Chính sách bảo mật

1. Who we are and how to contact us

Công ty TNHH Thiết bị Giải trí Henan Swonder, trading as Sinorides (“Sinorides,” “we,” “us,” or “our”), is responsible for the processing described in this policy. We act as the controller, responsible party, or equivalent entity under applicable privacy law.

2. What this policy covers

This policy covers sinorides.com and information we handle when you request product information, a quotation, a catalog, or project assistance through the website or related email, telephone, WhatsApp, or another contact channel you choose.

Our website presents amusement ride products and supports business inquiries. It does not provide customer accounts, online checkout, or online payment processing. You can browse product information without submitting your name, email address, or telephone number, although technical information may be processed when you visit.

If an inquiry develops into a purchase, installation, or after-sales relationship, we will provide additional privacy information where the resulting processing is not covered here. This policy does not automatically apply to other Sinorides domains unless they expressly identify it as applicable and their processing is accurately described here.

3. Information we collect

Personal information includes information that identifies you directly or indirectly. Business contact details can be personal information.

Contact information

Your name, email address, telephone or WhatsApp number, and other contact details you provide when making an inquiry.

Business and project information

Your company, role, country or project location, products of interest, project requirements, and information you choose to include in a message or attachment.

Correspondence

Your messages, our replies, quotation correspondence, and relevant follow-up notes.

Technical and usage information

IP address, request time, pages requested, browser and device information, security or error logs, and, depending on the tools used and your choices, referral information, cookie identifiers, advertising interactions, and conversion events.

Privacy and preference records

Consent choices, withdrawals, unsubscribe requests, and information necessary to handle privacy requests and demonstrate compliance.

We obtain information mainly from you and your interactions with our website. Google services may provide analytics, campaign, referral, or conversion information. If a colleague or authorized intermediary contacts us on your behalf, we may receive the information they provide. We will identify the source and provide additional notice where required. Please provide another person’s information only if you are entitled to do so.

Our inquiry forms use Wufoo, operated by SurveyMonkey. We record inquiries and related communications in our in-house CRM, with all CRM data stored on private servers in mainland China. Wufoo form processing and Google’s processing are separate from CRM storage.

We do not request government identification numbers, payment card details, health information, biometric identifiers, or other sensitive information through inquiry forms. Please do not submit such information. If we receive unnecessary information, we will limit its use and remove it where appropriate and legally permitted.

Required fields are identified on the relevant form; other information is optional. Without a usable contact method or enough information to understand your request, we may be unable to reply or prepare a quotation. There is no general legal obligation to submit an inquiry.

4. Purposes and legal grounds

We use personal information for the following purposes, relying on the legal grounds available under the law applicable to the particular processing:

• Responding to inquiries and preparing quotations: using contact details, project information, and correspondence to provide requested specifications, catalogs, pricing, or project assistance. Where you personally would be a party to a contract, this may involve steps you request before entering into that contract. For company representatives, we may rely on our legitimate interest in responding to business inquiries where permitted, or consent where required.
• Managing requested follow-up: using relevant contact details and correspondence to continue the specific discussion and coordinate with your organization on the same applicable grounds as the inquiry.
• Operating and protecting the website: using technical information to deliver pages, diagnose problems, prevent abuse, and protect information, based on applicable legal obligations or our legitimate interest in maintaining a functioning, secure website where permitted.
• Analytics and advertising: understanding website use and measuring advertising performance through relevant usage information and identifiers, with consent where required and subject to applicable choices and opt-out rights. Any additional advertising personalization or contact-data matching requires appropriate disclosure and a lawful basis.
• Promotional email: using your email address and relevant preferences with your separate opt-in consent.
• Privacy administration and legal matters: handling rights requests, maintaining necessary consent and suppression records, complying with legal duties, and establishing, exercising, or defending legal claims under the applicable lawful grounds.

Where we rely on legitimate interests, we assess necessity and whether your rights and interests override ours. Legitimate interests are not a universal legal ground in every country. Where local law requires consent or another basis, that requirement applies.

You may withdraw consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal. We will explain any consequence for a requested service and any information we must retain on an independent lawful basis. We provide additional notice and obtain any required consent before using information for a materially different purpose.

5. Inquiry replies and marketing

Submitting an inquiry does not subscribe you to promotional emails. It asks us to respond to your specific request. We may use the email address, telephone number, or messaging channel you provide for that purpose. You may specify your preferred channel or ask us to stop follow-up.

Promotional email requires a separate, optional opt-in. You can unsubscribe using the instructions in the message or by emailing marketing@sinorides.com. We will stop marketing within the applicable legal deadline. Opting out does not prevent a reply you subsequently request or a necessary non-promotional communication.

Email marketing consent does not authorize unrelated marketing calls, automated calls, SMS, or WhatsApp campaigns. Such activities require their own legally appropriate notice and permissions.

6. Cookies and Google services

Cookies and similar technologies can store or access information on your device. Some support necessary website functions and security. Others support analytics, advertising measurement, or third-party features.

We use Google services for website analytics and advertising-related purposes. These services may process online identifiers, IP addresses, browser or device information, page interactions, referrals, advertising interactions, and conversion events. Google’s role and processing depend on the particular service and configuration. Some configurations can associate interactions with other information Google holds.

Where consent is required, we must obtain it before activating the relevant optional technologies. Browsing the website or sending an inquiry is not, by itself, consent to optional tracking. You may withdraw consent or object to applicable processing by contacting marketing@sinorides.com. Any required on-device consent or opt-out controls must also be provided; an email route does not replace them.

You can use your browser’s controls to restrict or delete cookies. These controls do not necessarily stop server-side disclosures or remove information already lawfully processed. Cookies can last for a browsing session or remain until their expiry or deletion; exact durations depend on the technology and configuration. Contact us for information about the technologies and retention settings relevant to your visit.

Contact-data matching, enhanced conversions, customer-list uploads, or additional advertising personalization are not authorized merely because you submitted an inquiry. Such uses require their own applicable disclosures, legal grounds, and choices. Hashing an email address does not by itself make it anonymous.

Read Google’s Privacy Policy, its business privacy information, and its information about restricted data processing. Provider terms do not remove Sinorides’ own privacy responsibilities.

External links to messaging, video, or social services lead to services with their own privacy practices. Their notices govern their independent processing. We remain responsible for our own collection and disclosure through any integrations.

7. When we disclose information

Access within Sinorides is limited to people who need information for the purposes described in this policy. Our routine external processing involves:

• Wufoo / SurveyMonkey: receiving and managing inquiry-form submissions, including the contact details and inquiry contents you submit and associated technical information needed to provide the service. Processing is subject to applicable service and data-processing terms. See the SurveyMonkey Privacy Notice và Data Processing Agreement.
• Google: processing relevant analytics and advertising information as described in Section 6, subject to the applicable product terms, privacy requirements, and your choices.

Other than the form-service and Google processing described here, we do not routinely disclose inquiry information to outside businesses. We do not sell inquiry contact lists or provide them to independent dealers, partners, or other businesses for their own direct marketing.

We may disclose information where legally required to authorities or other legally entitled recipients. We assess requests and limit disclosures appropriately. Before introducing another recipient or a materially different purpose, we will provide the required notice and obtain any legally required consent.

Advertising-related disclosures can constitute a “sale,” “sharing,” or “targeted advertising” under certain US privacy laws even without monetary payment. Our statement about not selling contact lists does not exclude those legal definitions. Where applicable, you may request to opt out by emailing marketing@sinorides.com. We are also required to provide any additional statutory opt-out methods and honor legally recognized preference signals, including Global Privacy Control, where applicable. General acceptance of this policy does not override such an opt-out.

8. Storage and international processing

All data in our in-house CRM is stored on private servers in mainland China. Our team in China processes inquiry information to respond to requests and manage business communications.

Wufoo and Google may separately process information outside China, including in the United States, depending on the applicable service and account arrangements. CRM storage in China does not mean that every form submission copy, technical record, or item of Google data is stored only in China. Privacy laws and lawful government-access rules in other countries may differ from those where you live.

When processing constitutes a restricted international transfer, a lawful transfer mechanism and any required assessments or additional safeguards must be in place before the transfer. Depending on applicable law and the data flow, this may involve an adequacy decision, approved contractual protections, supplementary measures, or a narrowly applicable statutory exception. Consent to an inquiry is not a general waiver of transfer safeguards or local storage requirements.

SurveyMonkey publishes storage and transfer information covering Wufoo; Google publishes advertising and analytics transfer information. These describe provider arrangements, and do not by themselves establish that every transfer involving Sinorides is covered by the same mechanism.

Contact marketing@sinorides.com for information about relevant processing locations or applicable safeguards, including a copy where required, subject to necessary protection of confidential information and others’ rights. Local storage, notifications, approvals, and separate consent requirements must be satisfied wherever they apply.

9. How long we keep information

We do not retain every inquiry indefinitely. Our retention policy uses three categories for inquiry and relationship records in the CRM and other systems under our control:

Unconverted inquiries and quotations

We review records no later than 24 months after the last substantive communication with you. If there is no active project, necessary and lawful marketing purpose, or other documented lawful need, we delete or effectively anonymize the information. We act earlier when the purpose has ended, a shorter legal period applies, or a valid deletion request requires it. Continued retention must have a recorded reason and a further review date.

Active projects and established customers

We retain relevant records for the period necessary to manage the project, contract, installation, warranty, or after-sales support and applicable legal, accounting, or claims obligations. We document the purpose and retention requirement and remove information no longer needed. A continuing relationship does not justify keeping unrelated information indefinitely.

Unsubscribe and objection records

We retain only the minimum information needed to recognize and honor your preference, such as the contact identifier, restriction, and date. These records are restricted to preventing unwanted contact and demonstrating compliance, are reviewed periodically, and are not used to restart marketing.

The 24-month point is a review limit, not a legal minimum or a promise to keep every inquiry for 24 months. An outbound promotional message alone does not restart that period. Withdrawal of marketing consent stops that use, while a minimal suppression record or information independently required by law may remain.

Technical and security logs, analytics records, consent records, and privacy-request records are retained only for their necessary operational, compliance, or legally required periods. Cookie and provider-record lifetimes depend on the relevant technology and settings; you may contact us for details.

The rules cover relevant copies under our control in Wufoo, inquiry correspondence, exports, and the CRM. Importing a submission into the CRM does not itself delete the original form record. When deletion is required, we remove relevant copies and coordinate applicable provider deletion obligations. Information lawfully processed independently by a provider remains subject to that provider’s obligations and rights procedures.

A legal hold or mandatory retention requirement may justify keeping specific records with other uses restricted. Residual backups are protected, excluded from routine use, and removed through the applicable backup lifecycle. Deletion and suppression requirements must be reapplied if a backup is restored.

10. Security

We apply technical and organizational safeguards appropriate to the information and risks, including access restrictions, confidentiality requirements, secure transmission, and measures to protect and maintain relevant systems. No internet transmission or storage system can be guaranteed completely secure.

Where a breach triggers a legal notification requirement, we will notify the relevant authority and affected individuals within the required time and in the required manner. This policy does not limit our statutory responsibilities or your legal remedies.

11. Privacy rights and deletion requests

Depending on applicable law and the circumstances, your rights may include:

• Knowing whether we process your information and receiving information about purposes, sources, and recipients.
• Accessing your information and obtaining a copy, including a portable copy where applicable.
• Correcting inaccurate or incomplete information.
• Requesting deletion, anonymization, blocking, or restriction.
• Objecting to applicable processing, including processing based on legitimate interests, and stopping direct marketing.
• Withdrawing consent and exercising applicable sale, sharing, or targeted-advertising opt-outs.
• Seeking review of qualifying automated decisions, appealing a refusal where available, and complaining to the relevant authority.

You may also use our telephone or postal details in Section 1. You do not need to create an account, make a purchase, or pay a routine fee. For Wufoo submissions, contact Sinorides; we handle the request and coordinate relevant provider action where required.

Please describe your request and provide enough information to locate the records. We may proportionately verify identity or an authorized agent’s authority where necessary. We avoid unnecessary identification and do not require verification for opt-outs where the law prohibits it.

We respond within the applicable statutory deadline. We aim to respond within 30 calendar days, but a shorter legal deadline takes priority. If a lawful extension is needed, we explain the reason and timing. Any refusal will include the lawful reason and available review or complaint routes. An exceptional fee must be legally permitted and explained in advance.

For an internal review, appeal, or complaint, contact the same email address and explain your concern. Where a statutory appeal procedure applies, we follow its deadlines and provide required escalation information. This does not restrict direct access to an authority or court where permitted.

We do not discriminate against you for exercising privacy rights. If deletion or withdrawal prevents us from completing your inquiry, we explain that practical consequence.

12. Regional privacy information

The following provisions apply where the relevant law covers our processing. Coverage can depend on location, business activity, targeting, statutory thresholds, and the capacity in which you interact with us. Mandatory local rights take priority over inconsistent wording in this policy.

EEA, United Kingdom, and Switzerland

Section 4 describes purposes and legal grounds. You may object to processing based on legitimate interests on grounds relating to your situation and object to direct marketing at any time. You may complain to the competent EEA supervisory authority, the UK Information Commissioner’s Office, or the Swiss Federal Data Protection and Information Commissioner, as applicable.

Hoa Kỳ

Applicable state laws may provide access, correction, deletion, portability, opt-out, and appeal rights. Sections 3–9 describe information categories, sources, purposes, recipients, and retention. We do not claim a blanket B2B exemption; treatment of business contact details differs between laws. Advertising-related disclosures and applicable opt-outs are addressed in Section 7.

Legally recognized signals, such as Global Privacy Control where applicable, are distinct from a general browser “Do Not Track” setting. A general DNT setting alone does not establish that processing has stopped; contact us about applicable choices. California residents may also request information about disclosures covered by California’s direct-marketing disclosure law, where applicable.

Canada

We obtain meaningful consent where required, distinguish inquiry handling from optional marketing, and remain accountable for providers processing information on our behalf. Information may be handled outside your province and Canada as described in Section 8. Applicable federal and provincial laws govern access, correction, withdrawal, and complaints. Relevant authorities include the Office of the Privacy Commissioner of Canada and provincial authorities, including Québec’s Commission d’accès à l’information.

Brazil

Where the LGPD applies, rights may include confirmation and access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed information, applicable portability, information about sharing and consent, withdrawal, and review of qualifying automated decisions. Use the privacy contact in Section 1; you may also petition the ANPD as provided by law.

Mexico

Where applicable, you may exercise access, rectification, cancellation, and opposition (ARCO), revoke consent, and request limits on use or disclosure through Section 11. Inquiry handling is a primary purpose; promotional email is an optional secondary purpose you may refuse without losing inquiry support. Identify the right requested and records concerned. We explain proportionate verification requirements and comply with applicable decision and implementation deadlines. Required transfer consent is obtained separately.

Nga

Where Russian law applies, rights may include access, clarification, blocking, destruction, and withdrawal of consent. Legally required processing consent must be presented separately from other documents. Applicable localization, notification, and cross-border conditions must be met; accepting this policy does not waive them. Complaints may be made to Roskomnadzor or a competent court.

Ấn Độ

Rights under the Digital Personal Data Protection framework apply to the extent the relevant provisions have entered into force and cover the processing. These can include access to specified processing information, correction and erasure, grievance redressal, and nomination. Send grievances to the contact in Section 1. Required local-language notices and consent procedures must be provided. Statutory escalation to the Data Protection Board is subject to applicable commencement and grievance requirements.

Australia and New Zealand

Where applicable, you may seek access or correction and complain about personal information handling or overseas disclosures. Contact us so we can investigate. Unresolved concerns may be raised with Australia’s Office of the Australian Information Commissioner or New Zealand’s Office of the Privacy Commissioner, as applicable.

Other countries and territories

Visitors in Southeast Asia, other parts of South Asia, Africa, other South American countries, Central America, Central Asia, the Middle East, other European countries, and Pacific countries may have additional local rights. Section 11’s contact route is available to all visitors. Mandatory local requirements on notices, language, consent, rights, security, retention, and transfers apply where they cover our activities. A general policy does not replace a required country-specific notice or consent procedure.

13. Children and automated decisions

This website is intended for adult business buyers and representatives. Although some products are rides designed for children, our inquiry service is not directed to children. We do not knowingly solicit children’s personal information or market to children. If you believe a child has submitted information, contact us so we can investigate and delete it or take another legally required protective action.

We do not make decisions about you solely through automated processing that produce legal or similarly significant effects. We do not use inquiry information for automated credit, employment, or eligibility decisions.

14. Changes to this policy

We publish updates on this page and revise the “Last updated” date when our practices change. Where required, we provide a prominent notice or direct notification and obtain fresh consent before a new consent-based use begins. Continued browsing alone is not consent to a material new processing purpose.