Privacy Policy

Last Updated: June 1, 2025

Quiet Oath (operated by Shaanxi Weinuo Network Technology Co., Ltd.) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our computer systems design services. It also describes your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We may collect the following categories of personal data when you interact with our website or services:

• Identity Data: Name, job title, company name, and professional contact details.
• Contact Data: Email address, phone number, and postal address.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services — including pages viewed, search queries, and referral URLs.
• Communication Data: Records of correspondence when you contact us via email, phone, or contact forms.
• Project Data: Technical specifications, system requirements, and other information you share in the course of engaging our computer systems design services.

2. How We Collect Your Data

We collect data through:

• Direct interactions: When you fill out forms, correspond with us, subscribe to updates, or request a quote.
• Automated technologies: Cookies, server logs, and similar tracking technologies — subject to your consent where required by law.
• Third parties: Business partners, analytics providers, and publicly available sources (only where lawful and transparent).

3. How We Use Your Data

We use your personal data only for legitimate, specified purposes:

• To provide and manage our computer systems design services, including system architecture, software development, and technical consulting.
• To communicate with you about projects, proposals, support, and service updates.
• To improve our website, services, and customer experience.
• To comply with legal obligations, including data protection laws and regulatory requirements.
• To prevent fraud, unauthorized access, and other harmful activities.
• For internal analytics, reporting, and business planning — always using anonymized data where feasible.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: Trusted third parties who assist with hosting, analytics, email delivery, and payment processing — all bound by strict data processing agreements.
• Professional advisors: Lawyers, auditors, and insurers where necessary for compliance or dispute resolution.
• Authorities: Law enforcement, regulators, or courts if required by applicable law or to protect our legal rights.
• Business transfers: In the event of a merger, acquisition, or asset sale — with notice to you and continued protection of your data.

5. International Data Transfers

As a company based in China, your personal data may be transferred to, stored in, and processed in countries outside your own — including China and the United States. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Binding corporate rules and data processing agreements.
• Verification that recipients maintain equivalent data protection standards.

By using our services, you acknowledge this transfer and the safeguards we have implemented.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements. Specific retention periods:

• Contact and communication data: 3 years after last interaction.
• Project and service data: 5 years after project completion.
• Technical logs and analytics: 12 months.
• Data subject to legal holds: retained until the hold is lawfully released.

When data is no longer needed, we securely delete or anonymize it.

7. Your Rights (GDPR & CCPA)

GDPR Rights (for users in the European Economic Area, UK, and Switzerland)

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure (Right to be forgotten): Request deletion of your data where there is no legitimate reason for continued processing.
• Right to restrict processing: Limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format and transfer it to another controller.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

CCPA Rights (for California residents)

• Right to know: Request disclosure of the categories and specific pieces of personal data we have collected about you, the sources, purposes, and third parties with whom we share it.
• Right to delete: Request deletion of personal data we have collected from you, subject to certain exceptions.
• Right to opt out of sale: We do not sell your personal data. If this practice ever changes, we will provide a clear opt-out mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to correct: Request correction of inaccurate personal data.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze traffic, and improve your experience. You can control cookies through your browser settings and our cookie consent tool.

Types of cookies we use:

• Essential cookies: Required for the website to function properly (e.g., security, session management).
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics with IP anonymization).
• Preference cookies: Remember your settings and choices.

We obtain your consent for non-essential cookies before they are placed, in compliance with ePrivacy Directive and GDPR.

9. Data Security

We implement robust technical and organizational measures to protect your personal data:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Access controls based on the principle of least privilege.
• Regular vulnerability assessments and penetration testing.
• Employee training on data protection and confidentiality.
• Incident response and breach notification procedures.

While no system is completely secure, we take all reasonable steps to prevent unauthorized access, disclosure, or loss.

10. Third-Party Links

Our website may contain links to third-party sites (e.g., partners, industry resources). We are not responsible for their privacy practices. We encourage you to read the privacy policies of every site you visit.

11. Children's Privacy

Our services are directed to professionals and businesses. We do not knowingly collect data from individuals under the age of 16. If we become aware that a child has provided us with personal data, we will delete it immediately. If you believe a child has submitted data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Where required by law, we will seek your consent.

13. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all inquiries within 5 business days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (for GDPR) or the California Attorney General (for CCPA).

Quiet Oath — Computer Systems Design. Built with trust, engineered for privacy.