处理者与范围 / Controller and scope
本公司对其直接运营的网站和服务中决定处理目的与方式的个人信息承担处理者责任。第三方支付、登录、云服务或通信平台可能按其规则独立处理信息，并在收集处提供其政策。
The company is responsible where it determines the purposes and means of processing. Payment, identity, cloud or communication providers may process data independently under policies shown at collection.
收集信息 / Data collected
仅按功能收集必要信息，例如联系资料、订单与合同资料、服务内容、付款状态和订单号（不含完整银行卡数据）、账户与安全日志、设备与网络诊断、客服与投诉记录。不会仅因经营范围而收集敏感信息。
Only functionally necessary data is collected, such as contact, order and contract details, service content, payment status and order reference (not full card data), account/security logs, diagnostics and support records. Sensitive data is not collected merely because an activity appears in the business scope.
目的与依据 / Purposes and lawful bases
用于提供与履行服务、处理订单和退款、认证与安全、客服、履行法定义务及经单独同意的营销或非必要分析。中国境内处理遵循合法、正当、必要、诚信和最小范围原则；依赖同意时提供撤回方式。
Processing supports service delivery, orders/refunds, authentication/security, support, legal obligations and separately consented marketing or non-essential analytics. Processing follows lawfulness, fairness, necessity and minimisation; consent can be withdrawn where relied on.
共享与委托 / Sharing and processors
仅向履行服务所必需的支付、云、通信、审计或专业服务方提供最少信息，并通过合同和安全措施管理。不会出售个人信息。依法披露仅在有效法律依据和必要范围内进行。
Minimum necessary data may be shared with payment, cloud, communication, audit or professional providers under contracts and safeguards. Personal information is not sold. Legal disclosures require a valid basis and are limited to what is necessary.
保存与安全 / Retention and security
按合同、售后、税务、会计、争议和安全需要设置分类保存期，到期删除、匿名化或依法留存。采取访问控制、加密、备份、日志和事件响应措施，但不承诺绝对安全。
Category-specific retention follows contract, support, tax, accounting, dispute and security needs, followed by deletion, anonymisation or lawful preservation. Controls include access management, encryption, backup, logging and incident response, without an absolute-security promise.
跨境处理 / International transfers
若个人信息从中国境内向境外提供，将先判断必要性并履行告知、单独同意及适用的数据出境安全评估、标准合同或认证等要求。面向欧盟、英国或其他地区时，另按触发条件提供当地补充说明。
Before transferring personal information from China, necessity and applicable notice, separate consent, security assessment, standard-contract or certification requirements are evaluated. Regional supplements apply when EU, UK or other laws are triggered.
个人权利 / Individual rights
用户可依法请求查阅、复制、更正、补充、删除、限制或拒绝处理，解释处理规则、撤回同意和注销账户。为保护安全可能核验身份；无正当理由不收取费用。
Individuals may request access, copies, correction, completion, deletion, restriction or objection, an explanation, withdrawal of consent and account deletion as applicable. Identity may be verified for security; no unreasonable fee is charged.
未成年人 / Children
服务不面向不具备相应民事行为能力的未成年人独立购买。涉及未成年人个人信息时将取得监护人授权并采取更严格保护；发现误收将及时处置。
Services are not directed at independent purchases by children lacking contractual capacity. Verifiable guardian authorisation and heightened safeguards apply where children's data is involved; accidental collection is addressed promptly.
联系与投诉 / Contact
通过联系与投诉页提交隐私请求。我们会在适用法律期限内答复；对处理结果不满意，可向有权监管机构投诉或依法寻求救济。
Submit privacy requests through the contact and complaints page. Responses follow applicable statutory time limits; users may complain to a competent regulator or seek lawful remedies.