Privacy Policy
Last Updated: 29 June 2026
Songxin Partners Limited ("we," "us," or "our") operates the website www.songxinpartners.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our services.
By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site.
1. Information We Collect
1.1 Personal Information You Provide
When you register an account, request a service, or contact us, we may collect:
- Account Information: Full name, email address, password (encrypted)
- Company Information: Company name, business role/title
- Service-Related Information: Information about Chinese companies you ask us to verify, including company names, registration numbers, and any other identifying information you provide
- Payment Information: Processed by third-party payment processors (inclusive but not limited to Stripe, PayPal). We do NOT store your full credit card number, CVV, or expiration date on our servers.
- Communications: Any emails, messages, feedback, or inquiries you send us
1.2 Information Collected Automatically
When you visit our Site, we automatically collect:
- Device Information: IP address, browser type and version, operating system, device identifiers
- Usage Information: Pages visited, time spent on pages, referral source, click patterns
- Cookies and Similar Technologies: See our Cookie Policy for details
1.3 Information from Third Parties
- Payment Processors: Transaction confirmations, fraud signals
- Analytics Providers: Aggregated usage statistics (e.g., Google Analytics)
- Public Chinese Government Databases: Information we retrieve on your behalf regarding Chinese companies (SAMR, China Judgments Online, Customs, Trademark Office)
2. How We Use Your Information
We use your information for the following purposes:
- To Provide Our Services: Process your verification requests, deliver reports, and respond to inquiries
- To Process Payments: Bill you for services rendered
- To Communicate With You: Send service updates, account notifications, and respond to your requests
- To Improve Our Services: Analyze usage patterns, identify trends, and enhance user experience
- To Comply With Legal Obligations: Meet tax, accounting, and regulatory requirements
- To Protect Our Rights: Detect fraud, enforce our Terms of Service, and protect our legal interests
Legal Bases for Processing (GDPR Article 6):
- Performance of a contract (providing services you requested)
- Legitimate interests (improving services, security, fraud prevention)
- Legal obligations (tax, accounting, anti-money laundering)
- Your consent (marketing communications, non-essential cookies)
3. How We Share Your Information
3.1 We DO NOT Sell Your Personal Information
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
3.2 We May Share Information With:
- Payment Processors: Stripe, PayPal (for payment processing)
- Service Providers: Cloud hosting (e.g., AWS, Google Cloud), email services, customer support tools
- Professional Advisors: Accountants, lawyers, auditors (under confidentiality obligations)
- Government Authorities: When required by law, court order, or to comply with legal process
- Business Transfers: In the event of a merger, acquisition, or sale of assets
3.3 Cross-Border Data Transfers
Your information may be transferred to and processed in:
- Hong Kong (our company location)
- China (where our service team is based)
- United States (where some of our service providers are located)
- European Economic Area (where some of our clients are based)
We ensure appropriate safeguards are in place for international transfers in compliance with GDPR Chapter V (Standard Contractual Clauses, adequacy decisions, etc.).
4. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with our legal obligations (e.g., tax records: typically 7 years)
- Resolve disputes and enforce our agreements
Specific Retention Periods:
- Account Information: Until you delete your account + 30 days
- Service Reports: 7 years (for business verification purposes)
- Payment Records: 7 years (tax/accounting requirements)
- Marketing Communications: Until you unsubscribe
- Analytics Data: 26 months (Google Analytics default)
After the retention period, we securely delete or anonymize your information.
5. Your Rights
5.1 GDPR Rights (EU/UK Residents)
- Right of Access: Request a copy of your personal data
- Right of Rectification: Correct inaccurate data
- Right of Erasure ("Right to Be Forgotten"): Request deletion
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: With your local data protection authority
5.2 CCPA/CPRA Rights (California Residents)
- Right to Know: What personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale/Sharing: We do not sell your information
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
- Right to Correct: Correct inaccurate information
- Right to Limit Use of Sensitive Personal Information
5.3 PDPA Rights (Singapore Residents)
- Right of Access: Request access to your personal data
- Right of Correction: Request correction of your data
- Right to Withdraw Consent: Withdraw consent at any time
5.4 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@songxinpartners.com
- Response Time: We will respond within 30 days (45 days for complex requests, with extension notice)
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Essential Cookies: Enable core site functionality (login, security)
- Analytics Cookies: Understand how visitors use our Site
- Marketing Cookies: Track effectiveness of marketing campaigns (if applicable)
You can manage cookie preferences through your browser settings or our Cookie Consent Banner.
7. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- SSL/TLS Encryption for data in transit
- Encryption at rest for sensitive data
- Access Controls: Limited access on a need-to-know basis
- Regular Security Audits and vulnerability testing
- Employee Training on data protection
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Children's Privacy
Our Site is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.
9. Third-Party Links and Services
Our Site may contain links to third-party websites or integrate with third-party services (e.g., Stripe, PayPal, Google Analytics). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
10. International Users
If you are accessing our Site from outside Hong Kong, please be aware that your information will be transferred to and processed in Hong Kong and potentially other jurisdictions. By using our Site, you consent to this transfer.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our Site
- Updating the "Last Updated" date
- Sending you an email notification (for material changes)
Your continued use of the Site after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Songxin Partners Limited
- Email: privacy@songxinpartners.com
Effective Date: 29 June 2026