Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you fill out our contact form, send us an email at office@duvirtue.buzz, or otherwise communicate with us, we may collect: your full name, company or organization name, email address, phone number, and the content of your inquiry including any project details you choose to share.

1.2 Information Collected Automatically

When you visit our website, our servers automatically record standard technical information including: your IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on each page. This data is collected via server logs and does not identify you personally unless combined with other data.

1.3 Cookies and Similar Technologies

Our website may use essential session cookies to maintain basic functionality. We do not use tracking cookies, advertising cookies, or third-party analytics cookies by default. If we deploy analytics tools in the future, we will update this policy and provide notice.

2. How We Use Your Information

We use collected information for the following purposes: to respond to your inquiries and provide information about our services; to communicate with you about projects, proposals, and ongoing engagements; to improve our website and service offerings based on usage patterns; to comply with legal obligations under applicable Chinese law including the Personal Information Protection Law (PIPL), the Cybersecurity Law, and the Data Security Law; and to protect our legal rights and the security of our systems. We do not sell, rent, or trade personal data to third parties for marketing purposes.

3. Legal Basis for Processing

For individuals in the People's Republic of China, we process personal data in accordance with the Personal Information Protection Law (PIPL). The legal bases include: your consent (Article 13(1)); necessity for the performance of a contract or preparation thereof (Article 13(2)); and compliance with statutory duties (Article 13(3)). For individuals in the European Economic Area or United Kingdom, processing is based on: your consent (GDPR Article 6(1)(a)); steps taken at your request prior to entering into a contract (Article 6(1)(b)); and our legitimate interests in operating and improving our business (Article 6(1)(f)), balanced against your rights and freedoms.

4. Data Storage and Retention

Personal data is stored on servers located in the People's Republic of China and may be processed by staff operating from our office at Room 263, No. 26 Guiyun Lane, Nanjing, Jiangsu 210000, China. We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Contact form submissions and associated correspondence are retained for the duration of the business relationship plus three years for reference. Server logs are retained for a rolling 90-day period and then automatically purged.

5. Data Security

We implement technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include: transport-layer encryption (TLS 1.3) for all website traffic; access controls limiting data access to authorized personnel; regular security assessments and vulnerability scanning; and secure development practices aligned with OWASP guidelines. However, no method of electronic storage or transmission is absolutely secure — we cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not share personal data with third parties except: with service providers who process data on our behalf under contractual obligations of confidentiality and security (such as hosting providers and email service providers); when required by law, regulation, legal process, or enforceable governmental request; to protect the rights, property, or safety of Du Virtue, our clients, or the public; and in connection with a merger, acquisition, or sale of assets, where personal data may be transferred as a business asset — we will notify affected individuals before their data becomes subject to a different privacy policy.

7. Your Rights

7.1 Rights Under PIPL (China)

You have the right to: know and decide on the processing of your personal information (Article 44); access and copy your personal information (Article 45); request correction or completion of inaccurate personal information (Article 46); request deletion of personal information in specified circumstances (Article 47); withdraw consent at any time (Article 15); and lodge a complaint with the relevant data protection authority.

7.2 Rights Under GDPR (EEA/UK)

You have the right to: access your personal data (Article 15); rectification of inaccurate data (Article 16); erasure of data in certain circumstances (Article 17); restriction of processing (Article 18); data portability (Article 20); and object to processing based on legitimate interests (Article 21). To exercise any of these rights, contact us at office@duvirtue.buzz. We will respond within the timeframe required by applicable law — typically 15 to 30 days under PIPL, or one calendar month under GDPR.

8. Cross-Border Data Transfers

Personal data we collect is primarily stored and processed within mainland China. In limited circumstances where data must be transferred outside China (such as when you contact us from another jurisdiction), we ensure appropriate safeguards are in place, including: standard contractual clauses approved by relevant authorities; security assessments as required under PIPL and the Measures for Security Assessment of Cross-border Data Transfer; and adherence to applicable international data transfer frameworks.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a minor has provided us with personal data without parental consent, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational circumstances. When we make material changes, we will post the updated policy on this page with a revised effective date and, where appropriate, provide notice via email to individuals with whom we have an active business relationship. Continued use of our website after changes take effect constitutes acceptance of the revised policy, to the extent permitted by law.

11. Contact Information

For questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, contact us at:

• Data Controller: Du Virtue / 南京督配德网络科技有限公司
• Address: Room 263, No. 26 Guiyun Lane, Nanjing, Jiangsu 210000, China
• Email: office@duvirtue.buzz
• Website: www.duvirtue.buzz

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Cyberspace Administration of China (CAC) or your local data protection supervisory authority.