Privacy Policy

We collect only the information necessary to provide our services, specifically: • Account and Identity Information: Name, mobile phone number, email address, company name, job title, login credentials, and password. • Business Enterprise Information: ESG-related data, rating reports, carbon emission data, etc. Specific fields may include company name, unified social credit code, industry classification, carbon emissions, energy consumption data, ESG rating scores, and related report text. You represent that you have the right to provide us with such information. • Usage and Log Information: IP address, device model, operating system, browser type, access time, action logs, and service usage details. • Cookie and Similar Technology Information: See Section 5 of this Policy. Sensitive Personal Information: We do not generally collect sensitive personal information, including biometric data, religious beliefs, specific identities, health records, financial account details, or location tracking. If a specific service requires processing sensitive personal information, we will inform you of the necessity and potential impact on your rights in accordance with applicable laws and obtain your separate consent. Protection of Minors: Our services are primarily designed for businesses and adults. We do not actively collect personal information from minors under the age of 14. If you are a minor, please use this service only with the consent of your guardian.

We will use your personal information for the following purposes and within the following scope: • To provide, maintain, and improve our website and related services; • To perform identity verification, customer service, security risk management, and troubleshooting; • To conduct internal data analysis to optimize service quality and user experience; • To send you industry updates, ESG policy interpretations, and event invitations; • To fulfill obligations required by laws and regulations. Automated Decision-Making: We do not currently use personal information to make automated decisions that significantly affect you. If we begin such processing in the future, we will notify you as required by law and provide an easy way to opt out. Marketing Communications: If you prefer not to receive marketing messages, you can unsubscribe via the link at the bottom of our emails or by contacting privacy@wancelvjin.cn. After unsubscribing, we may still send you essential notifications directly related to services you have subscribed to.

Storage Location: We store your personal information within the People's Republic of China. If we need to transfer it overseas, we will comply with applicable laws by providing notice and obtaining your separate consent. Retention Period: We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless otherwise required by law or agreed upon by you. Specifically: • Account Information: Retained while your account is active. Upon account cancellation, data will be deleted or anonymized within 30 days, unless otherwise required by law; • Business Enterprise Data: Retained according to contract terms or for 3 years after service ends, then deleted or anonymized; • Log Information: Retained for at least 6 months in accordance with legal requirements, for network security and compliance auditing. Security Measures: We protect your personal information using encryption, access controls, the principle of least privilege, security audits, employee training, and emergency response plans. Security Incident Response: In the event of a personal information breach, tampering, or loss, we will immediately take remedial actions and notify the relevant regulatory authorities and affected individuals as required by law. The notification will include: an overview of the incident, potential impacts, measures already taken, recommended actions you can take, and our contact information.

• Sharing: We will not share your personal information in principle. If sharing is necessary, we will inform you of the recipient's name and contact details, the purpose and method of processing, and the types of personal information involved, and obtain your separate consent. Common partners include cloud service providers, SMS/email service providers, payment processors, and authentication or rating agencies. • Transfer: We will not transfer your personal information in principle. In cases such as mergers, acquisitions, or bankruptcy where transfer is required, we will notify you of the recipient's information and require them to continue fulfilling this policy; otherwise, we will seek your consent again. • Public Disclosure: We will not publicly disclose your personal information in principle. If public disclosure is necessary, we will obtain your separate consent or comply with applicable laws and regulations. • Exceptions: Under circumstances required by laws and regulations, for resolving litigation disputes, or to protect significant legal rights and interests of you or others, or in the public interest, we may process your personal information in accordance with the law. We will list specific partner information in a sharing list for your reference.

We use cookies and similar technologies to ensure the site functions properly, remember your preferences, and improve our services. We may use necessary cookies as well as analytics cookies. If we integrate third-party analytics tools, we will disclose their names, links to their privacy policies, and opt-out options. You can manage or delete cookies through your browser settings, but doing so may affect certain features.

You have the following rights regarding your personal information: • Access, correct, or update your personal information; • Delete your personal information; • Withdraw consent; • Close your account; • Copy and transfer your personal information; • Request an explanation of our personal information processing practices; • File a complaint or report. We will respond within 15 business days after receiving your complete request. If the situation is complex and requires more time, we will inform you of the reason and the extended deadline. Withdrawing consent does not affect processing that was already carried out based on your prior consent. After account closure, we will handle related information in accordance with Section 3 of this Policy.