Last Updated: September 22, 2026
This Privacy Policy applies to 9 Rivers Distillery (accessible at https://nineriversdistillery.cn, hereinafter “the Website” or “we”) and explains how we collect, use, store, share, and protect your personal information during our operations within the People’s Republic of China, as well as the rights you have.
Important Notice: This Policy is formulated in accordance with the Personal Information Protection Law (PIPL), Data Security Law, Cybersecurity Law, Network Data Security Management Regulations, and relevant national standards of the People‘s Republic of China. Please read this Policy carefully before using the Website. If you do not agree, please do not use the Website.
1. Personal Information Processor
- Name: 久溪（福建龙岩）酒业有限公司
- Registered Address: 福建省龙岩市新罗区大池镇龙池路266号
- Contact: Privacy Officer
- Personal Information Protection Officer: Privacy Officer
- Contact Email: [email protected]
2. Collection and Purposes
We follow the principle of “minimum necessity” and collect personal information only for the following explicit and legitimate purposes. For sensitive personal information and provision of personal information to third parties, we will obtain your separate consent.
2.1 Information You Provide
| Scenario | Data Type | Purpose | Necessary? |
| Account registration | Mobile number, email | Account creation, verification | Yes |
| Purchase | Name, address, phone, payment info | Order fulfillment, delivery | Yes |
| Customer service | Name, contact, communication records | Respond to inquiries | Yes |
| Posting comments | Nickname, comment content | Public interaction | Optional |
2.2 Automatically Collected
| Data Type | Purpose | Necessary? |
| IP address, browser type, OS | Security, troubleshooting | Yes |
| Pages visited, time, duration | Analytics, optimization | Yes |
| Device identifiers | Security, fraud prevention | Yes |
| Cookies and similar technologies | See Section 6 | Varies |
2.3 Sensitive Personal Information
We do not collect sensitive personal information in principle. If necessary (e.g., location data for delivery), we will:
- Inform you of the necessity and impact on your rights in a prominent manner;
- Obtain your separate consent (via separate checkbox or pop-up);
- Apply strict technical and organizational safeguards.
3. Storage
Location: Your personal information is stored on servers within the People’s Republic of China.
Retention Periods: We retain personal information only for the minimum period necessary for the processing purposes, as follows:
| Data Type | Retention Period |
| Account data | Deleted/anonymized within [30] days after account cancellation |
| Order data | [10] years after completion (tax & consumer protection compliance) |
| Customer service records | [10] years after resolution |
| Automated logs | [1] months |
| Cookie data | Session cookies expire on browser close; persistent cookies max [1] months |
After these periods, we will delete or anonymize the personal information, unless otherwise required by law.
4. Sharing, Transfer & Public Disclosure
We do not sell your personal information. Sharing occurs only in these circumstances:
- Service providers: We share necessary data with entrusted parties for payment, delivery, etc., bound by contracts to process data per this Policy and PIPL.
- Affiliates: Shared only as necessary, with required compliance.
- Legal requirements: Disclosure required by law, judicial, or administrative authorities.
- Your separate consent: When providing your data to other processors, we will inform you of the recipient and obtain your separate consent.
5. Cross-Border Data Transfer (If Applicable)
If your personal information is transferred outside the PRC, we will adopt one of the following lawful mechanisms:
- Security assessment organized by the national cyberspace authority;
- Personal information protection certification by a professional institution;
- Standard contract with the overseas recipient per regulations;
- Other conditions prescribed by law.
We will also inform you of the recipient‘s name, contact, purposes, methods, data types, and how to exercise your rights, and obtain your separate consent.
If no cross-border transfer occurs, delete this section or state clearly: “The Website does not provide personal information overseas.”
6. Cookies
We use cookies and similar technologies (e.g., web beacons) for operation, analytics, and experience improvement.
| Type | Purpose | Necessary? |
| Essential | Authentication, security, session | Yes (cannot disable) |
| Preference | Remember language, login | No |
| Analytics | Traffic statistics, behavior analysis | No (can disable) |
| Advertising | Relevant ads | No (can disable) |
You may manage cookies via browser settings; disabling essential cookies may affect functionality. We do not respond to “Do Not Track” signals.
7. Your Rights
Under PIPL, you have the following rights:
- Right to know and decide how your information is processed.
- Right to access and copy your personal information we hold.
- Right to rectify inaccurate or incomplete information.
- Right to erasure when the processing purpose is fulfilled, we cease services, you withdraw consent, processing is unlawful, or as required by law.
- Right to withdraw consent at any time (without affecting prior lawful processing).
- Right to cancel your account, upon which we will delete or anonymize your data.
- Right to explanation of our processing rules.
- Right to data portability to another processor you designate (where feasible per regulations).
- Right to complain to authorities.
Exercise: Contact us at [Email]. We will respond within 15 working days. We may verify your identity. Requests are free of charge; repeat or excessive requests may incur reasonable costs.
8. Minors’ Privacy
The Website is not directed to children under 18. We do not knowingly collect children‘s data. If you are a child, please read this Policy with your parent/guardian and use the Website only with their consent. If we discover collection without guardian consent, we will delete it promptly.
9. Data Security
We implement encryption, de-identification, access control, and security audits per national standards to protect your information.
Breach Notification: In the event of a data breach, we will immediately activate contingency plans, mitigate harm, and notify affected individuals via phone, SMS, email, or public notice, while reporting to authorities as required.
10. Updates
We may update this Policy. We will notify you before changes take effect via website notice or pop-up. If changes materially affect purposes, data types, or sharing, we will obtain new consent. Please review periodically.
11. Dispute Resolution
Disputes arising from this Policy or our processing shall first be resolved through friendly negotiation. If unresolved, you may file a lawsuit with a competent People’s Court or complain to regulatory authorities such as the Cyberspace Administration.
12. Contact Us
For any questions, concerns, or complaints:
- Email: [email protected]
- 公司名称：久溪（福建龙岩）酒业有限公司
- 公司地址： 福建省龙岩市新罗区大池镇龙池路266号
- Privacy Officer: Privacy Officer
We will respond within 15 working days.
Compliance Notes (English Version)
- Separate Consent: For sensitive personal information, third-party provision, and cross-border transfer, the Website must implement separate checkboxes or pop-ups at the interaction level; a single “agree to this Privacy Policy” is insufficient.
- Cross-Border Transfer Assessment: If personal information is transferred overseas, determine whether security assessment, standard contract filing, or certification is required based on volume thresholds.
- PIPIA: Prior to processing sensitive personal information, providing data to third parties, or cross-border transfer, conduct a Personal Information Protection Impact Assessment and retain records for at least three years.
- The Chinese version of this Policy is the governing version. In case of any discrepancy between the Chinese and English versions, the Chinese version shall prevail.