Privacy Policy
Note: the numbering (1), (2) … is for ease of reference only and does not affect the meaning of any clause.
1. Controller and scope
(1)Controller: Gucan Technology (Ganzhou) Co., Ltd., Unified Social Credit Code 91360704MAKLNF5HX9. Registered details are on the About page. Email open@gucantech.cn.
(2)Scope: this policy applies to page visits, site search, form submissions and email contact on www.gucan.com.cn.
(3)Not covered: personal-information processing inside the WeChat mini program is governed by the privacy policy shown there. Once you scan the code and enter the mini program, its own rules apply.
(4)What we do not do: there are no user accounts on this website. We do not collect identity documents, bank cards, precise location, contacts or biometric data, and we do not profile you, serve personalised advertising or make automated decisions.
2. Principles and legal basis
(1)We follow the principles of lawfulness, fairness, necessity and good faith, and process only the minimum relevant to a stated purpose.
(2)Forms: processed on the basis of your consent. The page states “submitting means you have read and accept this policy” before you send; leaving the form blank and not submitting refuses consent.
(3)Email: your email address and message are processed on the basis of your consent and as necessary to reply to your enquiry, partnership proposal or correction request.
(4)Security and troubleshooting: standard server access logs are kept to protect the service and diagnose faults. They are not used for marketing or profiling.
(5)Visit statistics: on the basis of your consent (you continue browsing without enabling DNT/GPC or blocking the script), we record page path, time, internal-referral flag and viewport size. You may refuse at any time; see section 9.
3. What we collect
Required fields are marked on the form and the form will not submit without them. We do not ask for real names or mobile numbers.
Scroll the table sideways to see every column
| Item | Source | Purpose | Required | Retention |
|---|---|---|---|---|
| Name or institution | Partnership form | To address you in our reply | Optional | Within 12 months after the matter closes |
| Contact (email or WeChat) | Partnership form | To reply to you | Required | Within 12 months after the matter closes |
| Form text (partnership direction, question, log) | All three forms | To reply; to write up recurring questions without identifiers | As marked | Within 12 months after the matter closes |
| Submission time and source page | Generated on submission | To know the page and track handling | Automatic | Within 12 months after the matter closes |
| Page path, time, internal referral, viewport size | Statistics script | To understand page use and layout fit | Can refuse | Rotated weekly, about 12 weeks at most |
| IP address, browser identifier, time and request | Server security logs | Attack prevention, rate limiting, troubleshooting | Automatic | No more than 90 days |
4. Sensitive data and minors
(1)We do not request or actively collect patient information, medical records, original images, identity numbers, bank details, biometric data, religious belief or precise location.
(2)Questions and placement logs may involve clinical scenarios. Please do not enter patient names, admission numbers, examination numbers, faces or identifiable images. If you do so by mistake, email open@gucantech.cn and we will check and delete it.
(3)The site is not directed to children under 14. If we learn that a child’s information has been submitted, we will delete it. Users under 18 should use the site with the consent and guidance of a guardian.
(4)If we ever need to process sensitive personal information, we will explain the necessity and impact and obtain separate consent as required by law.
5. Processors and third parties
We do not sell personal information or provide it for advertising. We share it only in these limited cases:
| Recipient | Purpose | Information | Notes |
|---|---|---|---|
| Tencent Cloud (servers and database) | Hosting, database storage and backups | Form content, time, source page, security logs | Deployed in mainland China; processes on our instructions |
| Tencent Enterprise Email | Receiving and replying to your email | Your email address and message | Applies when you email us |
| WeChat / WeCom | Group entry and mini program service | Processed by WeChat under its own rules | Applies when you scan the code or use the mini program |
| Courts or authorities | Compliance with legal obligations | Information lawfully required | Only on valid legal process |
(1)We do not transfer personal information across borders. Servers and databases are located in the People’s Republic of China.
(2)Apart from the cases above, we do not provide personal information to any third party without your separate consent.
(3)Third-party links (including official policy pages and the WeChat mini program) are governed by their own privacy rules; please read them before use.
6. Retention and location
(1)Form information: deleted within 12 months after the matter closes. If closure cannot be determined, within 12 months of the last contact.
(2)Email: retained for the same period; where a partnership or dispute requires it, it may be kept longer on a necessary basis with a further explanation.
(3)Visit statistics: rotated weekly, kept for about 12 weeks at most. Security logs: no more than 90 days.
(4)Backups: overwritten as the backup cycle rotates, for no more than 90 days; restored data remains subject to this policy.
(5)Local storage: stored in your browser and deleted when you clear browser data. We cannot read or restore it remotely.
(6)After the period ends, consent is withdrawn or the purpose is fulfilled, we delete or anonymise the data, unless a law requires retention.
7. Security and incidents
(1)The site uses HTTPS in transit. Administrative APIs use a separate access token, the database account has least privilege, and form writes use parameterised queries.
(2)Forms do not store IP addresses or browser identifiers. An IP address may be held briefly in server memory for rate limiting, is never written to the database, and is cleared when the process restarts.
(3)We rotate logs weekly, restrict administrative access and check account permissions and backup availability periodically.
(4)If personal information is or may be leaked, altered or lost, we will take immediate remedial action, report to the regulator as required, and notify affected users by email or a prominent site notice.
8. Your rights
(1)Know and access: you may ask what we process, why and for how long.
(2)Copy and portability: you may request a copy of what you submitted; where conditions are met, ask us to transfer it to a designated processor.
(3)Correct and complete: you may ask us to correct or complete inaccurate or incomplete information.
(4)Delete: where the purpose is fulfilled, consent is withdrawn, processing is unlawful or you ask us to delete, we will delete it unless retention is required by law.
(5)Withdraw consent: email open@gucantech.cn with “withdraw consent + the contact you used”. We will stop processing after verification. Withdrawal does not affect processing already carried out on consent.
(6)Explain and object: you may ask for an explanation of our rules or object to processing based solely on automated decisions (we currently carry out none).
(7)Response time: we reply within 15 working days after receiving and verifying a request. If more time is needed we will explain why. If we refuse, we will state the basis and complaint routes.
(8)Complaints: you may complain to the cyberspace or market-regulation authorities, or bring proceedings in a competent people’s court.
9. Local storage and visit statistics
(1)Local storage: localStorage/sessionStorage remember reading progress, recently viewed pages, placement-log checkboxes and language choice. The data stays on your device, is not uploaded, and is deleted when you clear browser data.
(2)What statistics record: page path, time, internal-referral flag and viewport size. No name, mobile number, device identifier or location; no profiling; no advertising.
(3)Where it goes: only to the same-origin endpoint /api/pv, written by nginx as one log line that does not contain the IP address.
(4)How to refuse: enable DNT/GPC, use a private window, or block this site’s scripts. Browsing and form submission continue to work.
(5)Third-party analytics: none.
10. Changes and contact
(1)When this policy changes we will show the new version and effective date here, with prominent notice at least 7 days before it takes effect.
(2)For material changes to purposes, methods, categories or third-party sharing, we will explain more prominently; where the law requires fresh consent, we will ask for it separately in the relevant form or in the mini program.
(3)Previous versions are available on request at open@gucantech.cn.
(4)Contact: open@gucantech.cn (please use the subject “personal information”). Controller address: see the About page.
Legal basis
(5)Personal Information Protection Law of the PRC (in force 1 November 2021)
(6)Regulations on the Administration of Network Data Security (in force 1 January 2025)
(7)Cybersecurity Law of the PRC (2025 amendment)
(8)Civil Code of the PRC (personality rights and tort liability)
Gucan Technology (Ganzhou) Co., Ltd.