OCAAT

EmoXCare Privacy Policy

EmoXCare (hereinafter referred to as "we," "us," or "our") attaches great importance to your privacy. This privacy policy explains our data protection policies and describes the types of information we may process when you install and/or use the "EmoXCare" software application on your mobile device. Our privacy policy applies to all users and other individuals accessing the application ("users"). According to the General Data Protection Regulation, we are the data controller unless otherwise stated. Please read the following privacy policy carefully to understand how your personal information may be processed. By using the application, you acknowledge that you have read, understood, and agree to be bound by these terms. This policy will help you understand the following:

Related terms and definitions:

1.How We Collect and Use Your Personal Information
（1）How We Collect Your Personal Information
When you use our services, in order to better achieve your goals, we may collect and use your personal information. If you refuse, you may not be able to register as our user, enjoy certain services we provide, or achieve the intended effects of the relevant services. The collection includes:
Information you provide, including but not limited to：
- Information you provide when registering our account. For example: phone number, email, username/nickname, etc.
- Information you provide to us during your use of our services. For example: feedback on problem-solving answers.
- Information you provide to us when opening "Appreciation Function" and other products with payment functions, such as ID number, payment method (including third-party platform information, bank account, etc.).
Information obtained during your use of the service, including but not limited to：
- Browser, mobile device information, IP address when using browsers or mobile applications.
- Information generated during the use of the service. For example, URL of visited pages, search terms, published content or images, etc.
Information provided by third parties：
When you use us in third-party services, we will collect information provided by third-party services to us.
The above information you provide will continue to be authorized for our use during your use of the service. When you cancel your account, we will stop using and delete the above information.
（2）How We Use Your Personal Information
We will use your personal information for the following purposes in accordance with legal requirements or our relevant service terms and software license agreements:
- Provide you with the services you use and maintain and improve these services.
- Recommend content you may be interested in, including but not limited to sending you product and service information, showing you personalized third-party promotional information through the system, or sharing information with our partners with your consent so that they can send you information about their products and services. If you do not wish to receive such information, you can unsubscribe through the corresponding unsubscribe function.
- We may combine personal information and transaction information from one service with information obtained from other services for comprehensive statistical, analysis, or processing to provide you with more personalized services.
- Other purposes agreed upon by you.
1. How We Use Cookies and Similar Technologies
(1) Cookies
Cookies are small text files that are stored in your computer's or mobile device's browser or hard drive when you access web pages or applications. Cookies can make websites work more efficiently and ensure personalized web pages are presented, providing you with a faster browsing experience that meets your specific personal needs and requirements. Cookies only contain data about your internet access history and do not collect any personal data or store files or other information on your computer or mobile device. When our services must operate, we may use cookies to enhance service performance and functionality and send advertisements relevant to your interests on our website or third-party websites. You can delete cookies that already exist on your computer and prevent cookies from being recorded/tracked on Internet Explorer. As different browsers manage cookies differently, you can view the help menu of your browser or application for detailed information.
(2) Web Beacons and Pixel Tags
In addition to cookies, we also use other similar technologies such as web beacons and pixel tags on our website. For example, emails we send to you may contain URLs that link to content on our website. If you click on such a link, we will track this click to help us understand your product or service preferences and improve customer service. Web beacons are typically transparent images embedded in websites or emails. With pixel tags in emails, we can determine if the email has been opened. If you do not want your activities to be tracked in this way, you can unsubscribe from our mailing list at any time.
(3) Do Not Track
Many web browsers have a Do Not Track feature that allows users to send Do Not Track requests to websites. Currently, major internet standard organizations have not established policies to specify how websites should respond to such requests. However, if your browser enables Do Not Track, our website will respect your choice.
2. How We Share, Transfer, and Publicly Disclose Your Personal Information
(1) Sharing
Respecting user privacy is one of our basic principles. Except as otherwise provided below, we will not share your personal information with any company, organization, or individual:
- Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties.
- We may share your personal information with third parties in accordance with legal requirements or mandatory requirements of government regulatory authorities.
- Sharing with affiliated companies: Your personal information may be shared with our affiliated companies. We will only share necessary personal information and be bound by the purposes stated in this privacy policy. If our affiliated companies change the purpose of processing personal information, they will seek your authorization again.
- Sharing with authorized partners: Some of our services will be provided by authorized partners to achieve the purposes stated in this policy. We may share some of your personal information with partners to provide better customer service and user experience. We will only share your personal information for legitimate, lawful, necessary, specific, and explicit purposes and only share the personal information necessary to provide the service, such as sharing your information with logistics companies when you purchase our products online. Our partners are not authorized to use the shared personal information for any other purposes.
We will sign strict confidentiality agreements with companies, organizations, and individuals with whom we share personal information, requiring them to process personal information in accordance with our instructions, this privacy policy, and any other relevant confidentiality and security measures.
(2) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following cases:
- Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties.
- In the event of a merger, acquisition, or bankruptcy liquidation involving the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by this privacy policy. Otherwise, we will require the company or organization to seek your authorization again.
(3) Public Disclosure
We will only publicly disclose your personal information in the following cases:
- After obtaining your explicit consent.
- Based on legal disclosure: In cases where disclosure of your personal information is required by law, legal procedures, litigation, or mandatory requirements of government regulatory authorities, we may publicly disclose your personal information.
3. How We Protect Your Personal Information
(1) We have implemented security measures in line with industry standards to protect the personal information you provide, to prevent unauthorized access, public disclosure, use, modification, damage, or loss of data. We will take all reasonable measures to protect your personal information. For example, when exchanging data (such as credit card information) between your browser and the "service," it is protected by SSL encryption; we use encryption technology to ensure the confidentiality of data; we use trusted protection mechanisms to prevent data from being maliciously attacked; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we conduct security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.
(2) We will take all reasonable measures to ensure that irrelevant personal information is not collected. We will only retain your personal information for the period necessary to achieve the purposes described in this policy, unless an extension of the retention period is required or permitted by law.
(3) The internet is not an absolutely secure environment, and email, instant messaging, and other ways of communication with other users are not encrypted. We strongly recommend that you do not send personal information through such means. Please use complex passwords to help us ensure the security of your account.
(4) The internet environment is not 100% secure, and we will do our best to ensure or guarantee the security of any information you send to us. If our physical, technical, or managerial protective measures are compromised, resulting in unauthorized access, public disclosure, tampering, or destruction of information, and causing damage to your legitimate rights and interests, we will assume corresponding legal responsibilities.
(5) In the event of a personal information security incident, we will promptly inform you in accordance with legal requirements: the basic situation and possible impact of the security incident, the measures we have taken or will take to address the incident, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will inform you of the incident-related information in a timely manner through email, letter, telephone, push notification, etc. When it is difficult to inform individuals one by one, we will announce the information in a reasonable and effective manner. At the same time, we will also proactively report the handling of personal information security incidents to regulatory authorities as required.
4. Your Rights
In accordance with Article 11 of the Personal Data Protection Law (PDP Law), you can apply to EmoxCare to request the following matters related to personal data:
- Know whether your personal data has been processed;
- Request to know whether your personal data has been processed;
- Understand the purpose of personal data processing and whether the data is being used for its purpose;
- Know which third parties, both domestic and foreign, have received your personal data;
- Request rectification if personal data is incomplete or inaccurate, and request notification of the transactions made within this scope to third parties to whom the personal data has been transferred;
- Request deletion, destruction, or anonymization of personal data if the reasons for processing personal data have ceased, and request notification of the transactions made within this scope to third parties to whom the personal data has been transferred;
- Object to results that are unfavorable to you resulting from the sole use of automated systems to analyze personal data;
- Request compensation if damage is caused due to the illegal processing of personal data.
If the General Data Protection Regulation (GDPR) applies, data subjects have the following rights:
- Right of access - to know whether personal data is being processed, and if so, to access your personal data and information about the processing of your personal data;
- Right to rectification - request EmoxCare to correct information you believe is inaccurate or supplement information you believe is incomplete;
- Right to erasure - according to the GDPR, the right to request deletion of personal data;
- Right to restriction of processing - according to the GDPR, the right to request restriction of processing of personal data;
- Right to object to processing - according to the GDPR, the right to object to the processing of personal data;
- Right to data portability - the right to request that data collected by EmoxCare be directly transferred to another organization or transferred under specific conditions;
- Right to object to processing of personal data by exclusive automated systems resulting in results contrary to the individual.
In descriptions including you as a data subject and in applications to exercise the above rights, your application must be clear and understandable; if your request involves yourself or you represent others in exercising their rights, you must obtain special authorization and provide documentation proving your authorization; the application should include identity and address information, and documents proving your identity should be attached. Our company will assist you in submitting such requests through the "Data Subject Request Form." According to Article 13 of the PDP Law, our company will complete your request free of charge within 30 (thirty) days at the latest, depending on the nature of the request. If the request is denied, the reasons for the denial and the reasons for the denial shall be notified in writing or electronically.
If you believe that we or the data transfer recipient have violated your rights, you may complain to the data protection authority in your country and other relevant supervisory authorities.
When we deem it necessary, this privacy policy may be revised by our company. If, after the notification period, you continue to access the EmoxCare application and use the services provided by EmoxCare or access the EmoxCare application, it will be deemed that you have consented to the changes to this privacy policy.
5. How Your Personal Information Is Transferred Globally
Due to our provision of products or services through resources and servers distributed globally, this means that, with your authorized consent, your personal information may be transferred to overseas jurisdictions where you use the products or services, or accessed from these jurisdictions.
Such jurisdictions may have different data protection laws, or even no relevant laws. In such cases, we will ensure that your personal information is adequately protected. For example, we may request your consent for the cross-border transfer of personal information, or implement security measures such as data anonymization before cross-border data transfer.
6. How This Policy Is Updated
Our privacy policy may change.Generally, we will not reduce your rights under this privacy policy. We will post any changes to this policy on this page or notify you by other means of any changes to this policy, and for significant changes, we will provide more prominent notice. In such cases, if you choose to continue using our services, it means you agree to be bound by the revised policy.Significant changes referred to in this policy include, but are not limited to:
- Significant changes in our service model, such as the purpose of processing personal information, types of personal information processed, and the way personal information is used.
- Significant changes in our ownership structure, organizational structure, etc., such as changes in ownership caused by business adjustments, bankruptcies, mergers, etc.
- Significant changes in the main objects of personal information sharing, transfer, or public disclosure.
- Significant changes in your rights and the way you exercise them in personal information processing.
- Changes in the department responsible for personal information security, contact information, and complaint channels.
- Personal information security impact assessment reports indicating high risks.We will also archive previous versions of this policy for your reference.
7. How to Contact Us
If you have any questions, comments, or suggestions regarding this privacy policy, you can contact us by email at customerservice@ocaathealth.app. In general, we will reply within fifteen days.