Privacy Policy

Last updated: June 23, 2026

Xi'an Chuanxian Xingfeng Network Technology Co., Ltd., doing business as WindFlow, with its registered office at Room 10503, Building 2, Zhenye Bogongguan, No. 800 Guang'an Road, Chanba Ecological District, Xi'an City, Shaanxi Province, 710000, China, operates the website windflow.lol. This Privacy Policy describes how WindFlow collects, uses, discloses, and protects information obtained from visitors to our website and from individuals who engage with our computer integrated systems design services.

1. Information We Collect

WindFlow collects information that you voluntarily provide when you interact with our website or communicate with our team. The categories of information we may collect include:

• Contact Information: When you submit a contact form, request a consultation, or email us directly, we collect your name, email address, phone number, company name, job title, and any other details you choose to share in your message.
• Project Information: When you engage with us regarding a potential or active systems design project, we collect information about your technical requirements, infrastructure specifications, performance targets, timeline constraints, and other operational details necessary for us to evaluate and respond to your inquiry.
• Communication Records: We retain copies of correspondence, including emails, form submissions, and meeting notes, to maintain a record of our discussions and to deliver consistent service across engagements.
• Website Usage Data: When you visit windflow.lol, our hosting infrastructure automatically collects standard server log data, including your IP address, browser type and version, referring page, pages visited, timestamps, and other diagnostic data. This information is used solely for operational monitoring, security, and performance optimization.

2. How We Use Information

WindFlow uses the information we collect for the following purposes:

• Service Delivery: To evaluate, design, and deliver computer integrated systems solutions that meet your specifications. This includes technical analysis, component selection, architecture planning, and ongoing project communication.
• Business Communication: To respond to your inquiries, provide information about our services, send proposals and statements of work, and communicate about project milestones, deliverables, and timelines.
• Website Operations: To monitor and improve the performance, security, and availability of windflow.lol, including diagnosing technical issues and detecting unauthorized access attempts.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests. This includes retaining records as required by the laws of the People's Republic of China and other jurisdictions in which we operate.
• Business Development: With your consent, to inform you about relevant service offerings, technical capabilities, case studies, or events that may be of interest to your organization. You may opt out of such communications at any time.

3. Legal Basis for Processing

WindFlow processes personal information on the following legal bases, depending on the nature of the data and the context of collection:

• Consent: Where you have given clear, affirmative consent for us to process your personal data for a specific purpose, such as receiving marketing communications or submitting a contact form.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract, such as preparing a proposal or statement of work.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, securing our website, and maintaining business records, provided those interests are not overridden by your data protection rights.
• Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation to which WindFlow is subject, including tax, corporate, and data protection laws in the jurisdictions where we operate.

4. Data Sharing and Disclosure

WindFlow does not sell, rent, or trade personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors who provide essential business operations services on our behalf, including website hosting, email delivery, cloud infrastructure, and analytics. These providers are contractually bound to process data only as instructed by WindFlow and to implement appropriate security measures.
• Professional Advisors: We may share information with our legal counsel, auditors, and other professional advisors as necessary to protect our legitimate interests and comply with legal obligations.
• Legal Requirements: We may disclose information if required to do so by law, regulation, court order, or valid governmental request, or to protect the rights, property, or safety of WindFlow, our clients, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, client information may be among the assets transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

5. Data Retention

WindFlow retains personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined by the following criteria:

• Client project records are retained for the duration of the client relationship and for a period of seven years following project completion, in accordance with applicable statute of limitations periods and tax record-keeping requirements.
• Contact form submissions and general inquiry correspondence are retained for up to twenty-four months unless they result in an ongoing client relationship, in which case they are governed by the client record retention period.
• Website server logs are retained on a rolling thirty-day basis for operational and security monitoring purposes.
• Marketing communication consent records are retained until you withdraw consent, after which we maintain a suppression record to ensure we do not contact you again inadvertently.

6. Data Security

WindFlow implements appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit using TLS 1.3 and encryption of data at rest using AES-256.
• Role-based access controls that limit data access to personnel who require it for legitimate business purposes.
• Multi-factor authentication for all administrative access to systems that process personal data.
• Regular security assessments, vulnerability scanning, and penetration testing of our infrastructure.
• Security awareness training for all personnel who handle client or visitor information.
• Incident response procedures that ensure prompt detection, containment, and notification in the event of a data breach.

While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security, but we are committed to continuously improving our safeguards.

7. International Data Transfers

WindFlow is headquartered in Xi'an, China, and our primary data processing activities occur within the People's Republic of China. If you are located outside China and choose to provide information to us, your data will be transferred to and processed in China. By submitting your personal information, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection in the jurisdiction where it is processed, consistent with this Privacy Policy and applicable data protection laws.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request that we correct inaccurate or incomplete personal data.
• Erasure: You may request that we delete your personal data, subject to legal retention requirements.
• Restriction: You may request that we limit the processing of your personal data in certain circumstances.
• Portability: You may request a structured, machine-readable copy of your data for transfer to another controller.
• Objection: You may object to processing based on legitimate interests, including profiling and direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at haoxuan@windflow.lol or write to our registered office address. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

WindFlow's website windflow.lol uses only essential, first-party cookies and does not deploy tracking cookies, advertising cookies, or third-party analytics scripts. Specifically:

• Our website does not use Google Analytics, Facebook Pixel, or any third-party tracking service.
• We do not use cookies for advertising, remarketing, or behavioral profiling purposes.
• Any session identifiers used for website functionality are strictly necessary for the operation of the site and are deleted when you close your browser.

You can configure your browser to reject all cookies or to alert you when a cookie is being set. Please note that blocking essential cookies may affect the functionality of certain website features.

10. Children's Privacy

WindFlow's website and services are directed at business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at haoxuan@windflow.lol and we will take steps to delete such information.

11. Changes to This Privacy Policy

WindFlow may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will post the updated policy on this page with a revised Last updated date. We encourage you to review this page periodically. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or WindFlow's data handling practices, please contact us:

Data Protection Officer
Xi'an Chuanxian Xingfeng Network Technology Co., Ltd.
Room 10503, Building 2, Zhenye Bogongguan
No. 800 Guang'an Road, Chanba Ecological District
Xi'an City, Shaanxi Province, 710000, China
Email: haoxuan@windflow.lol
Phone: +1 (737) 425-0877

If you believe our processing of your personal data violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.