Privacy Policy

1 Introduction

Songyuan Yanhao Technology Co., Ltd. (referred to as we, us, or our) operates the website endlesstide.buzz and provides software development, system integration, and digital transformation services under the Endless Tide brand. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage our services. By using our website or services, you acknowledge the practices described in this policy.

We are committed to protecting your privacy and handling your data with transparency and fairness. If you have any questions about this policy, please contact us at the address or email listed above.

2 Data We Collect

We collect information that you voluntarily provide to us, as well as certain information automatically when you visit our website.

Information You Provide

• Contact information such as your name, email address, phone number, and company name when you fill out a contact form, request a quote, or communicate with us.
• Project information including technical specifications, requirements documents, business data, and any other materials you share during the course of a project engagement.
• Account credentials if you create an account on our platform for accessing project portals, dashboards, or support tools.
• Communication records including emails, chat messages, and call logs related to your interactions with our team.

Information Collected Automatically

• Log data including your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device information such as screen resolution, device type, language preferences, and similar technical identifiers.
• Usage analytics aggregated data about how visitors navigate and interact with our website, collected through analytics tools.
• Cookies and similar technologies as described in Section 6 below.

3 How We Use Your Data

We use the collected data for the following purposes:

• Service delivery to provide, maintain, and improve our software development, integration, and consulting services.
• Communication to respond to your inquiries, send project updates, share technical documentation, and provide customer support.
• Business operations for contract management, invoicing, project planning, and internal record-keeping.
• Website improvement to analyze usage patterns, optimize page performance, and enhance the user experience.
• Legal compliance to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Security to detect, prevent, and respond to fraud, unauthorized access, or other security incidents.

4 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on the following lawful grounds:

• Consent where you have given clear consent for us to process your data for a specific purpose, such as subscribing to newsletters or accepting non-essential cookies. You have the right to withdraw consent at any time.
• Contractual necessity where processing is required to fulfill a contract with you, including pre-contractual steps taken at your request, such as preparing a service proposal.
• Legitimate interests where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms. Our legitimate interests include improving our services, ensuring website security, and conducting ordinary business operations.
• Legal obligation where we are required to process data to comply with a legal obligation, such as retaining records for tax purposes or responding to lawful requests from authorities.

5 Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data under the following circumstances:

• Service providers we engage trusted third-party vendors who process data on our behalf, such as cloud hosting providers (Google Cloud, AWS), analytics services, email delivery platforms, and payment processors. These providers are contractually bound to protect your data and may only use it for the purposes we specify.
• Legal requirements we may disclose your information if required to do so by law or in response to valid legal requests, such as court orders, subpoenas, or government investigations.
• Business transfers in the event of a merger, acquisition, asset sale, or similar corporate transaction, your data may be transferred to the acquiring entity. We will notify you of any such change and the updated privacy terms that apply.

6 Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve functionality and understand usage patterns. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

• Essential cookies required for the website to function properly, such as session management and security tokens. These cannot be disabled.
• Analytics cookies that help us understand how visitors use our site, which pages are most popular, and where users encounter errors. We use aggregated data only.
• Preference cookies that remember your settings and choices, such as language preference or region selection.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For more information about controlling cookies, visit your browser help documentation or websites such as aboutcookies.org.

7 Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Access controls and authentication mechanisms for internal systems.
• Regular security audits, vulnerability assessments, and penetration testing.
• Employee training on data protection and confidentiality obligations.
• Data backup and disaster recovery procedures.

While we strive to protect your data, no method of transmission or storage is completely secure. We encourage you to take appropriate precautions when sharing information with us.

8 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary depending on the type of data and the legal context:

• Contact and communication data is retained for the duration of our business relationship plus a reasonable period thereafter, typically 24 months.
• Project-related data is retained for the duration of the project engagement plus six years to comply with contractual and legal obligations.
• Analytics and log data is retained in aggregated form for up to 12 months.
• Financial records are retained for the period required by tax and accounting regulations, typically seven years.

9 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Rights under the GDPR (EEA and UK residents)

• Right of access you may request a copy of the personal data we hold about you.
• Right to rectification you may request correction of inaccurate or incomplete data.
• Right to erasure you may request deletion of your data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
• Right to restriction you may request that we restrict processing of your data under certain circumstances.
• Right to data portability you may request a structured, commonly used, machine-readable copy of your data.
• Right to object you may object to processing based on legitimate interests, including profiling and direct marketing.
• Right to withdraw consent where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Rights under the CCPA (California residents)

• Right to know you may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete you may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to opt-out we do not sell your personal information, but you have the right to opt out of any sale of personal information if that practice changes in the future.
• Right to non-discrimination we will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at support-team@endlesstide.buzz. We will respond to your request within the timeframe required by applicable law, typically 30 days. We may need to verify your identity before processing your request.

10 Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly. If you believe a child has submitted data to us, please contact us so we can address the matter.

11 International Data Transfers

As a company based in China with clients in multiple countries, your personal data may be transferred to and processed in jurisdictions outside your home country. When we transfer data from the EEA or UK to countries that have not been deemed adequate by the European Commission, we implement appropriate safeguards, such as standard contractual clauses approved by the European Commission, to ensure your data receives an equivalent level of protection. By submitting your data, you acknowledge these transfers.

12 Third-Party Links

Our website and communications may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with. This Privacy Policy applies solely to data collected by Songyuan Yanhao Technology Co., Ltd. through endlesstide.buzz and our direct service engagements.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the effective date at the top of this page and notify you through our website or, where appropriate, by email. We encourage you to review this policy periodically to stay informed about how we protect your data.

---

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are in the EEA or UK and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.