Privacy Policy

1. Introduction

River Whisper, operated by Zunyi Jiangxiaoyi Network Technology Co., Ltd., respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at riverwhisper.buzz or interact with our services.

We encourage you to read this policy carefully. If you have any questions or concerns regarding our data practices, please contact us using the information provided at the end of this document.

2. Information We Collect

We may collect the following categories of information when you use our website or services:

2.1 Information You Provide Directly

• Contact information including your name, email address, phone number, and company name when you fill out inquiry forms or communicate with us.
• Business information such as project requirements, technical specifications, and organizational details shared during consultations.
• Communication records including correspondence via email, phone, or other channels when you reach out to us.

2.2 Information Collected Automatically

• Usage data including pages visited, time spent on the website, referring URLs, and interaction patterns.
• Device information such as browser type, operating system, IP address, and device identifiers.
• Cookies and similar tracking technologies as described in Section 5 of this policy.

2.3 Information from Third Parties

We may receive information about you from business partners, analytics providers, and publicly available sources, to the extent permitted by applicable law. This information is combined with data we already hold to improve our services and better understand your needs.

3. How We Use Your Information

Your personal data is used for the following purposes:

• To respond to your inquiries and provide the services you request.
• To evaluate project requirements and prepare proposals or technical assessments.
• To communicate with you about our services, industry insights, and relevant updates, where you have consented to such communications.
• To improve our website functionality, user experience, and service offerings through analytics.
• To comply with legal obligations, resolve disputes, and enforce our agreements.
• To detect, prevent, and address technical issues, fraud, or security concerns.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our processing of your personal data is based on the following lawful grounds under the General Data Protection Regulation:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms. Our legitimate interests include improving our services, maintaining security, and communicating with clients.
• Legal Obligation: Where we are required to process your data to comply with applicable laws and regulations.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. Cookies are small text files stored on your device by your web browser.

We use the following types of cookies:

• Essential Cookies: Required for the basic functionality of our website, such as maintaining session state and security. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous information about page views, navigation patterns, and referral sources.
• Preference Cookies: Remember your settings and preferences to provide a personalized experience on return visits.

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use, please contact us.

6. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

• Service Providers: We engage trusted third-party service providers who assist us in operating our website, conducting business, and delivering services. These providers are contractually bound to protect your data and may only use it for the specific purposes we authorize.
• Professional Advisors: We may share information with legal, accounting, or other professional advisors where necessary for business operations or compliance.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. We will notify you of any change in ownership or control of your personal data.
• Legal Requirements: We may disclose information if required by law, legal process, or governmental request, or to protect our rights, property, or safety, or the rights, property, or safety of others.

We do not sell your personal data to third parties. Any sharing is conducted in accordance with applicable data protection laws and under appropriate safeguards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the context in which it was provided.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements. When data is no longer needed, we securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Secure server infrastructure with access controls and monitoring.
• Regular security assessments and vulnerability testing.
• Employee training on data protection practices and confidentiality obligations.
• Incident response procedures to address potential data breaches promptly.

While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will take every reasonable step to safeguard your information.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 Rights Under GDPR (EEA Residents)

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Request limitation of how we use your data in certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing purposes.
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing that significantly affect you.

9.2 Rights Under CCPA (California Residents)

If you are a resident of California, USA, the California Consumer Privacy Act provides you with specific rights regarding your personal information:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out: Opt out of the sale of your personal information. We do not sell personal information as defined by the CCPA.
• Right to Non-Discrimination: Exercise your CCPA rights without receiving discriminatory treatment from us.

To exercise any of these rights, please contact us using the information provided in Section 16. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

10. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries other than your own, including China and the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer your data across borders, we implement appropriate safeguards to ensure your data receives adequate protection. These safeguards may include Standard Contractual Clauses approved by the European Commission, binding corporate rules, or other lawful transfer mechanisms as required by applicable law.

11. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without parental consent, please contact us immediately. We will take steps to delete such information as quickly as possible.

If we become aware that we have collected personal data from a child without verification of parental consent, we will delete that information from our records promptly.

12. Third-Party Links

Our website may contain links to third-party websites, plugins, or services that are not operated by us. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will revise the Last Updated date at the top of this policy and may provide additional notice through our website or other communication channels.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

14. Complaints

If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so that we can attempt to resolve your concerns directly.

For EEA residents, you may lodge a complaint with the supervisory authority in your country of residence. California residents may contact the California Attorney General's office for matters relating to CCPA compliance.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the applicable laws of the People's Republic of China, as well as relevant international data protection frameworks where they apply to our processing activities.