Privacy Policy
陕西帆腾网络科技有限公司 — Sail Surge
Last updated: June 20, 2026
1. Introduction
Sail Surge, operating as 陕西帆腾网络科技有限公司 (Shaanxi Fanteng Network Technology Co., Ltd.), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at sailsurge.autos, communicate with us, or engage our computer systems design and network technology services.
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide when you:
- Submit a contact form or inquiry through our website, including your name, email address, phone number, company name, and the content of your message.
- Communicate with us via email at kai.song@sailsurge.autos or by telephone at +15312941687.
- Enter into a service agreement, contract, or business relationship with us, at which point we collect business contact details, billing information, and project specifications necessary to deliver our services.
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical information through standard web server logs and analytics. This may include:
- Internet Protocol (IP) address and approximate geolocation derived from it.
- Browser type, version, and language preferences.
- Operating system and device type.
- Referring URL, pages visited, and time spent on each page.
- Date and time of access, and HTTP status codes.
This information is collected in aggregate and is not used to identify individual visitors unless combined with other personally identifying information for security or diagnostic purposes.
2.3 Cookies and Similar Technologies
Our website uses minimal cookies for essential functionality. We do not deploy advertising cookies, third-party tracking cookies, or behavioral profiling mechanisms. Specifically:
- Session cookies may be used to maintain form state and navigation preferences during your visit. These expire when you close your browser.
- We do not use persistent cookies for tracking across sessions or across websites.
- We do not integrate third-party analytics platforms that set their own cookies.
Most web browsers allow you to control cookie settings. You may configure your browser to reject all cookies or to alert you when a cookie is being set. Disabling cookies will not materially affect your ability to use our website.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: To respond to inquiries, provide requested information about our services, prepare proposals, and deliver the computer systems design and network technology services you have engaged us to perform.
- Communication: To correspond with you regarding your projects, send service-related updates, and address your questions or concerns.
- Business operations: To manage contracts, process invoices, maintain business records, and fulfill legal and regulatory obligations.
- Website improvement: To analyze aggregate usage patterns, diagnose technical issues, and improve the performance and content of our website.
- Security: To detect, prevent, and respond to unauthorized access, fraudulent activity, or violations of our Terms of Service.
- Legal compliance: To comply with applicable laws, regulations, court orders, or lawful governmental requests within the People's Republic of China and relevant jurisdictions.
4. Legal Basis for Processing
Our processing of personal information is grounded on the following legal bases under the Personal Information Protection Law of the People's Republic of China (PIPL) and applicable regulations:
- Consent: Where you have given clear, informed consent for us to process your personal data for a specific purpose, such as responding to a contact form submission.
- Contractual necessity: Where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.
- Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services and ensuring network security, provided those interests are not overridden by your rights and interests.
- Legal obligation: Where processing is necessary to comply with a legal or regulatory obligation to which we are subject.
5. Data Sharing and Disclosure
We do not sell, rent, trade, or otherwise disclose your personal information to third parties for their own marketing or commercial purposes. We may share your information only in the following limited circumstances:
- Service providers: With trusted third-party vendors who perform functions on our behalf, such as web hosting, email delivery, and IT infrastructure management. These providers are contractually bound to process data only on our instructions and to maintain confidentiality and security standards at least as protective as those set forth in this policy.
- Business transfers: In connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, provided the receiving party agrees to honor the terms of this Privacy Policy.
- Legal requirements: When required by law, regulation, subpoena, court order, or governmental authority within the People's Republic of China, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
- With your consent: In any other circumstance with your explicit prior consent.
6. Cross-Border Data Transfers
Sail Surge is headquartered in the People's Republic of China, and your data is primarily stored and processed on servers located within mainland China. In the event that data must be transferred outside of China for technical or operational reasons, we will ensure that such transfers comply with the requirements of the PIPL and the Cybersecurity Law of the People's Republic of China, including conducting any required security assessments and implementing standard contractual clauses or other approved transfer mechanisms.
If you are accessing our website from outside of China, you acknowledge that your information will be transferred to and processed in China, where data protection laws may differ from those in your jurisdiction.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined by the following criteria:
- Contact form submissions and general inquiries: retained for up to 24 months from the date of last correspondence, after which they are securely deleted.
- Client project data and business records: retained for the duration of the client relationship and for a period of at least 5 years thereafter, in accordance with Chinese accounting and tax record-keeping requirements under the Accounting Law of the People's Republic of China.
- Server logs and technical data: retained in rotating logs for up to 90 days for security and diagnostic purposes.
- Contractual and legal documents: retained for the period required by applicable statutes of limitation and regulatory obligations.
Upon expiration of the applicable retention period, personal information is securely deleted, anonymized, or irreversibly aggregated.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
- Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols.
- Encryption of sensitive data at rest using AES-256 or equivalent encryption standards.
- Access controls limiting data access to authorized personnel on a need-to-know basis, enforced through role-based access management.
- Regular security assessments, vulnerability scanning, and penetration testing of our infrastructure.
- Physical security controls at data center facilities, including access logging, surveillance, and environmental safeguards.
- Employee training on data protection obligations and secure data handling practices.
- Incident response procedures and breach notification protocols in compliance with PIPL requirements.
While we strive to protect your information, no method of electronic transmission or storage is absolutely secure. We cannot guarantee the absolute security of your data, and you provide information at your own risk.
9. Your Rights
Under the Personal Information Protection Law of the People's Republic of China and, where applicable, other data protection regulations, you have the following rights regarding your personal information:
- Right to know and access: You may request confirmation of whether we process your personal data, and if so, obtain a copy of that data along with information about the purposes and methods of processing.
- Right to correction: You may request that we correct or complete any inaccurate or incomplete personal information we hold about you.
- Right to deletion: You may request that we delete your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent on which the processing is based.
- Right to restrict processing: You may request that we restrict the processing of your personal information in certain situations, such as while we verify the accuracy of data you have contested.
- Right to data portability: You may request to receive your personal information in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to complain: You have the right to lodge a complaint with the relevant supervisory authority, including the Cyberspace Administration of China (CAC), if you believe our processing of your personal data violates applicable law.
To exercise any of these rights, please contact us using the details provided in Section 11. We will respond to your request within 30 calendar days. We may require verification of your identity before processing your request.
10. Children's Privacy
Our website and services are not directed to, nor do we knowingly collect personal information from, individuals under the age of 14, in compliance with the Provisions on the Protection of Children's Personal Information Online of the People's Republic of China. If we become aware that a child under 14 has provided us with personal information, we will take immediate steps to delete such information. If you believe a child under 14 has provided us with personal data, please contact us immediately.
11. Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:
Sail Surge / 陕西帆腾网络科技有限公司
Data Protection Officer
Unit 1002, Building 12, Longji Taihe Wanhe Jun
Gaozhuang Village, Gaozhuang Town, Jinghe New City
Xihou New District, Xi'an, Shaanxi 710000
People's Republic of China
Email: kai.song@sailsurge.autos
Phone: +15312941687
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:
- Post the revised policy on this page with an updated effective date.
- Provide a prominent notice on our website for a period of at least 30 days following the update.
- Notify existing clients directly via email if the changes materially affect the way we handle their data.
Your continued use of our website or services after the effective date of any revised policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.
13. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the People's Republic of China. Any disputes arising from or relating to this policy shall be subject to the jurisdiction of the courts of Xi'an, Shaanxi Province.