Privacy Policy (English Version)
Note: This English version is provided for readers who do not use Chinese. If there is any discrepancy, the Chinese version shall prevail.
Version 1.0 | Effective: 【Effective Date】 | Last updated: 【Updated Date】
【Legal entity / operator name】 ("we", "us") operates aition.xin and its subdomains (the "Site") and is the personal information handler for the data described below. We process personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law, the Data Security Law and applicable national standards.
This Policy explains what we collect, why we collect it, how we use and protect it, and the rights you have. Please read it before using the Site. For cookies and local storage, please also see our Cookie Policy.
1. Scope and Principles
1.1 This Policy applies to personal information we process when you browse the Site, register an account, comment, submit content, complete a form or subscribe.
1.2 We follow these principles: specified purpose, data minimisation, transparency and security. We do not collect information irrelevant to the services, and we do not use your information for advertising or for purposes unrelated to those described below.
1.3 Personal information of children under 14 is treated as sensitive personal information. The Site is not directed at children under 14 and we do not knowingly collect their information.
2. What We Collect and Why
ScenarioInformation collectedPurposeLegal basisRegistration and login (email)Email address, password (stored as an irreversible hash — we cannot see the plaintext)To create and manage your account, log you in, and reset your passwordNecessary to conclude and perform our service agreement with youRegistration and login (WeChat QR)WeChat OpenID / UnionID, nickname, avatar (optional)To create and manage your account and verify your identityYour consent (obtained by Tencent WeChat on the authorisation page); we receive only the identifiers necessaryAccount profileNickname, avatar, and any company name, country / province / city you choose to provideTo display your identity and enable business contact with youYour consent / necessary for contract performanceComments, likes, favouritesComment text, like and favourite records, IP address and time of submission; for guest comments, the nickname you provideTo operate interactive features, moderate content, and prevent abuseNecessary for contract performance; content security and cybersecurity are statutory dutiesContent submissionsTitle, body, images or video, cover, submission time and statusTo receive and review submissions and, with your permission, publish them on the SiteYour consentInquiry forms (e.g. "talk to us")The fields you complete: name, contact details (phone / email / WeChat), company name, messageTo reply to your inquiry and discuss your requirementsYour consent; where contract negotiations begin, necessary to conclude or perform a contractOnline ordering (if enabled)Recipient name, phone, email, country / province / city / address, postcode, order note, order amounts and item detailsTo create and fulfil orders, ship goods, handle after-sales and reconcile accountsNecessary to conclude and perform a contractVisit statisticsAn anonymous visitor identifier randomly generated by your browser and stored on your device (aition_vid), the page paths visited and timestampsTo measure page views (PV/UV), understand content performance and improve the SiteBasic statistics based on anonymised data; not used to identify youSecurity and anti-abuseIP address, browser type and user agent, failed login attempts, submission frequency, and an anonymous fingerprint (hash of IP + form identifier + key fields) generated to block duplicate submissionsTo prevent brute-force attacks, duplicate submissions, malicious attacks and artificial inflation of metricsNecessary to meet Cybersecurity Law duties and to protect you and other usersAI access monitoringRecords of AI crawler visits (user agent, path, time, IP)To understand how the Site's content is retrieved and cited by AI services (operational data that does not ordinarily point to an individual)Necessary for site security and operational statisticsAdministrative operation logsAdministrator actions in the console (type, target, time, IP)Security auditing, troubleshooting and compliance recordsNecessary to meet statutory duties and internal compliance controls
2.2 What we do not collect: we do not collect your ID number, biometric information, health information or financial account information, and we do not receive or store card numbers or payment passwords. The Site does not integrate online payments; payment arrangements are agreed with you separately.
2.3 If we ever need to process sensitive personal information or other categories not described here, we will obtain your separate consent as required by law and update this Policy.
3. How We Use Information
3.1 We use your information only for the purposes described in Section 2: to provide and maintain accounts and interactive features; to receive and respond to your inquiries; to fulfil orders (if enabled); to moderate content (comments and submissions are reviewed before publication); to keep the Site secure and stable; and to comply with regulatory and judicial requirements.
3.2 We do not use your personal information for automated decision-making, targeted promotion or personalised pricing, and we do not use it for advertising or unrelated purposes. 3.3 If we need to use information for a purpose not described in this Policy, we will seek your consent again.
4. Cookies and Local Storage
We use strictly necessary cookies and local storage to maintain login state, keep the Site secure and produce basic visit statistics. Names, purposes and retention are set out in our Cookie Policy.
5. Sharing, Transfer and Public Disclosure
5.1 We follow a data-minimisation approach: we do not sell or rent your personal information, and we do not provide it to any advertising or data analytics third party.
5.2 Third-party processing is limited to the following, and we share only the minimum necessary:
WeChat QR sign-in: verification is performed by Tencent WeChat under its own privacy policy; we receive only the verification result and necessary identifiers (OpenID / UnionID, nickname).
Email delivery: password reset, inquiry notifications and moderation results are delivered through our email service provider (NetEase 163 SMTP), which acts solely as a transmission provider.
Cloud and network infrastructure: the Site runs on cloud servers located in mainland China; the provider is responsible for infrastructure security under law and does not use your information for its own purposes.
5.3 Visit statistics are self-developed and self-hosted. We do not use Google Analytics, Baidu Analytics or any third-party analytics service, and we do not share browsing data with third parties.
5.4 If a merger, split, dissolution or acquisition requires transferring personal information, we will inform you of the recipient's name and contact details and require the recipient to comply with this Policy; if the recipient changes the purposes or methods of processing, we will obtain your consent again.
5.5 We may disclose information without consent where required or permitted by law, including where necessary to perform statutory duties, or where directly related to national security, defence, public security, public health or major public interest, criminal investigation, prosecution, trial or enforcement, or to protect the life or property of you or another person where consent cannot reasonably be obtained.
6. Storage and Security
6.1 Location: data is stored on cloud servers we operate within mainland China, and all traffic is encrypted over HTTPS.
6.2 Measures: passwords are stored as irreversible hashes; session credentials use HttpOnly and SameSite cookies; we apply login throttling, submission throttling, content filtering, sensitive-word filtering and IP-level access controls; administrative actions are fully logged and auditable.
6.3 Network logs: as required by the Cybersecurity Law, we retain relevant network logs for no less than six months to support incident tracing and lawful investigations.
6.4 Incidents: if personal information is leaked, tampered with or lost, we will activate our contingency plan, take remedial measures, and notify you of the circumstances, likely impact, measures taken, steps you can take and our contact details, and report to the regulator as required.
7. Retention Periods
We retain personal information only for the shortest period necessary for the purposes described in this Policy, after which we delete or anonymise it:
Information typeRetention periodAccount and profileWhile the account is active; after you cancel and we verify your identity, deleted or anonymised within 15 business days (except where retention is required by law or immediate deletion is technically impracticable)Comments and submissionsWhile published; deleted on your request or after account cancellation, or retained in anonymised form without your identifiersInquiry form submissions24 months from submission, then deleted or anonymisedOrder and after-sales records (if enabled)No less than three years from completion of the transaction, per applicable e-commerce lawNetwork logs and security recordsNo less than six months, then periodically cleared as security needs requireAnonymous visit statistics (aition_vid)Stored locally in your browser until you clear your browser data; the server retains aggregate results onlyAI access monitoringAggregates retained long term; detailed records periodically cleared
8. Your Rights
You may exercise the following rights free of charge by contacting us using the details in Section 12. We will respond within 15 business days of verifying your identity:
Access and copy: learn what personal information we hold about you and request a copy;
Rectify and complete: correct inaccurate or incomplete information;
Delete: request deletion in the circumstances provided by law;
Withdraw consent: withdraw consent previously given (without affecting processing carried out before withdrawal);
Cancel your account: stop using the Site and close your account (see Section 6 of the User Registration Agreement);
Explanation: request an explanation of our processing rules;
Portability: request transfer of your information to another handler you designate where statutory conditions are met;
Complain: complain to us, or to the regulator, if you believe our processing infringes your rights.
You may also clear cookies and local storage through your browser settings (including the visitor identifier and consent preference); some features such as login state will then need to be re-established.
9. Minors
9.1 The Site is intended for adults. Children under 14 should not register for or use the Site. If you are between 14 and 18, please read this Policy with your guardian and use the Site only with their consent.
9.2 If we learn that we have collected personal information of a child under 14 without prior guardian consent, we will delete it as soon as practicable. Guardians who become aware of such a case should contact us using the details in Section 12.
10. Cross-Border Transfer
10.1 We currently operate and store data within mainland China, and do not transfer the personal information of domestic users abroad.
10.2 If we ever need to provide personal information abroad, we will inform you of the recipient's name, contact details, purposes, methods, categories of information and how to exercise your rights, and will obtain your separate consent or satisfy other statutory conditions.
11. Updates to This Policy
We may update this Policy in line with legal changes or business adjustments. The updated version takes effect upon publication on this page. For material changes to purposes, methods or categories of information, we will give prominent notice and, where necessary, seek your consent again.
12. Contact Us
For questions, comments, complaints or rights requests, please contact us. We have designated a personal information protection officer responsible for these matters:
Personal information protection officer: 【Email】
Email: 【leohoo@petalmail.com】
Phone: 【18688720565】
Address: 【Shenzhen China】