Changzhou Endoclean Medical Device Co., Ltd. (hereinafter collectively referred to as “Endoclean”, “we”, “us” or “our”) attaches great importance to the privacy and personal information protection of users (hereinafter referred to as “you” or “your”). We fully recognize the critical importance of personal information security and respect and effectively safeguard your privacy rights and interests. When you visit or use this website as well as our related products and services, please carefully read and fully understand this Privacy Policy (hereinafter referred to as “this Policy”). This Policy applies to all Endoclean-branded websites, products and services that display this Policy or contain links hereto.

This Policy is formulated to help you understand the following:

1. How we collect and use your personal information

2. How we disclose your personal information

3. How we store and protect your personal information

4. How we handle personal information of minors

5. Third-party providers and their services

6. How we update this Privacy Policy

7. Contact us
 

1. How We Collect and Use Your Personal Information

1.1 Definitions and Basic Principles

Personal information refers to various information recorded electronically or by other means that can identify a specific natural person either on its own or in combination with other information, excluding anonymized information.

When processing your personal information, we abide by the principles of lawfulness, legitimacy and necessity. We only collect information directly relevant to the functions of our products or services, refrain from excessive collection, and shall not obtain your consent through misleading, fraudulent, coercive or other improper means.

1.2 Information Collection

1.2.1 Information Generated during Your Interaction with or Use of Our Products and Services

(1) Information you actively provide

Such information is submitted directly by you when you use our website, products, services or interact with us. Examples include information you submit for inquiries, search inputs, questions or information you provide for customer-service support, as well as communication records generated when you contact us online, by phone, email or participate in online and offline events.

(2) Device and network information

We collect device-related information when you use our products and services, such as device type, device name or model, device identifier, operating system type and version, browser type and version, screen resolution, language settings, IP address and internet service provider. Such information is used to ensure normal operation of the website and services, optimize presentation and analyse access statistics.

(3) Log information

When you use our products, services or browse our content, we automatically collect and store necessary log information, including access timestamp for each service visit, page-access path, client IP address, and event information (e.g. errors, crashes, restarts and upgrades). Such information is used for troubleshooting and maintaining stable and secure system operation.

(4) Cookies and similar technologies

To ensure proper website operation and enhance your user experience, we may store or retrieve necessary information on your device via Cookies and similar technologies (including local storage, pixel tags, device fingerprints, etc.). These technologies are used to recognise login status, retain preference settings and analyse access behaviour. You may manage or clear Cookies through your browser settings; however, certain functions may cease to work properly as a result.

(5) Sensitive information

In scenarios of complaint management and adverse-event handling, we may process sensitive personal information related to medical health. We process such information only for specific purposes, where strictly necessary and under rigorous security safeguards. Prior to collection, we will separately inform you of processing purposes, methods, necessity and impacts on your rights and interests, and obtain your separate consent.

1.2.2 Information from Third-party Sources and Public Sources

To the extent permitted by applicable law, we may obtain information related to you from public channels, legitimate commercial third parties or our affiliates for purposes such as identity verification and service improvement. We guarantee such sources are lawful and compliant, and will notify you of the source and intended use before processing.

In addition, we may collect and use non-identifiable data (i.e. data that cannot identify an individual, such as aggregated website-visit statistics). Such data helps us understand usage patterns of our websites, products and services so that we can improve our offerings to better serve customers. We may collect, use, process, transfer or disclose such non-identifiable data at our business discretion.

1.3 How We Use Your Information

1.3.1 Delivering services and responding to your requests

Respond to your consultations, applications and requests, e.g. sending requested product materials and electronic documents, and replying to your enquiries;
Provide customer service and after-sales support, and handle your complaints and adverse-event-related requests;
Send you important product-, service-related notices and administrative messages.

1.3.2 Analysing personal information to deliver customised services

Recommend products, services or industry content that may interest you;
Present more relevant and appropriate content and services when you visit our websites or online platforms;
Identify your interests in our websites or products to optimise your interaction experience.

1.3.3 Pursuing our business objectives

Perform data analysis and statistics to understand usage trends of our websites, products and services, evaluate service performance, and continuously improve product and service quality;
Implement security and risk control to protect our products, services and users against cyber-attacks, fraud, identity theft and other risks;
Conduct business operations and comply with legal obligations under laws, regulations and industry standards (including reporting medical device adverse events), carry out audits and internal-process verification to ensure compliant business operations;
Conduct product research and development, and improve or upgrade our products and services based on usage-data analysis.

2. How We Disclose Your Personal Information

2.1 Disclosure to Authorised Partners and Third-party Service Providers

Certain services are delivered by our authorised partners or third-party service providers. In such cases, we may share your personal information with them in accordance with this Policy. Examples include entrusting partners or service providers to handle our customer-service hotlines, send emails, deliver technical support, and perform data analysis and storage. We require our partners to process your personal information solely for purposes stated in this Policy, within agreed-upon scope and with adequate security safeguards in place.

2.2 Disclosure to Fulfil Statutory Obligations or Comply with Regulatory Requests

We may disclose your personal information to law-enforcement authorities, regulatory bodies or other government departments when required by applicable laws and regulations or in response to formal legal procedures (e.g. judicial or administrative requests. In medical-device adverse-event-handling scenarios, we may supply necessary information to relevant drug-supervision authorities and competent authorities to fulfil statutory adverse-event-reporting obligations.

2.3 Disclosure to Protect Legitimate Rights and Interests

We may disclose your information where reasonably necessary, for example to perform contracts, prevent bodily harm or property loss, investigate suspected or actual unlawful acts, or protect the rights, privacy, safety or property of us, our affiliates and other relevant parties, provided we reasonably believe such disclosure is necessary and appropriate.

3. How We Store and Protect Your Personal Information

3.1 Retention Period

We retain your personal information for the period necessary to achieve the purposes described in this Policy, unless a longer retention period is required or permitted by applicable laws and regulations. Criteria for determining retention periods include:

The time required to accomplish business purposes, including providing products and services, retaining transaction and business records, controlling and enhancing product and service quality, ensuring system and product security, addressing potential user enquiries or complaints, and troubleshooting;
Whether you consent to an extended retention period;
Special retention requirements imposed by applicable laws or contracts (e.g. statutory retention periods for medical-device adverse-event records).

When your personal information exceeds the applicable retention period, or when you exercise your right to deletion under this Policy and deletion conditions are met, we will delete or anonymise the relevant information.

3.2 Security Safeguards

We take appropriate physical, administrative and technical safeguards to protect your personal information against unauthorised access, disclosure, use, modification, damage or loss. Such safeguards include encrypted transmission and storage, access-permission controls, security-defence mechanisms, internal-management rules and staff training. While we strive to protect your privacy, no security measure is absolutely infallible. Should a personal-information-security incident occur, we will take remedial measures in accordance with law and notify you and relevant regulatory authorities in a timely manner.

4. How We Handle Personal Information of Minors

Our websites, products and services are not intended for individuals under the age of eighteen (18). Without parental or guardian consent, minors shall not independently use this website. Parents or guardians shall supervise minors’ use of this website and bear full responsibility for such use. We request minors not to submit personal information through this website. If we discover personal information of a minor has been collected without guardian consent, we will delete such information as soon as practicable.

5. Third-party Providers and Their Services

During your browsing, you may encounter content or hyperlinks provided by third parties. We have no control over such third parties and you may choose whether to access them. We cannot control third-party privacy and data-protection policies, which are not governed by this Policy. Before submitting personal information to any third party, please review that third-party’s own privacy policy.

6. How We Update This Privacy Policy

We periodically review this Privacy Policy to ensure it remains current and accurate. Please refer to the last-updated date at the end of this document. If this Privacy Policy is revised, the updated version will be published on this page.

7. Contact Us

Should you have any questions, comments or suggestions regarding this Policy, you may find our contact details on our “Contact Us” page.

 

Last Updated: February 2026