can withdraw authorization for the use of non-essential information at any time.

7. Protection of Minors

The platform is an enterprise-level cross-border B2B platform and does not provide services to minors or actively collect their information. If any information of minors is inadvertently obtained, it will be completely deleted immediately.

8. Policy Updates and Consultation

The platform may update and optimize this privacy policy in accordance with regulations. The updated policy will be published on the official website and will take effect. Users with privacy concerns can consult and provide feedback through the platform’s official customer service channel.