This Privacy Policy describes how Hangzhou Yangyi Medical Technology Co., Ltd. ("Yangyi Medical," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you visit www.yangyi.shop (the "Site") or use our services. By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy. We take your privacy seriously, especially given the sensitive nature of data in the healthcare and life sciences sectors we serve.

1. Information We Collect

1.1 Information You Provide to Us

• Contact Information: Full name, email address, telephone number, company name, job title, and mailing address when you fill out contact forms, subscribe to newsletters, or request service quotes.
• Communication Data: Information contained in correspondence you send to us, including emails, chat messages, phone recordings (with consent where required), and support tickets.
• Account Information: If you register for an account or portal, we may collect your username, encrypted password, and account preferences.
• Transaction Information: Billing details, payment processing information (processed through PCI-DSS compliant third-party processors), and service delivery records.

1.2 Information Collected Automatically

• Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage Data: Pages viewed, time spent on pages, click patterns, referral URLs, navigation paths, and features used.
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to enhance your browsing experience, remember your preferences, and analyze site traffic.
• Location Data: Approximate geographic location derived from your IP address for analytics and fraud prevention purposes.

2. How We Use Your Information

• Service Delivery: To provide, maintain, and improve our IT systems design, integration, and consulting services for healthcare and life sciences; to process transactions and send service-related communications.
• Communication: To respond to your inquiries, requests, and support needs; to send administrative information about changes to our terms, conditions, and policies.
• Marketing (with consent): To send you newsletters and information about our services that may interest you. You may opt out at any time.
• Site Improvement: To analyze usage trends, measure content effectiveness, and improve the functionality and user experience of our Site.
• Security and Compliance: To detect, prevent, and address security threats, fraud, and other malicious activity; to comply with applicable legal obligations and regulatory requirements, including healthcare data protection regulations.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds: your consent (where provided), contractual necessity, legal compliance, and our legitimate interests in improving our services, preventing fraud, and ensuring network security.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers (cloud hosting, analytics, email delivery, payment processing) who are contractually bound to protect your data; professional advisors subject to confidentiality; in connection with business transfers; when required by law; or with your explicit consent.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic Site functionality, such as language preference and session management.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how visitors interact with our Site. We use Google Analytics for this purpose.
• Marketing Cookies: Used to deliver relevant advertisements and measure marketing campaign effectiveness.

5.2 Cookie Management

You can manage or disable cookies through your browser settings. Please note that blocking certain cookies may affect Site functionality.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. We consider the nature of the data, legal and regulatory requirements, statutes of limitations, and our legitimate business needs when determining retention periods. When we no longer need your data, we securely delete or anonymize it.

7. International Data Transfers

Your personal information may be transferred to servers located outside your country of residence. We take appropriate safeguards, including Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs), to ensure adequate protection. For transfers involving healthcare data, we ensure compliance with applicable cross-border data transfer regulations.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including TLS/SSL encryption for data in transit, encryption of sensitive data at rest, regular security audits, access controls, employee training on data protection, and incident response procedures. Given our focus on healthcare and life sciences, we maintain security standards consistent with industry best practices and regulatory requirements.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights: right to access, right to rectification, right to erasure ("right to be forgotten"), right to restrict processing, right to data portability, right to object, right to withdraw consent, and right to lodge a complaint with a data protection authority. To exercise any of these rights, please contact us using the information in Section 13. We will respond within the time frame required by applicable law (typically 30 days).

10. Healthcare Data Considerations

Given our specialization in serving healthcare and life sciences organizations, we are committed to maintaining the highest standards of data protection. If we process any health-related information in the course of our services, we do so in compliance with applicable healthcare privacy regulations, including HIPAA (where applicable), GDPR, and China's Personal Information Protection Law (PIPL). We implement additional safeguards for any health-related data, including stricter access controls, enhanced encryption, and limited retention periods.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Where required by law, we may also notify you via email or prominent notice on our Site.

14. Contact Information

Hangzhou Yangyi Medical Technology Co., Ltd.
Address: Room 417, East Side, No.588 Chengnan Road, Tonglu County, Hangzhou, Zhejiang, China
Email: support@yangyi.shop
Phone: 18744261769
Data Protection Officer: dpo@yangyi.shop

We will acknowledge receipt of your complaint within 5 business days and respond substantively within 30 days.