Last Updated: November 2025

 

I. Introduction

Welcome to the website of Jereh Group (hereinafter referred to as "we" or the "Jereh Group"). We recognize the importance of your privacy rights and are committed to protecting the security of your personal information. This Privacy Policy aims to explain our policies and practices regarding the collection, use, storage, disclosure, and protection of your personal information. This policy applies to all personal information collected or processed by Jereh Group and all of its subsidiaries and affiliates worldwide to ensure consistent protection of your personal information throughout the Jereh Group, including by:

Ÿ Our websites and mobile applications;

Ÿ Business operations and service participation;

Ÿ Marketing, events, and recruitment activities; and

Ÿ Technologies, devices, and digital platforms operated by or on behalf of Jereh Group.

If you do not agree with this policy, please stop using our services.

If you have any questions, please contact us as described in the "Contact Information" section below.

 

II. Information We Collect

The information we collect includes the following categories:

1. Personal Information

We collect personal information you provide directly to us, information generated during our business processes, or information we obtain from third parties. Types of personal information may include:

Ÿ Basic identity and contact information: Name, phone number, email address, mailing address, etc.

Ÿ Account information: Username, password, and related account registration details.

Ÿ Commercial and financial information: Records of products or services purchased, obtained, or considered; transaction history; payment information (including bank card numbers or payment account information).

Ÿ Communication and marketing information: Information you provide when submitting inquiries, opting-in to receive marketing communications, completing surveys, participating in forums, seminars, or events, as well as your communication preferences.

Ÿ Audio or visual information: Photographs or video recordings from company events, or closed-circuit television (CCTV) footage for security purposes.

Ÿ Internet or device activity (e.g., browsing data, IP address, device identifiers, Cookies, analytics data).

Ÿ Professional or employment-related data (e.g., qualifications, employer, title, work location, professional background).

Ÿ Location information: Location data collected when you use company mobile applications with location features, drive company vehicles equipped with onboard monitoring systems, or participate in company events using attendance tracking technology.

Ÿ Sensitive personal information required by law or contract (e.g., nationality, government-issued ID, biometric or facial recognition data for website access control).

2. Non-Personal Information

We may collect anonymous or aggregated information through Cookies, pixel tags, log files, or other technologies, including but not limited to:

Ÿ User visit statistics and preferences;

Ÿ Device type, operating system, browser type;

Ÿ Referring website domain;

Ÿ Website usage habits and interaction patterns.

We only collect the minimum amount of information necessary to achieve the stated purposes.

 

III. How We Use Your Information

We may use your personal information and non-personal information for the following legitimate purposes:

Ÿ To verify and validate your identity.

Ÿ To facilitate communication and manage our relationship with you.

Ÿ To provide, operate, and improve our services and products.

Ÿ To manage business operations, logistics, and supply chain activities.

Ÿ To register and manage your participation in our programs, events, or plans.

Ÿ To ensure workplace and facility security, including visitor access control and AI-based monitoring.

Ÿ To comply with applicable laws, regulatory requirements, and contractual obligations.

Ÿ To prevent, detect, or investigate fraud, misconduct, or security incidents.

Ÿ To conduct research and analysis, including through automated systems or AI tools (complying with transparency and fairness obligations).

Ÿ To promote and market our services, where required by law, with your consent.

Ÿ For recruitment, assessment, and management of employment or contractor applications.

Ÿ Any other purposes disclosed to you and for which we have obtained your consent.

Where required by law, we will seek your consent before processing personal information for new or additional purposes.

Processing of personal information based on the necessity for the performance of a contract, safeguarding public interests, or other circumstances stipulated by applicable laws does not require separate consent.

Except for the following circumstances, Jereh Group will not disclose your personal information to third parties without your permission:

With your explicit consent;

As required by laws, regulations, or administrative or judicial authorities;

To safeguard public interests or the life, property, and safety of others;

Disclosed to third parties entrusted to provide website services, subject to meeting security and compliance requirements.

 

IV. Cookies and Similar Technologies

Jereh Group may use Cookies or other tracking technologies to:

Identify visitors;

Analyze traffic and usage behavior;

Improve website performance and enhance user experience.

You can manage or disable Cookies through your browser settings. If you disable Cookies, some features may be limited.

 

V. Automated Decision-Making and Artificial Intelligence

Jereh Group may use AI-based systems and automated decision-making tools for statistical analysis, improving operational efficiency, quality control, or predictive maintenance and service optimization.

Automated decisions producing legal effects or similarly significant effects on individuals will not be made without appropriate human oversight. However, we reserve the right to adjust the human oversight mechanism according to technological developments, ensuring decision outcomes meet legal fairness requirements. We will not use sensitive personal information for AI training. Users may submit a written request to object to automated decision-making via Contact Information in Section XV.

We implement algorithm management mechanisms in accordance with applicable data protection laws and business needs.

 

VI. How We Share Information

We disclose your information to third parties only under the following circumstances:

Internal management and service provision within Jereh Group's affiliated companies based on unified risk management needs;

Disclosure to technical consultants, vendors, service providers, and data processors (e.g., IT, security, human resources, logistics, marketing, or facilities management partners) who act on our instructions under our confidentiality and data processing agreements to support internal management, website operation, IT services, cloud storage, data analysis, customer support, or marketing activities;

Disclosure to business partners for joint marketing or contract fulfillment purposes;

To a successor entity in the case of a merger, acquisition, reorganization, or asset transfer;

Disclosure with your consent or at your direction;

Mandatory disclosure in legally, regulatorily, or security necessary situations;

Third-party service providers and business partners must process personal information according to our written instructions and agreements, pass our data protection due diligence, and sign data processing agreements with confidentiality obligations no less than ours. If a third party causes a data breach due to breach of contract or further incidents, that third party shall bear legal liability independently.

 

VII. Roles and Responsibilities

Data Controller: Entities within Jereh Group, which can independently determine the purpose, method and scope of personal information processing. These entities bear the primary responsibility for personal information processing activities in accordance with the law, and have the decision-making power and control over such processing activities.

Data Processor: The data processor refers to suppliers, contractors and other service providers who process personal information within the scope of authority granted by Jereh Group and in accordance with Jereh Group's written instructions. Data processors must strictly follow Jereh Group's explicit requirements and implement effective security and confidentiality measures to prevent personal information from being leaked, tampered with or damaged. At the same time, data processors must have the corresponding ability to delete data, ensuring that personal information can be deleted in a timely and thorough manner when the processing purpose is fulfilled or at Jereh Group's request. In addition, data processors should actively cooperate with Jereh Group's audit work, accept regular reviews and supervision of their data processing activities, and ensure that their processing activities always meet Jereh Group's compliance standards and legal requirements.

 

VIII. Information Retention Period

We retain personal information only for as long as necessary to:

Fulfill the purposes described in this policy,

Comply with legal, regulatory, and audit obligations,

Resolve disputes and enforce agreements,

Protect the legitimate interests of Jereh Group, or

If involved in litigation, arbitration, or administrative investigation, the retention period is automatically extended until the conclusion of the relevant proceedings.

The retention period for personal information will be determined based on actual business operational needs and mandatory legal requirements. After the retention period expires or the processing purpose is achieved, we will securely delete or anonymize the information.

 

IX. Data Security Measures

We use industry-standard organizational, technical, and physical measures to protect personal information from unauthorized access, loss, or misuse.

These include encryption, access controls, data minimization, and employee training.

Notwithstanding the above, you acknowledge and agree that no security system can guarantee absolute invulnerability, and you accept the inherent risks in data transmission.

 

X. Information Storage and Cross-Border Transfer

As Jereh Group's business operates globally, your information may be transferred to, stored or processed in jurisdictions other than your country, in which Jereh operates or necessary recipient locates.. If cross-border transfer is indeed necessary, we will, in accordance with the applicable laws, take appropriate measures (e.g. standard contractual clauses or security assessments). Certain authorized employees located outside your country may, from time to time, remotely access data stored on our servers located in your country solely for business purposes. Such access is conducted through secure company networks and subject to strict access controls, encryption, and confidentiality obligations consistent with applicable laws. By using our services, you consent to such transfers or access as permitted by law. 

Jereh Group assumes no liability for data processing activities required to comply with mandatory laws and regulations of the recipient's country or region.

 

XI. Your Rights

Subject to applicable laws, you may have the following rights:

Ÿ Right of Access: To inquire whether we are processing your personal information and to obtain a copy of such information.

Ÿ Right to Rectification: To request correction of your personal information if it is inaccurate or incomplete.

Ÿ Right to Erasure: To request deletion of your personal information under conditions provided by law (e.g., the purpose of processing has been achieved, the retention period has expired, you withdraw consent, etc.).

If fulfilling your erasure request would prevent us from fulfilling legal obligations (e.g., tax filing, dispute resolution) or harm significant public interests, we have the right to refuse the request.

Ÿ Right to Withdraw Consent: You have the right to withdraw your consent to our processing of your personal information at any time, but the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Ÿ Right to Restrict Processing: To request suspension of processing during dispute resolution or if processing is unlawful.

Ÿ Right to Data Portability: To request, where provided by law, a copy of your personal information in a structured, commonly used, machine-readable format, or to have it transmitted directly to another controller (where technically feasible).

Ÿ Right to Object to Automated Decision-Making: The right to object to decisions based solely on automated processing (including profiling) which produce legal effects concerning you or similarly significantly affect you.

Ÿ Right to Object: You may opt-out of receiving our commercial marketing emails, text messages, or push notifications at any time.

Ÿ Right to Complain and Appeal: If you believe our processing of your personal information violates relevant laws and regulations, you can lodge a complaint with us or file an appeal with the competent data protection supervisory authority.

To exercise these rights, please contact us via Contact Information in Section XV

To protect your privacy and security, we may verify your identity before processing your request (the information required for verification is limited to account-binding information or pre-set verification methods to ensure the requester is the data subject or an authorized agent). For requests where identity cannot be effectively verified electronically, we reserve the right to request notarized authorization documents. Upon successful verification, we will respond in writing within 30 working days. If we can fulfill your request, we will handle it appropriately as required by applicable law. If we cannot fulfill your request (e.g., due to legal provisions or involving the legitimate rights and interests of third parties), we will explain the reason for refusal. If the information required for verification involves third-party rights or may compromise data security, Jereh Group has the right to refuse the request.

 

XII. Children's Privacy Protection

For users located in mainland China, our website is not directed to children under 14.

For users located outside mainland China, the applicable age threshold will follow the local legal requirement.

We will not actively collect children's information, if parents or guardians find that children have provided information, please contact us in time to delete it.

 

XIII. Third-Party Links Statement

This website may contain links to third-party websites. Jereh Group is not responsible for the privacy practices of these websites. Please read their policies carefully before accessing them. Your access to third-party links is considered an independent legal act, and any losses resulting from personal information breach, fraud, etc., shall be borne solely by you.

 

XIV. Privacy Policy Updates

Jereh Group reserves the right to update this Privacy Policy periodically. The updated version will be posted on this website with the effective date indicated. If policy changes involve significant restriction of rights (referring to substantive changes such as expanding the scope of personal information collection, changing processing purposes, or altering cross-border transfer rules), we will notify you prominently and obtain your explicit consent. Your continued use of the services after the policy revision constitutes your full reading and acceptance of the revised policy. The definition of significant changes and notification methods shall be determined by us independently based on laws, regulations, and business needs.

 

XV. Contact Information

If you have any questions, complaints, or suggestions regarding this Privacy Policy or the processing of your personal information, please contact us via:

Email: privacy@jereh.com

Phone: 0535-6766347

Address: No. 5 Jereh Road, Laishan District, Yantai City, Shandong Province, China

We will respond within 15 working days of receiving your email (30 days for requests for exercising of rights). If an extension is needed, we will notify you within the above period and provide the reason.

Any disputes arising from or related to this policy shall be submitted to the competent people's court in Laishan District, Yantai City, Shandong Province, China.