Effective and Last Updated: April 18, 2024

Thank you for visiting the Xihua Website (the “Website”)!

Shanghai Xihua Scientific Co., Ltd. (hereinafter referred to as “Xihua”) is responsible for processing your personal information on the Website.

Please read this Privacy Policy carefully, which describes how we collect personal information about your visit to the Website, how we collect, use, store, provide, protect your personal information and what rights you have.

This Privacy Policy is effective as of April 18, 2024 and will remain in effect until updated.

1. Users

By using the Website, you agree and accept to provide Xihua with information that can directly or indirectly identify you (hereinafter referred to as "Personal Information" or "Personal Data"), and to collect, process and store such information in the territory of China.

2. What personal information we collect about you

Xihua collects and processes your personal information as follows:

(1) Through the "Contact Us - Can we help you?" sections, we may collect information such as your name, contact number, email, company, title, country and region, etc.

(2) If you contact us by email, telephone or other written forms, Xihua will retain your relevant information.

(3) Xihua will collects user-related data on browsing the Website through the system backstage, including but not limited to: visitor geographical distribution, number of visit, number of IP, duration of visits, pageview, bounce rate, etc., within a certain period to obtain trends and statistical data. However, individual visitors will remain anonymous and no personal data will be disclosed.

3. How do we use your personal information

We may use your information in the following ways:

In accordance with our legitimate interests to provide the Website, we may use your information for the following purposes:

• to review your comments or questions, and provide you with appropriate services;

• to enforce our terms and policies;

• to process and respond to your requests, queries, applications, complaints and feedbacks;

• to provide support and respond to your requests, feedbacks and queries;

• to monitor, operate, maintain and manage the Website;

• to address and resolve technical issues and bugs;

• to ensure the Website operates effectively and efficiently;

• to detect, prevent or otherwise address security, fraud or technical issues;

• to improve and enhance the features and performance of the Website and relevant services;

• to properly manage and administer our relationship with you;

• to manage our business;

• to protect, enforce or defend our legitimate rights and interests (including, in relation to a violation of our terms and conditions).

4. Cookies

When you visit the Website, we use Cookies and web beacons to record the use of the Website. Cookies are pieces of information sent by a web server to a user’s browser. Cookies may include information such as user preferences, time spent on a website and pages visited. We use the information to identify you and to customize and improve your experience on the Website. You can manage the placement of cookies on your devices through the features found in most browsers. For example, you may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser, but please note that not accepting cookies may limit your use of some features of the Website. In addition, please note that currently the Website does not respond to “do not track” signals.

5. Sharing or disclosure of personal information

In order to ensure the security of your personal information, we promise that all sharing and disclosure is limited to your necessary personal information and is subject to this Privacy Policy; If we want to change the purpose of the use and processing of personal information, we will seek your consent again. At the same time, if transferring cross-border data, we will strictly comply with the requirements of relevant laws and regulations on cross-border data transmission.

We may share your personal information to the following third parties for reasonable and necessary purposes:

(1) Service Providers. We may share your information with third parties that provide services for us,

• to operate and maintain the Website, such as website hosting service provider, development service providers, cloud service provider;

• to optimize and improve the Website, such as analytics service provider tracking usage data.

(2) Our Affiliates. We may share your information with any members, subsidiaries or affiliates of our corporate group to provide the Website, for purposes including preventing illegal use and supporting users.

(3) Law Enforcement Agencies and Authorities. We may share your information with competent authorities, courts, third parties, and bodies in response to a court order, summons or subpoena, lawful discovery requests, regulatory requests, or as permitted or required by law, including when we reasonably believe it is necessary or appropriate to investigate, prevent or take action against illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person.

(4) Sale or Merger. We may disclose your information to any third party:

• that acquires, or is interested in acquiring, all or part of our assets or shares;

• that we acquire in whole or in part;

• with which we merge;

• that succeeds us in carrying on all or part of our business;

In each case, the third party has a legal obligation to refrain from disclosure and use your information unauthorized by us.

6. Cross-border transfer of personal information

In principle, the personal information we collect and generate in the People's Republic of China will be stored in the People's Republic of China. When you use Xihua's Website and/or services, or when you provide products and/or services to Xihua, your personal data collected by us may be transferred to our group company in China. If you are located outside of China and Xihua transfers your information to a country outside of China, Xihua will take appropriate measures to protect such information in accordance with applicable laws and regulations, and fulfill the obligations of cross-border personal information transfer accordingly.

7. Information on children

The Website is not directed at children under the age of 14 or equivalent minimum age in the relevant jurisdiction. We do not knowingly collect any personally identifiable information from any persons under such age. If we discover that we have actually collected such information, we will promptly proceed with the deletion.

8. Retention period of personal information

Xihua will store your personal information in accordance with the relevant laws, regulations and industry practices in your region. Xihua will only store your personal information for the purposes described above.

We will always retain your personal information for as long as required by law and as required in connection with legal proceedings or investigations involving Xihua. After the storage period of your personal information expires, except for personal information that must be stored for a longer period according to laws and regulations, we will delete or anonymize your personal information, make it inaccessible, and keep the relevant deletion or anonymization records.

9. Third-party Websites

Xihua's Website may provide links to third party websites in order to provide users with a more convenient and efficient experience. Xihua does not endorse any third party websites and is not responsible for the content, services provided, security or availability of such third party websites. At the same time, the Website may use third party social media, such as WeChat, Microblog, and Tik Tok, which may collect your personal information and/or use Cookies.

Please note that these third party websites are not subject to this Privacy Policy. Therefore, Xihua recommends that you read the privacy policies of such third party websites in detail when visiting such websites.

10. Safety

Xihua protects your information in accordance with this Privacy Policy, and the Website has deployed many security measures to protect your personal information from unauthorized access, public disclosure, use, modification, damage or loss. However, we cannot guarantee the security of any information you disclose on the Website. In the event of any data breach, Xihua shall, in accordance with the requirements of laws and regulations, promptly inform you of the basic situation and possible impact of the security incident, the measures we have taken or will take to deal with it, the suggestions you can independently prevent and reduce the risk, and the remedial measures for you. We will timely inform you of the relevant information of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subject one by one, we will take a reasonable and effective way to release the announcement.

Please note that although Xihua will take all reasonable measures to protect the security of your personal information, due to the characteristics of the Internet environment, we cannot guarantee the absolute security of all your personal information, and we do not assume all responsibility for any unauthorized access, use or disclosure of your personal information to the reasonable extent of applicable law.

11. Your rights

We respect and attach great importance to your rights in connection with your personal information, including the following:

(1) Right to know

Xihua provides you with any information regarding the processing of your personal data through this Privacy Policy.

(2) Data access right

You have the right to obtain a copy of the processing of your personal information free of charge from Xihua.

(3) Right of correction

You have the right to request Xihua to correct your inaccurate personal information in a timely manner. Taking into account the purposes of processing, you should have the right to complete incomplete personal data, including by providing a supplementary declaration.

(4) Right to delete (Right to be forgotten)

You have the right to request Xihua to delete your personal information on the following grounds:

• the purpose of the processing has been achieved, cannot be achieved, or is no longer necessary to achieve the purpose of the processing;

• We no longer provide you with products or services, or the retention period has expired;

• You have withdrawn your consent;

• We process your personal information in violation of laws, administrative regulations or agreements;

• other circumstances provided for by laws and administrative regulations;

If the storage period prescribed by laws and administrative regulations has not expired, or if it is technically difficult to delete your personal information, we will stop processing it except for storage and taking necessary security measures.

(5) Limit the right to dispose

You have the right to request restrictions on the processing of your personal data by Xihua for the following reasons, and we will notify you before lifting the restrictions:

• If you question the accuracy of your personal data, you have the right to request Xihua to restrict the processing of your personal data for the time required to verify the application and correct the data;

• You believe that the processing by Xihua is illegal, but you object to the deletion of your personal data and have the right to request that the use of your personal data be restricted;

• Your personal data is no longer required by Xihua for processing purposes, but is required by you to make, exercise or defend against legal claims.

(6) Right to portability

You have the right to obtain the personal data that you have provided to Xihua in a structured, universally available, machine-readable form and the right to make such data available to other controllers without restriction from Xihua. Xihua is not responsible for the data processing of such recipients.

(7) Right to object

You have the right to object at any time to the processing of your personal information by Xihua in certain circumstances, unless Xihua can prove that its legitimate interests outweigh your interests, rights and freedoms, or there is a strong legal basis for the establishment, exercise and defense of statutory claims.

(8) Right to withdraw consent

If Xihua processes personal information based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the legality of data processing based on consent prior to withdrawal.

(9) Right to appeal

When you believe that your rights have been infringed, you have the right to bring a lawsuit to the people's court in accordance with the law.

12. How can this Privacy Policy be updated

By posting a new Privacy Policy on the Website, we may change or update this Privacy Policy from time to time.

We will not reduce your rights under the Privacy Policy without your express consent. We will post any changes we make to this policy on this page.

In case of conflict between the English version and the Chinese version, the Chinese version shall prevail.

13. Contact us

If you have any questions, comments or suggestions regarding the Privacy Policy or Xihua's data protection, please contact us at: IR@xihuasci.com.