Privacy policy

This policy explains what personal data we collect when you visit this website, why we collect it, how we use it, who we share it with, and the rights you have over it.

1. Who we are

Xi'an Pisonics Information Technology Co., Ltd.

Room 15B016, 16th Floor, Tower A, Olympic Building, No. 14 Chang'an North Road, Beilin District, Xi'an City, Shaanxi Province

Data protection contact: Under the unified responsibility of the company's management.

2. What we collect

We collect only the minimum information necessary for our business operations, primarily including: 1. Inquiry Information: Your name, company name, email address, phone number, country/region, and message content, which you voluntarily submit via the "Contact Us" or "Get Selection Advice" forms. 2. Browsing Data: IP address, browser type and version, time of visit, pages visited, referring URL, and device type; this data is used for website traffic analytics and security protection. 3. Cookies and Local Storage: Session identifiers (to maintain login status), CSRF tokens (to prevent Cross-Site Request Forgery), and language/region preferences. 4. Business Transaction Records: Quotations, contracts, orders, etc., which are generated only when you voluntarily initiate a business partnership with us. We do not collect sensitive personal information unrelated to our business operations (such as national ID numbers, biometric data, religious beliefs, medical information, etc.).

Automatic collection

When you visit the site, we automatically collect: pages visited, referring URL, browser type, approximate country (derived from your IP, never the IP itself stored), and the timestamp of your visit. This is how analytics works on virtually every website.

3. Why we collect it (purposes)

Our purposes for processing the aforementioned information are limited to the following: 1. Responding to Inquiries — Replying to product inquiries, providing product selection recommendations, generating quotations, and arranging technical support; 2. Fulfilling Contracts — Arranging shipments, conducting installation and commissioning, providing after-sales service, and supplying spare parts; 3. Website Improvement — Understanding which products and industries are of greatest interest to visitors through aggregated statistics, and optimizing content structure (based solely on aggregated data, without creating individual profiles for specific visitors); 4. System Security — Identifying and blocking malicious web crawlers, brute-force login attempts, and web-based attacks; 5. Legal Obligations — Cooperating with legitimate inquiries from regulatory bodies such as business administration, tax, and customs authorities.

4. Legal basis

In accordance with the *Personal Information Protection Law of the People's Republic of China* (PIPL) and (for customers in the EU) the EU *General Data Protection Regulation* (GDPR), we process your personal information based on the following lawful bases: - Your explicit consent—for example, when you voluntarily submit an inquiry form or subscribe to our email newsletter; - Necessity for the conclusion or performance of a contract—for example, when you place an order, request a product sample for testing, or enter into a cooperation agreement; - Obligations prescribed by laws and regulations—for example, the issuance of invoices, export customs declarations, and the retention of tax records; - Legitimate and necessary operational interests—for example, system logging and anti-fraud monitoring—provided that such processing does not infringe upon your legitimate rights and interests. You may withdraw your consent at any time; such withdrawal shall not affect the lawfulness of any processing carried out prior to the withdrawal.

5. Cookies and similar technologies

We use a small number of cookies. Essential cookies (CSRF protection, language preference, this consent record) are always set — without them the site cannot function. Analytics cookies (Google Analytics, Baidu Tongji) only set after you opt in via the consent banner. Marketing cookies are reserved for future use and are not currently set.

For a per-cookie list and the ability to change your choice at any time, see Cookie information.

6. Who we share data with

We share your information with third parties only under the following circumstances, and strictly to the extent necessary: 1. Website Traffic Statistics: • pisonics.cn (Chinese site) utilizes Baidu Analytics. • pisonics.com (English site) utilizes Google Analytics. This data is used solely for aggregated traffic analysis and does not involve the identification of individuals. 2. Email Service Providers: Used for sending inquiry notifications and responses (e.g., Alibaba Cloud Direct Mail / Postmark). 3. Business Partners: Upon your authorization, we may share necessary contact information and addresses with authorized distributors, logistics carriers, and installation service providers to facilitate order fulfillment. 4. Legal Mandates: In response to inquiries or requests made by competent government authorities in accordance with statutory procedures. With the exception of the circumstances outlined above, we will not sell, rent, or otherwise inappropriately disclose your personal information to any third party.

7. International data transfers

This website utilizes a split-server deployment architecture for its Chinese-language site (pisonics.cn) and English-language site (pisonics.com): - The server for pisonics.cn is located within mainland China (hosted on Alibaba Cloud's domestic nodes); as a general principle, the browsing data and inquiry information of visitors located within mainland China are not transferred outside the country. - The server for pisonics.com serves a global audience, and the associated browsing data may be stored outside of mainland China. Should the cross-border transfer of personal information become strictly necessary (for instance, if an inquiry submitted by an EU customer on the .com site requires transfer back to mainland China for processing), we will fulfill our compliance obligations in accordance with Article 38 of the Personal Information Protection Law (PIPL). This includes conducting a Personal Information Protection Impact Assessment, obtaining your separate consent, and implementing protective measures such as encrypted transmission.

8. How long we keep data

Detailed analytics records (page-level events) are kept for 90 days, then aggregated into anonymous daily summaries. Daily summaries are kept indefinitely as they cannot identify any individual.

We employ differentiated retention strategies for various types of data: - Inquiries / Business Correspondence Records — Retained for 3 years from the date of the last contact to facilitate ongoing service and follow-ups; - Contracts and Invoices for Concluded Transactions — Retained for 10 years in accordance with the *Measures for the Administration of Accounting Archives*; - System Access Logs — Automatically purged after 6 months (180 days); - Session Cookies — Expire immediately upon closing the browser; - Preference Cookies (Language/Region) — Expire after 30 days; - Backup Data — Stored in an encrypted format and destroyed after 90 days. Expired data is permanently deleted via automated tasks and cannot be recovered.

9. Your rights

You have the following rights regarding your personal information: - **Access and Copying** — Request copies of the information we hold about you; - **Correction and Supplementation** — Correct information that is inaccurate or incomplete; - **Deletion** — Request the deletion of your information, subject to applicable legal retention periods; - **Withdrawal of Consent** — Withdraw your prior authorization at any time (processing activities conducted prior to such withdrawal remain lawful); - **Complaints** — File a complaint with the Cyberspace Administration of China (CAC), local cyberspace administration departments, or market regulatory authorities, or initiate legal proceedings in a court of competent jurisdiction in your locality; If you are a user located in the European Union (where the GDPR applies), you also have the following rights: the Right to Data Portability, the Right to Restrict Processing, and the Right to Object to Automated Decision-Making. To exercise any of the aforementioned rights, please contact us using the privacy contact details provided at the top of this page. We will respond to your request within 15 working days (while the PIPL mandates a response within 30 days, we commit to a shorter timeframe). To safeguard the security of your information, we may require you to verify your identity when exercising these rights.

10. How to contact us

Email: privacy@pisonics.com

Phone: +86 159 0293 2017

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on the cookie consent banner so existing users are informed.