Privacy Policy

Privacy Policy

This Privacy Policy applies to BOPIR Digital Technology (Suzhou) Co., Ltd. and its affiliates (collectively “BOPIR Digital Technology”, “we”, “us” or “our”). BOPIR Digital Technology specializes in the research, development, design and sale of hardware and software for the healthcare sector. We fully respect and protect the personal information rights of users who access and use this website (hereinafter “you”). When you visit our website, make business inquiries or engage in business discussions with us, we may collect and process some of your personal information. This Privacy Policy explains how personal information is collected, used, stored, shared and protected, and the rights you enjoy.

Notice: Please read this Privacy Policy carefully before accessing or using this website. If you continue to access this website, you confirm that you fully understand and agree to all the contents of this Privacy Policy; if you do not accept this policy, please stop accessing our website. If supplementary privacy terms are introduced for specific business scenarios in the future and conflict with this policy, the supplementary terms shall prevail within the scope of the relevant business.

I. How We Collect and Use Your Personal Information

Personal information means information recorded in electronic or other forms that relates to an identified or identifiable natural person. Sensitive personal information means information that, once leaked or illegally used, may easily endanger personal or property safety or infringe upon human dignity, including specific identity information; when processing sensitive personal information we will obtain your separate consent in accordance with legal requirements. We collect personal information only for business inquiry handling, business cooperation communication, after-sales service and product optimization and improvement, strictly following the principles of lawfulness, legitimacy and minimum necessity, and we will not collect personal information unrelated to our business.

1.1 Sources of Information Collection

• Information you provide to us: personal information you voluntarily submit to us when you make business inquiries, engage in business discussions or express cooperation intentions through website forms, email, telephone or other means;
• Automatically collected by the website: when you visit this website, we may automatically obtain basic access logs, device type, pages browsed and other access data that does not directly identify you through cookies and similar technologies;
• Lawful third-party channels: only where permitted by law, we obtain publicly available business contact information from public commercial information platforms; we do not illegally collect personal privacy data in bulk.

1.2 Information Collection and Purpose of Use in Different Scenarios

• (1) Business inquiries and cooperation: when you inquire about our medical hardware and software products or express cooperation intentions through the website contact form, email or telephone, we may collect: name, contact telephone number, email address, organization, position and region. Purpose of use: to respond to your inquiries, conduct business communication and negotiate offline cooperation agreements; if you refuse to provide such necessary information, we will be unable to effectively respond to your inquiries and cooperation requests.
• (2) Performance of offline cooperation agreements (medical hardware and software sales, project delivery, after-sales support): after both parties sign a cooperation agreement offline, we will use the contact information you provided during the cooperation (name, contact telephone number, email address, organization address) to complete project coordination, product delivery and technical after-sales support. Purpose of use: project communication, product delivery coordination, troubleshooting, technical after-sales service and dispute resolution; such information is necessary for the performance of the cooperation contract.
• (3) Business notices and product information: with your separate express consent, we may send you updates on medical hardware and software products, industry news and invitations to offline seminars by email or SMS; you may unsubscribe from marketing messages at any time, after which we will stop marketing communications without affecting the delivery of service-related notices.
• (4) Website operation and product iteration: we conduct anonymized statistical analysis of website access logs to optimize website presentation, improve our medical hardware and software products and troubleshoot website issues; anonymized data cannot identify any specific natural person.
• (5) Security protection and risk prevention: the relevant information is used to safeguard the security of website operations, prevent cyber attacks, identify fraudulent behavior and maintain the business security of ourselves and our customers.
• (6) Compliance with legal obligations: we cooperate with judicial and administrative regulatory authorities in lawful investigations and information reporting, and fulfill obligations prescribed by laws and regulations.

1.3 Statutory Exceptions Permitting Collection Without Your Consent

In the following circumstances, we may collect and process personal information without your consent:

• Directly related to national security or national defense security;
• Directly related to public security, public health or major public interests;
• Necessary for criminal investigation, prosecution, trial, enforcement of judgments or other judicial duties;
• Necessary to protect the major legitimate rights and interests of the life or property of you or a third party where it is difficult to obtain the consent of the individual;
• The information has been disclosed by you to the public yourself;
• Necessary for the performance of a contract between you and us;
• Information obtained from lawful public channels (government public information, lawful news reports);
• Other circumstances prescribed by laws and regulations.

II. Sharing, Transfer and Public Disclosure of Personal Information

2.1 Sharing

Except in the circumstances described below, we will not share your personal information with third parties other than BOPIR Digital Technology. We share only the minimum information necessary to achieve the business purpose and require recipients to maintain information security protection standards no lower than those set out in this policy.

• With your explicit and separate authorization and consent;
• Where judicial organs or competent administrative authorities require disclosure in accordance with statutory procedures;
• To protect you, BOPIR Digital Technology, other users and the public interest from harm, within the scope permitted by law;
• Necessary sharing among group affiliates: limited to business coordination needs, subject to this Privacy Policy, with internal access isolation to safeguard information security;
• Where necessary to perform offline cooperation agreements, providing necessary contact information to logistics and technical outsourcing service providers;
• Other circumstances permitted by laws and regulations.

2.2 Public Disclosure

We will publicly disclose your personal information only in the following circumstances:

• With your explicit separate consent;
• Where disclosure is required by legal procedures or mandatory government requirements, or is lawfully carried out to prevent major risks to personal or property safety.

2.3 Exceptions to Sharing and Disclosure Without Your Consent

• Performance of obligations prescribed by law;
• National security, national defense security, public security and major public health interests;
• Necessary for criminal judicial case handling;
• Protection of major rights and interests of life and property where the consent of the individual cannot be obtained;
• Information you have disclosed to the public yourself;
• Public information obtained from lawful public channels.

Supplementary note: information that has been de-identified so that third parties cannot restore or identify any specific natural person may be provided externally without further notice or your consent.

III. Use of Cookies and Similar Technologies

Cookies and local storage are small data files that a website stores on your device, and are divided into strictly necessary session cookies and statistical cookies.

Strictly necessary cookies: used to ensure basic browsing and the normal operation of forms; if disabled, some website functions may not work properly;

Statistical cookies: used to measure website traffic and improve the website experience; such cookies are enabled only after we obtain your consent. You can reject or delete cookies in your browser settings.

We use cookies only for the purposes stated in this policy, and will not use the data collected through cookies for unauthorized user profiling or advertising tracking. You can manage and delete all cookies through your browser settings; disabling statistical cookies only means you will not see personalized statistical content and will not affect basic browsing. This website does not deploy third-party advertising tracking tools.

IV. Third-Party Links and Third-Party Services

Pages on our website may contain links redirecting to external websites. BOPIR Digital Technology cannot control the privacy rules of these third-party websites, and third-party websites are not governed by this Privacy Policy. When you click through to a third-party website or submit personal information to a third party, please read the privacy policy of that platform; we are not responsible for the personal information processing practices of third parties.

V. Retention and Security Protection of Personal Information

Storage location: personal information collected through websites in mainland China is stored within the territory of the People’s Republic of China; if personal information is transferred overseas in the future, we will, in strict accordance with the requirements of the Personal Information Protection Law, fully inform you and obtain your separate express consent.

Retention period: information is retained only for the shortest period necessary to achieve the business purpose.

• Information generated by business inquiries: retained for a reasonable period after the inquiry is closed, or deleted upon your deletion request;
• Information relating to offline cooperation projects: after the cooperation ends, retained for the corresponding period in accordance with the statute of limitations under the Civil Code and tax, accounting and industry regulatory requirements;
• Website access logs are retained in accordance with cybersecurity regulations;
• Materials that must be retained by law are destroyed upon expiry of the retention period.

Security measures: we adopt dual technical and managerial safeguards, including encrypted data storage and transmission, tiered access control, regular security vulnerability assessments, employee privacy compliance training, security reviews of partners and data backup mechanisms, endeavoring to prevent personal information from being leaked, tampered with or lost.

Security incident response: in the unfortunate event of a personal information security incident, we will immediately carry out emergency response and remediate the risk; we will report to the regulatory authorities as required by law and, as appropriate, inform you of the incident, risk warnings and remedial measures by email or public notice.

Note: no internet environment can be absolutely secure. Please keep your personal contact information safe and do not submit sensitive materials over insecure networks.

VI. Privacy Protection for Minors

Our business serves corporate institutions, medical universities, medical laboratories, private clinic specialists and similar clients, and our website and medical hardware and software products mainly serve adult professionals; minors are not our target audience. Minors under the age of 18 must not submit any personal information to us. If the processing of minors’ information is genuinely required in a specific business scenario, the express consent of a guardian must be obtained, and the guardian has the right to request access to or deletion of the relevant information at any time. If we discover that we have collected minors’ information without a guardian’s permission, we will immediately delete the corresponding data.

VII. How You Can Manage Your Personal Information

Under the Personal Information Protection Law of the People’s Republic of China, you have the right to be informed, the right to access and copy, the right to correct and supplement, the right to delete, the right to withdraw consent and the right to restrict processing. Exercising your rights is in principle free of charge, and we will respond within the statutory time limit after verifying your identity.

Access, correction and deletion: you may contact our privacy contact email to request access to the personal information we hold about you; you may request correction if the information is inaccurate; you may request deletion of your personal information when the processing purpose has been fulfilled, you have withdrawn your consent, or you no longer require our services.

Withdrawal of consent: for processing activities carried out on the basis of your consent, such as marketing messages and statistical cookies, you may withdraw your authorization at any time; withdrawal does not affect the processing carried out before withdrawal on the basis of your lawful consent. You may unsubscribe from newsletters by email.

Identity verification: upon receiving your rights request, we will verify the identity of the applicant to prevent impersonation; for repeated requests without reasonable grounds, we reserve the right to refuse processing after providing an explanation.

As our business operates on an offline contracting model, this website does not provide account registration or login functions, and therefore there is no account cancellation process.

Channel for rights requests: send an email to our privacy contact email, stating your request and attaching identity verification materials.

VIII. Updates and Revisions to This Privacy Policy

We may revise this Privacy Policy in line with business adjustments and updates to laws and regulations.

Ordinary changes (such as wording improvements or updated contact details that do not change your substantive rights) will be published directly on this website with the effective date of the update noted;

Material changes (changes to the types of information collected, purposes of use, sharing rules, cross-border processing or user rights) will be announced in a prominent position on the website, and affected users will be notified by email where necessary.

The updated Privacy Policy will be published on this website. If you continue to visit the website after the policy is updated, you accept the revised Privacy Policy; if you do not agree with the updated policy, please stop visiting this website.

IX. Contact Us

If you have any questions about this Privacy Policy, or need to exercise rights relating to your personal information or submit a complaint, please contact us through the following channels:

Email: support@bopir.com
Mailing address: Room 701, Floor 7, Building A2, No. 56 Yangfu Road, Suzhou Industrial Park, Suzhou, Jiangsu, China

After receiving your request and completing identity verification, we will reply within 72 working hours (excluding public holidays). If you are dissatisfied with the outcome, you may also lodge a complaint with the supervisory authority responsible for personal information protection in your locality.