Privacy Policy

1. Who We Are

eSUN Technology ("we", "us", "our") is an IT services and consulting firm headquartered in Shanghai, China. We provide infrastructure, cybersecurity, and compliance services to financial institutions operating in China. This policy applies to our website at esuntechnology.com and any communications we have with prospective or existing clients.

2. Information We Collect

We collect information in two ways:

• —Information you provide directly — When you submit a contact form, send us an email, or communicate with us by other means, we collect your name, company name, email address, and any other details you choose to share.
• —Information collected automatically — When you visit our website, we may collect standard server log data such as your IP address, browser type, referring URL, and pages viewed. We do not use tracking cookies or third-party analytics platforms.

3. How We Use Your Information

We use the information we collect solely to:

• —Respond to your inquiries and evaluate whether an engagement is appropriate
• —Communicate with you regarding ongoing or prospective service relationships
• —Fulfil our contractual obligations to existing clients
• —Comply with applicable legal and regulatory requirements

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal data, we rely on: (a) your consent, where you have provided it; (b) the performance of a contract or pre-contractual steps at your request; (c) our legitimate interests in operating our business and maintaining client relationships; and (d) compliance with legal obligations.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• —Form service providers — when you submit a contact or subscription form on our website, your submission is transmitted through a third-party form service (Web3Forms) solely to deliver your message to our inbox. This service is used only to relay your inquiry and not for any other purpose.
• —Service providers who assist us in operating our website or business (e.g. email hosting), bound by confidentiality obligations
• —Professional advisors such as lawyers or accountants, where necessary
• —Regulatory authorities or law enforcement, where required by law

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Inquiry data from prospective clients who do not engage our services is typically deleted within 12 months of last contact. Client data is retained in accordance with our contractual and regulatory obligations.

7. Data Security

We apply technical and organisational measures appropriate to the sensitivity of the data we hold. These include access controls, encrypted communications, and internal data handling policies consistent with our ISO 27001 certification.

8. Your Rights

Depending on your jurisdiction, you may have rights including: access to your personal data; correction of inaccurate data; deletion of your data; restriction or objection to processing; and data portability. To exercise any of these rights, please contact us at the address below. We will respond within the timeframe required by applicable law.

9. Cross-Border Data Transfers

Our operations are based in China. If you are located outside China and contact us, your personal data may be transferred to and processed in China. We take steps to ensure such transfers comply with applicable data protection laws, including China's Personal Information Protection Law (PIPL) and, where relevant, GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically.

11. Contact

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at: contact@esuntechnology.com