Beijing Hengtai Yingrun Human Resources Co., Ltd. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website hengtaiyr.com, use our mobile applications, or engage with our services.
1.1 Information You Provide
We may collect information that you voluntarily provide to us, including but not limited to:
- Name, email address, phone number, and postal address when you contact us or request services
- Business information when you engage our HR consulting or outsourcing services
- Resume and career information when using our employment guidance services
- Payment information when processing transactions
- Communication preferences and correspondence
1.2 Information Collected Automatically
When you visit our website or use our mobile applications, we may automatically collect certain information, including:
- Device identifiers, including IP address, device type, operating system
- Browser type and version
- Pages visited and time spent on our website
- Referring/exit pages and clickstream data
- Mobile device location (with your consent)
- App usage patterns and feature interaction data
We use the information we collect for the following purposes:
- To provide, maintain, and improve our HR services and mobile applications
- To process transactions and send related information
- To send you technical notices, updates, security alerts, and support messages
- To respond to your comments, questions, and customer service requests
- To communicate about products, services, offers, and events
- To monitor and analyze usage patterns and trends
- To personalize and improve your experience
- To detect, prevent, and address technical issues and fraud
- To comply with legal obligations
3. Data Protection
3.1 Data Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data during transmission and storage
- Access controls and authentication requirements
- Regular security assessments and audits
- Employee training on data protection and privacy
- Incident response procedures
- Secure data backup and recovery systems
3.2 Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we securely delete or anonymize it.
4. International Compliance
4.1 European Union - GDPR Compliance
For users located in the European Union or European Economic Area, we process personal data in accordance with the General Data Protection Regulation (GDPR). Under GDPR, we serve as a data controller for information collected through our services. The legal bases for processing include:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you
- Legal Obligation: Processing is necessary for us to comply with the law
- Legitimate Interests: Processing is necessary for our legitimate interests, provided these are not overridden by your rights
If you are located in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure of your personal data
- Restrict processing of your personal data
- Data portability
- Object to processing
- Lodge a complaint with a supervisory authority
4.2 California, USA - CCPA Compliance
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request disclosure of personal information collected, used, disclosed, or sold
- Right to Delete: You may request deletion of personal information collected
- Right to Opt-Out: You may opt out of the sale of personal information
- Right to Correct: You may request correction of inaccurate personal information
- Right to Limit Use: You may limit use of sensitive personal information
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
We do not sell personal information in the traditional sense. However, see Section 6 for information about advertising and analytics that may involve sharing certain data.
4.3 United Kingdom - UK GDPR Compliance
For users in the United Kingdom, we process personal data in accordance with UK GDPR and the Data Protection Act 2018. You have similar rights as those under EU GDPR.
4.4 Canada - PIPEDA Compliance
For users in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your personal information and request corrections.
4.5 Australia - Privacy Act Compliance
For Australian users, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You have rights regarding access, correction, and complaint handling.
4.6 Brazil - LGPD Compliance
For users in Brazil, we process personal data in accordance with the Lei Geral de Proteção de Dados (LGPD). You have rights to confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing.
4.7 Japan - APPI Compliance
For users in Japan, we comply with the Act on Protection of Personal Information (APPI). You have rights to disclosure, correction, cessation of use, and deletion of personal information.
4.8 South Korea - PIPA Compliance
For users in South Korea, we comply with the Personal Information Protection Act (PIPA). You have rights to access, correction, deletion, suspension of processing, and withdrawal of consent.
4.9 India - DPDP Act Compliance
For users in India, we comply with the Digital Personal Data Protection Act (DPDP Act). You have rights to access, correction, erasure, grievance redressal, and nominate representatives.
4.10 Other International Jurisdictions
We are committed to complying with applicable data protection laws in all jurisdictions where we operate. If you are located outside the aforementioned regions, you may have additional rights under local laws.
5. Mobile Applications
5.1 Google Play Compliance
Our mobile applications published on Google Play comply with Google's Developer Program Policies, including:
- Data Safety requirements and disclosures
- Play Console privacy policy requirements
- Children's Designed for Families requirements (if applicable)
- Advertisements policies for admob integration
- Permissions requirements and user consent
- App content and rating requirements
5.2 Apple App Store Compliance
Our mobile applications published on the Apple App Store comply with:
- App Store Review Guidelines
- Apple Developer Program License Agreement
- Privacy nutrition labels requirements
- Tracking transparency and ATT framework
- Children's category requirements (if applicable)
- Advertising and monetization policies
5.3 App Permissions
Our mobile applications may request the following permissions:
- Internet Access: Required for app functionality and services
- Device ID/Call Log: For analytics and advertising identification (where permitted)
- Camera/Microphone: For HR assessment features (with explicit consent)
- Storage: For caching and offline functionality
- Location: For localized services (optional, with consent)
- Notifications: For service updates and career alerts
6. Advertising & Analytics
6.1 Ad Monetization
Our mobile applications include advertising to support free access to services. We utilize the following advertising platforms:
Primary Ad Platforms:
- Google AdMob: Google's mobile advertising platform providing banner ads, interstitial ads, rewarded ads, and native ads
- Meta Audience Network: Facebook's advertising platform for mobile apps
- Unity Ads: Unity Technologies advertising platform for game and app monetization
- AppLovin MAX: Comprehensive ad monetization platform
- IronSource: Mobile advertising and monetization platform
- Vungle (by Liftoff): In-app video advertising platform
- Chartboost: Mobile game advertising and monetization
- AdColony: Mobile video advertising platform
- Pangle (by ByteDance): Global mobile advertising platform
- InMobi: Mobile advertising and monetization solutions
- Facebook Ads: Advertiser platform integration
- Microsoft Advertising: Cross-platform advertising
- Twitter/X Ads: Social platform advertising
- Snapchat Ads: Mobile advertising on Snapchat platform
- TikTok Ads: Mobile advertising on TikTok
- Amazon Ads: E-commerce and mobile advertising
- Samsung Ads: Mobile device advertising
- MyTarget: Russian and CIS region advertising
- Yandex Ads: Russian market advertising
- Mintegral: Cross-platform programmatic advertising
Ad Formats We Use:
- Splash Ads: Full-screen advertisements displayed during app launch or transition screens
- Rewarded Video Ads: Video advertisements that users can watch to earn in-app rewards, currency, or premium features
- Interstitial Ads: Full-screen advertisements displayed at natural transition points in the app experience
- Banner Ads: Rectangular advertisements displayed persistently at the top or bottom of the screen
- Native Ads: Advertisements designed to match the visual style and format of the app content
- Playable Ads: Interactive advertisements that allow users to try a demo before downloading
6.2 Ad Platform Compliance
All advertising platforms we use comply with:
- Platform-specific privacy policies and terms of service
- Applicable data protection regulations (GDPR, CCPA, etc.)
- Industry standards for mobile advertising
- Children's online privacy protection (COPPA) where applicable
- Platform guidelines for responsible advertising
6.3 Analytics
We use analytics services to understand how users interact with our services:
- Google Analytics: Website and app usage analytics
- Firebase: Mobile app analytics and performance monitoring
- Adjust: Mobile attribution and analytics
- AppsFlyer: Mobile analytics and attribution
- Amplitude: Product analytics
- Mixpanel: User behavior analytics
6.4 Interest-Based and Targeted Advertising
Some of our advertising may be interest-based or targeted. You may be able to opt out of certain targeted advertising through:
- Device settings (e.g., Ad ID opt-out on Android, LIMIT Ad Tracking on iOS)
- Platform-specific advertising settings (Google Play, App Store)
- Industry opt-out tools such as the Digital Advertising Alliance (DAA) opt-out page
- Your browser's "Do Not Track" settings
7. Third-Party Services
Our services may include links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
7.1 Service Providers
We may share your information with third-party service providers who perform services on our behalf, including:
- Payment processors
- Cloud hosting and infrastructure providers
- Customer support services
- Email and communication services
- Analytics and advertising platforms
- Security and fraud prevention services
7.2 Business Transfers
If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information is transferred and subject to a different privacy policy.
8. Your Rights
8.1 Access and Control
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request a copy of your personal information
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing activities
- Request data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with a data protection authority
8.2 Contact Us About Your Rights
To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to your request within the timeframe required by applicable law.
9. Children's Privacy
9.1 Age Requirements
Our services are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages.
9.2 COPPA Compliance
In compliance with the Children's Online Privacy Protection Act (COPPA), we do not:
- Collect personal information from children under 13 without verifiable parental consent
- Use information from children under 13 for targeted advertising
- Share personal information of children under 13 with third parties
9.3 Family Linking and Parental Controls
For apps designed for families, we implement:
- Parental consent mechanisms as required by Google Play and App Store
- Family-specific privacy protections
- Restrictions on data collection from minors
- Age-appropriate content and advertising controls
9.4 International Children's Privacy
We comply with children's privacy laws in various jurisdictions, including:
- GDPR requirements for children (age 16 or parental consent required in member states)
- Australian Privacy Act requirements for children under 18
- Canadian PIPEDA requirements for children
- UK GDPR and Data Protection Act 2018 requirements for children
If you have any questions about this Privacy Policy or our data practices, please contact us:
Beijing Hengtai Yingrun Human Resources Co., Ltd.
Room 201, Office Building 1, Courtyard 1, 80 meters west of Wanggezhuang Village, Shilibao Town, Miyun District, Beijing, 100000, CN
Email: support@hengtaiyr.com
Website: hengtaiyr.com
10.1 Data Protection Officer
For EU/UK data protection inquiries, you may contact our Data Protection Officer at: support@hengtaiyr.com
10.2 Regulatory Authority
You have the right to lodge a complaint with a competent supervisory authority if you believe we have violated applicable data protection laws. However, we encourage you to contact us first to resolve any concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide additional notice, which may include email notification or a prominent notice on our website or through our mobile applications.
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.