Privacy Policy

Effective Date: August 3, 2026 • Version 2.1 • Published by ProudSail, a division of Kunming JiaoGaoHang Trading Co., Ltd.

1. Introduction

ProudSail, the computer systems design and related services practice operated by Kunming JiaoGaoHang Trading Co., Ltd., is committed to protecting the privacy of every individual who interacts with our services, visits our website at proudsail.buzz, or communicates with our team. This Privacy Policy explains in clear and comprehensive terms how we collect, use, store, share, and safeguard personal data.

ProudSail develops and delivers professional computer systems design, IT consulting, systems integration, cloud infrastructure engineering, cybersecurity assessment, and data engineering services to clients around the world. Our principal place of business is Attach 1-PL, No. 258 Xinying Road, Donghua Street, Panlong District, Kunming, Yunnan, 650000, China (CN). Throughout this policy, references to ProudSail, we, us, or our refer to this operational entity and its personnel.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision contained herein, you should discontinue use of our website and refrain from providing personal data to us.

2. Scope and Applicability

This Privacy Policy applies to all personal data collected through the ProudSail website located at proudsail.buzz, any subdomains thereof, our email communications, service inquiry forms, client onboarding processes, and any other interaction where ProudSail acts as a data controller with respect to personal information.

The policy covers data subjects including website visitors, prospective clients, active clients, vendor representatives, job applicants, and any other natural person whose personal data comes into our possession through legitimate business operations. It does not apply to personal data that we process solely on behalf of a client in our capacity as a data processor, where the terms of processing are governed by a separate data processing agreement executed between ProudSail and that client.

Our services are directed at business clients and professional organizations. While individuals may browse our website and submit inquiries, our primary data processing activities relate to business-to-business relationships and the delivery of computer systems design and related professional services.

3. Information We Collect

We collect several categories of personal data, each serving a distinct purpose within our business operations. The categories are described below.

3.1 Contact and Identity Information

When you fill out a contact form on our website, send us an email, or initiate a service inquiry, we collect your full name, email address, phone number, company name, job title, and any additional information you choose to include in your message. This category also encompasses business contact details shared during networking events, trade conferences, and professional introductions.

3.2 Technical and Usage Data

When you visit our website, our servers automatically log certain technical information including your Internet Protocol address, browser type and version, operating system, referring source, pages visited, time and date of visit, time spent on each page, and other diagnostic data. This information is collected through server logs and analytics tools and is used in aggregate form to understand how visitors interact with our website.

3.3 Communication Records

We retain copies of email correspondence, contact form submissions, meeting notes, and records of telephone conversations where you have been notified of the recording. These records help us maintain continuity in client relationships and ensure that service commitments are accurately documented and fulfilled.

3.4 Service Engagement Data

For clients who engage our computer systems design and related services, we collect information necessary to perform the contracted work. This may include system specifications, network diagrams, access credentials provided by the client, project requirements documentation, and deliverables produced during the engagement. This data is processed strictly in accordance with the terms of our service agreements.

4. Methods of Data Collection

We collect personal data through several distinct channels, each designed to be transparent and consistent with the expectations of a professional services organization.

4.1 Direct Collection

The majority of personal data we hold is provided directly by you. This occurs when you complete our website contact form, send correspondence to any proudsail.buzz email address, participate in a telephone call with our team, attend a consultation meeting, or submit a request for proposal. In each case, you have control over the information you choose to share with us.

4.2 Automated Collection

As you navigate our website, certain data is collected automatically through cookies, web beacons, and server logging mechanisms. This automated collection enables us to understand traffic patterns, improve website performance, and maintain the security of our digital infrastructure. The specific technologies involved are detailed in Section 6 of this policy.

4.3 Third-Party Sources

In limited circumstances, we may receive personal data from third-party sources such as professional networking platforms, industry directories, and referral partners. When we obtain data from such sources, we verify that the provider has a lawful basis for sharing the information and that our use falls within the scope of the consent or legitimate interest under which the data was originally collected.

5. Purpose and Legal Basis for Processing

ProudSail processes personal data only for specified, explicit, and legitimate purposes. We do not process personal data in a manner incompatible with the purposes for which it was collected. The legal bases upon which we rely include the following.

5.1 Contractual Necessity

When you engage ProudSail for computer systems design or related services, we process your personal data to perform the contractual obligations we have undertaken. This includes communicating project requirements, delivering agreed-upon services, issuing invoices, and providing ongoing support. Without this processing, we would be unable to fulfill our commitments under the service agreement.

5.2 Legitimate Interests

We process certain personal data on the basis of our legitimate business interests, provided that those interests are not overridden by your data protection rights. Our legitimate interests include improving our website and services, responding to general inquiries, conducting business development activities, ensuring network and information security, and maintaining accurate business records for compliance purposes.

5.3 Consent

Where required by applicable law, we obtain your explicit consent before processing your personal data for specific purposes. This applies particularly to the use of non-essential cookies, the inclusion of your details in marketing communications, and any processing activity that falls outside the scope of contractual necessity or legitimate interest. You may withdraw consent at any time by contacting us using the details provided in Section 14.

5.4 Legal Obligation

We may process personal data as necessary to comply with applicable laws, regulations, court orders, or lawful requests from government authorities. This includes tax record-keeping requirements, anti-money laundering regulations, and data retention obligations imposed by the jurisdictions in which we operate.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. A cookie is a small text file that is placed on your device when you visit a website. Cookies may be session-based or persistent.

6.1 Types of Cookies We Use

Essential cookies are necessary for the website to function properly and cannot be disabled. These cookies enable core functionality such as page navigation, secure form submission, and access to protected areas of the site. They do not store any personally identifiable information.

Analytics cookies help us understand how visitors engage with our website by collecting and reporting information anonymously. We use these cookies to measure page views, track traffic sources, identify popular content, and detect technical issues. The data collected through analytics cookies is aggregated and does not identify individual users.

Functional cookies allow the website to remember choices you make and provide enhanced, more personalized features. These may include remembering your language preferences or the region you are in.

6.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, delete existing cookies, or alert you when a website attempts to set a cookie. Please note that disabling essential cookies may affect the functionality of our website and your ability to use certain features.

7. Data Storage and Retention

ProudSail stores personal data on secure servers located in controlled-access data centers. Our primary data storage infrastructure is maintained with industry-standard physical, technical, and administrative safeguards designed to protect against unauthorized access, alteration, disclosure, or destruction.

7.1 Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention periods vary by category of data and purpose of processing.

Contact form submissions and inquiry records are retained for a period of twenty-four months from the date of last communication, after which they are securely deleted unless a client relationship has been established. Active client records are retained for the duration of the engagement plus seven years to comply with tax and commercial record-keeping obligations. Technical and usage data collected through automated means is retained in identifiable form for a maximum of fourteen months before being permanently anonymized or deleted.

7.2 Data Deletion

When personal data reaches the end of its retention period, we securely delete or irreversibly anonymize it using industry-recognized methods. Paper records containing personal data are shredded using cross-cut shredders, and electronic records are purged from active systems and backups in accordance with our data disposal procedures.

8. Security Safeguards

We implement and maintain technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security framework is reviewed and updated regularly to address evolving threats and vulnerabilities.

8.1 Technical Measures

Our technical safeguards include transport-layer encryption for all data in transit using TLS protocols, encryption of sensitive data at rest using AES-256 or equivalent standards, network firewalls with intrusion detection and prevention systems, regular vulnerability scanning and penetration testing, multi-factor authentication for administrative access, and comprehensive access logging with automated anomaly detection.

8.2 Organizational Measures

Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. All team members receive privacy and data protection training upon joining and participate in annual refresher sessions. We maintain documented data protection policies and procedures, conduct periodic risk assessments, and have established incident response protocols to address any potential data breaches promptly and effectively.

8.3 Breach Notification

In the event of a personal data breach, we will assess the risk to affected individuals and notify relevant supervisory authorities and data subjects in accordance with applicable legal requirements. Notifications will describe the nature of the breach, the categories and approximate number of data subjects and records concerned, the likely consequences, and the measures taken or proposed to address the breach.

9. Third-Party Sharing and Disclosure

ProudSail does not sell, rent, or trade personal data to third parties for their own marketing purposes. We may share personal data with third parties only in the limited circumstances described below, and always under contractual terms that require the recipient to protect the data in accordance with this policy and applicable law.

9.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including website hosting, email delivery, analytics, and cloud infrastructure services. These providers are contractually bound to process personal data only on our documented instructions and to implement appropriate security measures. We conduct due diligence on all service providers before engagement and monitor their compliance throughout the relationship.

9.2 Legal and Regulatory Disclosure

We may disclose personal data if required to do so by law, regulation, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our clients or the public. Where permitted by law, we will make reasonable efforts to notify you of any such disclosure.

9.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, personal data held by ProudSail may be among the assets transferred. We will notify affected individuals before their personal data becomes subject to a different privacy policy as a result of such a transaction.

10. International Data Transfers

ProudSail is headquartered in Kunming, Yunnan, China, and serves clients across multiple jurisdictions. As a result, personal data we collect may be transferred to, stored in, and processed in countries other than the country in which the data was originally collected. These countries may have data protection laws that differ from those in your jurisdiction.

10.1 Transfer Safeguards

When we transfer personal data across international borders, we implement appropriate safeguards to ensure that the data receives an adequate level of protection. These safeguards may include standard contractual clauses approved by relevant regulatory authorities, data processing agreements that impose equivalent obligations on recipients, and technical measures such as encryption and access controls that travel with the data.

10.2 Compliance with Regional Frameworks

We monitor developments in international data protection law and adapt our transfer mechanisms accordingly. For transfers from jurisdictions that impose specific transfer requirements, we implement the mechanisms prescribed by the applicable regulatory framework. If you have questions about the specific safeguards applied to a particular transfer, please contact us using the details provided in Section 14.

11. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding the personal data we hold about you. ProudSail respects these rights and provides mechanisms for you to exercise them.

11.1 Right of Access

You have the right to request confirmation as to whether we process your personal data and, where that is the case, to obtain a copy of the personal data along with information about the purposes of processing, the categories of data concerned, and the recipients or categories of recipients to whom the data has been or will be disclosed.

11.2 Right to Rectification

If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it. We will respond to rectification requests within a reasonable timeframe and will communicate any corrections to recipients to whom the data has been disclosed, where feasible.

11.3 Right to Erasure

In certain circumstances, you may request that we delete your personal data. These circumstances include situations where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where the data has been processed unlawfully. We will evaluate each erasure request against our legal obligations and legitimate interests before taking action.

11.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data under certain conditions, such as where you contest the accuracy of the data or object to processing based on legitimate interests. During the restriction period, we will store your data but not otherwise process it.

11.5 Right to Data Portability

Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted directly to another controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You may also object to the processing of your personal data for direct marketing purposes at any time, and we will cease such processing promptly upon receiving your objection.

11.7 Exercising Your Rights

To exercise any of the rights described above, please submit a written request to chat@proudsail.buzz with the subject line Data Subject Request. We will acknowledge your request within five business days and respond substantively within thirty calendar days. We may need to verify your identity before processing your request and may request additional information to confirm that you are the data subject concerned.

12. Children's Privacy

Our website and services are not directed at individuals under the age of eighteen. ProudSail does not knowingly collect personal data from children, and we do not target our marketing or service offerings toward minors. The computer systems design and related services we provide are business-to-business in nature and are intended for use by adult professionals and organizations.

If we become aware that we have inadvertently collected personal data from a child under the age of eighteen without verifiable parental consent, we will take immediate steps to delete such data from our records. If you believe that a child has provided us with personal data, please contact us immediately using the details in Section 14 so that we can investigate and take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes, we will post the revised policy on this page and update the effective date at the top of the document.

For significant changes that materially affect your rights or the way we process personal data, we will provide additional notice through prominent posting on our website or, where we have your contact details, through direct email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Your continued use of the ProudSail website or services after the effective date of an updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of our website and services and contact us to discuss the disposition of any personal data we may hold about you.

14. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please reach out to us through any of the following channels.

Primary Contact

Email: chat@proudsail.buzz
Phone: +1 239 506 2282
Website: proudsail.buzz

Registered Address

ProudSail
c/o Kunming JiaoGaoHang Trading Co., Ltd.
Attach 1-PL, No. 258 Xinying Road
Donghua Street, Panlong District
Kunming, Yunnan — 650000
China (CN)

Data Protection Lead

Our designated data protection contact is available at the email address above. Please include Attention: Data Protection in your subject line to ensure prompt routing to the appropriate team member. We are committed to responding to all privacy-related inquiries within five business days and resolving any concerns to your satisfaction.

Supervisory Authority

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement. We encourage you to contact us first so that we can address your concerns directly, but you retain the right to approach regulatory authorities at any time.