Privacy Statement
Effective date: May 29, 2026
Introduction
"CARXPERT" is a wholly-owned subsidiary of Baolong Automotive. Shanghai Baolong Automotive Corporation (hereinafter referred to as "Baolong Automotive", "we" or "our") is the administrator of all personal information collected through this website. We fully understand the importance of personal information to you and will take corresponding security protection measures in accordance with legal and regulatory requirements and industry-standard security practices to protect your personal information . We are committed to maintaining your trust by handling your personal information in a lawful, legitimate, necessary, and honest manner. Therefore, we have formulated this “Privacy Statement” (hereinafter referred to as " this statement ") to help you fully understand how we collect, process and protect your personal information.
Before browsing this website, please read this statement carefully and fully understand the content of each clause. You can make the choices you deem appropriate according to the guidance of this statement. If you have any questions, please contact us.
This statement will help you understand the following:
· How We Collect and Use Personal Information
· How We Use COOKIES or Similar Technologies
· How We Share, Transfer, and Disclose Your Personal Information
· How We Secure Your Personal Information
· How We Manage Your Personal Information
· How We Process the Personal Information of Minors
· How Your Personal Information is Transferred Globally
· How this Statement is Updated
· How to Contact Us
1. How We Collect and Use Personal Information
Personal Information We May Collect from You
1.1 Personal information refers to all kinds of information related to identified or identifiable natural persons recorded electronically or other means, excluding the information processed anonymously. Under this statement, the personal information we may collect from you includes: name, phone number
1.2 Sensitive Personal Information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including such information as biometric identification, religious beliefs, specific identities, medical health, financial accounts, whereabouts and tracks as well as the personal information of minors under the age of 14. Generally, we will not actively collect your sensitive personal information during your visit to our website. If under specific circumstances we need to collect your sensitive personal information, we will obtain your separate consent .
The Purpose of Collecting and Using Your Personal Information
1.3 We will follow the principles of lawfulness, propriety, and necessity to collect and use the personal information generated when you visit our website and leave online messages for the purposes described in this statement. To ensure that you can normally use these services, we may collect, store, and use the following information related to you to provide these services. If you do not provide relevant information, you will not be able to access or use the services we offer :
1.3.1 when you leave an online message , you need to provide your name and phone number to identify your message and for our service staff to contact you if necessary;
1.4 If we intent to use your personal information for purposes not specified in this statement, or use information collected for specific purposes for other purposes, we will inform you in a reasonable manner and obtain your consent again before use. If you refuse, unless otherwise explicitly stipulated by laws and regulations, we will stop using and delete the aforementioned information.
1.5 We may automatically collect information you leave during your visit to our website. Collecting such information allows us to better understand you in order to provide better services. This information is generally collected through our COOKIES or similar technologies, for specific details, please see article 3 below.
1.6 You are fully aware that in the following situations, we collect and use personal information without your authorization and consent:
l For the protection of the major legal rights and interests to the life and property of the subject of personal information or other individuals, but it is difficult to obtain their consent.
l The personal information collected is disclosed to the public by the subject of personal information or the guardian themselves.
l Your personal information is collected from legally disclosed information, such as legal news report, government information disclosure, and other channels.
l It is necessary to maintain the safe and stable operation of the services provided, such as detecting and handling service failures.
l It is necessary for legitimate news reporting.
l Other situations stipulated by laws and regulations.
1.7 Third-party links provided on this website
The third-party corporate websites and QR codes for the Carxpert WeChat official account provided by this website are only related to the enterprises created under the organizational structure of Baolong Automotive. We use the same privacy protection measures to protect your personal information from unauthorized access, use, and disclosure. Before using these corporate websites, you shall carefully read their privacy statements, and fully understand the content of each clause. You can make appropriate choices accordance to the guidance of their privacy statements.
2. How We Use COOKIES or Similar Technologies
2.1 We may obtain and use your information through the use of COOKIES or similar technologies.
2.2 The COOKIES we store on your computer are temporary COOKIES, which will be automatically deleted when you close the browser.
2.3 COOKIES allow us to serve you better and faster. You can refuse or manage COOKIES or similar technologies through your browser. If you want to disable COOKIES, you can configure your browser by choosing "refuse COOKIES" or "notify you when websites send COOKIES". Since our services are enabled through the support of COOKIES, after completing the operation to disable COOKIES, your access may be affected or you may not be able to fully obtain our services.
3. How We Share, Transfer, and Disclose Your Personal Information
3.1 Delegated Processing
We do not delegate the processing of your personal information to the third parties.
3.2 Sharing
We will not share your information with any third party other than our company and its affiliates, except in the following circumstances:
l Obtain your explicit consent or authorization in advance.
l Sharing your information as required by applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements.
l Only by sharing your personal information can we provide the services you need.
3.3 Transfer
3.3.1 Transfer refers to the process of transferring control of personal information to other companies, organizations or individuals.
3.3.2 We will not transfer your personal information to any third party other than our company and its affiliates, except in the following circumstances:
l Obtain your explicit consent or authorization in advance.
l With the continuous development of our business, in the event of a merger, acquisition or bankruptcy liquidation, your information may be transferred as part of such transactions. If personal information transfer is involved, we will require the new company, organization or individual holding your personal information to continue to be bound by this statement, otherwise we will require that company, organization or individual to seek your consent again.
3.4 Public Disclosure
We will not disclose your personal information to any third party outside of our company, except in the following circumstances:
l We may disclose your personal information in accordance with laws and regulations, litigation, dispute resolution needs, or as required by administrative and judicial authorities.
l At your request, we will disclose the information you specify in the manner you explicitly agree to.
4. How We Secure Your Personal Information
4.1 We have always attached great importance to protecting the security of users' personal information. For this purpose, we use security technologies, organizational and management measures that comply with industry standards to minimize the risk of your information being leaked, damaged, misused, accessed and disclosed without authorization, and altered.
4.1.1 Data Security Technical Measures
4.1.1.1 We will adopt security measures in line with industry standards, including establishing reasonable institutional norms and security technologies to prevent your personal information from unauthorized access and modification, and to avoid data damage or loss.
4.1.1.2 Our network services use encryption technologies such as Transport Layer Security Protocol, and we provide browsing services through methods such as HTTPS to ensure the security of visitor data.
4.1.2 Other Security Measures We Take to Protect Personal Information
4.1.2.1 We regulate the storage and use of personal information by establishing a data classification and grading system, data privacy policies, and data compliance management system.
4.1.2.2 When processing your personal information, we adhere to the following principles:
l Lawfulness, Propriety and Transparency: Personal information shall be processed lawfully, fairly and in a transparent manner.
l Purpose Limitation: Personal information shall be processed for a specified, clear purpose, and not further processed in a manner that is incompatible with that purpose.
l Data Minimization: Personal information shall be adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed.
l Accuracy: Personal information shall be accurate and kept up to date where necessary. Reasonable measures will be taken to ensure that inaccurate personal information are deleted or corrected in a timely manner based on the purpose of the data processing.
l Storage Limitation: Personal information is not stored for longer than necessary to achieve the purpose for which the personal information are processed.
l Integrity and confidentiality: Appropriate security of the personal information shall be implemented to prevent unauthorized access to or modification of the personal information, and to avoid damage or loss of the personal information.
l Accountability: Records relating to personal information processing and privacy controls must be maintained to demonstrate compliance with the above principles when necessary.
4.1.2.3 We have established a dedicated data compliance department to promote and ensure the security of personal information.
4.1.2.4 We will hold information security and privacy protection training courses to enhance employees' security awareness and understanding of personal information protection policies and related regulatory processes.
4.2 Please be aware that although we will make every effort to ensure the security of any information you send to us, the Internet environment is not 100% secure, and we do not assume responsibility for any risks or losses arising from or related to this.
4.3 In case of an unfortunate personal information security incident, we will immediately inform you in accordance with legal and regulatory requirements: the basic situation and possible impact of the security incident, the measures we have taken or will take to address it, advice on how you can prevent and mitigate risks, and the remedial measures, etc. We will promptly notify you of the relevant procedures of the incident via email, letter, phone, push notification, etc. If it is difficult to inform each subject of personal information, we will publish an announcement in a reasonable and effective manner. At the same time, we will also report the disposal of personal information security incidents in accordance with the requirements of regulatory authorities .
5. How We Manage Your Personal Information
5.1 We highly value your management of personal information and make do our utmost to protect your access, correction, deletion, withdrawal of consent and other legal rights regarding your personal information, giving you fully capability to protect your privacy information security.
5.2 How we manage your personal information
Except for circumstances stipulated by laws and regulations, you have the right to contact us at any time to correct and delete your personal information. We will respond to your request according to the methods and deadlines outlined in this Privacy Statement.
5.3 Unable to respond to your above 5.1 and 5.2 requests:
l Related to our obligations under laws and regulations.
l Directly related to national security and defense security.
l Directly related to public safety, public health, and significant public interests.
l Directly related to criminal investigations, prosecutions, trials, and the execution of judgments.
l We have sufficient evidence to show that the subject of personal information has subjective malice or abuse of rights.
l For the protection of the life, property, and other major legitimate rights and interests of the subject of personal information or other individuals, but it is difficult to obtain the subject’s consent.
l Responding to the request of the subject of personal information will cause serious damage to the legitimate rights and interests of the subject of personal information or other individuals or organizations.
l Involving our company's trade secrets.
6. How We Process the Personal Information of Minors
6.1 We place great importance to the protection of minors’ personal information. If you are a minor under the age of 18, you must obtain your guardian’s consent before using our services. We will protect minors’ personal information in accordance with relevant national laws and regulations.
6.2 We do not actively collect personal information from minors directly. For cases where minors’ personal information is collected with the consent of their guardians, we will only use, share, transfer or disclose this information as permitted by law, with the guardians’ consent, or necessary for the protection of the minors.
6.3 If it is proven that a minor has used our services without obtaining his or her guardian’s consent, we will consult with the relevant guardian and strive to delete the relevant personal information as soon as possible.
6.4 Our services are not directed at children. Children under the age of 14 (inclusive) may not use our services without obtain the consent of their parents/guardians to this Privacy Statement. We do not intend to collect personal information from any child under the age of 14 without such consent. If you believe that we hold any personal information of a child under the age of 14 without such consent, please contact us, and we will immediately investigate (and remove) such personal information.
7. How Your Personal Information is Transferred Globally
In principle, the personal information we collect and generate within the People's Republic of China will be stored within the People's Republic of China. However, under the premise of complying with relevant laws and regulations, we may transfer some information abroad. We will clearly inform you of the name, contact information, processing purposes, processing methods, types of personal information, and the ways and procedures for you to exercise your rights to the foreign recipient, and obtain your separate consent (if applicable). We will take necessary measures such as anonymization, encrypted transmission, signing data processing agreements/terms, and fulfill compliance obligations according to relevant laws and regulations, including declaring security evaluation to the Cyberspace Administration, applying for personal information protection certification, or signing standard contracts for the export of personal information with foreign recipients and filing with the Cyberspace Administration.
8. How this Statement is Updated
8.1 Our Privacy Statement may change from time to time. We will post any changes to this Privacy Statement on our website. For significant changes, we will provide more prominent notice, such as special prompts on the browsing page, to explain the specific changes to the Privacy Statement. we will not reduce your rights under this Privacy Statement without your explicit consent.
8.2 Significant changes referred to in this Privacy Statement include but are not limited to:
l Major changes in our service model.
l Changes in the main recipients of personal information sharing, transfer or public disclosure.
l Significant changes in your rights to participate in the processing of personal information and how you exercise them.
l Changes in our contact information and complaint channels.
l When the personal information security impact assessment report indicates high risk.
9. How to Contact Us
If you have any questions, comments or suggestions about this Privacy Statement, please contact us through the following methods. Generally, we will respond within two working days:
Address: No. 5500 Shenzhuan Road, Songjiang District, Shanghai
E-mail: baolong-compliance@chinabaolong.net
