This Privacy Policy explains how YunCheng TingDou E-Commerce Co., Ltd. collects, uses, stores and protects personal information in the course of running its street canopy trade desk and its computer integrated systems design services.
This Privacy Policy sets out the practices that YunCheng TingDou E-Commerce Co., Ltd. follows when it handles personal information. It applies to the website published at https://www.tingdouecom.hair and to the working records that the company keeps at its street canopy trade desk. The website and the desk are run together, and the same standards of care apply to both.
This policy is written for a general reader. It avoids technical shorthand, and it explains each practice in plain English so that a client, a visitor or a partner can understand exactly what happens to personal information after it reaches the desk. Where the policy refers to a record, it means a support sheet, a canopy note, a street letter, a stall window entry, an order review round or a sitting summary. These are the six working records of the desk, and they are the main places where personal information is held.
The website and the underlying systems that support the desk are maintained by TingDou Ecom, the developer name used by the company for its digital work. TingDou Ecom builds and supports the pages that clients read and the tools that clerks use to open bays and file notes. The company remains answerable for every record that the desk keeps, whether the record is on paper under the canopy or held in a digital system maintained by TingDou Ecom.
By using the website, writing to the desk, calling the published telephone line or booking a canopy sitting, you accept the practices described in this policy. If you do not agree with any part of the policy, please do not send personal information to the desk, and contact us so that we can answer your questions before any information is shared.
The controller of personal information described in this policy is YunCheng TingDou E-Commerce Co., Ltd., a company registered in China and operating a street canopy trade desk in YunCheng City. The company works within the Computer Systems Design and Related Services category of the Professional, Scientific, and Technical Services sector.
The registered and working address of the company is set out below. This is the address at which records are held and at which formal correspondence should be directed.
The company employs a small desk team of writers, reviewers and runners, supported by designers and analysts who work on the integrated systems side of the business. All staff who handle personal information are briefed on this policy and on the desk standards that accompany it. The supervisor of the desk is responsible for answering questions about privacy and may be reached through the contact details above.
This policy covers personal information that the company receives through its website, through written correspondence, through telephone calls and through booked canopy sittings. It also covers the personal information contained in the working records of the desk, including the names of clients, the names of their colleagues, the contact details they provide and the content of their messages.
The policy does not cover the practices of third parties whose websites or services may be linked from the company pages. If you follow a link to another site, that site will have its own privacy policy, and you should read it before sharing information. The company does not control the practices of those sites and cannot accept responsibility for them.
The policy applies to personal information in any format. That includes paper support sheets held in bays under the canopy, letters filed in the back store, email messages held in the desk mailbox, and notes stored in the digital system that TingDou Ecom maintains for the desk. The standard of care is the same for every format, though the practical steps differ according to whether a record is on paper or in a system.
The company collects only the personal information it needs to open a bay, answer a question, draft a letter, confirm an order or hold a sitting. In most cases this is a small amount of information. The categories are as follows.
We collect the name of the person who writes to the desk, the name of the organisation they represent where one applies, an email address, a telephone number where one is provided, and a postal address where correspondence requires it. For clients who visit the desk, we may also record the name of any colleague or advisor who attends a sitting.
We hold the content of the messages sent to the desk, including the subject line, the body of the message and any attachment. Attachments may contain names, reference numbers, stock lists or other details that a client chooses to share. We ask clients to send only what is needed for the matter at hand.
We keep the working records described earlier in this policy. These records may include the name of the clerk who opened a bay, the name of the reviewer who confirmed an order, the dates of the note runs, and the summary of a sitting. These records are kept because they show what was agreed and who is answerable for it.
When you visit the website, the server that delivers the pages may record a small amount of technical information, such as the type of browser you use, the time of your visit and the address of the page you requested. This information is used to keep the site running smoothly and to understand which pages are useful. It is not used to identify you as an individual.
You are never required to provide personal information to read the public pages of the site. You may choose not to send a message, not to call, and not to book a sitting. Where a client asks the desk to act on a matter, some information will be necessary, but the desk will explain what is needed and why before asking for it.
Most personal information reaches the company in one of four ways. First, a client may use the contact form on the website, which prepares a message for the desk mailbox. Second, a client may write directly to the published email address. Third, a client may telephone the desk during working hours. Fourth, a client may attend a canopy sitting and speak with a clerk across the board.
In each case the information is recorded in a support sheet bay. The clerk notes the date, the channel through which the matter arrived, the name of the client and the substance of the request. Where a client provides information about a colleague, we ask that the client has the permission of that colleague to share it. The desk will not add a colleague to a record without a reason connected to the matter.
We do not buy personal information from data brokers, and we do not gather personal information from social media profiles or public sources in order to build marketing lists. The information we hold comes from the people who choose to contact us or from the ordinary working of the desk. If we ever need information from another source, we will explain the reason and ask for consent first.
The company uses personal information for the purposes set out below. Each purpose is connected to the services described on the services page, and none of the purposes involves selling information or trading it for profit.
We do not use personal information for purposes that are unrelated to the matter for which it was provided. If a new purpose arises, we will explain it to the client and, where the law requires it, ask for consent before proceeding. A client may always ask why a particular piece of information is needed and may refuse to provide it, though a refusal may mean that the desk cannot complete a service.
Where the law requires a lawful basis for processing personal information, the company relies on one or more of the following grounds. The first is the performance of a service that a client has asked the desk to carry out, or the steps needed before such a service begins. The second is compliance with a legal obligation, for example a record keeping duty that applies to the company as a business.
The third ground is the legitimate interest of the company in running its desk properly, provided that those interests are not overridden by the rights of the person concerned. The desk uses this ground sparingly and only for purposes that a reasonable client would expect, such as keeping a record of what was agreed or protecting the desk against misuse. The fourth ground is consent, which the company asks for where the law requires it or where the purpose is not covered by the other grounds.
A client may withdraw consent at any time by writing to the desk. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal, and it does not remove the duty of the company to keep records that the law requires it to keep. Where a client withdraws consent for marketing, the desk will stop sending marketing messages promptly and will note the withdrawal in the support sheet.
The support sheet is the central record of the desk. A sheet holds the name of the client, the date the matter opened, the stock reference, the working notes and the name of the reviewer. Because the sheet is used to keep the matter in order, it may hold personal information for as long as the matter remains open and for a period afterwards for accountability.
Paper sheets are held in numbered bays under the canopy. Access to the bays is limited to desk staff, and the bays are closed at the end of each working day. Digital copies, where they exist, are held in the system maintained by TingDou Ecom, with access limited to the staff who need to read or update the record. When a sheet is revised, the earlier wording stays visible, because the history of a matter is part of the record.
A client may ask to see the notes that concern their own matter. The desk will provide a copy of the sheet, or a summary where the sheet contains information about another person that cannot be disclosed. The desk may redact a small part of a record where the law requires it or where disclosure would reveal the identity of a third party who has not agreed to share that identity.
When a matter closes, the sheet is moved to the back store and kept for the retention period described later in this policy. The desk does not destroy a closed sheet early, and it does not keep one longer than its retention rules require. Where a client asks for deletion, the desk will explain which parts of the record it must keep and which parts it can remove.
The company relies on a small number of service providers to run its website and its desk systems. These providers include a hosting provider that keeps the pages online, an email provider that delivers messages to and from the desk mailbox, and a developer who maintains the site under the name TingDou Ecom. Each provider is chosen for reliability and for a clear commitment to protecting information.
Where a provider processes personal information on behalf of the company, the company sets out the scope of the work in writing and limits the provider to the tasks that are necessary. Providers are not permitted to use the information for their own marketing, and they are required to return or delete the information when the work ends. The company reviews its providers from time to time and replaces any provider that does not meet the expected standard.
A client who wishes to know which providers the company uses may write to the desk and ask. The company will name the categories of provider and, where it is able, the specific providers involved. It will not name a provider where doing so would create a security risk for the desk or for other clients.
The company keeps personal information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. The retention period depends on the type of record and the nature of the matter.
An open support sheet is kept for as long as the matter remains active. A closed sheet is moved to the back store and kept for the period that the company applies to its business records, which is generally not longer than five years after the matter closes, unless a longer period is required by law or by the nature of the matter. Records connected to accounting, tax or a legal dispute may be kept for the statutory period that applies to them.
Email messages that do not lead to a matter are kept for a shorter period, usually not more than twelve months, so that the desk can follow up if a client writes again. Messages that are part of a support sheet follow the retention of that sheet. Technical information recorded by the server is kept for a short period for security and troubleshooting and is then discarded or aggregated.
When a record reaches the end of its retention period, it is reviewed, and if there is no continuing need it is destroyed. Paper records are shredded, and digital records are deleted from the system in a way that prevents recovery. Where a client request for deletion overlaps with a retention duty, the company will delete the parts of the record it is able to delete and explain which parts it must keep.
The company takes the protection of personal information seriously. Paper records are held in closed bays that are accessible only to desk staff. Digital records are held in a system that requires a password for access, and access is granted only to staff who need it for their work. The company keeps its software up to date and reviews access rights when a member of staff changes role or leaves.
The website is delivered over a secure connection. Messages sent through the contact form are prepared in the browser and handed to the desk mailbox, and the mailbox itself is protected by a password and by the security settings of the email provider. Staff are trained to recognise suspicious messages and to report them to the supervisor rather than opening attachments from unknown senders.
If a security incident occurs that is likely to affect personal information, the company will investigate promptly, take steps to reduce the risk, and notify affected clients and any relevant authority where the law requires it. The company keeps a short incident log so that it can learn from the event and improve its safeguards. No system can be perfectly secure, but the desk works steadily to keep its protections ahead of the risks it faces.
The company and its desk are located in YunCheng City, China (CN). Most personal information is held in that location. Some service providers, such as a hosting provider or an email provider, may store information in another country, and that means personal information may be transferred across a border in the course of running the website.
Where a transfer takes place, the company takes steps to protect the information. It chooses providers that offer appropriate safeguards, it limits the information shared to what is needed, and it reviews the arrangement from time to time. Where the law requires a specific mechanism for a transfer, the company will put that mechanism in place before the transfer begins.
A client who wishes to know whether a particular piece of information is held outside China may write to the desk and ask. The company will answer clearly and, where it is unable to give a precise location, will explain why the information is held and how it is protected.
Subject to the law that applies to the matter, a person who has shared personal information with the desk has a number of rights. The company honours these rights and will help a person exercise them without unnecessary delay.
To exercise any of these rights, write to support@tingdouecom.hair or to the postal address shown at the top of this policy. The desk will confirm the request, ask for enough information to verify that the request comes from the right person, and reply within one month. If the request is complex, the company will explain why more time is needed and give an expected date for a full reply. If the company cannot honour a request, it will explain the reason and, where relevant, the right to complain to a supervisory authority.
A person may also complain to the company directly if they are unhappy with the way their information has been handled. The supervisor of the desk will review the complaint and write back with a clear answer. The company treats every complaint as a chance to improve its desk, and it records the outcome so that the same issue is handled consistently in future.
The services of the company are intended for businesses and professionals. The website and the desk are not directed at children, and the company does not knowingly collect personal information from a child. Where a message indicates that the sender is a child, the desk will not open a matter and will delete the message unless there is a clear reason to keep it for a short period to respond.
If a parent or guardian believes that a child has shared information with the desk, they should write to support@tingdouecom.hair and explain the situation. The company will look into the message promptly, delete the information where it is able to do so, and confirm the step taken. The desk keeps this part of the policy under regular review because the protection of children is a matter of constant importance.
The company does not send marketing messages to a person who has not asked to receive them. Where a client asks to be kept informed about the services of the desk, the desk will add the client to a small list and will send only the updates that the client has requested, such as a note about a change to the stall window or the opening of a new sitting slot.
Every marketing message includes a simple way to opt out. A client who no longer wishes to receive updates can reply to the message, write to support@tingdouecom.hair or telephone the desk and ask to be removed. The desk will act on the request promptly and will confirm the removal in writing. The company does not share its list with other parties.
Messages that are needed to complete a service are not marketing and are sent whether or not a client has opted in. These include confirmations, replies to questions, sitting summaries and notices about a change that affects a matter. The desk keeps these messages short and to the point, so that a client is not burdened with unnecessary correspondence.
The website may include links to another site, such as a map service or a provider page, so that a client can find the desk or read more about a service. These links are provided for convenience only. When you follow a link, you leave the company website, and the privacy policy of the other site applies from that point.
The company does not control the content or the practices of another site, and it does not endorse the way that site handles personal information. If a client is unsure about a linked site, they should read its privacy policy before sharing information. The desk staff are happy to answer a question about a link and to confirm whether the company has a relationship with the other site.
The company does not make automated decisions that have a legal or similarly significant effect on a person. Each support sheet, letter and review round is read by a member of staff, and each sitting is held in person or by written exchange. The desk believes that a machine can help organise a record, but it should not be left alone to decide a matter that matters to a client.
The website uses a small amount of code to make the pages work, such as the menu toggle and the form that prepares a message. This code does not profile visitors and does not decide whether a person should receive a service. If the company ever introduces an automated tool into the desk, it will describe the tool in this policy, explain what it does and confirm that a member of staff remains answerable for its output.
The company reviews this policy from time to time and updates it when the law changes, when the desk changes a practice, or when a new service needs to be described. When the policy changes, the date at the top of the page is updated so that a reader can tell how recent the text is.
Where a change is significant, the desk will place a short notice at the stall window and will tell clients who have an open matter. The company will not apply a change retroactively to a use of information that took place before the change, and it will not reduce the protections described in this policy without explaining the reason and, where the law requires it, asking for consent.
A reader may always ask for an earlier version of the policy. The desk keeps a copy of each version that has been in force so that a client can see what applied at the time their information was shared.
If you have a question about this policy, a request about personal information, or a concern about the way the desk has handled a message, please write to the company. The desk reads every message and answers within one working day during the working week.
YunCheng TingDou E-Commerce Co., Ltd. is at No A-17, North Chaoliu Street, Konggang South Zone, Economic Development Zone, YunCheng City - 044000, China (CN). Email support@tingdouecom.hair or call +15747971416 during working hours, Monday to Saturday, 09:00 to 18:00 China Standard Time.
The privacy questions of the desk are handled by the supervisor, who will reply in writing so that the answer can be kept with the relevant support sheet. If a matter cannot be settled between the company and the client, the client may raise it with the supervisory authority that applies to them, and the company will cooperate with any review that follows.
This policy is offered in English so that it can be read clearly by clients in every market that the desk serves. If any part of the policy is unclear, please ask, and the desk will explain it in simpler words.