Privacy Policy

Welcome to the official website (zscrc.com) of Zhongsheng Deshang Inspection and Certification (Chengdu) Co., Ltd. (hereinafter referred to as "we", "CRC", or the "Company"). We understand the importance of personal information to you and are committed to protecting your privacy and personal information security. This Privacy Policy aims to inform you about how we collect, use, store, share, and protect your personal information when you visit our website (zscrc.com) or use the services we provide through the website, as well as how you can exercise your related rights.

Please read and fully understand this Privacy Policy before using our website and services. Once you start using our website or services, it means you have agreed to our handling of your personal information in accordance with this Privacy Policy. If you do not agree with any content of this Privacy Policy, you should immediately stop accessing or using our website and services.

I. What Personal Information We Collect

We will only collect necessary personal information that you voluntarily provide or that is generated through your use of our services for the purposes stated in this policy. The information we collect may include:

Information You Voluntarily Provide:

· Contact Information: When you contact us via online forms, email, phone, etc. (e.g., to inquire about business, apply for services, submit feedback or complaints, apply for a job), you may provide information such as your name, company name, job title, email address, phone number, mailing address, etc.

· Account Information (if applicable): If the website provides customer account registration, you may need to provide information such as username, password, email address, mobile phone number, etc., during registration.

· Service Application Information: When you submit a service application or inquiry online, you may need to provide information related to you or your company so that we can evaluate and process your request (e.g., basic company information, product information, description of testing needs, etc.).

· Job Application Information (if applicable): If you submit a job application through the website, the resume information you provide, including name, contact information, educational background, work experience, etc.

· Other Information: Other information you voluntarily submit through the website.

Information We Collect Automatically:

· Device and Log Information: When you visit our website, our servers automatically record information such as your browser type, operating system type, IP address, access time, pages visited, referral URL, device identifiers (e.g., Cookies, device ID), etc. This information helps us analyze website traffic, diagnose server problems, and optimize website performance and security.

· Cookies and Similar Technologies: We use Cookies and similar technologies (e.g., Web Beacons) to collect the aforementioned device and log information, and may use them to remember your preferences, provide a personalized experience (e.g., language selection), analyze user behavior, and conduct advertising and marketing (with your consent). You can manage or refuse Cookies through your browser settings, but this may affect your use of certain features of the website.

Information We Obtain from Third Parties (if applicable):

Where permitted by law or with your authorization, we may obtain some of your information from business partners, public sources, or third-party service providers (e.g., for identity verification or business cooperation purposes).

Special Note: As an inspection and certification body, we fully understand the importance of protecting client trade secrets and sensitive information. Client business data, technical information, certification-related materials, etc., collected during the provision of inspection, testing, and certification services will be processed strictly in accordance with service contracts, confidentiality agreements, and relevant laws and regulations signed with the client. Their processing rules are generally not covered in this website Privacy Policy but are governed by specific service agreements.

II. How We Use Your Personal Information

We will only use your personal information for the following purposes:

· Providing and Operating Website Services: Ensuring the normal operation of the website and providing you with the information and services you require.

· Responding to Your Requests and Communication: Handling your inquiries, service applications, feedback, complaints, or job applications, and conducting necessary communication with you.

· Improving the Website and Services: Analyzing website usage, diagnosing technical problems, and enhancing website performance, user experience, and service quality.

· Sending Information (with your consent): Sending you company news, industry updates, service updates, marketing and promotional information, etc., with your explicit consent to receive such communications. You can opt-out at any time.

· Fulfilling Legal Obligations: Complying with applicable laws and regulations, judicial rulings, government regulatory requirements, or cooperating with law enforcement investigations.

· Ensuring Security: Detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that may harm the website, users, or public safety.

· Other Specific Purposes: Other purposes explained to you at the time of information collection, or other uses within the scope permitted by law and directly related to the purpose of collection.

III. How We Share, Transfer, or Publicly Disclose Your Personal Information

We promise to keep your personal information strictly confidential and will only share your information under the following circumstances and to the minimum extent necessary:

· With Your Explicit Consent: Sharing with your prior explicit consent or authorization.

· Sharing with Service Providers: To achieve the purposes described in this policy, we may entrust third-party service providers (such as website hosting service providers, data analysis service providers, email service providers, cloud storage service providers, customer service system providers, etc.) to assist in processing your information. These service providers can only process information on our behalf and must comply with strict confidentiality obligations and security requirements.

· Sharing with Affiliated Companies: To facilitate service provision based on a unified account system or for internal management purposes, we may share necessary personal information among affiliated companies (if any), which will be bound by this Privacy Policy.

· Based on Legal Requirements or Legitimate Rights: When required by laws and regulations, for litigation dispute resolution, upon lawful requests by administrative or judicial authorities, or when disclosure is necessary to protect the personal and property safety of CRC, our users, or the public from infringement.

· Corporate Transactions: In the event of a merger, acquisition, asset transfer, bankruptcy liquidation, or similar transaction involving the Company, your personal information may be transferred as part of the transaction. We will require the new holder of your personal information to continue to be bound by this Privacy Policy; otherwise, we will require that company or organization to seek your authorization again.

· Public Disclosure: We will only publicly disclose your personal information with your explicit consent or based on legal requirements.

We will not sell your personal information to any third party.

IV. How We Store and Protect Your Personal Information

Storage Location

In principle, personal information collected and generated within the territory of the People's Republic of China will be stored within China. If cross-border transmission is necessary due to business requirements, we will strictly comply with Chinese laws and regulations (including conducting personal information export security assessments, signing standard contracts, etc.) and ensure that your personal information receives protection equivalent to that within China.

Storage Period

We retain your personal information only for the shortest period necessary to achieve the purposes stated in this policy, unless laws require mandatory retention (e.g., financial records, transaction information, etc.). After the retention period expires, we will delete or anonymize your personal information.

Security Measures

We adopt industry-standard security protection measures (including technical and administrative measures), such as encrypted transmission (HTTPS), access control, firewalls, intrusion detection, security audits, etc., to prevent unauthorized access, public disclosure, use, modification, damage, or loss of your personal information. We regularly train our employees on security awareness and privacy protection, allow only employees who need to know to access personal information, and require them to fulfill confidentiality obligations.

V. Your Rights

According to applicable laws and regulations (especially China's Personal Information Protection Law), you have the following rights regarding your personal information:

· Right to Access and Copy: You have the right to access and copy your personal information that we hold.

· Right to Correction: You have the right to correct or supplement inaccurate or incomplete personal information.

· Right to Deletion: Under specific circumstances (e.g., the purpose of processing has been achieved, we have ceased providing products or services, you withdraw your consent, our processing violates laws and regulations, etc.), you have the right to request that we delete your personal information.

· Right to Withdraw Consent: For personal information processing activities based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the validity of personal information processing conducted based on consent prior to the withdrawal.

· Right to Restrict Automated Decision-Making: If we make decisions solely through automated decision-making by information systems, and such decisions have a significant impact on your rights and interests, you have the right to request an explanation from us and the right to refuse decisions made solely through automated decision-making.

· Right to Obtain a Copy and Portability (if applicable): Under conditions stipulated by the national cyberspace administration, you have the right to request the transfer of your personal information to a personal information processor designated by you.

· Right to Restrict or Refuse Processing: Under specific circumstances (e.g., you challenge the accuracy of the information, the processing is unlawful, we no longer need the information but you require it for legal claims, etc.), you have the right to request that we restrict the processing of your personal information.

· Right to Complain and Report: If you believe our processing of your personal information violates laws and regulations, you have the right to complain or report to the personal information protection authorities (e.g., cyberspace administration, market supervision departments, etc.).

How to Exercise Your Rights:

If you wish to exercise any of the above rights, please contact us using the contact information provided at the end of this policy. We will respond to your request as soon as possible after verifying your identity. As required by laws and regulations, we may refuse requests that are clearly unreasonable, repetitive, require excessive technical means, pose risks to the legitimate rights and interests of others, or are impractical.

VI. How We Handle Minors' Personal Information

Our website and services are primarily intended for adults. We do not actively collect personal information from minors under the age of fourteen (14). If we discover that we have collected personal information from a minor without prior verifiable parental or guardian consent, we will endeavor to delete such data as soon as possible.

If you are the parent or guardian of a minor under the age of fourteen (14) and believe your child has provided us with personal information, please contact us using the contact information at the end of this policy, and we will take measures to delete that information.

VII. Updates to This Privacy Policy

We may update this Privacy Policy from time to time based on business development, changes in laws and regulations, or technological updates. Any updates will be posted on this page in the revised version, with the "Update Date" at the top being updated. In the event of significant changes (e.g., major changes to processing purposes, methods, types of personal information, usage methods, or sharing recipients), we will notify you through website announcements, pop-up notifications, or other prominent means.

We recommend that you regularly review this Privacy Policy to stay informed of the latest content. Your continued use of our website or services after an update to this Privacy Policy constitutes your full reading, understanding, and acceptance of the updated Privacy Policy.

VIII. How to Contact Us

If you have any questions, comments, suggestions regarding this Privacy Policy, or need to exercise your related rights, please contact us through the following methods:

· Company Name: Zhongsheng Deshang Inspection and Certification (Chengdu) Co., Ltd.

· Address: No. 2, Floor 10, Building 17, No. 86 Huhan Road, Chenghua District, Chengdu, Sichuan Province, China

· Phone: +86 028 83555628

· Email: ChinaCRC@VIP.163.com

· Website: zscrc.com

We will typically respond to your request within 15 working days after receiving it. If the situation is complex, we may extend the processing time appropriately but will inform you in advance.

ISMS & ITSMS

Information Technology service management system

Information Security Management System certification