Introduction
Welcome to the Privacy Policy of FaShen. The website you are reading, together with the computer systems design and computer integrated systems design services offered through it, is developed and operated by the developer FaShen on behalf of our company, Nanchong Fa Shen Zhen E-commerce Co., Ltd. This policy explains what personal information we collect, why we collect it, how we use it, and the choices available to you.
Our company is registered in the People Republic of China, and our principal place of business is at Rm 14, 2/F, Building 1, No. 376 Jinyuling Road, Shunqing District, Nanchong - 637000, China (CN). You can contact us by email at connect@fashen.lol or by telephone at +15759406805. Throughout this policy, the words FaShen, we, our, and us refer to Nanchong Fa Shen Zhen E-commerce Co., Ltd. and the developer FaShen.
Please read this policy carefully before you use our website or our services. By using the website or by engaging us to provide services, you acknowledge that you have read and understood the practices described in this policy. If you do not agree with any part of this policy, please do not use the website or provide us with your personal information.
Scope of this policy
This Privacy Policy applies to the website located at https://www.fashen.lol and to all services, tools, communications, and proposals provided under the FaShen brand. It covers personal information we collect when you visit our website, when you contact us by email or telephone, when you submit an enquiry or proposal request, and when you become a client of our company.
This policy does not apply to third-party websites, applications, or services that may be linked to or from our own platform. Where those third parties operate independently, their own privacy practices govern the handling of your data. We encourage you to review the privacy policies of any third-party service before you share personal information with it. A link to an external service does not mean that we accept responsibility for the way that service handles your information.
Some of our clients operate in regulated industries with their own privacy obligations. Where we process information on behalf of a client, the client is the controller and we are a processor. In those situations, the agreement we sign with the client, together with the client own privacy commitments, will govern how the information may be used. If you have questions about how a client of ours uses your data, please contact that client directly.
Information you provide
We collect information that you choose to share with us directly. This includes your name, your email address, your telephone number, your company name, your job title, and any other details you include in an enquiry form, an email, a telephone call, or a written message. When you ask us to prepare a proposal, we may also collect billing details, project requirements, preferred timelines, and technical information about your existing systems that is necessary for us to assess your needs.
We collect this information when you fill in a form on our website, write to connect@fashen.lol, telephone +15759406805, or correspond with us through any other channel we make available. We may also collect information that you provide during meetings, discovery workshops, and project reviews, including notes, recordings taken with your consent, and documents you share with our engineering team.
The information you provide is used to respond to your enquiry, to prepare and deliver proposals, to provide the services you have requested, to maintain our business relationship, and to support our accounting and legal obligations. We keep this information accurate and complete, and we ask that you inform us promptly if your contact details change so that we can keep our records up to date.
Information collected automatically
When you visit our website, we automatically receive standard technical data. This includes your internet protocol address, browser type and version, operating system, screen resolution, pages visited, the date and time of each visit, the duration of your visit, and the referring link that brought you to the site. We collect this information through server logs and similar technologies so that we can understand how the site is used and keep it secure.
Automatic data is generally processed in an aggregated form, which means that it does not directly identify you as an individual. Where it is possible to identify a visitor, we limit access to that data and treat it in accordance with this policy. We use technical information to improve site performance, to diagnose faults, to defend against malicious traffic, and to make decisions about how to structure our content.
We do not build advertising profiles of individual visitors, and we do not use automatic data to make automated decisions that significantly affect you. The technical data we collect is proportionate to the legitimate purpose of operating a secure and reliable website, and it is retained only for as long as it is useful for that purpose.
Information from third parties
In some cases we receive information about you from other sources. For example, a colleague may refer your company to us, or a business partner may pass on your contact details with your permission. We may also receive limited information from public business directories, professional networks, or industry events when we evaluate a prospective client or prepare for a meeting.
In every case, we only use third-party information for the purpose for which it was shared, and we take reasonable steps to confirm that the person who shared the information was entitled to do so. If you believe that information about you has been shared with us without your consent, please contact us using the details in the final section of this policy, and we will correct or remove the information as appropriate.
We do not buy personal data from brokers, and we do not trade in lists of contact details. When we do receive information from a third party, we apply the same standards of protection and retention that we apply to information you provide to us directly, and we record the source of the information so that our processing is transparent and auditable.
How we use your information
We use the information we collect for clearly defined purposes. We respond to your enquiries, prepare proposals, deliver the services you have requested, manage our contracts, and invoice you for work performed. We also use your information to communicate important updates about the services we provide, such as maintenance windows, security notices, and changes to our terms.
We use technical and usage information to maintain the security and integrity of our systems, to improve the performance of our website, and to support our internal planning. With your consent, we may send occasional news about our capabilities, industry developments, and opportunities to work together. You can withdraw that consent at any time by writing to us or by using the unsubscribe link in any message we send.
We do not use your information for purposes that are incompatible with those described in this policy. If we intend to use your information for a new purpose, we will review the applicable legal basis and, where necessary, seek your consent before we begin. We never sell your personal data to anyone, and we do not share it with advertising networks for the purpose of behavioural advertising.
Legal bases for processing
We process personal information on lawful grounds that are appropriate to the activity in question. We rely on the performance of a contract when we deliver services that you have engaged us to provide, when we manage our client agreements, and when we invoice you for work completed. In these cases, the processing is necessary to fulfil our contractual obligations to you.
We rely on consent where we send optional communications, such as our occasional newsletter, and where we process special categories of data that you choose to share with us. We rely on legitimate interests for activities such as keeping our systems secure, improving our website, managing our business relationships, and exercising our legal rights. These interests are balanced against your rights and freedoms, and we do not process data where your interests override ours.
We also process data to comply with legal obligations, including accounting, taxation, and anti-fraud requirements. Where we rely on a specific legal basis, we document it, and we ensure that the processing is fair, transparent, and limited to what is necessary. If you would like to know the legal basis applied to any particular processing activity, please contact us and we will explain it to you.
How we share information
We do not sell your personal information, and we do not rent it to any third party. We share data only when it is necessary to deliver our services or to comply with the law. This includes sharing with our own engineering and support teams, sub-contractors who help us build and operate systems, payment processors who handle billing, hosting providers who store data on our behalf, and professional advisers such as auditors and lawyers.
When we share data, we require the recipient to protect it with appropriate safeguards and to use it only for the agreed purpose. Our agreements with sub-contractors include data protection obligations, confidentiality duties, and requirements to return or delete data when the engagement ends. We review the providers we rely on so that our partners meet a standard consistent with our own.
We may also disclose information where required by a court, a regulator, or another legal authority with the power to demand it. Any such disclosure is limited to what the law demands, and we take reasonable steps to confirm the authority of the request before we respond. Where permitted, we will notify you of a request that affects your personal data.
Data retention
We keep personal information only for as long as it is needed for the purposes described in this policy. Enquiry records are retained for a reasonable period so that we can respond to follow-up questions and, if you choose to engage us later, avoid asking you to repeat information you have already given us. When an enquiry concludes without an engagement, we delete the associated records in a timely manner.
Client records, including contracts, invoices, and project documentation, are kept for the periods required by accounting and tax regulations. Technical logs and analytics data are retained for a limited period and then deleted or aggregated so that they no longer identify individual visitors. Data we process on behalf of clients is retained according to the terms of our agreement with each client.
When information is no longer needed, we delete it securely or remove identifying details so that it becomes anonymous. Our retention schedules are reviewed regularly to ensure that they remain proportionate and lawful, and we update them whenever our obligations change. If you would like details of the retention period that applies to a particular category of data, please contact us.
Data security
We protect personal information with technical, organisational, and administrative controls. Access to data is limited to people who need it to perform their duties, and each member of our team is bound by confidentiality obligations. Our systems use encryption in transit, strong access management, and routine security monitoring to detect and respond to unusual activity.
We require our staff and our partners to follow clear security practices, and we provide training as part of our normal operations. We perform periodic reviews of our controls and respond promptly to any weakness we identify. Where a new service or tool is introduced, we assess its security before we allow it to handle personal data.
No method of transmission or storage is completely secure, and we cannot guarantee absolute protection against every possible threat. However, we work continuously to keep our controls aligned with current best practice for a business of our size. If a security incident affects your data, we will notify you and any relevant authority in line with applicable law and without undue delay.
Your privacy rights
Depending on where you live, you may have rights over your personal information. These include the right to access a copy of the data we hold about you, the right to correct inaccurate information, and the right to request deletion of data that we no longer need. You may also have the right to restrict processing, to object to processing based on legitimate interests, and to receive your data in a portable, machine-readable format.
To exercise any of these rights, contact us using the details in the final section of this policy. We will verify your identity, confirm that you are entitled to make the request, and respond within the timeframes required by law. Where a request is complex or arrives in a large volume, we will keep you informed of our progress and any delay.
You also have the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with your local data protection authority if you are not satisfied with our response. We will never penalise you for exercising your rights, and we will treat every request with the same courtesy and care. Helping you understand how your data is handled is part of our service.
Privacy for children
Our website and our services are directed at businesses and professional adults. We do not knowingly collect personal information from children, and we do not design our services to attract young users. The systems we build are business-to-business in nature and are not intended for, or marketed to, children.
If you believe that a child has provided information to us through our website or through any other channel, please contact us promptly using the details in the final section of this policy. We will investigate the matter and delete the information from our records as soon as we reasonably can.
We take the privacy of young people seriously. If a parent, guardian, or educator raises a concern about a child and our services, we will act quickly to address it. Our commitment is to keep the platform free of features that would encourage children to share personal information with us.
International data transfers
FaShen serves clients across the world, and our office is located in Nanchong, China. When you share information with us, it may be processed by our team and by our partners in different countries. This means that your information may be stored or handled outside the country where you are located.
We take steps to ensure that any transfer of personal data is protected by appropriate safeguards. Where we engage partners in other jurisdictions, we include data protection terms in our agreements, verify that adequate protections are in place, and review those arrangements on a regular basis. We aim to give every transfer the same level of care that we give to data processed in our own office.
If you have questions about how a specific transfer is protected, contact us and we will provide relevant information about the safeguards that apply. Where the law requires us to adopt additional measures, such as standard contractual terms or supplementary assessments, we will do so before any transfer takes place.
Third-party links and services
Our website and our communications may contain links to external websites and services operated by third parties. We do not control those destinations, and this Privacy Policy does not apply to them. We encourage you to review the privacy practices of any external service before you share personal information with it.
A link to a third party does not imply that we endorse its content or its privacy practices. When you leave our website, your information is handled according to the policies of the destination site, and those policies may differ from our own. We are not responsible for the practices of external providers, even where we refer to them as helpful resources.
Where a third-party service is embedded in our website, such as a mapping or analytics component, the provider may collect information about your device and your visit. We choose these providers with care and configure them to minimise data collection, but we encourage you to review their privacy policies if you would like the full picture of how they operate.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, our operations, or the law. When we make a material change, we will revise the effective date shown at the top of this page and make the updated policy available on this website. Significant changes that affect your rights will be highlighted where possible.
We encourage you to review this page periodically so that you stay informed about how we protect your information. Where we have your contact details, we may also notify you directly of changes that are particularly important, such as a new category of data we collect or a new way we share information.
Your continued use of the website after a change takes effect means that you accept the updated policy. If you do not agree with a change, you may stop using the website and ask us to close any account or engagement you have with us. The date at the top of this page will always tell you when the current version was last reviewed.
Contact information
If you have any question about this Privacy Policy, about how we handle personal information, or about the rights described above, please contact us. Our contact person is Jing Yixin. You can write to us by email at connect@fashen.lol or call us by telephone at +15759406805.
You may also write to us by post at our registered office: Nanchong Fa Shen Zhen E-commerce Co., Ltd., Rm 14, 2/F, Building 1, No. 376 Jinyuling Road, Shunqing District, Nanchong - 637000, China (CN).
We will respond to privacy requests within the timeframes required by applicable law and will do our best to resolve any concern you raise. If you believe that your information has been handled in a way that does not respect your rights, please give us the opportunity to put it right. We take every privacy request seriously and treat each one with care.