Privacy Policy

1. Introduction

Xue Jia Tong (青岛学嘉公网络科技有限公司) is committed to protecting the privacy and security of personal data entrusted to us. This Privacy Policy outlines how we collect, process, store, and protect information obtained through our website, services, and business operations.

By accessing our website at www.xuejiatong.autos or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our services immediately.

2. Information We Collect

We collect information that you voluntarily provide to us when you interact with our website, contact us, or engage our services. The categories of personal data we may collect include the following:

2.1 Contact Information

When you fill out our contact form, send us an email, or communicate with us via phone, we may collect your full name, email address, telephone number, company name, job title, and any other information you choose to include in your message.

2.2 Business Information

In the course of providing our computer systems design and IT consulting services, we may collect information about your organization, technical infrastructure, system requirements, project specifications, and business objectives. This information is essential for us to deliver effective service and tailored solutions.

2.3 Technical Data

When you visit our website, our servers automatically log standard technical information including your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps. This data is collected through server logs and analytics tools for operational and security purposes.

2.4 Cookies and Tracking Technologies

Our website may use essential cookies and similar technologies to ensure proper functionality, maintain session state, and analyze usage patterns. We do not deploy advertising cookies or third-party tracking networks. You may configure your browser to decline cookies, though this may affect website functionality.

3. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds, consistent with applicable data protection laws:

• Your informed consent, provided voluntarily when you submit information through our website or correspond with us
• The necessity to perform a contract or take pre-contractual steps at your request
• Compliance with legal obligations to which Xue Jia Tong is subject under Chinese law
• Our legitimate business interests in operating, improving, and securing our services, provided such interests are not overridden by your data protection rights

4. How We Use Collected Information

We use the personal data we collect for the following purposes and in accordance with this Privacy Policy:

• To respond to inquiries, service requests, and communications received through our contact channels
• To prepare proposals, project plans, and technical assessments based on your stated requirements
• To deliver our computer systems design, IT consulting, and infrastructure services
• To manage client relationships, including account administration and billing
• To improve our website performance, security posture, and user experience
• To comply with legal obligations, regulatory requirements, and law enforcement requests
• To protect the rights, property, and safety of Xue Jia Tong, our clients, and the public

We do not use personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significant impacts.

5. Data Sharing and Disclosure

Xue Jia Tong does not sell, rent, or trade personal data to third parties for marketing purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers

We may engage trusted third-party service providers to perform functions on our behalf, such as website hosting, email delivery, cloud infrastructure, and analytics services. These providers are contractually bound to process data solely in accordance with our instructions and to implement appropriate security measures.

5.2 Legal Compliance

We may disclose personal data when required by applicable law, court order, governmental regulation, or legal process. We will make reasonable efforts to notify you of such disclosure unless prohibited by law or where notification would compromise an ongoing investigation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or asset sale, personal data held by Xue Jia Tong may be transferred as part of the transaction. You will be notified via our website and email of any such change in ownership or control of your personal data.

6. Cross-Border Data Transfers

Xue Jia Tong is headquartered in Laixi, Qingdao, Shandong Province, Peoples Republic of China. Personal data we collect is primarily stored and processed on servers located within China. In limited cases where service delivery requires the use of global cloud infrastructure, data may be transferred to and processed in jurisdictions outside of China.

When cross-border data transfers occur, we implement appropriate safeguards in compliance with PIPL requirements, including standard contractual clauses, data processing agreements, and security assessments to ensure your data receives a level of protection equivalent to that provided under Chinese law.

7. Data Security

We implement and maintain technical, administrative, and physical security measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS protocols and encryption of sensitive data at rest
• Access controls and authentication mechanisms limiting data access to authorized personnel
• Regular security assessments, vulnerability scanning, and penetration testing
• Network security architecture including firewalls, intrusion detection, and DDoS protection
• Employee training on data protection obligations and security best practices
• Incident response procedures to address and remediate security events promptly

While we strive to protect personal data using commercially reasonable means, no method of electronic storage or transmission is absolutely secure. We cannot guarantee unconditional security of data transmitted to or stored on our systems.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention periods depend on the nature of the data and the purposes of processing:

• Contact form submissions and correspondence: retained for the duration of the relevant business relationship plus two years
• Client project data and technical documentation: retained for the duration of the engagement plus five years for reference and continuity of service
• Server logs and technical visit data: retained for a maximum of twelve months for security and operational analysis
• Legal and financial records: retained for the periods mandated by Chinese commercial and tax regulations

When personal data is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures.

9. Your Rights Under PIPL

Under the Personal Information Protection Law of China, you have specific rights regarding your personal data. These include:

• The right to know and decide on the processing of your personal information
• The right to access and obtain a copy of personal data we hold about you
• The right to request correction or supplementation of inaccurate or incomplete personal data
• The right to withdraw consent previously given for data processing
• The right to request deletion of personal data under specified circumstances
• The right to restrict or object to the processing of your personal data
• The right to data portability, where technically feasible

To exercise any of these rights, please contact us using the contact details provided in Section 12 of this policy. We will respond to verifiable requests within the timeframe required by applicable law, typically within thirty calendar days.

10. Minors and Childrens Privacy

Our website and services are not directed to individuals under the age of eighteen. We do not knowingly collect personal data from minors or children without verifiable parental consent where required by law. If we become aware that a person under eighteen has provided us with personal data without appropriate consent, we will take steps to delete such information promptly. If you believe a minor has submitted personal data to us, please contact us immediately.

11. Third-Party Links and Services

Our website may contain links to third-party websites, platforms, or services that are not owned or controlled by Xue Jia Tong. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our website. We assume no responsibility for the content, privacy practices, or data handling of external sites.

12. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a privacy concern, you may contact us via the following channels:

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, provide notice via our website or direct communication.

We encourage you to review this Privacy Policy periodically to stay informed of our current data protection practices. Your continued use of our website and services following the posting of changes constitutes acceptance of those changes.

14. Governing Law and Jurisdiction

This Privacy Policy and any disputes arising from or related to the processing of personal data shall be governed by and construed in accordance with the laws of the Peoples Republic of China. Any legal proceedings arising from data processing activities shall be subject to the exclusive jurisdiction of the competent courts in Qingdao, Shandong Province, China.

15. Developer Attribution

This website and its associated digital infrastructure were designed, developed, and are maintained by Xue Jia Tong. The developer Xue Jia Tong is responsible for the architectural design, security implementation, and ongoing technical operations of the systems that support this privacy framework. All aspects of data handling infrastructure have been built with privacy-by-design principles and compliance obligations embedded from the foundation.

This document was last revised on July 16, 2026. Previous versions are archived and available upon request.