Last updated: 26 August 2026
This Privacy Policy explains how OrchidSun, as developer and operator of this website and of the services presented on it, collects, uses, shares, and protects personal information. The services are developed and operated by OrchidSun, a brand of Zunyi Lanyanxia Trading Co., Ltd. (遵义兰艳霞商贸有限公司), a company registered in China at Qunli Building (群力大厦), 1-10-11 Zhonghua South Road, Zhonghua Road Street, Honghuagang District, Zunyi - 563000, China (CN). By using this website or contacting us through it, you agree to the practices described in this policy. If you do not agree with any part of this policy, please do not use the website or the services.
1. Introduction
This policy describes the types of personal information that OrchidSun handles, the reasons we handle it, and the rights you have over it. Personal information means any information that relates to an identified or identifiable person, including a name, an email address, a telephone number, an IP address, or any combination of details that could identify a specific individual. The policy applies to every visitor to the website, to every person who contacts us through any channel, and to every client who uses our services. When you use this website or communicate with us, you place your trust in us to handle your information with care, and we take that responsibility seriously. We keep the policy as simple as we can, because we believe that privacy notices should be readable as well as accurate. If any part of this policy is unclear to you, please contact us using the details in the final section and we will gladly explain it in plainer language.
2. Information We Collect
The information we collect falls into a few broad groups. First, information you give us directly, such as your name, email address, telephone number, company name, and the contents of any message you send through our contact form or by email. Second, information about your device and how you use the website, including browser type, operating system, screen size, approximate location, the pages you view, the time of your visit, and the website that referred you to us. Third, technical information that is generated automatically while you browse, such as log data, error reports, and performance metrics that help us keep the site healthy. Fourth, in the course of a project, information that our clients share with us so that we can deliver the services, which may include business data, configuration details, and access to systems that we manage on their behalf. We do not request sensitive information such as health records, religious beliefs, or financial credentials unless a specific project makes it strictly necessary, and we only handle such details under the explicit written instructions of the client concerned.
3. How We Collect Information
We collect information in three main ways. Direct collection happens when you fill in a form, send an email, or speak to us on the telephone, and the details you provide are stored for the purpose you intend. Automatic collection happens when you browse the website, where standard web technology records visits and usage patterns without any action on your part, and this is explained in more detail in the section on cookies. Third party collection happens when business partners, payment processors, or analytics providers pass on limited information that they have lawfully obtained and are permitted to share with us. We also collect information when we are given access to a client system during an engagement, always under the terms of a signed agreement. In every case we aim to collect the smallest amount of information that allows us to do the job well. We never buy mailing lists of personal contacts, and we do not harvest details from public records for marketing purposes.
4. How We Use Your Information
We use personal information for clearly defined purposes and for no others. We use it to respond to enquiries, to prepare proposals, to manage projects, to deliver services, and to invoice for completed work. We use it to operate, secure, and improve the website, including fixing errors, blocking abuse, and measuring how well each page performs. We use it to send service updates to clients and, only where you have agreed, occasional newsletters about our work. We use it to meet the legal and regulatory obligations that apply to a company operating in China and serving clients internationally, such as tax record keeping and anti-fraud screening. We use aggregated and anonymised figures to understand which parts of the website are useful and which parts need work, and these figures can never be traced back to you. We do not sell personal information to any third party for any reason, and we do not use your information for purposes that are incompatible with the ones described in this policy. If we ever intend to use your information for a new purpose, we will update this policy first and, where the law requires it, ask for your fresh consent.
5. Legal Bases for Processing
Under privacy laws in China, the European Union, and other jurisdictions, every organisation must have a lawful basis for processing personal information, and we rely on several bases depending on the situation. Consent is the basis we use when you subscribe to a newsletter or accept optional cookies, and you may withdraw that consent at any time with effect for the future. Contract is the basis for processing the information needed to prepare and perform a services agreement with our clients, including project details, invoicing, and communication. Legitimate interest covers our need to operate the website securely, to respond to enquiries, to improve our services, and to prevent fraud, provided always that our interests do not override your rights and freedoms. Legal obligation applies when we must keep records or share information to satisfy laws, courts, or regulators. In every case we weigh the purpose against the impact on your privacy, and we adopt the least intrusive approach that still achieves the goal we are pursuing.
8. Data Retention
We keep personal information only as long as it is needed for the purposes described in this policy. Enquiry messages and the correspondence that follows are kept for two years after the last contact, so that we can refer back to earlier conversations if you return to us. Client project records, including contracts, invoices, and configuration details, are kept for seven years after a project ends, in line with accounting and tax rules in China. Website server logs are kept for thirty days, after which they are deleted automatically. Backup copies may hold data for a short additional period, but they are deleted on the same schedule and are never used for any purpose other than recovery. When a retention period ends, the information is deleted or anonymised so that it can no longer be linked to you. If you ask us to delete information earlier and no law requires us to keep it, we will honour that request promptly and confirm the deletion in writing.
9. International Data Transfers
OrchidSun is based in China, and some of the technology partners we rely on, such as cloud providers and email services, are located in other countries. This means that your information may be stored and processed in China and in the countries where our partners operate. When we transfer personal information across borders, we apply safeguards to keep it protected. For transfers to countries that the relevant authority recognises as providing an adequate level of protection, we rely on that recognition. For other transfers we use standard contractual clauses approved by regulators, or equivalent binding measures that give you enforceable rights. We only transfer the minimum amount of information required for the task at hand. If you would like a copy of the safeguards that apply to your information, or details of the countries where it may be stored, you may contact us at any time and we will provide that information without charge.
10. Data Security Measures
We protect personal information with controls that match the sensitivity of the data. All traffic between your browser and the website is encrypted, and connections to client systems use strong encryption as well. Access to stored data is limited to the people who genuinely need it for their work, and each of those people has an individual account with its own credentials. We apply the principle of least privilege, meaning that each account can only reach the data that its role requires and nothing more. We keep our systems patched, run regular checks for vulnerabilities, and log access so that unusual activity becomes visible quickly. Our staff are trained on the secure handling of personal information, and confidentiality clauses are part of every employment agreement we sign. In the event of a breach that puts your information at risk, we will notify the affected parties and the relevant authorities without undue delay. No system is completely immune to attack, but we design our controls so that a single failure cannot expose broad sets of data.
11. Privacy for Children
This website and our services are intended for businesses and for people aged eighteen or older. We do not knowingly collect personal information from children, and we do not design any part of the service to appeal to children. If you believe that a child has provided us with personal information, please contact us using the details at the end of this policy, and we will remove the information as soon as we can verify the situation. Where a business client asks us to process data that involves minors, for example in a school or training context, we do so strictly under the written instructions of that client and with appropriate safeguards in place. We encourage parents and guardians to supervise the online activity of the children in their care and to talk openly about safe use of the internet. Our default position is to collect the least possible information at all times, and this is especially true for anyone under the age of eighteen.
12. Your Rights and Choices
Depending on where you live, you have a range of rights over your personal information. You may request access to the information we hold about you and a copy of it in a readable format. You may ask us to correct details that are inaccurate or incomplete. You may request deletion of information that we no longer have a valid reason to keep. You may ask us to restrict processing in certain situations, such as while a complaint about accuracy is being resolved. You may object to processing that is based on legitimate interest. You may ask to receive your data in a portable format and to have it transmitted to another provider. Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing that took place before the withdrawal. To exercise any of these rights, contact us using the details in the final section of this policy. We respond to all verifiable requests within thirty days, and we never discriminate against anyone who exercises their rights.
13. Third Party Services and Links
The website may contain links to other websites, such as those of our partners, payment processors, or industry associations. This policy applies only to this website, and we are not responsible for the practices of any website we link to. When you leave this website, we encourage you to read the privacy policy of the destination site before you share any information with it. Some third party services are embedded within our own pages, for example a map showing our office or a form hosted by a partner. Those services may set their own cookies and collect information under their own policies, and we have no direct control over them. We choose third party tools with care, and we review them periodically to confirm that their practices remain acceptable to us. If a third party service changes its behaviour in a way that harms your privacy, we will remove it from the website. Links on the website are provided for convenience and do not imply endorsement of the linked organisation.
14. Analytics and Advertising Practices
We use analytics tools to understand how the website is used and to make it better. These tools record pages viewed, time spent, and rough geographic location, and they help us find and fix pages that confuse visitors. We have configured our analytics so that advertising features are switched off, and we do not use remarketing or interest-based advertising on this website. We do not build profiles of individual visitors for marketing purposes, and we never connect analytics records to the contact details you send us. When a visitor has accepted analytics cookies, the analytics provider may store aggregate statistics about that session, but those statistics cannot be used to identify any individual. If we ever decide to introduce advertising, this policy will be updated first and your consent will be obtained before any advertising cookies are placed. In the meantime, you can rely on the fact that your browsing on this site is not being used to target you with adverts anywhere else on the web.
15. Changes to This Policy
We review this policy regularly and update it whenever our practices change or the law develops. When we make a material change, we will revise the date at the top of this page and, where appropriate, notify you by email if we hold your address. Substantial changes to the way we handle your information will not be applied retrospectively without your consent. We encourage you to check this page from time to time so that you are always aware of the current version. The version in force is the one published on this page on the date stated at the top. By continuing to use the website after a change is published, you accept the updated policy. If you do not accept the updated terms, you may stop using the website and ask us to delete your information as described in the section on your rights. Previous versions of the policy remain available to you on request.
16. How to Contact Us
If you have any question about this policy or about how we handle your information, you can reach us by email at reply@orchidsun.lat or by telephone at +14697223972. You can also write to us at Zunyi Lanyanxia Trading Co., Ltd. (遵义兰艳霞商贸有限公司), Qunli Building (群力大厦), 1-10-11 Zhonghua South Road, Zhonghua Road Street, Honghuagang District, Zunyi - 563000, China (CN). We aim to acknowledge every enquiry within two working days and to provide a full answer within fifteen working days. If you are based in the European Union, you also have the right to lodge a complaint with your local data protection authority. If you are based elsewhere, you may contact the relevant regulator in your own country. We take all complaints seriously, we treat every message as confidential, and we never penalise anyone who raises a concern in good faith.