Privacy Policy

1. What We Collect and How

To present this website to you and to understand how it is used, we automatically collect the following information when you visit, and send it to our servers:

(1) Browsing and interaction records, including but not limited to: the addresses of the pages you view (without any query parameters) and the interface language; your clicks and actions on the pages, such as navigating, opening a collection or a work, sharing, saving the shop code, clicking a contact link, or the outcome of sending a message (not its content); the time of each action; time spent on a page (including time in the foreground), scroll depth and page load time.

(2) Source information, including the site you came from (only the site itself, never the specific page or its parameters) and the campaign tags carried by links we publish ourselves.

(3) Technical information, namely the width band of your browser window (narrow, medium or wide; no exact figure is recorded).

(4) Access logs. To deliver the pages and keep the service secure, our hosting provider records the technical information needed for access in its server logs, typically including the network address, the time of access, the page requested, and the type of browser and operating system.

(5) Information you send us through the message form. When you use the message form on this website we collect the title (optional), name, email address, telephone number (optional; it may be a mobile number), order number (optional), enquiry type and message you enter, together with the time of submission, the page you submitted from and the source tag of your visit. This information is sent to our servers only after you tick the consent box and press send.

The records under (1) to (3) are grouped under an identifier that is valid only for the current browsing session; it contains no network address and is not linked to anything that could identify you. We do not record mouse movements, keystrokes or screen content. Apart from the information you choose to give us under (5), the current version of this website has no accounts and does not process mobile numbers, delivery addresses or payment details. When we later open a catalogue, accounts, membership or transactions, the scope of collection will change; we will then update this Policy under Section 11 and obtain your consent again as the law requires.

2. How We Use It

We use the information we collect to:

(1) present the pages and images of this website so that content displays correctly;

(2) keep the website secure, identify risks and prevent attacks and abuse;

(3) count visits, pages viewed, browsing activity and return frequency, understand which content and works draw attention, and improve how content is presented and how we plan our business and promotion;

(4) evaluate the effect of the content and promotion we publish on each channel;

(5) keep the records that laws and regulations require;

(6) carry out statistics and analysis that point to no individual;

(7) reply to enquiries you send through the message form and, where needed, contact you by the means you left.

We make no automated decisions on this basis that have legal effect on you or otherwise significantly affect you.

3. Retention

We keep the information we collect for as long as is necessary for the purposes described in this Policy. The statistical records under Section 1 (1) to (3) point to no individual and are kept for as long as our business analysis requires; the access logs under Section 1 (4) are kept by the hosting provider for a short period under its own security practice. Where laws and regulations set a different retention period, that period applies. Information you send through the message form is kept for no more than two years from the date you send it; you may ask us to delete it earlier at any time under Section 8.

4. Recipients

To run this website we engage the following service providers to process information within the necessary scope, bound by contract:

(1) Tencent Cloud: hosts and delivers the collection and page-hero images of this website and provides the database that stores the statistical records under Section 1 (1) to (3). When delivering images, Tencent Cloud receives your network address, browser identifier and the address of the referring page. The statistical records are stored in a database we operate on Tencent Cloud, located in the Chinese mainland, accessible only to our authorised staff.

(2) A web hosting provider headquartered in the United States: delivers the pages of this website and receives and processes the access logs under Section 1 (4) outside the Chinese mainland. Apart from those access logs and the message information under (4) below, we do not provide your other information outside the Chinese mainland.

(3) WeCom (WeChat Work): provides the online customer-service channel; what you choose to share through it is processed by that service solely to answer your enquiry.

(4) Notion Labs, Inc. (headquartered in San Francisco, United States; 685 Market St., San Francisco, CA 94105; privacy contact privacy@makenotion.com): after you tick the consent box, receives and stores outside the Chinese mainland a copy of the information you send through the message form, so that our authorised staff can read and answer it. This transfer takes place only after you tick the consent box; you may exercise your rights to access, correct or delete that information through the channel in Section 8, and we will pass your request on.

Except as set out above and in Section 9, we do not rent, trade or sell the information we collect to any third party without your consent, save where laws and regulations, the requests of competent authorities, or the protection of our legitimate interests require otherwise. Where laws and regulations allow, and to keep the brand consistent across the regions in which it operates, we may share the statistical records described in this Policy with our affiliates, requiring the recipient to protect them to a standard no lower than this Policy.

5. Security and Confidentiality

We take technical and organisational measures in line with industry standards to protect the information we collect against unauthorised access, disclosure, alteration or destruction, including encrypted transmission, access controls on the server side and least-privilege access for our staff. Please understand, however, that given the open nature of the internet no security measure can guarantee absolute safety; to the extent permitted by laws and regulations, we are not liable for theft, loss, unauthorised access or interception of information that is not caused by our fault. Should a security incident occur, we will start our response procedure promptly as the law requires and fulfil our notification and reporting duties.

6. Local Storage and Statistics

(1) Local storage. To produce the statistics described in this Policy, this website stores a small amount of data on your device: the number of visits and the date of your last visit, the month and source of your first visit, the identifier for the current session, and any statistical records that have not yet been sent (kept on your device when the network is down or sending fails, retried on a later visit and cleared once sent). This data stays on your device; what is sent along with the statistics is only a coarse band (for example "third to fifth visit" or "within seven days of the last visit") and the month and source of the first visit, values shared by many visitors and unable to identify you. In its current version this website does not use cookie-style tracking technologies and has not integrated any third-party analytics, advertising or behavioural tracking service; if we introduce such a service in future we will update this Policy before enabling it. You may clear all data this website has stored on your device at any time through your browser settings.

(2) Statistics. To make the content and services of this website fit visitors better, we count visits, pages viewed, browsing activity and return frequency, and distinguish first visits from return visits. We use our own statistics tool for this; the records are stored in the database described in Section 4 (1).

7. External Links

This website contains links to external platforms: the collection pages offer share links to third-party social platforms, the footer links to our official profiles on third-party social platforms, and the footer, the privileges page and the contact page link to our WeCom customer-service page. Such a jump happens only when you click; you then leave this website for a page run by the platform concerned. That platform handles your information under its own rules, not under this Policy, and we are not responsible for the content or the information practices of third-party sites; we recommend that you read their terms and privacy policies before using them. This website does not send your information to those platforms without an action on your part.

8. Your Rights and How to Contact Us

Within the limits of laws and regulations, you have the right to access, copy, correct, supplement and delete the information concerned and to withdraw consent you have given. Because the current version of this website has no accounts and its statistical records point to no individual, we usually cannot attribute a record to you; clearing this website's data from your browser means that later visits are no longer grouped with earlier records. To exercise these rights, or if you have questions, comments or complaints about this Policy or our processing, you may contact us through the customer-service channels published on this website. To prevent impersonation we may need to verify your identity before handling your request; once verified, we will respond within the reasonable period the law allows (usually no more than fifteen working days), and if we refuse we will explain why.

9. Transfer of Information

In the event of a merger, division, dissolution or declared bankruptcy, or a transfer of the assets or business connected with this website, and subject to laws and regulations, the information collected through this website may pass to the successor; we will require the successor to continue to honour the obligations in this Policy and will inform you of the successor's name and contact details as the law requires.

10. Children

This website is intended mainly for adults. We do not knowingly collect the personal information of children under fourteen. If you are a minor, please browse this website with the consent and guidance of a parent or other guardian. If we find that we have collected a child's personal information without verifiable guardian consent, we will seek to delete it as soon as possible.

11. Changes to This Policy

We may revise this Policy from time to time to reflect changes in laws and regulations or in how this website operates. We will not reduce the rights you enjoy under this Policy without your explicit consent. The revised version will be published on this page with its version number and effective date; for material changes we will also notify you in a more prominent way. Where a revision changes the purpose or method of processing or the type of information, we will obtain your consent again as the law requires; other revisions take effect on publication, and your continued visit or use of this website signifies your acceptance of the revised Policy.

12. About Us

"We" and "the brand" in this Policy mean Xinyuan Renaissance. This website is operated by the brand; the brand also runs a WeChat mini program whose features, scope of collection and applicable rules differ from this website, and this Policy applies to this website only. If you have any questions about this Policy, please contact us through the customer-service channels described in Section 8. This Policy is also published in Chinese; where the two versions differ, the Chinese version prevails.