Заполните форму
Отправляя форму вы подтверждаете, что ознакомлены с политикой конфиденциальности и условиями оферты и даете согласие на обработку своих персональных данных
Li HUA
Политика конфиденциальности/ Privacy Policy / 隐私政策 Li Hua Group
Общие положения. Настоящая политика конфиденциальности и обработки персональных данных (далее – «Политика») разработана в соответствии с требованиями Федерального закона РФ от 27.07.2006 №152-ФЗ «О персональных данных», Общего регламента ЕС по защите данных (GDPR) и Закона КНР «О персональной информации» (Personal Information Protection Law, PIPL). В Политике описывается, какие персональные данные собираются на веб-сайте B2B-компании Li Hua Group (далее – «Компания» или «Оператор»), а также цели, способы их обработки и меры по защите. Пользуясь сайтом или предоставляя свои данные, Пользователь подтверждает ознакомление с данной Политикой и выражает согласие с ее условиями.
Персональные данные, которые мы собираем. Оператор осуществляет сбор и обработку следующих персональных данных Пользователей: имя, фамилия (при необходимости – отчество); адрес электронной почты; номер контактного телефона; почтовый адрес; идентификационный номер налогоплательщика (ИНН). Кроме того, автоматически собираются некоторые технические и обезличенные данные при посещении сайта, в том числе IP-адрес, файлы «cookie», информация о браузере и устройстве Пользователя, данные о действиях на сайте. Сбор таких обезличенных данных осуществляется с помощью сервисов веб-аналитики, в частности, Яндекс Метрики, которые используют файлы cookie для анализа активности пользователей на сайте. Эти технические данные не содержат прямой информации, позволяющей идентифицировать личность, и обрабатываются в обобщенном виде для улучшения работы сайта и качества сервиса.
Цели обработки персональных данных. Компания обрабатывает персональные данные строго в установленных целях, а именно:
Правовые основания обработки. Обработка персональных данных осуществляется на законных основаниях, предусмотренных применимым законодательством. В разных юрисдикциях это могут быть: согласие самого субъекта персональных данных; заключение и исполнение договора с субъектом (например, обработка заказа); необходимость исполнения установленных законом обязанностей; либо иные основания, предусмотренные законодательством РФ, ЕС или КНР. В частности, заполняя формы на сайте и предоставляя свои данные, Пользователь дает информированное согласие на их обработку согласно настоящей Политике. Компания также может обрабатывать персональные данные без отдельного согласия в случаях, когда это необходимо для исполнения договора с Пользователем, для исполнения юридических обязательств или для защиты законных интересов при условии соблюдения прав и свобод субъекта данных. В отношении граждан ЕС обработка опирается на статьи 6 и 7 GDPR (необходимость для исполнения договора, согласие на маркетинг и т.д.), а для граждан КНР – на условия статьи 13 PIPL.
Передача данных третьим лицам. Оператор соблюдает конфиденциальность персональных данных и не раскрывает их третьим лицам без законных оснований. Персональные данные могут быть предоставлены третьим сторонам в следующих случаях:
Все указанные третьи лица получают доступ к персональным данным только в объеме, необходимом для оказания конкретной услуги, и обязаны использовать информацию строго в указанных целях и в соответствии с законодательством о защите данных. Передача данных осуществляется на основании согласия Пользователя или в случаях, прямо предусмотренных законом (например, по требованию уполномоченных государственных органов). В частности, предоставляя нам свои данные, Пользователь соглашается с тем, что его персональные данные могут быть переданы партнерам компании, включая находящихся за рубежом, для целей выполнения заказа или оказания услуг. Трансграничная передача данных (например, из РФ в Китай, или из ЕС в Китай) будет осуществляться в соответствии с требованиями законодательства: с дополнительным согласием субъекта, при наличии достаточных гарантий защиты (стандартные договорные положения, соглашения о защите данных) либо при наличии иных законных оснований. В соответствии с PIPL для передачи персональной информации за пределы Китая может потребоваться отдельное согласие субъекта и соблюдение установленных процедур обеспечения безопасности.
Использование файлов cookie и аналитики. На нашем сайте применяются файлы cookie и аналогичные технологии для обеспечения его корректной работы и улучшения пользовательского опыта. В частности, мы используем сервис веб-аналитики Яндекс Метрика. Яндекс Метрика – это система аналитики, предоставляемая компанией Yandex Oy (Финляндия) и ООО «Яндекс» (Россия), которая с помощью cookie собирает обезличенные сведения о том, как Пользователи взаимодействуют с сайтом. Данные, собираемые через Яндекс Метрику, могут включать информацию о вашем устройстве, географическом регионе, посещенных страницах, длительности пребывания на сайте и выполненных действиях. Эта информация передается и сохраняется на серверах Яндекса (в том числе в ЕС и Российской Федерации) и обрабатывается для анализа использования сайта, составления статистических отчетов для нас и улучшения работы веб-сервиса. Яндекс действует в рамках собственной Политики конфиденциальности и Условий использования сервиса Метрика. Собранные через Метрику данные не раскрывают вашу личность и используются исключительно в обобщенном виде для аналитических целей.
Вы можете в любой момент отключить использование файлов cookie, изменив настройки своего браузера. Кроме того, Яндекс предоставляет инструмент для отказа от отслеживания в Метрике (Opt-Out). Пожалуйста, учтите, что отключение cookie может повлиять на доступность или функциональность некоторых разделов нашего сайта. Продолжая использовать наш сайт без изменения настроек браузера, вы соглашаетесь на обработку данных сервисом Яндекс Метрика описанным выше образом и для указанных целей.
Хранение и защита информации. Персональные данные Пользователей хранятся на защищенных серверах, расположенных в Китайской Народной Республике. Компания принимает все необходимые правовые, организационные и технические меры для защиты ваших данных от несанкционированного доступа, изменения, раскрытия или уничтожения. В частности, применяются средства шифрования при передаче данных, сетевые экраны, меры контроля доступа, а также процедуры резервного копирования. Обработка данных ведется строго уполномоченными сотрудниками или подрядчиками, связанными обязательствами о неразглашении. Мы храним персональные данные не дольше, чем это необходимо для достижения заявленных целей обработки или предусмотрено требованиями законодательства. По истечении целей обработки или при отзыве согласия данные подлежат удалению или обезличиванию в установленные сроки, если только их сохранение не требуется по закону (например, согласно требованиям бухгалтерского или налогового учета).
Следует помнить, что ни один способ передачи данных через Интернет или электронного хранения не может быть полностью безопасным. Тем не менее, Компания стремится использовать коммерчески приемлемые средства защиты персональной информации и постоянно совершенствует меры безопасности.
Права Пользователей. В соответствии с применимым законодательством Пользователи (субъекты персональных данных) обладают рядом прав в отношении своих персональных данных:
Для реализации своих прав вы можете направить нам соответствующий запрос (в произвольной форме с указанием ФИО и сути обращения) на контактный адрес, указанный в разделе «Контакты». Мы ответим на ваш запрос в сроки, установленные законом (как правило, в течение 30 дней). Реализация перечисленных прав предоставляется вам бесплатно, за исключением случаев, прямо предусмотренных законом.
Контакты для связи. По всем вопросам, связанным с настоящей Политикой или обработкой ваших персональных данных, включая запросы, отзывы согласия и жалобы, вы можете связаться с нами следующим образом:
Мы рассмотрим любое обращение и предоставим ответ или необходимую помощь в максимально сжатые сроки, но не позднее срока, установленного законодательством.
Изменения политики. Компания оставляет за собой право время от времени вносить изменения в настоящую Политику. В случае внесения существенных изменений новая редакция Политики будет опубликована на сайте и дата ее вступления в силу будет обновлена. Рекомендуем периодически просматривать данную страницу, чтобы быть в курсе актуальной версии Политики. Если изменения будут требовать вашего согласия (например, в случае планируемой новой цели обработки), мы запросим такое согласие отдельно. Продолжение использования сайта после вступления изменений в силу означает ваше согласие с новой редакцией Политики.
Персональные данные, которые мы собираем. Оператор осуществляет сбор и обработку следующих персональных данных Пользователей: имя, фамилия (при необходимости – отчество); адрес электронной почты; номер контактного телефона; почтовый адрес; идентификационный номер налогоплательщика (ИНН). Кроме того, автоматически собираются некоторые технические и обезличенные данные при посещении сайта, в том числе IP-адрес, файлы «cookie», информация о браузере и устройстве Пользователя, данные о действиях на сайте. Сбор таких обезличенных данных осуществляется с помощью сервисов веб-аналитики, в частности, Яндекс Метрики, которые используют файлы cookie для анализа активности пользователей на сайте. Эти технические данные не содержат прямой информации, позволяющей идентифицировать личность, и обрабатываются в обобщенном виде для улучшения работы сайта и качества сервиса.
Цели обработки персональных данных. Компания обрабатывает персональные данные строго в установленных целях, а именно:
- для заключения и исполнения договоров с клиентами, оформления заказов и организации их доставки (оптовые поставки цветочной продукции);
- для связи с клиентами и контрагентами, обработки запросов, предоставления консультаций и поддержания обратной связи;
- для выполнения требований бухгалтерского учета и иных правовых обязанностей (выставление счетов, налоговая отчетность и т.д.);
- для информирования Пользователей о новых продуктах, услугах, специальных предложениях или событиях компании (маркетинговые рассылки);
- для проведения статистических и маркетинговых исследований, анализа активности на сайте с целью улучшения качества товаров, услуг и контента сайта;
- для обеспечения безопасности сайта, предотвращения мошенничества и несанкционированного доступа.
Правовые основания обработки. Обработка персональных данных осуществляется на законных основаниях, предусмотренных применимым законодательством. В разных юрисдикциях это могут быть: согласие самого субъекта персональных данных; заключение и исполнение договора с субъектом (например, обработка заказа); необходимость исполнения установленных законом обязанностей; либо иные основания, предусмотренные законодательством РФ, ЕС или КНР. В частности, заполняя формы на сайте и предоставляя свои данные, Пользователь дает информированное согласие на их обработку согласно настоящей Политике. Компания также может обрабатывать персональные данные без отдельного согласия в случаях, когда это необходимо для исполнения договора с Пользователем, для исполнения юридических обязательств или для защиты законных интересов при условии соблюдения прав и свобод субъекта данных. В отношении граждан ЕС обработка опирается на статьи 6 и 7 GDPR (необходимость для исполнения договора, согласие на маркетинг и т.д.), а для граждан КНР – на условия статьи 13 PIPL.
Передача данных третьим лицам. Оператор соблюдает конфиденциальность персональных данных и не раскрывает их третьим лицам без законных оснований. Персональные данные могут быть предоставлены третьим сторонам в следующих случаях:
- Партнёры по логистике. Для организации доставки заказов информация (например, имя, адрес доставки, контактный телефон) может передаваться транспортно-логистическим компаниям, курьерским службам или таможенным брокерам, непосредственно участвующим в выполнении заказа.
- Сервисы CRM и поддержки. Данные клиентов могут обрабатываться в нашей системе управления взаимоотношениями с клиентами (CRM) либо подрядчиками, предоставляющими услуги обработки заявок, технической поддержки и коммуникации с клиентами – исключительно в целях исполнения ваших запросов и улучшения обслуживания.
- Бухгалтерия и юридические консультанты. Для выполнения обязательных требований бухгалтерского учета и налоговой отчетности некоторые данные (например, ИНН, название компании клиента, объём поставки) могут передаваться нашим бухгалтерским или аудиторским службам, а также юридическим консультантам при необходимости.
- Маркетинговые платформы. В случае проведения email-рассылок или других маркетинговых кампаний, адрес электронной почты и имя клиента могут быть обработаны через специализированные сервисы рассылки, с соблюдением мер защиты данных.
Все указанные третьи лица получают доступ к персональным данным только в объеме, необходимом для оказания конкретной услуги, и обязаны использовать информацию строго в указанных целях и в соответствии с законодательством о защите данных. Передача данных осуществляется на основании согласия Пользователя или в случаях, прямо предусмотренных законом (например, по требованию уполномоченных государственных органов). В частности, предоставляя нам свои данные, Пользователь соглашается с тем, что его персональные данные могут быть переданы партнерам компании, включая находящихся за рубежом, для целей выполнения заказа или оказания услуг. Трансграничная передача данных (например, из РФ в Китай, или из ЕС в Китай) будет осуществляться в соответствии с требованиями законодательства: с дополнительным согласием субъекта, при наличии достаточных гарантий защиты (стандартные договорные положения, соглашения о защите данных) либо при наличии иных законных оснований. В соответствии с PIPL для передачи персональной информации за пределы Китая может потребоваться отдельное согласие субъекта и соблюдение установленных процедур обеспечения безопасности.
Использование файлов cookie и аналитики. На нашем сайте применяются файлы cookie и аналогичные технологии для обеспечения его корректной работы и улучшения пользовательского опыта. В частности, мы используем сервис веб-аналитики Яндекс Метрика. Яндекс Метрика – это система аналитики, предоставляемая компанией Yandex Oy (Финляндия) и ООО «Яндекс» (Россия), которая с помощью cookie собирает обезличенные сведения о том, как Пользователи взаимодействуют с сайтом. Данные, собираемые через Яндекс Метрику, могут включать информацию о вашем устройстве, географическом регионе, посещенных страницах, длительности пребывания на сайте и выполненных действиях. Эта информация передается и сохраняется на серверах Яндекса (в том числе в ЕС и Российской Федерации) и обрабатывается для анализа использования сайта, составления статистических отчетов для нас и улучшения работы веб-сервиса. Яндекс действует в рамках собственной Политики конфиденциальности и Условий использования сервиса Метрика. Собранные через Метрику данные не раскрывают вашу личность и используются исключительно в обобщенном виде для аналитических целей.
Вы можете в любой момент отключить использование файлов cookie, изменив настройки своего браузера. Кроме того, Яндекс предоставляет инструмент для отказа от отслеживания в Метрике (Opt-Out). Пожалуйста, учтите, что отключение cookie может повлиять на доступность или функциональность некоторых разделов нашего сайта. Продолжая использовать наш сайт без изменения настроек браузера, вы соглашаетесь на обработку данных сервисом Яндекс Метрика описанным выше образом и для указанных целей.
Хранение и защита информации. Персональные данные Пользователей хранятся на защищенных серверах, расположенных в Китайской Народной Республике. Компания принимает все необходимые правовые, организационные и технические меры для защиты ваших данных от несанкционированного доступа, изменения, раскрытия или уничтожения. В частности, применяются средства шифрования при передаче данных, сетевые экраны, меры контроля доступа, а также процедуры резервного копирования. Обработка данных ведется строго уполномоченными сотрудниками или подрядчиками, связанными обязательствами о неразглашении. Мы храним персональные данные не дольше, чем это необходимо для достижения заявленных целей обработки или предусмотрено требованиями законодательства. По истечении целей обработки или при отзыве согласия данные подлежат удалению или обезличиванию в установленные сроки, если только их сохранение не требуется по закону (например, согласно требованиям бухгалтерского или налогового учета).
Следует помнить, что ни один способ передачи данных через Интернет или электронного хранения не может быть полностью безопасным. Тем не менее, Компания стремится использовать коммерчески приемлемые средства защиты персональной информации и постоянно совершенствует меры безопасности.
Права Пользователей. В соответствии с применимым законодательством Пользователи (субъекты персональных данных) обладают рядом прав в отношении своих персональных данных:
- Право на доступ и получение информации. Вы вправе запросить подтверждение факта обработки ваших персональных данных Оператором, а также получить информацию о том, какие именно данные обрабатываются, с какой целью и каким способом. По запросу мы предоставим вам копию ваших персональных данных, которые находятся у нас в распоряжении.
- Право на уточнение (исправление) данных. Если ваши персональные данные изменились или являются неточными, вы можете обратиться к нам с требованием уточнить, обновить или исправить эти данные. Мы оперативно внесем необходимые изменения, чтобы данные были актуальными и корректными.
- Право на отзыв согласия. В случаях, когда обработка осуществляется на основании вашего согласия, вы имеете право в любой момент отозвать свое согласие на обработку персональных данных, обратившись к нам любым удобным способом. После получения отзыва мы прекратим обработку тех данных, которые обрабатывались на основании согласия, за исключением случаев, когда обработка разрешена без согласия на иных законных основаниях. Учтите, что отзыв согласия на обработку, необходимую для предоставления услуг (например, для исполнения заказа), может повлечь невозможность дальнейшего предоставления вам этих услуг.
- Право на удаление данных. Вы можете потребовать удаления ваших персональных данных (например, если данные более не нужны для заявленных целей или обработаны незаконно). Мы удалим соответствующие сведения при наступлении условий, предусмотренных законом («право быть забытым»), кроме тех случаев, когда хранение данных обязательно в силу закона.
- Право на ограничение обработки. В ряде случаев вы имеете право потребовать временно ограничить обработку ваших данных (например, на период проверки точности данных или законности нашей обработки). В период ограничения данные будут только храниться, и любые иные операции с ними возможны лишь с вашего согласия или в целях правовых требований.
- Право на возражение против обработки. Вы вправе возражать против обработки ваших персональных данных в определенных случаях – например, если данные обрабатываются в целях прямого маркетинга или на основании нашего законного интереса. В случае получения возражения мы прекратим обработку, если не будем иметь законных оснований для продолжения, превышающих ваши права и свободы.
- Право на перенос данных. Граждане ЕС, подпадающие под действие GDPR, имеют право получить предоставленные ими персональные данные в структурированном общепринятом формате и передать их другому оператору (при условии, что это применимо и технически осуществимо).
- Право на обжалование. Если вы считаете, что мы нарушаем ваши права в сфере персональных данных, вы имеете право обратиться с жалобой в компетентный надзорный орган. Граждане РФ могут направить жалобу в Роскомнадзор, граждане ЕС – в надзорный орган по защите данных в своей стране, граждане КНР – в уполномоченные органы по защите персональной информации. Мы будем благодарны, если перед подачей жалобы вы свяжетесь с нами напрямую – мы постараемся незамедлительно разрешить возникшую проблему.
Для реализации своих прав вы можете направить нам соответствующий запрос (в произвольной форме с указанием ФИО и сути обращения) на контактный адрес, указанный в разделе «Контакты». Мы ответим на ваш запрос в сроки, установленные законом (как правило, в течение 30 дней). Реализация перечисленных прав предоставляется вам бесплатно, за исключением случаев, прямо предусмотренных законом.
Контакты для связи. По всем вопросам, связанным с настоящей Политикой или обработкой ваших персональных данных, включая запросы, отзывы согласия и жалобы, вы можете связаться с нами следующим образом:
- Электронная почта: doc@lihua.group
- Почтовый адрес: Li Hua Group, отдел по защите персональных данных, ул. Анкан, жилой комплекс Yinpeng Xizhu Yuan, здание А, 7 этаж, офис 708, Китай
- Телефон: +86 187 87 187 969 (Китай) / +7 (922) 319-52-82 (Россия).
Мы рассмотрим любое обращение и предоставим ответ или необходимую помощь в максимально сжатые сроки, но не позднее срока, установленного законодательством.
Изменения политики. Компания оставляет за собой право время от времени вносить изменения в настоящую Политику. В случае внесения существенных изменений новая редакция Политики будет опубликована на сайте и дата ее вступления в силу будет обновлена. Рекомендуем периодически просматривать данную страницу, чтобы быть в курсе актуальной версии Политики. Если изменения будут требовать вашего согласия (например, в случае планируемой новой цели обработки), мы запросим такое согласие отдельно. Продолжение использования сайта после вступления изменений в силу означает ваше согласие с новой редакцией Политики.
General Information. This Privacy Policy (hereinafter, the “Policy”) describes how Li Hua Group (the “Company”) collects, uses, and protects personal data on its B2B website for wholesale floral products and logistics. This Policy is developed in accordance with applicable data protection laws, including the Russian Federal Law No. 152-FZ “On Personal Data”, the EU General Data Protection Regulation (GDPR), and the Personal Information Protection Law of the People’s Republic of China (PIPL). By using our website or providing your personal information, you acknowledge that you have read and understood this Policy and agree to the handling of your data as described herein.
Personal Data We Collect. We collect and process the following personal data from users of our site: your name; email address; telephone number; postal address; and taxpayer identification number (INN). These details are typically collected when you fill out forms, place orders, or contact us. In addition, our site automatically gathers certain technical and usage data when you visit, such as your IP address, cookies, browser type, device information, and browsing actions on the site. This usage data is collected via cookies and similar technologies – for example, through web analytics services like Yandex.Metrica – and is generally not used to directly identify you. Instead, such data helps us analyze website traffic and user interactions in an aggregated manner in order to improve our website and services.
Purposes of Processing Personal Data. We use your personal data strictly for specified and legitimate purposes. In particular, the Company processes personal information for the following purposes:
We will not use personal data for any purposes that are incompatible with the above. If we intend to process personal data for a new purpose not stated above, we will update this Policy and, if required, seek your consent.
Legal Bases for Processing. Depending on the jurisdiction and the applicable law, our processing of personal data is justified by different legal bases. In general, we rely on one or more of the following bases: (1) your consent – for example, when you provide your personal data through our site forms or explicitly agree to receive marketing emails; (2) contract performance – when processing is necessary to conclude or fulfill a contract with you (such as delivering an order you placed); (3) legal obligation – when processing is required to comply with laws or regulations (for instance, retaining transaction records for taxation); and (4) legitimate interests – where applicable, for the purposes of our legitimate business interests, provided that such processing does not override your rights and freedoms (such as improving our services or preventing fraud). For individuals in the European Union, we ensure that our processing aligns with at least one of the legal grounds set out in Article 6 of the GDPR (e.g., necessity for contract performance or consent for specific uses). For personal information collected in China, we adhere to the conditions of PIPL Article 13 and other relevant provisions. In all cases, we process personal data transparently and lawfully. By submitting your personal information to us, you are deemed to consent to its processing as described in this Policy, to the extent such consent is required under applicable law.
Disclosure of Data to Third Parties. We treat your personal data with care and confidentiality. We do not sell or rent personal data to third parties. However, in order to operate our business and provide our services, we may share personal data with certain third-party recipients under the following circumstances:
When transferring personal data to third parties, we ensure that such parties are bound by confidentiality and data protection obligations consistent with this Policy and applicable law. We provide only the minimum amount of information necessary for the relevant third party to carry out its duties.
International Data Transfers. Given the international scope of our operations (China, Russia, and other countries), your personal data may be transferred to and stored on servers located in jurisdictions outside your own. In particular, information collected from users (including those in Russia or the EU) will be stored on our secure servers in the People’s Republic of China. It may also be transferred to our service providers or partners in other countries (for example, to logistic partners in the country of destination, or to cloud services which might be hosted internationally). Please note: Data protection laws in these jurisdictions may differ from those in your home country. However, we take steps to ensure that an adequate level of protection is in place for your information in accordance with applicable legal requirements. For instance, for transfers of personal data from the European Economic Area (EEA) to a country not deemed “adequate” by the European Commission, we implement standard contractual clauses or obtain your explicit consent to legitimize the transfer, as per GDPR requirements. Individuals in Russia, by providing their data, consent to its cross-border transfer to China and other relevant countries for the purposes described in this Policy, in compliance with Russian Federal Law requirements on transborder data transfer. Under China’s PIPL, if we transfer personal information outside of China, we will obtain separate consent and ensure other necessary measures are in place. By using our services or submitting your information, you acknowledge this transfer, processing, and storage of your personal data in other countries as described, and we commit to protect it regardless of location.
Cookies and Analytics (Yandex.Metrica). Our website uses cookies and similar tracking technologies to enhance user experience and analyze web traffic. In particular, we utilize Yandex.Metrica, a web analytics service provided by Yandex (operated by Yandex Oy, Finland and Yandex LLC, Russia). Yandex.Metrica uses “cookies,” which are small text files placed on your device, to collect data about your interaction with our website. The information collected via these cookies may include your IP address, device type, browser, the pages you visit on our site, and the time spent on those pages. This information does not reveal your identity but can help us understand how our site is used and improve its performance. Data gathered by the Yandex.Metrica cookies will be transmitted to and stored on Yandex’s servers in the European Union and the Russian Federation. Yandex processes this information on our behalf to compile reports on website activity and to provide other services related to site usage analysis. All processing of analytics data is done in accordance with the Yandex.Metrica Service Terms of Use and Yandex’s Privacy Policy.
You have control over cookies. You can set your web browser to refuse all or certain cookies, or to alert you when cookies are being placed. In addition, Yandex provides an opt-out tool for Yandex.Metrica (available at https://yandex.com/support/metrika/general/opt-out.html), which allows you to prevent your data from being used by the Yandex.Metrica service. Please be aware that disabling cookies may affect some features of our website (for example, some interactive features or preferences might not work properly). By continuing to use our website without disabling cookies, you consent to the placement of cookies and the processing of data about your use of our site by Yandex in the manner and for the purposes set out above.
Data Storage and Security Measures. All personal data collected through our site is stored on secure servers located in the PRC (People’s Republic of China). We implement appropriate legal, organizational, and technical measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. These security measures include, for example, encryption of data transmissions, firewalls, access controls limiting who can access the data, and regular security assessments. We also ensure that our employees and processors who handle personal data are bound by confidentiality obligations. Despite all our efforts to protect your information, please note that no method of internet transmission or electronic storage is completely infallible or 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of any data breach or security incident, we will notify affected users and relevant authorities as required by law, and we will take prompt steps to mitigate any potential harm.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. This means, for example, that we will keep your account and transaction information for as long as you are an active customer and for the duration needed to comply with legal obligations (such as financial reporting or audit requirements). If we have collected personal data based on your consent and you withdraw that consent, we will cease processing your data for the relevant purpose and, provided there is no other legal ground for retention, securely delete or anonymize the data. Similarly, once personal data are no longer needed for the purpose they were collected, we will remove or anonymize them, unless we are legally obligated to keep the information for a certain retention period.
Your Rights as a Data Subject. We respect the rights you have under privacy and data protection laws regarding your personal data. Depending on the law that applies to your situation (e.g., GDPR for EU residents, PIPL for China, or Russian law for Russian citizens), these rights may include:
To exercise any of these rights, please contact us using the contact information provided in the “Contact Us” section below. We will respond to your request in accordance with the timelines established by law (generally within one month, with the possibility of extension under certain circumstances). Please note that some rights may be subject to legal exceptions – for instance, if fulfilling your request would infringe on another individual’s rights or if we have compelling legitimate grounds to continue processing your data. We will explain any such exemptions in our response if they apply. Typically, you will not have to pay a fee to exercise your rights. However, if your request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse to act on the request as permitted by law.
Contact Us. If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please do not hesitate to contact us:
Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. If we make material changes, we will post the updated Policy on our website and update the “last updated” date. In some cases, we may provide additional notice (such as via email or a pop-up notice on our site) of significant changes. We encourage you to review this Policy periodically. Your continued use of our website or services after any changes to this Policy have been posted will signify your acceptance of those changes, to the extent permitted by law. If you do not agree with the changes, you should discontinue use of the site and contact us if you wish to remove your data. Where required by law, we will seek your explicit consent to substantial changes that affect how we process personal data (especially if we intend to process your data for new purposes requiring consent).
Personal Data We Collect. We collect and process the following personal data from users of our site: your name; email address; telephone number; postal address; and taxpayer identification number (INN). These details are typically collected when you fill out forms, place orders, or contact us. In addition, our site automatically gathers certain technical and usage data when you visit, such as your IP address, cookies, browser type, device information, and browsing actions on the site. This usage data is collected via cookies and similar technologies – for example, through web analytics services like Yandex.Metrica – and is generally not used to directly identify you. Instead, such data helps us analyze website traffic and user interactions in an aggregated manner in order to improve our website and services.
Purposes of Processing Personal Data. We use your personal data strictly for specified and legitimate purposes. In particular, the Company processes personal information for the following purposes:
- Order Fulfillment and Service Delivery: To process and execute your orders for floral products, arrange logistics and delivery, and otherwise fulfill our contracts with you as a client (including any necessary customs or export procedures).
- Customer Communication and Support: To contact you regarding your orders, respond to inquiries or requests, provide customer support, and maintain communication about our business relationship. This includes using your contact information to send important notices or clarifications about deliveries, changes in schedules, or service updates.
- Legal and Accounting Compliance: To comply with legal obligations under applicable law – for example, using certain data (such as your INN and address) for invoicing, accounting records, taxation, and mandatory business record-keeping.
- Marketing and Informational Updates: To inform you about new products, services, special offers, or upcoming events that we believe may be of interest to you, subject to applicable consent requirements. For instance, we may use your name and email to send newsletters or promotional communications about wholesale flower supplies or logistics services. You have the option to opt out of such communications at any time, as described below.
- Analytics and Service Improvement: To conduct statistical, marketing, and other analyses of website usage in order to understand user behavior and preferences. This helps us improve the effectiveness of our website’s design, our service offerings, and marketing strategies.
- Security and Fraud Prevention: To ensure the security of our website, protect against fraudulent or unauthorized activities, and enforce our website’s terms of use or other applicable policies.
We will not use personal data for any purposes that are incompatible with the above. If we intend to process personal data for a new purpose not stated above, we will update this Policy and, if required, seek your consent.
Legal Bases for Processing. Depending on the jurisdiction and the applicable law, our processing of personal data is justified by different legal bases. In general, we rely on one or more of the following bases: (1) your consent – for example, when you provide your personal data through our site forms or explicitly agree to receive marketing emails; (2) contract performance – when processing is necessary to conclude or fulfill a contract with you (such as delivering an order you placed); (3) legal obligation – when processing is required to comply with laws or regulations (for instance, retaining transaction records for taxation); and (4) legitimate interests – where applicable, for the purposes of our legitimate business interests, provided that such processing does not override your rights and freedoms (such as improving our services or preventing fraud). For individuals in the European Union, we ensure that our processing aligns with at least one of the legal grounds set out in Article 6 of the GDPR (e.g., necessity for contract performance or consent for specific uses). For personal information collected in China, we adhere to the conditions of PIPL Article 13 and other relevant provisions. In all cases, we process personal data transparently and lawfully. By submitting your personal information to us, you are deemed to consent to its processing as described in this Policy, to the extent such consent is required under applicable law.
Disclosure of Data to Third Parties. We treat your personal data with care and confidentiality. We do not sell or rent personal data to third parties. However, in order to operate our business and provide our services, we may share personal data with certain third-party recipients under the following circumstances:
- Logistics and Delivery Partners: We may share relevant personal information (such as your name, contact number, and delivery address) with shipping companies, freight forwarders, or other logistics service providers that coordinate the transportation of orders. This is done solely to ensure your products are delivered successfully, and these partners are authorized to use the information only as needed to perform their functions.
- Customer Relationship Management (CRM) and Support Services: Your data may be stored in or processed through third-party CRM platforms or support service providers that we utilize for managing customer accounts, processing inquiries, or providing technical/customer support. These service providers act on our behalf and are contractually obligated to protect your information and use it only for the purposes we specify.
- Accounting and Compliance Services: We may disclose required information to professional advisers such as accountants, auditors, or lawyers, or to payment processing services, when necessary for accounting purposes, financial reporting, auditing, or legal compliance. For example, invoice details containing personal identifiers might be shared with an external accounting service to fulfill bookkeeping requirements.
- Marketing and Communication Tools: If you have agreed to receive marketing communications, we might use third-party email marketing services or advertising platforms to send out newsletters or promotional messages. In doing so, we may provide your name and email to such service providers for the sole purpose of executing the communications. These providers are not permitted to use your data for any other marketing activities not authorized by us.
- Legal Requirements and Business Transfers: We may disclose personal data if required to do so by law or in response to valid requests by public authorities (e.g., law enforcement or regulatory agencies). Additionally, in the event of a potential or actual merger, acquisition, sale of assets, or other business transfer involving our company, personal data may be transferred to the successor or acquiring entity, but only if such parties agree to handle the data with the same level of protection as in this Policy.
When transferring personal data to third parties, we ensure that such parties are bound by confidentiality and data protection obligations consistent with this Policy and applicable law. We provide only the minimum amount of information necessary for the relevant third party to carry out its duties.
International Data Transfers. Given the international scope of our operations (China, Russia, and other countries), your personal data may be transferred to and stored on servers located in jurisdictions outside your own. In particular, information collected from users (including those in Russia or the EU) will be stored on our secure servers in the People’s Republic of China. It may also be transferred to our service providers or partners in other countries (for example, to logistic partners in the country of destination, or to cloud services which might be hosted internationally). Please note: Data protection laws in these jurisdictions may differ from those in your home country. However, we take steps to ensure that an adequate level of protection is in place for your information in accordance with applicable legal requirements. For instance, for transfers of personal data from the European Economic Area (EEA) to a country not deemed “adequate” by the European Commission, we implement standard contractual clauses or obtain your explicit consent to legitimize the transfer, as per GDPR requirements. Individuals in Russia, by providing their data, consent to its cross-border transfer to China and other relevant countries for the purposes described in this Policy, in compliance with Russian Federal Law requirements on transborder data transfer. Under China’s PIPL, if we transfer personal information outside of China, we will obtain separate consent and ensure other necessary measures are in place. By using our services or submitting your information, you acknowledge this transfer, processing, and storage of your personal data in other countries as described, and we commit to protect it regardless of location.
Cookies and Analytics (Yandex.Metrica). Our website uses cookies and similar tracking technologies to enhance user experience and analyze web traffic. In particular, we utilize Yandex.Metrica, a web analytics service provided by Yandex (operated by Yandex Oy, Finland and Yandex LLC, Russia). Yandex.Metrica uses “cookies,” which are small text files placed on your device, to collect data about your interaction with our website. The information collected via these cookies may include your IP address, device type, browser, the pages you visit on our site, and the time spent on those pages. This information does not reveal your identity but can help us understand how our site is used and improve its performance. Data gathered by the Yandex.Metrica cookies will be transmitted to and stored on Yandex’s servers in the European Union and the Russian Federation. Yandex processes this information on our behalf to compile reports on website activity and to provide other services related to site usage analysis. All processing of analytics data is done in accordance with the Yandex.Metrica Service Terms of Use and Yandex’s Privacy Policy.
You have control over cookies. You can set your web browser to refuse all or certain cookies, or to alert you when cookies are being placed. In addition, Yandex provides an opt-out tool for Yandex.Metrica (available at https://yandex.com/support/metrika/general/opt-out.html), which allows you to prevent your data from being used by the Yandex.Metrica service. Please be aware that disabling cookies may affect some features of our website (for example, some interactive features or preferences might not work properly). By continuing to use our website without disabling cookies, you consent to the placement of cookies and the processing of data about your use of our site by Yandex in the manner and for the purposes set out above.
Data Storage and Security Measures. All personal data collected through our site is stored on secure servers located in the PRC (People’s Republic of China). We implement appropriate legal, organizational, and technical measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. These security measures include, for example, encryption of data transmissions, firewalls, access controls limiting who can access the data, and regular security assessments. We also ensure that our employees and processors who handle personal data are bound by confidentiality obligations. Despite all our efforts to protect your information, please note that no method of internet transmission or electronic storage is completely infallible or 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of any data breach or security incident, we will notify affected users and relevant authorities as required by law, and we will take prompt steps to mitigate any potential harm.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. This means, for example, that we will keep your account and transaction information for as long as you are an active customer and for the duration needed to comply with legal obligations (such as financial reporting or audit requirements). If we have collected personal data based on your consent and you withdraw that consent, we will cease processing your data for the relevant purpose and, provided there is no other legal ground for retention, securely delete or anonymize the data. Similarly, once personal data are no longer needed for the purpose they were collected, we will remove or anonymize them, unless we are legally obligated to keep the information for a certain retention period.
Your Rights as a Data Subject. We respect the rights you have under privacy and data protection laws regarding your personal data. Depending on the law that applies to your situation (e.g., GDPR for EU residents, PIPL for China, or Russian law for Russian citizens), these rights may include:
- Right to Access: You have the right to request confirmation whether we are processing your personal data, and if so, to request a copy of the personal data we hold about you, as well as information about how we use it. This allows you to know what data of yours we have and to verify that we are processing it in accordance with the law.
- Right to Rectification: If any of your personal data we have is incorrect or incomplete, you have the right to request that we correct or update it. We encourage you to keep your information up-to-date and will promptly make corrections upon your request.
- Right to Withdraw Consent: Where we rely on your consent to process personal data (for instance, for marketing emails), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it may mean we can no longer provide certain services (for example, if consent to process contact data for order fulfillment is withdrawn before an order is completed).
- Right to Erasure (Right to be Forgotten): You may have the right to request deletion of your personal data in certain circumstances – for example, if the data are no longer necessary for the purposes for which they were collected, or if you believe the processing is unlawful. We will honor valid requests for erasure and also instruct any service providers (processors) holding your data to do the same, provided there is no legal obligation for us to retain the data.
- Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain scenarios, such as if you contest the accuracy of the data or object to our use of it, while we review your request. If processing is restricted, we can still store your data but will not use it for other purposes until the restriction is lifted.
- Right to Object: You have the right to object to our processing of your personal data when such processing is based on our legitimate interests or for direct marketing purposes. If you object to processing for direct marketing, we will stop using your data for those purposes immediately. If you object on other grounds (legitimate interest), we will evaluate whether our reasons for processing override your personal rights and freedoms.
- Right to Data Portability: If you are an EU data subject under GDPR, you have the right, in certain cases, to receive the personal data you have provided to us in a structured, commonly used, machine-readable format and to transmit those data to another controller. We will assist with such data transfer where applicable, in line with legal requirements.
- Right to Complain: We aim to address all your queries and concerns directly. However, if you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. For example, EU residents can contact the data protection authority in their country, Russian users can reach out to Roskomnadzor (the Russian data protection regulator), and individuals in China can contact the relevant agencies overseeing personal information protection. We would appreciate the chance to resolve your concerns by contacting us first, but you are free to seek assistance from regulators as your right.
To exercise any of these rights, please contact us using the contact information provided in the “Contact Us” section below. We will respond to your request in accordance with the timelines established by law (generally within one month, with the possibility of extension under certain circumstances). Please note that some rights may be subject to legal exceptions – for instance, if fulfilling your request would infringe on another individual’s rights or if we have compelling legitimate grounds to continue processing your data. We will explain any such exemptions in our response if they apply. Typically, you will not have to pay a fee to exercise your rights. However, if your request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse to act on the request as permitted by law.
Contact Us. If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please do not hesitate to contact us:
- Email: doc@lihua.group
- Mailing Address: Li Hua Group – Data Protection Office, Ankang Road, Yinpeng Xizhu Yuan Community, Building A, 7th Floor, Room 708, Xishan District, Kunming City, Yunnan Province, People’s Republic of China.
- Telephone: +86 187 87 187 969 (China), or +7 (922) 319-52-82 (Russia).
Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. If we make material changes, we will post the updated Policy on our website and update the “last updated” date. In some cases, we may provide additional notice (such as via email or a pop-up notice on our site) of significant changes. We encourage you to review this Policy periodically. Your continued use of our website or services after any changes to this Policy have been posted will signify your acceptance of those changes, to the extent permitted by law. If you do not agree with the changes, you should discontinue use of the site and contact us if you wish to remove your data. Where required by law, we will seek your explicit consent to substantial changes that affect how we process personal data (especially if we intend to process your data for new purposes requiring consent).
General Information. This Privacy Policy (hereinafter, the “Policy”) describes how Li Hua Group (the “Company”) collects, uses, and protects personal data on its B2B website for wholesale floral products and logistics. This Policy is developed in accordance with applicable data protection laws, including the Russian Federal Law No. 152-FZ “On Personal Data”, the EU General Data Protection Regulation (GDPR), and the Personal Information Protection Law of the People’s Republic of China (PIPL). By using our website or providing your personal information, you acknowledge that you have read and understood this Policy and agree to the handling of your data as described herein.
Personal Data We Collect. We collect and process the following personal data from users of our site: your name; email address; telephone number; postal address; and taxpayer identification number (INN). These details are typically collected when you fill out forms, place orders, or contact us. In addition, our site automatically gathers certain technical and usage data when you visit, such as your IP address, cookies, browser type, device information, and browsing actions on the site. This usage data is collected via cookies and similar technologies – for example, through web analytics services like Yandex.Metrica – and is generally not used to directly identify you. Instead, such data helps us analyze website traffic and user interactions in an aggregated manner in order to improve our website and services.
Purposes of Processing Personal Data. We use your personal data strictly for specified and legitimate purposes. In particular, the Company processes personal information for the following purposes:
We will not use personal data for any purposes that are incompatible with the above. If we intend to process personal data for a new purpose not stated above, we will update this Policy and, if required, seek your consent.
Legal Bases for Processing. Depending on the jurisdiction and the applicable law, our processing of personal data is justified by different legal bases. In general, we rely on one or more of the following bases: (1) your consent – for example, when you provide your personal data through our site forms or explicitly agree to receive marketing emails; (2) contract performance – when processing is necessary to conclude or fulfill a contract with you (such as delivering an order you placed); (3) legal obligation – when processing is required to comply with laws or regulations (for instance, retaining transaction records for taxation); and (4) legitimate interests – where applicable, for the purposes of our legitimate business interests, provided that such processing does not override your rights and freedoms (such as improving our services or preventing fraud). For individuals in the European Union, we ensure that our processing aligns with at least one of the legal grounds set out in Article 6 of the GDPR (e.g., necessity for contract performance or consent for specific uses). For personal information collected in China, we adhere to the conditions of PIPL Article 13 and other relevant provisions. In all cases, we process personal data transparently and lawfully. By submitting your personal information to us, you are deemed to consent to its processing as described in this Policy, to the extent such consent is required under applicable law.
Disclosure of Data to Third Parties. We treat your personal data with care and confidentiality. We do not sell or rent personal data to third parties. However, in order to operate our business and provide our services, we may share personal data with certain third-party recipients under the following circumstances:
When transferring personal data to third parties, we ensure that such parties are bound by confidentiality and data protection obligations consistent with this Policy and applicable law. We provide only the minimum amount of information necessary for the relevant third party to carry out its duties.
International Data Transfers. Given the international scope of our operations (China, Russia, and other countries), your personal data may be transferred to and stored on servers located in jurisdictions outside your own. In particular, information collected from users (including those in Russia or the EU) will be stored on our secure servers in the People’s Republic of China. It may also be transferred to our service providers or partners in other countries (for example, to logistic partners in the country of destination, or to cloud services which might be hosted internationally). Please note: Data protection laws in these jurisdictions may differ from those in your home country. However, we take steps to ensure that an adequate level of protection is in place for your information in accordance with applicable legal requirements. For instance, for transfers of personal data from the European Economic Area (EEA) to a country not deemed “adequate” by the European Commission, we implement standard contractual clauses or obtain your explicit consent to legitimize the transfer, as per GDPR requirements. Individuals in Russia, by providing their data, consent to its cross-border transfer to China and other relevant countries for the purposes described in this Policy, in compliance with Russian Federal Law requirements on transborder data transfer. Under China’s PIPL, if we transfer personal information outside of China, we will obtain separate consent and ensure other necessary measures are in place. By using our services or submitting your information, you acknowledge this transfer, processing, and storage of your personal data in other countries as described, and we commit to protect it regardless of location.
Cookies and Analytics (Yandex.Metrica). Our website uses cookies and similar tracking technologies to enhance user experience and analyze web traffic. In particular, we utilize Yandex.Metrica, a web analytics service provided by Yandex (operated by Yandex Oy, Finland and Yandex LLC, Russia). Yandex.Metrica uses “cookies,” which are small text files placed on your device, to collect data about your interaction with our website. The information collected via these cookies may include your IP address, device type, browser, the pages you visit on our site, and the time spent on those pages. This information does not reveal your identity but can help us understand how our site is used and improve its performance. Data gathered by the Yandex.Metrica cookies will be transmitted to and stored on Yandex’s servers in the European Union and the Russian Federation. Yandex processes this information on our behalf to compile reports on website activity and to provide other services related to site usage analysis. All processing of analytics data is done in accordance with the Yandex.Metrica Service Terms of Use and Yandex’s Privacy Policy.
You have control over cookies. You can set your web browser to refuse all or certain cookies, or to alert you when cookies are being placed. In addition, Yandex provides an opt-out tool for Yandex.Metrica (available at https://yandex.com/support/metrika/general/opt-out.html), which allows you to prevent your data from being used by the Yandex.Metrica service. Please be aware that disabling cookies may affect some features of our website (for example, some interactive features or preferences might not work properly). By continuing to use our website without disabling cookies, you consent to the placement of cookies and the processing of data about your use of our site by Yandex in the manner and for the purposes set out above.
Data Storage and Security Measures. All personal data collected through our site is stored on secure servers located in the PRC (People’s Republic of China). We implement appropriate legal, organizational, and technical measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. These security measures include, for example, encryption of data transmissions, firewalls, access controls limiting who can access the data, and regular security assessments. We also ensure that our employees and processors who handle personal data are bound by confidentiality obligations. Despite all our efforts to protect your information, please note that no method of internet transmission or electronic storage is completely infallible or 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of any data breach or security incident, we will notify affected users and relevant authorities as required by law, and we will take prompt steps to mitigate any potential harm.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. This means, for example, that we will keep your account and transaction information for as long as you are an active customer and for the duration needed to comply with legal obligations (such as financial reporting or audit requirements). If we have collected personal data based on your consent and you withdraw that consent, we will cease processing your data for the relevant purpose and, provided there is no other legal ground for retention, securely delete or anonymize the data. Similarly, once personal data are no longer needed for the purpose they were collected, we will remove or anonymize them, unless we are legally obligated to keep the information for a certain retention period.
Your Rights as a Data Subject. We respect the rights you have under privacy and data protection laws regarding your personal data. Depending on the law that applies to your situation (e.g., GDPR for EU residents, PIPL for China, or Russian law for Russian citizens), these rights may include:
To exercise any of these rights, please contact us using the contact information provided in the “Contact Us” section below. We will respond to your request in accordance with the timelines established by law (generally within one month, with the possibility of extension under certain circumstances). Please note that some rights may be subject to legal exceptions – for instance, if fulfilling your request would infringe on another individual’s rights or if we have compelling legitimate grounds to continue processing your data. We will explain any such exemptions in our response if they apply. Typically, you will not have to pay a fee to exercise your rights. However, if your request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse to act on the request as permitted by law.
Contact Us. If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please do not hesitate to contact us:
Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. If we make material changes, we will post the updated Policy on our website and update the “last updated” date. In some cases, we may provide additional notice (such as via email or a pop-up notice on our site) of significant changes. We encourage you to review this Policy periodically. Your continued use of our website or services after any changes to this Policy have been posted will signify your acceptance of those changes, to the extent permitted by law. If you do not agree with the changes, you should discontinue use of the site and contact us if you wish to remove your data. Where required by law, we will seek your explicit consent to substantial changes that affect how we process personal data (especially if we intend to process your data for new purposes requiring consent).
Personal Data We Collect. We collect and process the following personal data from users of our site: your name; email address; telephone number; postal address; and taxpayer identification number (INN). These details are typically collected when you fill out forms, place orders, or contact us. In addition, our site automatically gathers certain technical and usage data when you visit, such as your IP address, cookies, browser type, device information, and browsing actions on the site. This usage data is collected via cookies and similar technologies – for example, through web analytics services like Yandex.Metrica – and is generally not used to directly identify you. Instead, such data helps us analyze website traffic and user interactions in an aggregated manner in order to improve our website and services.
Purposes of Processing Personal Data. We use your personal data strictly for specified and legitimate purposes. In particular, the Company processes personal information for the following purposes:
- Order Fulfillment and Service Delivery: To process and execute your orders for floral products, arrange logistics and delivery, and otherwise fulfill our contracts with you as a client (including any necessary customs or export procedures).
- Customer Communication and Support: To contact you regarding your orders, respond to inquiries or requests, provide customer support, and maintain communication about our business relationship. This includes using your contact information to send important notices or clarifications about deliveries, changes in schedules, or service updates.
- Legal and Accounting Compliance: To comply with legal obligations under applicable law – for example, using certain data (such as your INN and address) for invoicing, accounting records, taxation, and mandatory business record-keeping.
- Marketing and Informational Updates: To inform you about new products, services, special offers, or upcoming events that we believe may be of interest to you, subject to applicable consent requirements. For instance, we may use your name and email to send newsletters or promotional communications about wholesale flower supplies or logistics services. You have the option to opt out of such communications at any time, as described below.
- Analytics and Service Improvement: To conduct statistical, marketing, and other analyses of website usage in order to understand user behavior and preferences. This helps us improve the effectiveness of our website’s design, our service offerings, and marketing strategies.
- Security and Fraud Prevention: To ensure the security of our website, protect against fraudulent or unauthorized activities, and enforce our website’s terms of use or other applicable policies.
We will not use personal data for any purposes that are incompatible with the above. If we intend to process personal data for a new purpose not stated above, we will update this Policy and, if required, seek your consent.
Legal Bases for Processing. Depending on the jurisdiction and the applicable law, our processing of personal data is justified by different legal bases. In general, we rely on one or more of the following bases: (1) your consent – for example, when you provide your personal data through our site forms or explicitly agree to receive marketing emails; (2) contract performance – when processing is necessary to conclude or fulfill a contract with you (such as delivering an order you placed); (3) legal obligation – when processing is required to comply with laws or regulations (for instance, retaining transaction records for taxation); and (4) legitimate interests – where applicable, for the purposes of our legitimate business interests, provided that such processing does not override your rights and freedoms (such as improving our services or preventing fraud). For individuals in the European Union, we ensure that our processing aligns with at least one of the legal grounds set out in Article 6 of the GDPR (e.g., necessity for contract performance or consent for specific uses). For personal information collected in China, we adhere to the conditions of PIPL Article 13 and other relevant provisions. In all cases, we process personal data transparently and lawfully. By submitting your personal information to us, you are deemed to consent to its processing as described in this Policy, to the extent such consent is required under applicable law.
Disclosure of Data to Third Parties. We treat your personal data with care and confidentiality. We do not sell or rent personal data to third parties. However, in order to operate our business and provide our services, we may share personal data with certain third-party recipients under the following circumstances:
- Logistics and Delivery Partners: We may share relevant personal information (such as your name, contact number, and delivery address) with shipping companies, freight forwarders, or other logistics service providers that coordinate the transportation of orders. This is done solely to ensure your products are delivered successfully, and these partners are authorized to use the information only as needed to perform their functions.
- Customer Relationship Management (CRM) and Support Services: Your data may be stored in or processed through third-party CRM platforms or support service providers that we utilize for managing customer accounts, processing inquiries, or providing technical/customer support. These service providers act on our behalf and are contractually obligated to protect your information and use it only for the purposes we specify.
- Accounting and Compliance Services: We may disclose required information to professional advisers such as accountants, auditors, or lawyers, or to payment processing services, when necessary for accounting purposes, financial reporting, auditing, or legal compliance. For example, invoice details containing personal identifiers might be shared with an external accounting service to fulfill bookkeeping requirements.
- Marketing and Communication Tools: If you have agreed to receive marketing communications, we might use third-party email marketing services or advertising platforms to send out newsletters or promotional messages. In doing so, we may provide your name and email to such service providers for the sole purpose of executing the communications. These providers are not permitted to use your data for any other marketing activities not authorized by us.
- Legal Requirements and Business Transfers: We may disclose personal data if required to do so by law or in response to valid requests by public authorities (e.g., law enforcement or regulatory agencies). Additionally, in the event of a potential or actual merger, acquisition, sale of assets, or other business transfer involving our company, personal data may be transferred to the successor or acquiring entity, but only if such parties agree to handle the data with the same level of protection as in this Policy.
When transferring personal data to third parties, we ensure that such parties are bound by confidentiality and data protection obligations consistent with this Policy and applicable law. We provide only the minimum amount of information necessary for the relevant third party to carry out its duties.
International Data Transfers. Given the international scope of our operations (China, Russia, and other countries), your personal data may be transferred to and stored on servers located in jurisdictions outside your own. In particular, information collected from users (including those in Russia or the EU) will be stored on our secure servers in the People’s Republic of China. It may also be transferred to our service providers or partners in other countries (for example, to logistic partners in the country of destination, or to cloud services which might be hosted internationally). Please note: Data protection laws in these jurisdictions may differ from those in your home country. However, we take steps to ensure that an adequate level of protection is in place for your information in accordance with applicable legal requirements. For instance, for transfers of personal data from the European Economic Area (EEA) to a country not deemed “adequate” by the European Commission, we implement standard contractual clauses or obtain your explicit consent to legitimize the transfer, as per GDPR requirements. Individuals in Russia, by providing their data, consent to its cross-border transfer to China and other relevant countries for the purposes described in this Policy, in compliance with Russian Federal Law requirements on transborder data transfer. Under China’s PIPL, if we transfer personal information outside of China, we will obtain separate consent and ensure other necessary measures are in place. By using our services or submitting your information, you acknowledge this transfer, processing, and storage of your personal data in other countries as described, and we commit to protect it regardless of location.
Cookies and Analytics (Yandex.Metrica). Our website uses cookies and similar tracking technologies to enhance user experience and analyze web traffic. In particular, we utilize Yandex.Metrica, a web analytics service provided by Yandex (operated by Yandex Oy, Finland and Yandex LLC, Russia). Yandex.Metrica uses “cookies,” which are small text files placed on your device, to collect data about your interaction with our website. The information collected via these cookies may include your IP address, device type, browser, the pages you visit on our site, and the time spent on those pages. This information does not reveal your identity but can help us understand how our site is used and improve its performance. Data gathered by the Yandex.Metrica cookies will be transmitted to and stored on Yandex’s servers in the European Union and the Russian Federation. Yandex processes this information on our behalf to compile reports on website activity and to provide other services related to site usage analysis. All processing of analytics data is done in accordance with the Yandex.Metrica Service Terms of Use and Yandex’s Privacy Policy.
You have control over cookies. You can set your web browser to refuse all or certain cookies, or to alert you when cookies are being placed. In addition, Yandex provides an opt-out tool for Yandex.Metrica (available at https://yandex.com/support/metrika/general/opt-out.html), which allows you to prevent your data from being used by the Yandex.Metrica service. Please be aware that disabling cookies may affect some features of our website (for example, some interactive features or preferences might not work properly). By continuing to use our website without disabling cookies, you consent to the placement of cookies and the processing of data about your use of our site by Yandex in the manner and for the purposes set out above.
Data Storage and Security Measures. All personal data collected through our site is stored on secure servers located in the PRC (People’s Republic of China). We implement appropriate legal, organizational, and technical measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. These security measures include, for example, encryption of data transmissions, firewalls, access controls limiting who can access the data, and regular security assessments. We also ensure that our employees and processors who handle personal data are bound by confidentiality obligations. Despite all our efforts to protect your information, please note that no method of internet transmission or electronic storage is completely infallible or 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of any data breach or security incident, we will notify affected users and relevant authorities as required by law, and we will take prompt steps to mitigate any potential harm.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. This means, for example, that we will keep your account and transaction information for as long as you are an active customer and for the duration needed to comply with legal obligations (such as financial reporting or audit requirements). If we have collected personal data based on your consent and you withdraw that consent, we will cease processing your data for the relevant purpose and, provided there is no other legal ground for retention, securely delete or anonymize the data. Similarly, once personal data are no longer needed for the purpose they were collected, we will remove or anonymize them, unless we are legally obligated to keep the information for a certain retention period.
Your Rights as a Data Subject. We respect the rights you have under privacy and data protection laws regarding your personal data. Depending on the law that applies to your situation (e.g., GDPR for EU residents, PIPL for China, or Russian law for Russian citizens), these rights may include:
- Right to Access: You have the right to request confirmation whether we are processing your personal data, and if so, to request a copy of the personal data we hold about you, as well as information about how we use it. This allows you to know what data of yours we have and to verify that we are processing it in accordance with the law.
- Right to Rectification: If any of your personal data we have is incorrect or incomplete, you have the right to request that we correct or update it. We encourage you to keep your information up-to-date and will promptly make corrections upon your request.
- Right to Withdraw Consent: Where we rely on your consent to process personal data (for instance, for marketing emails), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it may mean we can no longer provide certain services (for example, if consent to process contact data for order fulfillment is withdrawn before an order is completed).
- Right to Erasure (Right to be Forgotten): You may have the right to request deletion of your personal data in certain circumstances – for example, if the data are no longer necessary for the purposes for which they were collected, or if you believe the processing is unlawful. We will honor valid requests for erasure and also instruct any service providers (processors) holding your data to do the same, provided there is no legal obligation for us to retain the data.
- Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain scenarios, such as if you contest the accuracy of the data or object to our use of it, while we review your request. If processing is restricted, we can still store your data but will not use it for other purposes until the restriction is lifted.
- Right to Object: You have the right to object to our processing of your personal data when such processing is based on our legitimate interests or for direct marketing purposes. If you object to processing for direct marketing, we will stop using your data for those purposes immediately. If you object on other grounds (legitimate interest), we will evaluate whether our reasons for processing override your personal rights and freedoms.
- Right to Data Portability: If you are an EU data subject under GDPR, you have the right, in certain cases, to receive the personal data you have provided to us in a structured, commonly used, machine-readable format and to transmit those data to another controller. We will assist with such data transfer where applicable, in line with legal requirements.
- Right to Complain: We aim to address all your queries and concerns directly. However, if you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. For example, EU residents can contact the data protection authority in their country, Russian users can reach out to Roskomnadzor (the Russian data protection regulator), and individuals in China can contact the relevant agencies overseeing personal information protection. We would appreciate the chance to resolve your concerns by contacting us first, but you are free to seek assistance from regulators as your right.
To exercise any of these rights, please contact us using the contact information provided in the “Contact Us” section below. We will respond to your request in accordance with the timelines established by law (generally within one month, with the possibility of extension under certain circumstances). Please note that some rights may be subject to legal exceptions – for instance, if fulfilling your request would infringe on another individual’s rights or if we have compelling legitimate grounds to continue processing your data. We will explain any such exemptions in our response if they apply. Typically, you will not have to pay a fee to exercise your rights. However, if your request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse to act on the request as permitted by law.
Contact Us. If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please do not hesitate to contact us:
- Email: doc@lihua.group
- Mailing Address: Li Hua Group – Data Protection Office, Ankang Road, Yinpeng Xizhu Yuan Community, Building A, 7th Floor, Room 708, Xishan District, Kunming City, Yunnan Province, People’s Republic of China.
- Telephone: +86 187 87 187 969 (China), or +7 (922) 319-52-82 (Russia).
Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. If we make material changes, we will post the updated Policy on our website and update the “last updated” date. In some cases, we may provide additional notice (such as via email or a pop-up notice on our site) of significant changes. We encourage you to review this Policy periodically. Your continued use of our website or services after any changes to this Policy have been posted will signify your acceptance of those changes, to the extent permitted by law. If you do not agree with the changes, you should discontinue use of the site and contact us if you wish to remove your data. Where required by law, we will seek your explicit consent to substantial changes that affect how we process personal data (especially if we intend to process your data for new purposes requiring consent).
总体说明。 本隐私政策（以下简称“政策”）由 丽华集团（Li Hua Group，以下简称“公司”或“我们”）制定，旨在阐明我们在B2B网站上收集、使用和保护个人信息的规则。本政策符合适用的数据保护法律要求，包括但不限于俄罗斯联邦2006年7月27日第152-ФЗ号《个人数据法》、欧盟《通用数据保护条例》(GDPR)以及《中华人民共和国个人信息保护法》(PIPL)。本政策适用于您在使用我们的网站（主要面向中俄及其他国家间花卉批发和物流业务）过程中提供或我们获取的个人信息。您使用本网站即表示您已仔细阅读并同意本隐私政策的全部条款；如果您不同意本政策中的任何规定，请停止使用本网站并避免向我们提供个人信息。
我们收集的个人信息类别。 我们在提供产品和服务过程中可能会收集以下与您有关的个人信息：姓名；电子邮箱地址；联系电话号码；邮寄地址；纳税人识别号（如适用，用于开具发票）等。上述信息通常由您在下订单、注册账户或通过联系表单提交时主动提供。此外，当您访问我们的网站时，我们会自动收集某些技术信息和网站使用数据，例如您的IP地址、浏览器类型、设备标识符、访问我们网站的日期和时间、访问的页面及在各页面停留的时间等。这些数据可能通过Cookie文件或类似技术获取。特别地，我们使用了像 Yandex.Metrica 这样的网络分析服务来帮助我们了解用户如何使用我们的网站。Yandex.Metrica会在您的计算机或设备上放置Cookie，以收集关于您的网站活动的匿名信息。这些信息通常不会直接识别您的个人身份，而是用于汇总分析，以改进我们的网站性能和服务质量。
个人信息处理的目的。 我们出于以下目的收集和使用您的个人信息：
我们承诺不会将您的个人信息用于上述目的之外的其他用途，除非事先征得您的同意或相关法律有明确要求。如果我们需要将您的信息用于本政策未列明的其他用途，我们会在使用前再次征求您的授权同意。
个人信息处理的法律依据。 我们在处理您的个人信息时，将依据适用的法律法规来确定合法性基础。依据不同司法管辖区的要求，我们主要依靠以下法律依据开展处理活动
需要强调的是，对于跨境处理活动，我们会遵守各地区法规中更严格的规定。例如，根据GDPR，我们可能需要您的明确同意或签署欧盟标准合同条款(SCC)以将数据传输到欧盟以外；根据PIPL，如需将中国境内收集的个人信息提供至境外，我们将在取得您的单独同意的基础上履行安全评估或签署标准合同等义务。我们始终以符合法律要求和尊重您的个人权利为前提处理信息。
个人信息的第三方共享与转让。 我们充分意识到个人信息的保密性，并仅在有合法、正当、必要的情况下才向第三方披露您的个人信息。我们不会向任何与提供您所需服务无关的第三方出售或出租您的个人信息。在以下情形下，我们可能会在需要的限度内与第三方共享您的个人信息：
对于上述所有情形，我们仅会向第三方提供为实现特定目的所需的最少化信息，并优先选择能够提供充分数据保护保障的合作伙伴[11]。在涉及跨境提供个人信息的情况下（例如，将中国境内的信息提供给俄罗斯的物流公司，或将俄罗斯用户的信息传输至中国的服务器），我们将确保符合各自国家/地区对个人信息跨境传输的要求，包括但不限于事先向您告知并取得您的授权同意，以及落实必要的安全措施。您的继续使用我们服务的行为将被视为您同意我们按上述方式共享和转让您的个人信息（在法律要求取得单独同意的情况下，我们会通过明确方式另行征求您的同意）。
Cookie和网站分析工具的使用。 我们的网站使用Cookie（小型文本文件）和类似的跟踪技术来确保网站正常运行并提升您的用户体验。特别地，我们采用了 Yandex.Metrica 网站分析工具。Yandex.Metrica由Yandex公司提供，通过在您的设备上放置Cookie来收集关于您使用我们网站的统计信息。这些信息可能包括您访问的页面、点击行为、会话持续时间以及您来自的大致地域等。Yandex.Metrica收集的信息不会直接识别您的个人身份，主要用于分析网站使用情况以帮助我们改进网站性能。根据Yandex.Metrica的运作机制，收集到的数据会传输并存储在Yandex位于欧盟和俄罗斯联邦的服务器上。Yandex会依据其服务条款将上述信息整理分析，向我们提供关于网站使用情况的报告和其他服务，以便我们更好地了解用户需求，优化我们的服务。Yandex对这些数据的处理将遵循其公布的《Yandex.Metrica服务使用条款》和《隐私政策》等规定，我们也将确保该处理在法律允许范围内进行。
您可以自行决定管理或删除Cookie。多数网络浏览器都提供了管理Cookie的选项，例如拒绝所有Cookie，或在发送Cookie时给予提示。请注意，如果您禁用了Cookie，可能会影响本网站某些功能的正常使用（例如，网站可能无法记住您的偏好设置等）。此外，如果您希望阻止Yandex.Metrica收集您的网站使用数据，Yandex也提供了专门的选择退出工具（Opt-Out），您可以通过访问 Yandex.Metrica的用户指南（链接：https://yandex.com/support/metrika/general/opt-out.html）并按照指引进行操作。使用本网站即表示您同意我们按照本政策中所述使用Cookie及相关分析工具。如果您不希望接受Cookie或被分析工具追踪，请及时自行更改浏览器设置或使用上述Opt-Out工具；但请理解，这可能影响您使用我们网站时的一些体验。继续浏览我们的网站而不更改Cookie设置，将被视为您同意Yandex按照上述方式处理关于您使用我们网站的数据。
个人信息的存储地点及安全措施。 我们收集的个人信息将主要存储在中国境内的安全服务器上。为保障您个人信息的安全，我们采取了多重措施来防止未经授权的访问、泄露、篡改或毁损您的数据。这些措施包括但不限于：使用防火墙、加密技术保护数据传输；严格限制能够接触个人信息的员工和委托处理方，并要求他们遵守保密义务；定期监控我们的系统以防范可能的安全漏洞；以及制定数据泄露应急预案等。此外，我们按照“信息安全等保”等相关标准对数据进行分级保护，确保敏感信息得到更高级别的安全保障。在我们保存您的个人信息期间，我们也会采取合理可行的手段来保证信息的准确性，并尽量及时地更新您提供给我们的个人数据。
尽管我们已采取商业上合理可行的措施来保护您的个人信息，但需要提醒的是，通过互联网进行的信息传输或电子存储并非百分之百安全。虽然我们努力保护您的个人数据，但我们无法绝对保证数据的安全性。如发生您个人信息的泄露或我们系统的安全事件，我们将按照法律法规的要求及时通知您和相关主管机关，告知事件情况、可能的影响以及我们已采取或将要采取的补救措施。我们也请您务必采取积极措施保护您的个人信息安全，例如不将自己的账号密码泄露给他人，在公共网络下谨慎提交个人信息等。
我们仅在实现本政策所述目的所必需的期间内保留您的个人信息，除非法律要求或允许更长的保存期。例如，对于交易相关的信息，我们可能需要根据商业和税务法律要求将其保存一定年限；对于您主动提出删除的信息请求，如果不再有保留的法律依据，我们将在合理期限内删除相应数据或使其匿名化。一旦超出保存期限或您撤回了相应的处理同意，我们将对您的个人信息进行删除或匿名化处理，以确保无法再关联到您个人。但以下情况除外：如果法律法规对数据保存另有规定（例如，《中华人民共和国电子商务法》要求交易信息保存不少于三年），我们将根据相应要求继续保存数据至法定期限届满。
您的权利。 我们尊重并保障您作为个人信息主体所拥有的各项权利。根据适用的法律法规（例如PIPL、GDPR及俄罗斯个人数据法）的规定，您对您的个人信息享有如下权利：
如果您希望行使上述任何一项权利，您可以随时通过本政策下方“联系我们”部分提供的联系方式与我们取得联系。为保障您的账户安全并防止他人冒用，我们可能会在处理您的请求之前要求您提供必要的信息以核实您的身份。我们将在核实您的身份后，在法律规定的期限内（一般在收到请求后30天内）回复您的请求。在极少数情况下，由于您的请求过于复杂或大量提出，我们可能需要延长回复时间，但我们会主动通知您需要延长期限的原因。一般而言，我们对于合理的请求不收取费用。但如果您的请求明显无根据或超出合理范围（例如重复提出相同请求），我们保留在符合法律规定的前提下适当收费或拒绝的权利。
联系我们。 如您对本隐私政策有任何疑问、意见或要求，或者希望就您的个人信息行使相关权利，欢迎通过以下联系方式与我们联系：
请在您的请求中尽可能详细地描述您的需求和问题（例如，您希望获取哪些信息，或您希望我们采取何种操作）。我们将在收到您的问询后尽快给予回复，并依据适用法律要求在规定时限内解决您的请求或提供反馈。
本政策的更新。 我们可能根据业务发展或法律法规的变化不时修订本隐私政策。当本政策有任何更新时，我们会将新版本发布在本网站上，并在页面显著位置更新“生效日期”或“更新日期”。如有重大变更（例如处理目的、处理方式或您的权利发生实质变化），我们会通过网站公告、向您发送电子邮件或其他适当方式通知您。本隐私政策的任何修改将在更新后立即生效。建议您定期访问我们的网站以了解最新的隐私政策条款。若您在本政策变更生效后继续使用我们的网站或服务，即表示您接受更新后的政策。但如果更新内容需要征得您的同意，我们会另行获取您的明示同意。例如，若未来我们计划将您的个人信息用于新的目的，我们会提前通知并征求您的许可。我们始终尊重您的自主选择权，您可以决定是否同意新的政策条款。如果您不同意新的政策，您有权停止使用我们的服务，并可以要求我们删除或停用相应的个人信息。
最后，我们对您的信任和支持表示感谢。我们将持续改进隐私保护措施，为您提供安全、可靠的服务体验。如您对本政策或我们的隐私实践有任何疑问，欢迎随时与我们联系!
我们收集的个人信息类别。 我们在提供产品和服务过程中可能会收集以下与您有关的个人信息：姓名；电子邮箱地址；联系电话号码；邮寄地址；纳税人识别号（如适用，用于开具发票）等。上述信息通常由您在下订单、注册账户或通过联系表单提交时主动提供。此外，当您访问我们的网站时，我们会自动收集某些技术信息和网站使用数据，例如您的IP地址、浏览器类型、设备标识符、访问我们网站的日期和时间、访问的页面及在各页面停留的时间等。这些数据可能通过Cookie文件或类似技术获取。特别地，我们使用了像 Yandex.Metrica 这样的网络分析服务来帮助我们了解用户如何使用我们的网站。Yandex.Metrica会在您的计算机或设备上放置Cookie，以收集关于您的网站活动的匿名信息。这些信息通常不会直接识别您的个人身份，而是用于汇总分析，以改进我们的网站性能和服务质量。
个人信息处理的目的。 我们出于以下目的收集和使用您的个人信息：
- 履行订单和提供服务： 用于处理您的订单、安排花卉产品的批发配送和物流，以及履行我们与您之间签订的合同。例如，我们需要使用您的姓名和地址来寄送货物，使用您的联系号码与您确认收货信息等，以确保订单顺利完成。
- 客户联系和支持： 用于与您联络沟通，包括响应您的询问或要求、提供客户支持、协调交付事项及售后服务等。这确保我们可以根据需要及时与您交流，例如通知您订单状态变化、物流更新或解答您关于产品和服务的疑问。
- 法律和财务合规： 用于遵守法律法规和监管要求，例如根据会计和税务法律规定开具发票和保存交易记录，或在有关部门要求时提交必要的报告。您的纳税人识别号、订单交易信息可能会用于履行中国、俄罗斯或其他适用司法管辖区的法律义务（如财务报表审计或税务申报）。
- 市场营销和信息推送： 在得到您同意的前提下，用于通过电子邮件、短信或电话向您发送有关我们产品和服务的更新信息、促销优惠和商业资讯。例如，我们可能向您的邮箱发送最新的批发花卉产品目录、新物流服务公告或您可能感兴趣的活动邀请等营销材料。您有权选择不接收此类营销信息，我们也将在每次发送的营销通信中提供退订或拒绝进一步接收的方法。
- 统计分析和服务改进： 用于开展统计、市场调研以及用户体验分析，以便我们了解网站的用户群体行为和偏好，从而改进我们网站的内容布局、服务功能和整体用户体验。例如，我们可能分析哪些页面访问量高、用户停留时长，以优化网站导航和信息呈现。
- 安全和防诈措施： 用于保障我们网站和服务的安全性，防范欺诈、网络攻击或其他非法活动。例如，我们可能会监测异常的登录尝试或交易，以保护您的账户和我们的数字基础设施。
我们承诺不会将您的个人信息用于上述目的之外的其他用途，除非事先征得您的同意或相关法律有明确要求。如果我们需要将您的信息用于本政策未列明的其他用途，我们会在使用前再次征求您的授权同意。
个人信息处理的法律依据。 我们在处理您的个人信息时，将依据适用的法律法规来确定合法性基础。依据不同司法管辖区的要求，我们主要依靠以下法律依据开展处理活动
- 取得您的同意： 当法律要求我们获得您的同意时，我们会在收集和处理您的个人信息前取得您的明示同意。例如，我们会在您填写联系表单或下单时请您同意本隐私政策，以及在向您发送营销邮件前征求您的许可。对于适用《个人信息保护法》(PIPL)的情况，我们将在收集个人信息时告知您收集使用的目的、方式和范围，并征得您的自主明确同意。您有权拒绝或撤回同意，我们也会尊重您的选择。
- 履行合同所必需： 当处理您的个人信息对于履行您作为一方当事人的合同、或应您的请求在签订合同前采取措施是必须时，我们将在无需另行同意的情况下处理您的信息。例如，当您下订单时，我们需要处理您的姓名、联系方式和地址以履行交货义务，此种情况下处理以合同必要性作为法律依据。
- 履行法定义务： 当我们出于遵守法律法规的强制要求而需要处理您的个人信息时，例如保存交易记录以遵守税务法律、或向执法机关提供信息（在符合法定程序的情况下），这种处理基于我们的法定义务。我们仅会按照法律要求的范围和期限处理和保留您的信息。
- 行使合法权益： 在法律允许的范围内，我们可能基于追求公司合法权益的需要处理您的某些个人信息（例如为了改进我们的服务、提升用户体验，或预防欺诈行为）。我们确保此类处理不会对您的个人权益造成不适当的影响，并且在任何情况下，都会优先保障您的权利和自由。对于GDPR所适用的情况，我们仅会在符合GDPR第6条规定的前提下主张合法利益作为依据，且您有权针对基于合法利益的处理提出异议。
需要强调的是，对于跨境处理活动，我们会遵守各地区法规中更严格的规定。例如，根据GDPR，我们可能需要您的明确同意或签署欧盟标准合同条款(SCC)以将数据传输到欧盟以外；根据PIPL，如需将中国境内收集的个人信息提供至境外，我们将在取得您的单独同意的基础上履行安全评估或签署标准合同等义务。我们始终以符合法律要求和尊重您的个人权利为前提处理信息。
个人信息的第三方共享与转让。 我们充分意识到个人信息的保密性，并仅在有合法、正当、必要的情况下才向第三方披露您的个人信息。我们不会向任何与提供您所需服务无关的第三方出售或出租您的个人信息。在以下情形下，我们可能会在需要的限度内与第三方共享您的个人信息：
- 物流合作伙伴： 为了完成您订单的跨国运输和物流配送，我们可能需要将您的姓名、收货地址、联系方式等提供给承担运输服务的第三方物流公司或货运代理。这些信息仅用于确保您的货物能够及时准确地送达。在分享信息前，我们会与相关第三方明确保密要求，确保其仅为履行物流服务之目的使用您的信息。
- 客户关系管理和技术服务供应商： 我们使用第三方提供的客户关系管理(CRM)系统、订单管理系统或IT技术支持服务来帮助我们处理业务。在使用这些系统和服务的过程中，您的个人信息（例如联系方式、订单详情）可能会存储在这些服务提供商的系统中或由其处理。对此，我们与所有此类服务供应商签订了数据处理协议，要求他们仅按照我们的指示处理个人信息，并采取适当措施保障数据安全，不得将您的信息用于其他任何目的。
- 财务与法律专业服务： 在需要时，我们可能会将您的部分信息提供给我们的专业顾问，如会计师事务所、审计机构或法律顾问。例如，为了完成财务审计，我们可能需要让审计师查阅部分交易记录，其中可能包括您的姓名或公司名称、交易金额等信息。再如，在必要情况下，我们可能依据法律要求或为主张法律权利，将相关个人信息提供给法律顾问或司法机构。此类情况下的信息提供均以合法合规为前提，并且相关接收方会被要求对您的信息予以保密。
- 营销活动合作方： 如果您同意接收我们的营销信息，我们可能会使用第三方的电子邮件发送平台或营销代理机构来实施邮件群发或广告推送。在此过程中，我们可能会向这些合作方提供您的姓名、邮箱地址或电话号码，以便他们代我们完成信息发送。我们会确保此类合作方受到严格的合同约束，仅能依据我们的委托在限定用途内使用您的信息，且不得擅自用于他们自身的营销或其他用途。您随时可以通过文末提供的联系方式通知我们停止这类信息的进一步发送。
- 法律要求或权利保护： 当法律法规要求或许可时，我们可能在未经您同意的情况下披露您的个人信息。例如，应监管机关、执法部门依法提出的信息要求，我们可能需要提供相应的数据。在这种情况下，我们将在核实请求的合法性和必要性的基础上提供信息。又如，当我们需要保护公司的合法权益或防止欺诈、保障用户安全时，在符合法律规定的前提下，我们也可能共享必要的信息（例如，向支付服务提供商提供交易信息以预防信用卡欺诈）。
对于上述所有情形，我们仅会向第三方提供为实现特定目的所需的最少化信息，并优先选择能够提供充分数据保护保障的合作伙伴[11]。在涉及跨境提供个人信息的情况下（例如，将中国境内的信息提供给俄罗斯的物流公司，或将俄罗斯用户的信息传输至中国的服务器），我们将确保符合各自国家/地区对个人信息跨境传输的要求，包括但不限于事先向您告知并取得您的授权同意，以及落实必要的安全措施。您的继续使用我们服务的行为将被视为您同意我们按上述方式共享和转让您的个人信息（在法律要求取得单独同意的情况下，我们会通过明确方式另行征求您的同意）。
Cookie和网站分析工具的使用。 我们的网站使用Cookie（小型文本文件）和类似的跟踪技术来确保网站正常运行并提升您的用户体验。特别地，我们采用了 Yandex.Metrica 网站分析工具。Yandex.Metrica由Yandex公司提供，通过在您的设备上放置Cookie来收集关于您使用我们网站的统计信息。这些信息可能包括您访问的页面、点击行为、会话持续时间以及您来自的大致地域等。Yandex.Metrica收集的信息不会直接识别您的个人身份，主要用于分析网站使用情况以帮助我们改进网站性能。根据Yandex.Metrica的运作机制，收集到的数据会传输并存储在Yandex位于欧盟和俄罗斯联邦的服务器上。Yandex会依据其服务条款将上述信息整理分析，向我们提供关于网站使用情况的报告和其他服务，以便我们更好地了解用户需求，优化我们的服务。Yandex对这些数据的处理将遵循其公布的《Yandex.Metrica服务使用条款》和《隐私政策》等规定，我们也将确保该处理在法律允许范围内进行。
您可以自行决定管理或删除Cookie。多数网络浏览器都提供了管理Cookie的选项，例如拒绝所有Cookie，或在发送Cookie时给予提示。请注意，如果您禁用了Cookie，可能会影响本网站某些功能的正常使用（例如，网站可能无法记住您的偏好设置等）。此外，如果您希望阻止Yandex.Metrica收集您的网站使用数据，Yandex也提供了专门的选择退出工具（Opt-Out），您可以通过访问 Yandex.Metrica的用户指南（链接：https://yandex.com/support/metrika/general/opt-out.html）并按照指引进行操作。使用本网站即表示您同意我们按照本政策中所述使用Cookie及相关分析工具。如果您不希望接受Cookie或被分析工具追踪，请及时自行更改浏览器设置或使用上述Opt-Out工具；但请理解，这可能影响您使用我们网站时的一些体验。继续浏览我们的网站而不更改Cookie设置，将被视为您同意Yandex按照上述方式处理关于您使用我们网站的数据。
个人信息的存储地点及安全措施。 我们收集的个人信息将主要存储在中国境内的安全服务器上。为保障您个人信息的安全，我们采取了多重措施来防止未经授权的访问、泄露、篡改或毁损您的数据。这些措施包括但不限于：使用防火墙、加密技术保护数据传输；严格限制能够接触个人信息的员工和委托处理方，并要求他们遵守保密义务；定期监控我们的系统以防范可能的安全漏洞；以及制定数据泄露应急预案等。此外，我们按照“信息安全等保”等相关标准对数据进行分级保护，确保敏感信息得到更高级别的安全保障。在我们保存您的个人信息期间，我们也会采取合理可行的手段来保证信息的准确性，并尽量及时地更新您提供给我们的个人数据。
尽管我们已采取商业上合理可行的措施来保护您的个人信息，但需要提醒的是，通过互联网进行的信息传输或电子存储并非百分之百安全。虽然我们努力保护您的个人数据，但我们无法绝对保证数据的安全性。如发生您个人信息的泄露或我们系统的安全事件，我们将按照法律法规的要求及时通知您和相关主管机关，告知事件情况、可能的影响以及我们已采取或将要采取的补救措施。我们也请您务必采取积极措施保护您的个人信息安全，例如不将自己的账号密码泄露给他人，在公共网络下谨慎提交个人信息等。
我们仅在实现本政策所述目的所必需的期间内保留您的个人信息，除非法律要求或允许更长的保存期。例如，对于交易相关的信息，我们可能需要根据商业和税务法律要求将其保存一定年限；对于您主动提出删除的信息请求，如果不再有保留的法律依据，我们将在合理期限内删除相应数据或使其匿名化。一旦超出保存期限或您撤回了相应的处理同意，我们将对您的个人信息进行删除或匿名化处理，以确保无法再关联到您个人。但以下情况除外：如果法律法规对数据保存另有规定（例如，《中华人民共和国电子商务法》要求交易信息保存不少于三年），我们将根据相应要求继续保存数据至法定期限届满。
您的权利。 我们尊重并保障您作为个人信息主体所拥有的各项权利。根据适用的法律法规（例如PIPL、GDPR及俄罗斯个人数据法）的规定，您对您的个人信息享有如下权利：
- 知情权和访问权： 您有权知悉我们如何收集和使用您的个人信息，包括我们处理您个人信息的类型、目的、方式、共享对象等。您也有权向我们查询并获取我们所保存的关于您的个人信息副本。在符合法律规定的前提下，我们将应您的请求提供相关信息（通常不会包含涉及商业秘密、他人隐私的信息）。
- 更正权： 如果您发现我们所保存的关于您的个人信息不准确或不完整，您有权要求我们更正或补充。您可以通过联系我们（联系方式见下文）提交更正申请，我们核实您的身份后将及时按照更新后的信息进行更改，确保数据的准确性。
- 撤回同意的权利： 对于基于您的同意而进行的个人信息处理，您有权随时撤回该同意。例如，您先前同意接收我们的营销邮件，之后您可以通过联系我们或使用邮件中的退订链接来撤回同意。一旦您撤回同意，我们将停止相应的个人信息处理活动。但请注意，撤回同意不影响撤回前基于您的同意已经开展的处理行为的合法性。此外，某些基于您同意提供且与服务履行直接相关的信息，在您撤回同意后，我们可能无法继续为您提供相应服务（例如撤回对订单处理必要信息的同意可能导致我们无法完成该订单）。
- 删除权（被遗忘权）： 在特定情况下，您可以请求我们删除我们所持有的关于您的个人信息。例如，如果我们收集或处理您的个人信息的目的已完成或无法实现，或者我们违反法律规定处理了您的信息，您有权要求删除。在符合法律规定的情况下（如PIPL和GDPR均赋予了数据主体在一定条件下删除其个人信息的权利），我们会执行您的删除请求。需要说明的是，当法律有强制要求保存您的个人信息的，我们将无法立即删除相应数据，并会告知您拒绝删除的理由（例如，交易记录需按照电子商务或财税法规保存至法定期限）。
- 限制处理权： 在某些情形下，您有权要求我们暂时限制对您个人信息的处理。例如，当您对个人信息的准确性存有异议时，您可以请求在我们核实期间先暂停处理；或者当您的个人信息处理行为涉嫌违法但您不希望删除信息时，您可以要求我们仅保存而不做其他处理。如果您行使了限制处理权，在解除限制之前，我们将仅继续保存您的个人信息，除非征得您的同意或为维护合法权益、公众利益或根据法律要求。
- 异议权： 针对基于我们合法利益或公共利益需要而处理您个人信息的行为，您有权提出异议。例如，如果我们为了市场分析（基于合法利益）使用您的信息，您可以随时提出反对；又如，对于出于直接营销目的对您的个人信息进行处理，您有权随时提出异议，一旦收到您的异议请求，我们将停止针对该直接营销目的继续处理您的个人信息。
- 数据可携带权： 对于欧盟范围内受GDPR保护的个人，您享有数据可携带权，即在技术可行的情况下，您有权请求我们将您提供给我们的个人数据以结构化、常用、机器可读的格式提供给您，或根据您的指示直接传输给您指定的另一数据控制者。在中国法律下，虽然“数据可携带权”并未明确以同样术语出现，但PIPL等法律鼓励数据处理者保障个人对于自身数据的获取和转移权利，我们也会在法律允许范围内尽量配合您的正当请求。
- 投诉和报告权： 如果您认为我们在个人信息处理方面未能依法保护您的合法权益，您有权向监管机构投诉或举报。在中国，您可以向网信部门等有管辖权的机关提出投诉；在俄罗斯，您可以向俄罗斯联邦电信、信息技术和大众传媒监督局（Roskomnadzor）投诉；在欧盟，您可以联系您所在国家的数据保护监管机构提出申诉。当然，我们非常重视您的个人信息保护需求，建议您可以优先联系我们，向我们反馈您的疑虑，我们会尽最大努力解决您的问题。
如果您希望行使上述任何一项权利，您可以随时通过本政策下方“联系我们”部分提供的联系方式与我们取得联系。为保障您的账户安全并防止他人冒用，我们可能会在处理您的请求之前要求您提供必要的信息以核实您的身份。我们将在核实您的身份后，在法律规定的期限内（一般在收到请求后30天内）回复您的请求。在极少数情况下，由于您的请求过于复杂或大量提出，我们可能需要延长回复时间，但我们会主动通知您需要延长期限的原因。一般而言，我们对于合理的请求不收取费用。但如果您的请求明显无根据或超出合理范围（例如重复提出相同请求），我们保留在符合法律规定的前提下适当收费或拒绝的权利。
联系我们。 如您对本隐私政策有任何疑问、意见或要求，或者希望就您的个人信息行使相关权利，欢迎通过以下联系方式与我们联系：
- 电子邮箱： doc@lihua.group
- 通讯地址： 中国云南省昆明市西山区金碧街道办事处安康路，
- 银鹏西竹苑小区 A 栋 7 楼 708 室
- 联系电话： +86 187 87 187 969 (中国)，+7 (922) 319-52-82 (俄罗斯)
请在您的请求中尽可能详细地描述您的需求和问题（例如，您希望获取哪些信息，或您希望我们采取何种操作）。我们将在收到您的问询后尽快给予回复，并依据适用法律要求在规定时限内解决您的请求或提供反馈。
本政策的更新。 我们可能根据业务发展或法律法规的变化不时修订本隐私政策。当本政策有任何更新时，我们会将新版本发布在本网站上，并在页面显著位置更新“生效日期”或“更新日期”。如有重大变更（例如处理目的、处理方式或您的权利发生实质变化），我们会通过网站公告、向您发送电子邮件或其他适当方式通知您。本隐私政策的任何修改将在更新后立即生效。建议您定期访问我们的网站以了解最新的隐私政策条款。若您在本政策变更生效后继续使用我们的网站或服务，即表示您接受更新后的政策。但如果更新内容需要征得您的同意，我们会另行获取您的明示同意。例如，若未来我们计划将您的个人信息用于新的目的，我们会提前通知并征求您的许可。我们始终尊重您的自主选择权，您可以决定是否同意新的政策条款。如果您不同意新的政策，您有权停止使用我们的服务，并可以要求我们删除或停用相应的个人信息。
最后，我们对您的信任和支持表示感谢。我们将持续改进隐私保护措施，为您提供安全、可靠的服务体验。如您对本政策或我们的隐私实践有任何疑问，欢迎随时与我们联系!