Privacy Policy

1. Scope of this policy

This policy covers this informational website and any enquiry, quotation, training or support activity that takes place through it. It also describes, in general terms, how we treat information inside the market systems that we design and integrate for our clients, although in most cases the client remains responsible for the data held in those systems and their own notices take priority.

This policy does not apply to third party websites that we might link to, nor to the internal policies of a market operator that uses our services. Where a client operates its own privacy notice, visitors to that market should rely on the notice published by the operator.

2. Who we are

Kunming Xiaogejiao E-commerce Co., Ltd. is a company working in computer systems design and related professional and technical services. The company is registered at Room 809, 8th Floor, Yinzuo Building, 219 Baoshan Street, Wuhua District, Kunming - 650000, China (CN). Our website is published at https://www.dawnsongecom.buzz and our principal contact address is hello@dawnsongecom.buzz.

For the purposes of this policy, the company acts as the controller of information collected through this website. Where we operate a system on behalf of a market client, we generally act as a processor and follow the written instructions of that client.

3. Information we collect

We keep collection narrow. The categories below describe everything we may hold in connection with this website and our direct engagements.

Contact details you provide

When you send an enquiry, request a walkthrough or reply to a message from us, you may share a name, an email address, a telephone number, a company name, a role and the text of your message. This is the core of what we hold in our enquiry records.

Project information

During an engagement we may hold documents that describe a trading floor, opening hours, zone layouts, pricing policies and the names of staff who act as supervisors. We ask clients to share only what is needed to design the system, and we prefer role descriptions over personal details wherever possible.

Technical information

Our hosting provider may record standard technical details such as the request time, the page requested, the browser type and an approximate region, in order to deliver pages and to detect abuse. We do not use these details to identify individuals and we do not combine them with enquiry records.

Correspondence history

We keep the emails, notes and meeting summaries that arise from a working relationship so that later questions can be answered accurately. This history is retained only as long as the relationship or a legal obligation requires.

Information we do not collect

We do not ask for payment card numbers through this website, we do not request identity documents during a first enquiry, and we do not collect health information, biometric information or precise location data. If a project genuinely requires one of those categories, we will say so in writing before any such information is shared and we will agree a narrower handling method with the client.

We also do not collect information about visitors to a market. The systems we design are built around stall records, price registers and queue observations, not around the identities of shoppers who pass through a gate. Where a client proposes to add visitor data to an operational register, we will explain the additional obligations that would follow and we will ask for a separate written instruction before any change is made.

4. How information is collected

Most information reaches us because you choose to send it. The contact form on this website does not submit to a remote database; it prepares a message in your own mail application, which you then send yourself. Nothing is transmitted to us until you press send inside that application.

A small amount of information is created automatically by the act of visiting a page, as described in the technical information section above. We do not run tracking scripts, fingerprinting libraries or advertising pixels on this website.

Where a client invites us to work inside its own systems, information may be supplied by the client directly or gathered during observation shifts. In those cases the client decides what is shared and for which purpose, and we follow that instruction.

5. Why we use information

We use the information described above for a short list of purposes. Each purpose is tied to a real task rather than to a general interest in collecting data.

• To answer enquiries and arrange walkthroughs, observation shifts and training mornings.
• To prepare quotations, proposals and written runbooks for prospective and current clients.
• To deliver, support and improve the market systems we have been engaged to build.
• To keep accounting, tax and contractual records that the law requires us to hold.
• To protect this website and our systems against abuse, fraud and unauthorised access.
• To resolve disputes and to respond to legitimate requests from public authorities.

We do not use enquiry information to send marketing newsletters, and we do not add addresses to any list without a clear request. If we ever introduce an optional update list, it will require an explicit opt in and will offer an easy way to leave.

6. Lawful bases for processing

Where data protection law requires a lawful basis, we rely on one of the following. First, the performance of a contract or the steps needed before a contract, such as preparing a quotation. Second, our legitimate interest in running a professional services company, including answering enquiries and protecting our systems, balanced against the rights of the people concerned. Third, compliance with a legal obligation, such as keeping financial records. Fourth, consent, where we ask for it explicitly and where no other basis applies.

When we act as a processor for a market client, the client is responsible for identifying the lawful basis and for publishing a notice to the people whose information appears in the system.

7. Cookies and local storage

This website is intentionally light. It does not set advertising cookies, it does not use cross site trackers, and it does not load external analytics libraries. A hosting provider may set a strictly necessary cookie to keep a session stable or to protect against abuse, and such a cookie is used only for that purpose.

The interactive elements of this site, such as the mobile menu and the expanding questions on the contact page, run entirely in your browser and do not require a cookie. You can clear cookies and site data at any time through your browser settings without affecting your ability to read this site.

8. Information inside client systems

The dawn market systems we design may contain stall records, pricing entries, queue observations and closing summaries. Those records usually belong to the market operator, not to us. We access them only to build, support or train, and only on the instruction of the client.

Access is limited to the engineers working on the engagement, is logged where the system allows it, and is removed at the end of the engagement. We do not copy client records into our own files unless a written request, a written handover or a legal obligation requires it, and we delete any such copy when its purpose is complete.

We encourage clients to keep personal details out of operational systems. A stall identifier and a role description are almost always enough for a morning workflow, and fewer personal details means fewer obligations for everyone.

9. Sharing and disclosure

We do not sell personal information. We do not trade it, rent it or hand it to advertising networks. Sharing is limited to the situations described here.

• Service providers who host this website or provide email, accounting and document storage, under written instructions and confidentiality duties.
• Professional advisers such as accountants or lawyers, where their advice is required and confidentiality applies.
• Public authorities, where a lawful request is made and we are satisfied that it is valid.
• A successor organisation, if the business is reorganised, provided the successor accepts the same commitments.

Whenever we share information with a service provider, we share only what the task requires. We review our providers periodically and we end relationships where security or confidentiality standards are not met.

10. How long we keep information

Enquiry records are kept for as long as they are useful for a prospective relationship, usually up to two years after the last contact. If an enquiry becomes an engagement, the related records are kept for the life of the relationship and then for the period required by accounting and tax law.

Project documents are retained for a limited period after handover so that support questions can be answered and so that a later season can be designed consistently. At the end of that period they are deleted or returned to the client, following the terms agreed in the engagement.

Where the law requires a longer period, as with financial records, the legal period governs. We review stored information each year and remove anything that no longer has a purpose.

Deletion follows a simple routine. Working copies are removed first, then backups are allowed to expire on their own schedule. When a client asks for the return of project documents, the return happens before the local copy is deleted, and the completion is confirmed by email so that both sides have a record.

11. How we protect information

We apply technical and organisational measures that are proportionate to the small amount of information we hold. Access to enquiry records is limited to the people who need it. Accounts use strong authentication. Devices are encrypted where the operating system allows it. Backups are stored separately from working copies.

The systems we build for clients are designed with the same caution. We include role based access, short session lifetimes on shared terminals and an audit trail for the actions that matter. We test the undo path for every automated step, because a recoverable mistake is far cheaper than a lost morning.

Staff receive a short briefing on handling information when they join and a refresher each year. The briefing covers the practical points that matter most in our work: not forwarding client documents to personal addresses, not taking photographs of registers on a trading floor, and reporting a lost device immediately rather than waiting to see whether it turns up.

We keep our own environment small on purpose. Fewer tools mean fewer copies of a document and fewer places where access needs to be reviewed. That is a security decision as much as a practical one.

No arrangement is perfect. If a security incident affects your information, we will notify the people and the authorities that the law requires us to notify, and we will explain what happened in plain language rather than in a vague summary.

12. International transfers

Our company is based in Kunming, China, and our email and document services may store information in other regions depending on the provider. When information moves across a border, we rely on the contractual safeguards offered by the provider and on the standard of protection described in this policy.

If a client asks us to keep information inside a particular region for a project, we will confirm in writing whether that is possible before the engagement begins, and we will choose providers accordingly.

13. Your rights

Subject to the law that applies to you, you may ask us for a copy of the information we hold about you, ask us to correct an error, ask us to delete information that is no longer needed, ask us to restrict how it is used, and object to a use that relies on our legitimate interest. You may also ask us to send certain information to another organisation in a portable format.

Write to hello@dawnsongecom.buzz and describe the request. We will confirm identity where it is necessary to protect the information and we will aim to respond within thirty days. If a request is complex we will explain the delay and keep you informed. Making a request is free, and we will not treat it as a reason to end a relationship.

14. Privacy for children

This website is intended for business audiences and the market systems we build are designed for adult operators. We do not knowingly collect information from anyone under sixteen. If you believe a child has sent us personal details, write to hello@dawnsongecom.buzz and we will delete the information promptly.

Where a market serves families and children, we advise the operator to collect no personal details at the gate and to keep the operational register free of information about visitors.

15. Third party links and services

This website may link to documents or websites operated by other organisations, including client sites and reference material. Those sites have their own practices, and this policy does not cover them. We check links when we publish them but we do not control the pages behind them.

We do not embed third party video players, comment platforms or advertising widgets on this site. If that changes, we will update this policy and describe the service before it is used.

Where we recommend a tool to a client, we explain what that tool does with information and whether it is necessary. A recommendation is not an endorsement of every practice inside a third party product, and the client remains free to choose a different tool that fits its own obligations.

16. Changes to this policy

We review this policy when our services change or when the law requires it. The current version is always published on this page with the review date shown below. If a change materially affects how information is used, we will place a clear notice on the homepage and, where we hold an address, we will send a short message describing the change.

Continuing to use this website after a revision means the revised policy applies to your visit. Previous versions can be requested by writing to the address below.

17. Complaints and contact

If you have a question about this policy, if you want to exercise a right, or if you believe we have handled information badly, please contact us first so that we can look into it. Most concerns can be settled quickly once we understand exactly what happened.

You also have the right to complain to the data protection authority in the place where you live or work. We would rather hear from you first, but we will not object if you choose to go directly to an authority.