1. Introduction
Beijing Hengda Zhonghe Human Resources Management Co., Ltd. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at hengdaz.com (the "Site") or use our mobile applications available on Google Play Store and Apple App Store (the "Apps").
Please read this Privacy Policy carefully. By accessing or using our Site or Apps, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use the Apps.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account on our Apps
- Subscribe to our newsletter
- Fill out a contact form
- Request a demo
- Communicate with us via email or phone
- Use our HR management services
This information may include:
- Name
- Email address
- Phone number
- Company name
- Job title
- Mailing address
- Payment information
- Employee data (when using our HR services)
2.2 Automatically Collected Information
When you access our Site or use our Apps, we may automatically collect certain information, including:
- IP address
- Device type and identifier
- Operating system
- Browser type and version
- Referring website or source
- Pages visited on our Site
- Features accessed in our Apps
- Date and time of access
- Location data (with your permission)
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain our Site and Apps
- To deliver HR management services
- To process payroll and compensation calculations
- To manage employee records and documents
- To send you service-related communications
- To respond to your inquiries and support requests
- To send you promotional communications (with your consent)
- To improve our services and develop new features
- To analyze usage patterns and optimize user experience
- To detect, prevent, and address technical issues
- To comply with legal obligations
4. Mobile Application Advertising and Ad Networks
4.1 Advertising Platforms
Our mobile applications may display advertisements from third-party advertising networks. We may integrate with the following advertising platforms and networks:
- Google AdMob - Google's mobile advertising platform
- Facebook Audience Network - Facebook's mobile ad network
- Unity Ads - Unity Technologies' ad platform
- AppLovin - Mobile advertising and monetization platform
- IronSource - Mobile ad network and mediation platform
- Chartboost - Mobile game advertising platform
- Vungle - In-app video advertising platform
- AdColony - Mobile video advertising platform
- MoPub (Twitter) - Twitter's mobile ad platform
- Mintegral - Global mobile advertising platform
- Pangle - ByteDance's ad platform
- Tapjoy - Mobile ad and monetization platform
- Liftoff - Mobile app advertising platform
- Moloco - Machine learning-powered ad platform
- Digital Turbine - Mobile device optimization and advertising
- Ogury - Privacy-focused mobile advertising
- Adjoe - Mobile advertising solutions
- HyprMX - Mobile ad network
- Loopme - Mobile video advertising platform
- Smaato - Global mobile advertising platform
- OpenX - Programmatic advertising exchange
- InMobi - Mobile advertising and monetization
- Mobvista - Global mobile marketing platform
- Zynga - Mobile gaming advertising network
- 不平 - Additional advertising platforms as may be integrated from time to time
4.2 Advertisement Types
Our mobile applications may display the following types of advertisements:
- Splash Ads (Opening Ads): Full-screen advertisements that appear when you first open or switch back to the application
- Rewarded Video Ads: Video advertisements that users can watch voluntarily in exchange for in-app rewards, such as virtual currency, premium features, or additional content
- Interstitial Ads: Full-screen advertisements that appear at natural transition points in the application flow, such as between levels or after completing an action
- Banner Ads: Rectangular advertisements displayed at the top or bottom of the screen, continuously visible while using certain features of the application
- Native Ads: Advertisements designed to match the visual style and format of the application content
- Playable Ads: Interactive advertisements that allow users to try a brief demo of an advertised product
4.3 Advertising Data Collection
Advertising networks may collect and use data for the following purposes:
- Delivering targeted advertisements based on your interests and preferences
- Measuring the effectiveness of advertisements
- Attributing conversions and tracking advertising performance
- Building advertising profiles for delivering personalized content
- Preventing repetitive advertisements
- Aggregated reporting for advertisers
These advertising networks may use cookies, device identifiers, location data, and other tracking technologies to collect this information. Please refer to the respective advertising platform's privacy policy for more details.
5. Google Play Store Compliance
Our mobile applications available on Google Play Store comply with Google's policies and requirements, including:
- Google Play Developer Program Policies: We adhere to all Google Play policies regarding content, user privacy, and advertising practices
- Data Safety Section: Our applications provide accurate and complete information in the Google Play Data Safety section
- Family Policies: If our applications are directed to children or collect data from children, we comply with Google's Family policies and applicable laws
- Advertising ID: We use the Android Advertising ID in compliance with Google's policies, including the limitation on combining the Advertising ID with persistent device identifiers without explicit user consent
- Privacy Policy: A link to this Privacy Policy is provided in our Google Play Store listing
6. Apple App Store Compliance
Our mobile applications available on the Apple App Store comply with Apple's guidelines and requirements, including:
- App Store Review Guidelines: We adhere to all Apple App Store Review Guidelines regarding privacy, security, and advertising
- Privacy Nutrition Labels: We provide accurate privacy nutrition labels in our App Store listing describing data collection and usage
- App Tracking Transparency (ATT): If our applications track user activity across other companies' apps and websites, we request appropriate permissions through Apple's ATT framework
- Identifier for Advertisers (IDFA): Our use of the Identifier for Advertisers complies with Apple's policies and applicable regulations
- Children's Privacy: If our applications are directed to children under 13 (or 16 in certain jurisdictions), we comply with Apple's requirements for children's applications and applicable laws including COPPA
7. European Union - General Data Protection Regulation (GDPR) Compliance
If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). This section explains our data processing practices for EEA users.
7.1 Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide our services to you under our Terms of Service
- Legitimate Interests: Processing for our legitimate business interests, such as improving our services, fraud prevention, and direct marketing (where applicable)
- Consent: Processing based on your explicit consent, which you may withdraw at any time
- Legal Compliance: Processing necessary to comply with our legal obligations
7.2 Data Subject Rights
If you are an EEA resident, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate personal data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of processing of your personal data
- Right to Data Portability: Receive your personal data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge Complaint: File a complaint with a supervisory authority
To exercise your rights, please contact us at privacy@hengdaz.com. We will respond to your request within one month.
7.3 International Data Transfers
If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules
- EU-U.S. Data Privacy Framework (where applicable)
8. California Consumer Privacy Act (CCPA) Compliance
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.
8.1 Your California Rights
- Right to Know: Request disclosure of personal information collected, used, disclosed, or sold about you
- Right to Delete: Request deletion of personal information collected about you, subject to certain exceptions
- Right to Opt-Out: Opt-out of the sale of your personal information (if applicable)
- Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
8.2 Categories of Information Collected
In the past 12 months, we may have collected the following categories of personal information:
- Identifiers (name, email, phone, IP address, device identifiers)
- Commercial information (services purchased, transaction history)
- Internet or electronic network activity (browsing history, app usage)
- Geolocation data (with your permission)
- Professional or employment-related information
8.3 California "Do Not Sell My Personal Information" Rights
California residents have the right to direct us not to sell their personal information to third parties. While we do not sell personal information in the traditional sense, we may share information with advertising partners as described in Section 4. To opt-out of such sharing, please contact us at privacy@hengdaz.com.
9. Children's Online Privacy Protection Act (COPPA) Compliance
We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar international laws protecting children's privacy.
9.1 Age Restrictions
- Our services are not directed to children under 13 years of age
- We do not knowingly collect personal information from children under 13
- If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly
- In jurisdictions where the age threshold is different (e.g., 16 in some countries), we will comply with applicable local laws
9.2 Parental Controls
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@hengdaz.com. We will take appropriate action to remove the information from our systems.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Regular security assessments and penetration testing
- Access controls and authentication measures
- Employee training on data protection
- Incident response procedures
- Compliance with ISO 27001 information security standards
11. Third-Party Service Providers
We may share your information with third-party service providers who assist us in operating our Site, Apps, and providing services, including:
- Cloud hosting and infrastructure providers
- Payment processors
- Customer support platforms
- Analytics services
- Email marketing platforms
- Advertising and ad mediation networks (as listed in Section 4)
- Customer relationship management systems
These service providers are contractually bound to use your information only to provide services to us and in accordance with this Privacy Policy.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Privacy Shield certifications (for transfers from EU/Switzerland to the US)
- EU-U.S. Data Privacy Framework (where applicable)
13. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you
- Whether there is a legal obligation to which we are subject
- Whether retention is advisable in light of our legal position
14. Your Choices and Controls
You have certain choices regarding the collection and use of your information:
- Account Information: You may update, correct, or delete your account information at any time through the App settings or by contacting us
- Marketing Communications: You may opt-out of receiving promotional emails by clicking the unsubscribe link or contacting us
- Push Notifications: You may manage push notification preferences in your device settings
- Location Data: You may revoke location permissions in your device settings
- Ad Tracking: You may opt-out of interest-based advertising through your device settings or platform-specific settings (e.g., Google's Ads Settings, Apple's Advertising Privacy settings)
15. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use information about you. For more details about our use of cookies, please refer to our Cookie Policy.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice, such as through email or a notice on our Site or Apps.
We encourage you to review this Privacy Policy periodically for any changes.
17. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
- Company: Beijing Hengda Zhonghe Human Resources Management Co., Ltd.
- Address: Building 10, East Dashiling Village, Mujiayu Town, Miyun District, Beijing, China
- Email: privacy@hengdaz.com
- Website: hengdaz.com
18. Additional Information for Specific Jurisdictions
18.1 United Kingdom (UK GDPR)
For users in the United Kingdom, references to GDPR include the UK General Data Protection Regulation. The Information Commissioner's Office (ICO) is the relevant supervisory authority.
18.2 Canada (PIPEDA)
For users in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You may contact the Office of the Privacy Commissioner of Canada if you have concerns.
18.3 Australia (Privacy Act 1988)
For users in Australia, we comply with the Australian Privacy Principles under the Privacy Act 1988. You may contact the Office of the Australian Information Commissioner.
18.4 Brazil (LGPD)
For users in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD). You may contact the Autoridade Nacional de Proteção de Dados (ANPD).
18.5 Japan (APPI)
For users in Japan, we comply with the Act on Protection of Personal Information (APPI). You may contact the Personal Information Protection Commission.
18.6 South Korea (PIPA)
For users in South Korea, we comply with the Personal Information Protection Act (PIPA). You may contact the Personal Information Protection Commission.
18.7 Singapore (PDPA)
For users in Singapore, we comply with the Personal Data Protection Act (PDPA). You may contact the Personal Data Protection Commission.
18.8 India ( DPDP Act)
For users in India, we comply with the Digital Personal Data Protection Act (DPDP Act) and other applicable data protection laws.
19. App-Specific Privacy Information
19.1 Permissions We May Request
Our mobile applications may request the following permissions:
- Internet Access: Required for app functionality and content delivery
- Storage Access: To save and access files on your device
- Camera Access: To scan documents or take photos for HR features
- Location: To provide location-based services (optional)
- Notifications: To send push notifications
- Contacts: To help you connect with colleagues (optional)
- Calendar: To sync HR-related events and reminders
19.2 Advertising in Mobile Apps
Our mobile apps generate revenue through advertising. The advertising networks used may collect and use device identifiers and usage data as described in Section 4. You can control ad personalization through your device settings or platform-specific controls.
20. Compliance with Advertising Platform Policies
We ensure our mobile applications comply with the advertising policies of all integrated ad networks, including but not limited to:
- Google AdMob policies and best practices
- Facebook Audience Network policies
- Apple Search Ads policies
- Unity Ads policies
- All applicable industry standards and guidelines
By using our Site and Apps, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms.