I. Introduction#
Our website (hereinafter referred to as “we” or “the platform”) attaches great importance to the protection of users’ privacy. This policy aims to explain how we collect, use, store, and share your personal information, and to clarify your data rights. Please read this policy carefully before using our services.
II. Scope of Information Collection#
1. Information You Provide Actively#
- Account Registration: Name, email address, mobile phone number, password, etc.
- Transaction Information: Payment information (such as credit card number), delivery address, invoice information
- User-Generated Content: Product reviews, community posts, uploaded pictures/videos
- Customer Service: Communication records, problem feedback
2. Technological Information Collected Automatically#
- Device Information: IP address, device model, operating system, browser type
- Usage Data: Access time, page stay duration, clickstream data
- Location Information: Approximate location obtained through GPS or IP address (user authorization required)
- Cookies and Similar Technologies: Used for authentication, preference settings, and advertising optimization
III. Purposes of Information Use#
We will only process your data in the following scenarios:
- Account creation and management
- Order processing and logistics tracking
- Sending service notifications (such as order status updates)
- Improving product features and user experience
- Preventing fraud and security risks
- Performing compliance audits and fulfilling legal obligations
- Personalized recommendations and targeted advertising (user consent required)
IV. Data Sharing and Disclosure#
We will only share information in the following situations:
- Third-Party Service Providers: Payment processors (such as PayPal, Stripe), logistics partners, cloud service providers
- Legal Requirements: Responding to court subpoenas, government investigations and other legitimate requests
- Business Transfers: Data transfer in the event of mergers, acquisitions, or restructurings
- User Authorization: Other purposes with your explicit consent
V. Protection of User Rights#
You have the following data rights:
- Right of Access: Apply for a copy of your personal data.
- Right of Rectification: Request to update inaccurate information.
- Right of Erasure: Request data deletion under specific conditions.
- Right to Restrict Processing: Restrict the scenarios where data is used.
- Right to Data Portability: Obtain data in a structured, commonly used format.
- Right to Object: Reject automated decision-making or marketing pushes.
Operation Method: Exercise your rights through account settings or by contacting us.
VI. International Data Transmission#
In case of cross-border transmission (such as using overseas servers), we will take measures such as encryption and anonymization to ensure data security and comply with relevant international data transmission agreements.
VII. Security Measures#
- Use SSL/TLS encryption to transmit sensitive data.
- Conduct regular security vulnerability scans.
- Implement the principle of least privilege access control.
- Establish an emergency response mechanism for data breaches.
VIII. Data Retention Period#
We will retain data only for the time necessary to achieve the purposes described in this policy, except as required by law or contract. For example:
- Transaction records: Retained for 7 years (for tax compliance purposes)
- Account information: Until 30 days after account cancellation
IX. Policy Updates#
When this policy is modified, we will announce it in a prominent position on the website. For major changes, we will notify registered users by email 30 days in advance.
X. Contact Us#
Privacy Officer: [webmaster]
Email: [webmaster@sm.doctor]
Effective Date: [2025-03-30]
Last Update: [2025-03-30]