Privacy Policy

Introduction

This Privacy Policy explains how SHANGTAI TECHNOLOGY LIMITED ("we," "us," or "our") collects, uses, stores, and protects your personal information when you engage with our services, which focus on advertising promotion and ad monetization solutions. As a Hong Kong-based company, we are committed to upholding your privacy rights in full compliance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) and all relevant regulatory standards.

This policy applies to everyone who uses our services, including visitors to our website, partners in our advertising networks, and users interacting with our promotional content. By accessing or using our platforms, you agree to the terms outlined herein. We encourage you to read this policy carefully to understand how we handle your data.

Our Commitment to Data Protection

At SHANGTAI TECHNOLOGY LIMITED, the privacy and security of your personal data are at the core of our operations. We have established rigorous policies and procedures to ensure that data handling is always transparent, lawful, and respectful of your rights. Our approach is guided by principles of data minimization (collecting only what is necessary), clear purpose specification (using data for stated objectives), and accountability (taking responsibility for proper data management).

We continuously review and enhance our practices to adapt to evolving regulatory requirements and technological advancements, ensuring your information is treated with the highest level of care throughout its lifecycle.

Cookies and Tracking Technologies

To optimize your experience and deliver effective advertising solutions, our platforms may employ cookies, pixel tags, and similar tracking tools. These technologies help us analyze user behavior, improve service quality, and deliver personalized ads tailored to your interests. The data we collect through these tools may include:

Browser Details: Type, version, and settings.

Device Information: Operating system, model, and unique identifiers.

Network Data: IP address, domain name, and connectivity details.

Usage Patterns: Pages visited, time spent on our platforms, and interaction with ads.

Engagement Metrics: How you interact with promotional content or monetization features.

You have the right to disable cookies through your browser settings. However, please note that this may limit your access to certain features or reduce the effectiveness of the ads you see, as personalized content relies on these technologies.

Collection of Personal Data

When you engage with our advertising promotion and ad monetization services, we may collect the following types of personal data:

Identifying Details: Name, date of birth, gender, and (where required by law or service provision) government-issued identification information.

Contact Information: Email address, phone number, and physical address (for billing or correspondence purposes).

Financial Data: Payment details (e.g., credit card information), billing address, and transaction history (only when processing payments for our services).

Technical Data: IP address, device specifications, browser fingerprints, and other identifiers necessary to deliver ads across devices.

Interaction Data: Preferences for ad formats, engagement with promotional campaigns, and usage logs related to our monetization tools.

Providing this information is voluntary, but refusing to share certain details may prevent you from accessing full-service features or completing transactions. If you are under 18 years of age, we require parental or guardian consent before collecting any personal data, in line with Hong Kong’s privacy laws.

Purposes for Data Collection

We collect and use your personal data for the following specific purposes:

Service Delivery: To operate, maintain, and improve our advertising promotion and ad monetization services, including campaign setup, performance tracking, and revenue distribution for monetization partners.

Personalization: To analyze your preferences and behavior to deliver relevant ads, enhance user experience, and optimize the placement of promotional content across our networks.

Analytics and Insights: To assess how users interact with our platforms, identify trends, and refine our services to meet market needs effectively.

Marketing Communications: To send you updates about new features, industry insights, and promotional offers related to our advertising solutions (you may opt out of these communications at any time).

Legal Compliance: To fulfill regulatory obligations, such as tax reporting, anti-fraud measures, and responding to legal requests from authorities.

Customer Support: To address your inquiries, resolve technical issues, and provide assistance with using our services, ensuring a seamless experience for all users.

Data Sharing with Third Parties

We may share your personal data with trusted third parties only in specific, legally compliant scenarios. These include:

Marketing Partners & Ad Networks: To facilitate the delivery of targeted advertisements, optimize campaign performance, and enable ad monetization across our partner networks. This helps us connect advertisers with relevant audiences and ensure monetization partners receive appropriate revenue from ad interactions.

Service Providers: With third-party vendors who assist in operational tasks such as payment processing, data analytics, cloud hosting, and technical support. These providers are contractually obligated to protect your data and use it solely for the purposes we specify.

Legal & Regulatory Bodies: When required by law, court order, or government regulation—including responding to lawful requests, addressing security incidents, or fulfilling tax and anti-money laundering obligations.

Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to a successor entity, which will be bound by comparable privacy commitments.

We conduct thorough due diligence on all third parties to ensure they uphold strict data protection standards equivalent to our own.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. The retention period is determined by factors such as:

The nature of the data and its role in our services (e.g., transaction records for billing purposes, user interaction data for analytics).

Legal or regulatory obligations (e.g., tax laws requiring financial records to be kept for specified periods).

Business needs (e.g., maintaining historical data to improve our advertising solutions over time).

Once data is no longer needed, we securely delete or anonymize it to prevent unauthorized access, ensuring no personally identifiable information remains.

Your Rights

Under the Personal Data (Privacy) Ordinance, you have the following enforceable rights regarding your personal information：

Access Right: Request a copy of the personal data we hold about you, along with details of its collection, use, and sharing.

Correction Right: Ask us to update or correct inaccurate or incomplete data to ensure its accuracy.

Erasure Right: Seek deletion of your data, provided it is not required for legal compliance, contractual obligations, or legitimate business purposes.

Opt-Out Right: Withdraw consent for receiving marketing communications at any time (e.g., promotional emails or newsletters).

Objection Right: Challenge the processing of your data for specific purposes, such as targeted advertising, if you believe it conflicts with your privacy interests.

To exercise these rights, please contact our Data Protection Team using the details in Section 10. We aim to respond to requests within 30 days, though complex cases may require additional time (in which case we will notify you promptly).

Security of Your Data

Protecting your personal data from unauthorized access, misuse, or loss is a top priority. We employ a combination of technical, physical, and organizational measures to maintain security, including:

Encryption: Sensitive data (e.g., payment details, user IDs) is encrypted during transmission and storage using industry-standard protocols (e.g., SSL/TLS).

Access Controls: Strict authentication procedures (e.g., multi-factor authentication) and role-based access limits to ensure only authorized personnel can access data.

Regular Monitoring: Continuous security audits, vulnerability scans, and incident response plans to detect and address threats proactively.

Employee Training: Mandatory privacy and data protection training for all staff to ensure compliance with best practices and our internal policies.

While no system is entirely risk-free, we strive to maintain the highest standards of security and promptly address any potential breaches in accordance with legal requirements.

International Data Transfers

Your data may be processed or stored in countries outside Hong Kong, including regions with different privacy laws. When transferring data internationally, we ensure it receives adequate protection through:

Contractual Clauses: Using standard data protection agreements approved by Hong Kong’s Privacy Commissioner to legally bind overseas recipients to safeguard your data.

Certifications & Compliance: Partnering with global service providers that adhere to frameworks like the EU-U.S. Data Privacy Framework or equivalent international standards.

These measures ensure cross-border transfers remain consistent with our commitment to privacy and regulatory compliance.

Policy Updates & Notifications

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data protection practices. Material changes (e.g., new data uses, updated sharing policies) will be announced via:

A prominent notice on our website homepage for at least 30 days.

Direct email communication to registered users (where applicable).

We encourage you to review this policy regularly. Continued use of our services after any updates constitutes your acceptance of the revised terms.

Contact Information

For questions about this policy, data access requests, or feedback on our privacy practices, please reach out to our Data Protection Team:

SHANGTAI TECHNOLOGY LIMITED

FLAT/RM 19 09/F CHUNG HING MANSION

5 PAN HOI ST NORTH POINT HK

Email: [email protected]

We are committed to addressing your concerns promptly and will respond to all inquiries within 30 business days. If you believe we have not resolved your issue satisfactorily, you may also contact Hong Kong’s Office of the Privacy Commissioner for Personal Data for further assistance.

Conclusion

By using our advertising promotion and ad monetization services, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. We are dedicated to maintaining your trust by handling your data responsibly, transparently, and in full respect of your rights.