1. Information We Collect
We collect information you provide directly to us when you create an account, subscribe to our Service, communicate with us, or otherwise interact with our platform. This includes your name, email address, company name, job title, phone number, billing information, and any other information you choose to provide.
We also automatically collect certain information when you use the Service, including your IP address, browser type, operating system, referring URLs, pages viewed, access times, and other standard server log information. We may also collect information about the device you are using to access the Service, including device type, unique device identifiers, and mobile network information.
Additionally, we collect usage data related to how you interact with our platform, including search queries, filters applied, investor profiles viewed, and export activities. This data helps us improve the Service and provide a more personalized experience. We do not collect information from third-party sources unless explicitly authorized by you.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our Service; process transactions and send related information; send you technical notices, updates, security alerts, and support messages; respond to your comments, questions, and requests; and communicate with you about products, services, and events.
We may also use your information to monitor and analyze trends, usage, and activities in connection with the Service; detect, investigate, and prevent fraudulent transactions and other illegal activities; personalize and improve the Service; and facilitate the connection between users and investors listed in our database.
We process personal data on the following legal bases: (a) performance of a contract — to fulfill our obligations under your subscription agreement; (b) legitimate interests — to improve our Service and protect our platform; (c) consent — where you have given explicit consent for specific processing activities; and (d) legal obligation — to comply with applicable laws and regulations.
3. Data Sharing
We do not share, sell, or resell your personal data to third parties. Your personal information is used solely to provide and improve the BridgeTech CN Service. We do not engage in the sale of personal information as defined under the California Consumer Privacy Act (CCPA) or similar data protection regulations.
We may share your information in the following limited circumstances: (a) with service providers who perform services on our behalf, such as payment processing, data hosting, email delivery, and customer support — these providers are bound by contractual obligations to keep your information confidential; (b) in connection with a business transaction, such as a merger, acquisition, or sale of assets; or (c) when required by law, court order, or governmental regulation.
We may also share aggregated or de-identified information that cannot reasonably identify you. This aggregated data may be shared with partners, investors, or the public for research, marketing, or other purposes. We are committed to ensuring that any shared aggregated data cannot be used to re-identify individuals.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with the Service. Upon account cancellation or termination, we will delete or de-identify your personal data within 90 days, except where we are required to retain certain information for legal, tax, or regulatory purposes.
Transaction records and billing information are retained for a minimum of seven (7) years in accordance with applicable accounting and tax regulations. Server logs and security audit trails are retained for up to two (2) years for security and compliance purposes.
After the applicable retention period, data is securely deleted or anonymized. Anonymized data that can no longer be linked to you may be retained indefinitely for statistical and research purposes. You may request early deletion of your data by contacting us at privacy@bridgetechcn.com, subject to any legal retention requirements.
5. Your Rights (GDPR)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These rights include:
- Right of Access: You have the right to request copies of your personal data that we hold.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
- Right to Data Portability: You have the right to request transfer of your data to another organization or directly to you.
- Right to Object: You have the right to object to our processing of your personal data under certain conditions.
To exercise any of these rights, please contact us at privacy@bridgetechcn.com. We will respond to your request within 30 days. Please note that we may ask you to verify your identity before processing your request. If you believe your rights have not been respected, you may lodge a complaint with your local supervisory authority.
6. Data Security
We take the security of your data seriously and implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. These measures include encryption of data in transit (TLS 1.3) and at rest (AES-256), regular penetration testing, and strict access controls.
Our infrastructure is hosted on SOC 2 Type II certified cloud providers. We conduct annual third-party security audits and maintain a comprehensive information security management system aligned with ISO 27001 standards. All employees with access to personal data are bound by confidentiality obligations.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay. We maintain incident response procedures to contain, investigate, and remediate security incidents promptly.
8. International Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country and, in some cases, may not be as protective. We have our primary servers in Singapore and maintain backup servers in Hong Kong and the European Union.
When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data remains protected. These safeguards include Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, and data processing agreements with our subprocessors that incorporate required data protection provisions.
For transfers from the EEA to countries not deemed adequate by the European Commission, we rely on SCCs and supplementary technical measures to ensure an equivalent level of protection. You may request a copy of the safeguards we have in place by contacting us at privacy@bridgetechcn.com.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are under 18, you may not use the Service or provide personal information to us. If we learn that we have collected personal data from a child without verification of parental consent, we will delete that information as quickly as possible.
If you believe that we might have any information from a child under 18, please contact us immediately at privacy@bridgetechcn.com. We are committed to protecting the privacy of children and complying with applicable child protection laws, including the Children's Online Privacy Protection Act (COPPA) where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by email at the address associated with your account, and/or through a prominent notice on our website, at least 30 days before the changes take effect.
The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the Service following the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must discontinue using the Service.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Previous versions of this policy are available upon request by contacting our privacy team.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer and privacy team:
BridgeTech CN Limited — Privacy Team
Privacy Email: privacy@bridgetechcn.com
General Support: support@bridgetechcn.com
Data Protection Officer: dpo@bridgetechcn.com
Jurisdiction: Hong Kong SAR, China
We are committed to resolving any privacy concerns you may have. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.