OVOPARK Privacy Policy 

Important Notice 

OVOPARK (hereinafter referred to as "we") highly values user privacy. We understand the importance of personal information to you and commit to protecting your personal information security and controllability in compliance with laws and regulations and industry security standards. To this end, we have formulated this "OVOPARK Privacy Policy" (hereinafter referred to as "this Policy") to help you understand how we collects, uses, transmits, stores, and discloses your personal information, as well as the rights you are entitled to. We recommend that you read this Policy carefully and fully understand it before using any OVOPARK products or services, and make appropriate choices based on your needs. 

Please note: 

1. Scope of Application: This Policy applies to all OVOPARK products and services, including services provided through OVOPARK-branded smart hardware or software, and OVOPARK features/services integrated into third-party products or software (e.g., Mini Programs, Official Accounts). 

2. Updates and Adjustments: Our products and services are diverse and constantly optimized. Specific products or services may rely on different personal information or adjust after the release of this Policy. Therefore, in addition to this Policy, we may explain the processing of personal information under certain products or services through privacy notices or supplementary statements. Please read relevant notices or statements when using such products or services. In case of inconsistency, the specific notice or statement shall prevail. 

3. Acceptance: You are not required to accept this Policy or similar documents. However, if you choose not to accept it, OVOPARK may not provide you with complete products or services or address issues in specific scenarios. Continued use of our products/services after updates to this Policy constitutes acceptance of the updated version. 

4. Third-Party Services: This Policy does not apply to third-party services. Our products/services may contain links to third-party services, which independently collect and process your personal information. Please review their privacy policies independently. 

For questions, suggestions, or complaints regarding this Policy or your personal information, contact us via email at [VIP@ovopark.com] or phone at [400-666-3626]. 

*Policy Text*

This Policy explains: 

1. How We Collect and Use Your Personal Information 

2. Use of Cookies and Similar Technologies 

3. Entrusted Processing, Sharing, Transfer, and Disclosure of Your Personal Information 

4. Protection and Retention of Your Personal Information 

5. Your Rights 

6. Third-Party Services 

7. Processing of Minors’ Personal Information 

8. Policy Updates 

9. Contact Us 

Chapter 1: How We Collect and Use Your Personal Information

I. Categories of Personal Information   Collected

When using our products and/or services, you may need to actively provide or authorize us to collect the following two types of personal information:

1.      Essential Information: Required to deliver the core functionalities of our products/services. If you refuse to provide this information, you will be unable to use our products/services normally.
2.      Additional Information: Required for enhanced functionalities or improved user experience. Refusal to provide this information will prevent access to specific features or limit their effectiveness but will not affect your use of the basic functionalities.

Key Notes:

1.      Our products/services are delivered through various platforms, and the collection scope and types of personal information may vary depending on the specific product/service you select. Please refer to the relevant product/service description for details.
2.      If the information you submit or authorize us to collect includes others’ personal information (especially that of children), you must legally obtain authorization from the relevant individuals. For children’s personal information, prior consent from their guardians is required.

We collect and use your personal information to fulfill the purposes outlined below:

(1) Account Registration, Login, and Verification

By registering a OVOPARK account, you gain access to enhanced services and experiences across OVOPARK platforms. To complete registration, you must provide:

         Mobile number

         Password

         Verification code

This information is required to comply with real-name authentication requirements under applicable laws and regulations. Failure to provide these details will result in registration failure.

Additional Notes:

1.      Optional Supplementary Information: You may voluntarily provide additional details (e.g., nickname, avatar, email, fingerprint, ID documents) to access personalized services. Unless otherwise stated, refusal to provide this information will not affect your ability to use basic account functionalities. Specific service requirements and corresponding data requests will be notified via system prompts.
2.      Third-Party Login: If you log in via third-party platforms (e.g., WeChat, Apple ID), we will retrieve publicly available information (e.g., avatar, nickname) from those platforms and link it to your OVOPARK account. For functionalities requiring additional personal information not provided by third parties, we will request it separately.
3.      Identity Verification: For services requiring a OVOPARK account, we use the information you provide to verify your identity and ensure secure, personalized service delivery.

Key Compliance:

         All data collection aligns with legal obligations and service functionality requirements.

         Third-party data integration strictly follows platform permissions and user consent.

(2) Online Transaction Services:

         Browsing & Search: Even without logging in, we collect search keywords, browsing history, and cart items to optimize your experience.

         Guest Checkout: Requires a mobile number and verification code for identity authentication and delivery coordination.

         Order Fulfillment: To ship products and provide after-sales support, you must provide recipient name, address, and contact details.

         Payment Processing: We share order details (e.g., transaction ID, amount) with third-party payment providers (e.g., Alipay, WeChat Pay) to complete transactions.

         Invoicing: Email or phone number for electronic invoices; physical address for paper invoices.

         Promotions: Participation may require identity verification (e.g., name, contact details). Prize winners’ information may be anonymized for public announcements.

(3) OVOPARK Cloud Services:

         Device Binding: Requires product serial numbers and verification codes for activation.

         Video Previews: Temporary screenshots may be collected for location identification (deleted within 24 hours).

         Remote Communication: Microphone access is needed for audio features (e.g., intercom).

         Biometric Analysis: Voice or fingerprint data may be collected for specific functionalities (e.g., recognition features).

         Usage Monitoring: Device information (e.g., MAC address, network settings) is collected for service optimization and security.

(4) Customer Support

We provide customer service (e.g., product inquiries, usage assistance, after-sales support) via phone, online systems, and other channels. To facilitate communication, resolve issues promptly, and document solutions, we may collect and retain the following under this Policy:

         Communication/call records (including account details, order information, payment data, bound product information).

         Additional information you provide to verify facts or contact details.

         For inquiries, complaints, or suggestions related to specific orders, we will use your account and order information.

(5) Reviews and Surveys

1.      Public Content:
   1. You may post reviews, wishlists, or other public content through our platforms.
   2. We may occasionally send you surveys or conduct post-service follow-ups.
2.      Feedback Collection:
   1. We record contact information, feedback, or suggestions submitted via these features to improve our products/services and enhance your experience.
3.      Risk Notice:
   1. Reviews and wishlists are publicly visible within OVOPARK software. Avoid disclosing personal information in such content to mitigate risks.

(6) Security Assurance and Operational Services

To comply with the Cybersecurity Law and other regulations, and to ensure the security of your account and system operations, we collect the following information generated during your use of our products/services:

1.      Device and Location Information:
   1. When using OVOPARK software/services, we collect device and location details based on permissions granted during installation/usage, including:Hardware model (phone/computer), OS version, browser type.
      1. International Mobile Equipment Identity (IMEI), MAC address, IP address.
      2. Software version, network connection type/method, operation logs.
   2. This data is essential for service delivery and system stability.
2.      Device Management via OVOPARK Cloud:
   1. When managing bound smart devices through OVOPARK Cloud, we automatically collect:Device type, model, firmware version, MAC address, system settings.
   2. This information ensures device security and functionality. For example, if auto-updates are enabled (default on some devices), we install upgrades to maintain compatibility between your devices and OVOPARK software.
3.      Service Performance Monitoring:
   1. To optimize service security and reliability, we log:Network logs, service usage frequency, crash/error reports.
      1. System status of abnormal devices, installation metrics, performance data.
4.      Amap SDK Integration:
   1. We integrate the Amap SDK (provided by Amap Software Co., Ltd.) for location-based features such as check-ins and site inspections.
   2. Amap Open Platform Privacy Policy: https://developers.google.com/maps/documentation?hl=zh-cn.
   3. Amap SDK Compliance: For details on the SDK’s data collection purposes and practices, visit SDK Compliance Guidelines.

Chapter 2: Use of Cookies and Similar Technologies

We or third-party service providers integrated into our products/services may use secure Cookies and related technologies (including Cookies, web beacons, and pixel tags) to collect your information, aiming to provide a more personalized user experience and services. You can manage these settings through your system preferences. Details are as follows:

1. Cookies

         Definition & Purpose: Cookies are small data files stored on your computer or mobile device when you use OVOPARK products/services. They are standard internet technologies that:

     Simplify repeated logins.

     Store browsing preferences (e.g., shopping cart items).

     Optimize ad interactions and choices.

     Verify login status and enhance account/data security.

     Each Cookie is unique and can only be read by the web server that issued it.

         Management: You can manage or delete Cookies via browser settings. For details, visit About Cookies.

     Most browsers accept Cookies by default, but you may adjust settings to block them.

     Clearing all Cookies may require manual reconfiguration of preferences for future visits to OVOPARK platforms and may affect service security.

2. Web Beacons & Pixel Tags

         Function:Web beacons are transparent images embedded in websites or emails.

     Pixel tags in emails allow us to track whether an email is opened. For example, emails may contain links to our website; clicking these links helps us understand your preferences and improve customer service.

     To opt out of such tracking, unsubscribe from our mailing list.

3. Commitment to Responsible Use

         We use information collected via Cookies and similar technologies solely to enhance service quality and user experience.

         Third-party partners integrated into our products/services are contractually required to comply with this Policy’s standards for Cookie and related technology usage.

Chapter 3: Entrusted Processing, Sharing, Transfer, and Disclosure of Your Personal Information

I. Entrusted Processing

Entrusted processing refers to OVOPARK, as the controller of personal information, delegating the processing of user information to third-party companies or institutions (including affiliates or external partners) with specialized technical capabilities within legally authorized scopes. This typically applies to services such as SMS/email delivery and intelligent data analysis, aiming to enhance efficiency and reduce costs. Through written agreements and audits, we mandate entrusted parties to:

         Maintain strict confidentiality and implement security measures.

         Prohibit unauthorized use of your information.

         Immediately delete your information upon termination of the delegation.

II. Sharing

Sharing refers to OVOPARK providing personal information to other controllers, where both parties independently control the data. We commit to sharing your information only for lawful, legitimate, necessary, specific, and explicit purposes, limited to what is essential for those purposes. Third parties are contractually required to adopt security measures no less stringent than those outlined in this Policy.

Exceptions where sharing may occur without consent:

1.      With your or your guardian’s explicit consent.
2.      Legal obligations: Disclosure required by judicial or administrative authorities under statutory procedures.
3.      Public or legitimate interests: To protect your rights, OVOPARK’s interests, users, or public welfare.
4.      Affiliate sharing: Sharing with associated companies under this Policy’s scope.
5.      Service agreements: Sharing with partners to fulfill specific services under contractual terms.
6.      Other scenarios permitted by the Cybersecurity Law and applicable regulations.

Categories of Third Parties We Share With:

1.      Operational partners: Logistics providers, customer service vendors, installers, or authorized repairers for order fulfillment and service support.
2.      Third-party service providers: Ecosystem partners, developers, or vendors offering complementary products/services through our platform.

Note: Third parties may have independent privacy policies. We advise reviewing their terms before engagement.

III. Transfer

Transfer refers to the transfer of personal information control from OVOPARK to another entity. We will not transfer your information except in the following cases:

1.      With your explicit consent.
2.      Corporate restructuring: Mergers, acquisitions, or bankruptcy liquidation. In such cases, the successor entity must continue complying with this Policy and seek renewed consent for any changes in processing purposes.

IV. Public Disclosure

We may disclose your information publicly under the following circumstances:

1.      With your explicit consent.
2.      Legal requirements: To comply with laws, legal proceedings, or government orders, or to protect the safety of OVOPARK users, the public, or critical assets.

V. Exceptions to Prior Consent for Sharing, Transfer, or Disclosure

Under applicable laws and national standards (e.g., Cybersecurity Law), your consent is not required for sharing, transfer, or disclosure in the following cases:

1.      To fulfill OVOPARK’s legal obligations.
2.      Related to national security, defense, or public safety.
3.      Involving public health or significant public interests.
4.      For crime investigation, prosecution, trial, or enforcement.
5.      To protect life, property, or critical rights where obtaining consent is impractical.
6.      Information publicly disclosed by you.
7.      Information obtained from lawful public sources (e.g., government releases, news reports).

Chapter 4: Protection and Retention of Your Personal Information

I. Protection and Security Measures

1.      Security Measures: We dedicate reasonable efforts to protect your personal information through a specialized data security department. To prevent unauthorized access, copying, modification, transmission, loss, destruction, or misuse of your information, we have implemented and will continue to enforce the following measures:
   1. 1) Encryption in Transit: Our network services employ encryption technologies such as HTTPS to secure data transmission.
   2. 2) Encryption at Rest: Personal information is encrypted and isolated using advanced storage technologies.
   3. 3) Data Anonymization: During usage (e.g., display or analysis), we apply anonymization techniques like content replacement and encryption to enhance security.
   4. 4) Access Controls: Strict data access policies, multi-factor authentication, and role-based permissions ensure only authorized personnel can access personal information. All authorized personnel are bound by confidentiality obligations.
   5. 5) Audits: Regular data and technical security audits, including log and behavioral audits, are conducted to monitor compliance.
2.      Additional Safeguards:
   1. 1) Data Governance: Classification, security management protocols, and development standards regulate the storage and use of personal information.
   2. 2) Dedicated Teams: A specialized information security department, emergency response team, and data protection officers oversee compliance and incident management.
   3. 3) Training: Regular security and privacy training programs enhance employee awareness of data protection.
3.      Protection of Children’s Information:
   1. Access to children’s personal information is strictly limited to authorized personnel under the principle of minimal necessary access.
   2. Technical controls log and monitor staff activities involving children’s data to prevent unauthorized copying or downloads.
   3. An emergency response plan for children’s data breaches is in place, with regular drills to ensure preparedness.
4.      Certification: OVOPARK complies with the ISO/IEC 27001 international standard for information security management and holds relevant certifications.
5.      User Responsibilities: Despite our efforts, the open nature of the internet means absolute security cannot be guaranteed. We strongly advise you to:
   1. Use complex passwords and update them regularly.
   2. Avoid sharing account credentials.
   3. Exercise caution when sharing information.
   4. Note that OVOPARK assumes limited liability for leaks caused by your own actions (e.g., voluntary sharing).
6.      Incident Response: In the event of unforeseen risks (e.g., breaches due to force majeure), we will:
   1. Act promptly to mitigate impacts.
   2. Notify you of the cause, our actions, and recommended protective measures.
7.      Post-Breach Obligations: For significant security incidents, we will:
   1. Inform affected individuals of the incident’s scope, potential impacts, remediation steps, and preventive advice via email, mail, phone, or public notices.
   2. Report incidents involving children’s information to their guardians and relevant authorities as required by law.

II. Retention of Personal Information

1.      Storage Location: All personal information collected within China is stored domestically. Cross-border transfers occur only when legally mandated or with your explicit consent.
2.      Retention Period:
   1. Your information is retained while you use our products/services.
   2. After account deletion or data removal, specific information is retained under laws like the E-Commerce Law and Cybersecurity Law (e.g., transaction records are kept for at least three years post-transaction).
   3. Upon expiration, data is promptly deleted or anonymized.

Chapter 5: Your Rights

I. Access or Correct Personal Information

You have the right to access your personal information, except where restricted by laws or regulations. To exercise this right, you may:

1.      Via OVOPARK Official Website:Log in to view or update your registered mobile number and password.
   1. In the OVOPARK Cloud Video Client, navigate to the "My" section to access and modify profile details (e.g., avatar, nickname, mobile number, password, email) and view login devices or operation logs. Other OVOPARK software products allow similar adjustments under the "My" page.
2.      Online Transaction Information:Use the OVOPARK App, Wanji Official Account, or Mini Program to access or update transaction details, including delivery addresses and order history. You may add, modify, or delete delivery address information (recipient name, address, phone number, or email) and review all order records.
3.      OVOPARK Cloud Service Usage:In the OVOPARK Cloud Video Client, navigate to the "OVOPARK" section to view bound devices. Access device-specific settings (e.g., model, serial number, user guide, network configuration, value-added service usage, and sharing status).
4.      Information Unavailable for Access/Correction:Certain information collected for user experience enhancement or transaction security (e.g., device data, operational necessities) cannot be directly accessed or corrected. However, you may request deletion or anonymization by contacting us.

II. Delete Personal Information

You may request deletion of your personal information under the following circumstances:

1.      Our processing of your information violates laws or regulations.
2.      We collected or used your information without your consent.
3.      Our processing breaches agreements with you.
4.      You deactivate your OVOPARK account.
5.      We terminate our services or operations.

III. Modify or Withdraw Consent

You may adjust or revoke permissions by:

         Deleting specific information.

         Disabling certain services/features.

         Modifying privacy or app permission settings on OVOPARK platforms.

         Deactivating your account to fully withdraw consent.

Note: Revoking consent may prevent us from providing related services, but does not affect prior lawful processing based on your authorization.

IV. Account Deletion

You may deactivate your account at any time. Upon deletion:

         We will cease providing products/services and delete your personal information, except as required by laws or regulations.

V. Restricting Automated Decision-Making

Currently, OVOPARK does not employ fully automated systems (e.g., algorithms) to make decisions affecting your rights. If such systems are introduced, we will notify you. You may request explanations or challenge decisions that significantly impact your rights, provided this does not infringe on OVOPARK’s trade secrets, user rights, or public interests.

VI. Requesting Data Copies or Submitting Inquiries

For personal data copies, requests, or other rights-related inquiries, contact us via [VIP@ovopark.com] or other methods specified in this Policy. To ensure security:

         We may require written proof of identity.

         Responses will be provided within 15 working days after verification.

Fees:

         No fees for reasonable requests.

         Repeated or excessive requests may incur costs.

         We reserve the right to reject requests that are:Repetitive, technically infeasible, or impractical (e.g., involving backup tapes).

     Risk others’ rights or involve trade secrets.

Exceptions: We may decline requests in cases involving:

1.      Legal obligations of OVOPARK.
2.      National security, defense, or public safety.
3.      Public health or significant public interests.
4.      Criminal investigations, litigation, or judicial proceedings.
5.      Evidence of malicious intent or abuse of rights.
6.      Protection of life/property where obtaining consent is impractical.
7.      Severe harm to others’ rights if the request is fulfilled.
8.      Trade secrets.

Chapter 6: Third-Party Services

Our products and/or services may integrate or link to websites or other services provided by third parties. This includes:

1.      Sharing Features: You may use the "Share" button to share certain information to third-party services. These features may collect your information (including log data) and may place COOKIES on your device to ensure proper functionality.
2.      Third-Party Links: We may provide links to third-party services or websites through advertisements or other means within our services.
3.      Third-Party Integrations: To fulfill the purposes stated in this Policy, we may integrate SDKs (Software Development Kits) or similar applications provided by third-party service providers. We may share specific information collected under this Policy with these third parties to enhance customer service and user experience. The third-party service providers we currently integrate include, but are not limited to, the following types:(1) Advertising Services: Ad display, ad data monitoring.
   1. (2) Push Notifications: Device manufacturer push notifications, event reminders, personalized content recommendations.
   2. (3) Payment Services: Order payment, transaction verification, settlement, payment data aggregation.
   3. (4) Device Permissions: Collecting device location, device information, and log data (with your consent).
   4. (5) Authorization Services: Third-party account login, content sharing to external platforms.
   5. (6) Functional Support: Voice recognition, device wake-up features.
   6. (7) Performance Optimization: Hardware network configuration, server cost reduction, hotfix functionality.
   7. (8) Security Services: Network monitoring, domain resolution (HTTPDNS), anti-hijacking, anti-spam and anti-fraud, encryption/decryption.

We will only share your information for legitimate, necessary, and specific purposes. Third-party service providers with whom we share information are contractually obligated to maintain confidentiality and implement appropriate security measures.

Third-party services are operated by their respective providers. Your use of these services or provision of information to them is governed by their terms of service and privacy policies (not this Policy). For transparency, we provide a list of integrated third-party SDKs, along with their privacy policy links and permission descriptions, at 第三方SDK信息公示（万店掌）. This resource helps you better understand how your personal information is used and protected.

Chapter 7: Processing of Minors’ Personal Information

1. Protection of Minors’ Information: 

We attach great importance to the protection of minors’ personal information. If you are a Child (under the age of 14) or a minor under the age of 18, we require that your parent or legal guardian carefully read this Privacy Policy and consent to your use of our services or provision of your information under their supervision and approval. 

2. Use and Disclosure of Minors’ Information: 

For minors’ personal information collected with parental or legal guardian consent, we will only use or publicly disclose such information where permitted by law, explicitly authorized by the parent/legal guardian, or strictly necessary to protect the minor’s safety or well-being. 

3. Reporting Concerns: 

If a parent or legal guardian has reason to believe that a minor has submitted personal information to us without prior consent, or has questions regarding our protection of children’s personal information, please contact us using the methods listed at the beginning of this Policy (e.g., email: [VIP@ovopark.com] or phone: [400-666-3626]). 

Chapter 8: Policy Updates

      We may periodically amend this Policy. Without your explicit consent, we will not reduce the rights you are entitled to under this Policy or proactively adjust any personal information settings you have configured. Any amendments to this Policy will be published on this page.

For significant changes, we will notify you through push notifications, pop-up alerts, emails, or other appropriate means.

Significant changes under this Policy include but are not limited to:

1.      Material changes to our service model, such as adjustments to the purposes of processing Personal Information, the types of Personal Information processed, or the methods of using Personal Information.
2.      Major changes to our ownership structure or organizational framework, such as ownership transfers due to business restructuring, bankruptcy, mergers, or acquisitions.
3.      Changes to the primary entities with whom Personal Information is shared, transferred, or publicly disclosed.
4.      Material changes to your rights or the methods for exercising your rights regarding Personal Information processing.
5.      Changes to the responsible department, contact details, or complaint channels for Personal Information security.
6.      Situations where a Personal Information Security Impact Assessment Report indicates high risks.

*Chapter 9: Contact Us*

Email: [VIP@ovopark.com] 

Phone: [400-666-3626] 

Address: Building 9, Shoutaohu Road, Wuzhong District, Suzhou, Jiangsu, China 

For unresolved issues, contact local regulatory authorities. 

*Appendix*

I. Headings in this Policy are for convenience of reading only and shall not affect the interpretation of any clause. 

II. Definitions of terms and concepts referenced in this Policy: 

1. OVOPARK: Refers to OVOPARK (Suzhou) Technology Co., Ltd. and its affiliated companies (including but not limited to OVOPARK (Suzhou) Technology Co., Ltd., Nanjing OVOPARK Network Technology Co., Ltd., Shanghai Jidian Network Technology Co., Ltd., and other associated entities) that operate the "OVOPARK" brand and related brands, and are engaged in the design, research, development, manufacturing, and sales of related products and services. 

2. OVOPARK Software: Refers to the systems and software that deliver OVOPARK services, including the OVOPARK official website ([opretail.com](http://www.opretail.com/)), the Op Retail App,  and other domains, systems, or software products introduced by OVOPARK as needed for business operations. 

3. Personal Information: Information recorded electronically or by other means that can identify a specific natural person either alone or in combination with other information, or reflect the activities of a specific natural person. Personal Information under this Policy includes: 

   - Basic information (e.g., name, date of birth, gender, address, personal phone number, email address); 

   - Identity information (e.g., ID card, military officer ID, passport, driver’s license, or related identification documents); 

   - Location information; 

   - Online identifiers (e.g., system account, IP address, email address, and associated passwords or security codes); 

   - Internet activity records (e.g., search history, software usage logs, clickstream data); 

   - Device information (e.g., hardware model, device MAC address, operating system type, unique device identifiers such as IMEI/Android ID/IDFA/OPENUDID/GUID/IMSI, SIM card IMSI information), and video content containing personal information. 

4. Sensitive Personal Information: Personal Information that, if leaked or altered, may adversely affect the individual (e.g., harm to reputation, physical/mental health, or discriminatory treatment). Sensitive Personal Information under this Policy includes: 

   - Identity information (e.g., ID card, military officer ID, passport, driver’s license, household registration); 

   - Online identifiers (e.g., username, nickname, email address, and associated passwords); 

   - Other information (e.g., personal phone number, mobile number, web browsing history, precise location data); 

   - Related identification documents; 

   - Video content containing Sensitive Personal Information. 

   Sensitive Personal Information mentioned in this Policy will be highlighted in bold and italicized text for your attention. 

5. Child: A minor under the age of 14. 

6. De-identification: The technical process of modifying Personal Information so that it cannot identify a specific individual without the use of additional information. 

7. Anonymization: The technical process of modifying Personal Information so that the individual cannot be identified, and the processed information cannot be restored to its original state. Anonymized information is no longer considered Personal Information. 

8. Deletion: The act of removing Personal Information from systems involved in daily business operations, rendering it irretrievable or inaccessible. 

9. SDK: Short for "Software Development Kit," a collection of development tools (e.g., software packages, frameworks, hardware platforms, operating systems) used to build applications.