Last updated: July 15, 2025

Thank you for using the products and services on CrossDriver website! We respect your concerns about privacy, understand the importance of personal information to you (“User”), and appreciate your trust in us. CrossDriver Limited (hereinafter referred to as “we” or “CrossDriver”) attaches great importance to the security of users' personal information and privacy protection and will do our best to ensure the security of your personal information. We adhere to the following principles to protect your personal information: consistency of rights and responsibilities, clear purpose, conditions of consent, minimum necessity, ensuring security, subject participation, openness and transparency, etc. At the same time, we commit to taking corresponding security measures to protect your personal information in accordance with mature security standards in the industry. We will strictly abide by laws and regulations and take necessary security measures to protect your personal information and provide you with more secure and reliable services.

This Privacy Policy (hereinafter referred to as “this Policy”) will help you understand the following:

1. Rules for the collection and use of personal information

2. How do we protect your personal information

3. Your rights

4. How do we process children's personal information

5. How is your personal information stored and transferred

6. Applicable laws and jurisdiction

7. How is this Policy updated

8. How to contact us

Please read carefully and fully understand this Policy before submitting your personal data to CrossDriver or registering, purchasing any product or service. This Policy applies to CrossDriver websites, products and services that display this Policy or link to this Policy. By clicking or checking the confirmation button such as “Agree” to this Policy or “Submit Payment” (the actual name of the button is subject to the page display) on this website, you mean that you have fully understood and agreed to this Policy, and CrossDriver has fulfilled its legal obligation of notification and obtained your explicit consent.

If you are using this website on behalf of a company, partnership, association, government or other organisation (your "Organisation"), you agree to notify such persons in your Organisation whose personal information we collect or you provide to us ("Connected Persons"), and you agree to obtain such Connected Persons' consent to the processing of their personal information in accordance with this Policy as required by applicable laws and regulations. When this Policy refers to “you” or “your”, this includes you and any Connected Persons. If you or any Connected Persons would like to request for your personal information to be removed from our database, please contact us at dataprotection@crossdriver.com

If you do not agree to the processing of your personal information as described in this   Policy, please do not provide your information when requested by CrossDriver and stop using the relevant products and services. If you have any questions, comments or suggestions, please contact us by email at dataprotection@crossdriver.com

I、 Rules for Collection and Usage of Personal Information

1. Information we collect and use

In accordance with relevant laws, regulations and national standards, we may process your relevant personal information without seeking your authorization and consent in the following circumstances:

a) it is necessary for the personal information processor to perform its legal obligations or duties;

b) it is necessary for the conclusion and performance of a contract to which you are a party;

c) to respond to a public health emergency or to protect the life, health and property of a natural person in an emergency;

d) to process, in accordance with the law, personal information that you have voluntarily disclosed or otherwise lawfully disclosed within a reasonable scope; and

e) other circumstances as prescribed by laws and administrative regulations.

Sensitive personal information

We will not ask you to provide sensitive personal information to use the services. By posting or transmitting any sensitive personal information on CrossDriver website or in the use of products, you agree to provide such information within the privacy controls of your choice.

2. How do we share, transfer or publicly disclose your personal information

(1) Sharing.

We will only share necessary personal information within CrossDriver affiliates for the purpose of providing you with features and services related to the CrossDriver website or products, subject to this Policy.

Data will only be shared with trusted third-party service providers who are bound by contract to protect your data when necessary for the purpose of providing services on this website, with your explicit consent.

We may share your personal information with third parties as required by laws and regulations or as required by government authorities.

(2) Transfer.

We will not transfer your personal information to any company, organization or individual without your explicit consent. Except in the following circumstances:

a) we will transfer your personal information to other parties only with your explicit consent; or

b) in the event of a merger, acquisition, reorganization or bankruptcy liquidation involving the transfer of your personal information, we will require the new entity holding your personal information to continue to be bound by this Policy; otherwise, we will require that entity to re-obtain your authorization and consent.

(3) Public disclosure.

We will only disclose your personal information in the following circumstances:

a) with your explicit consent; and

b) disclosure based on law. We may disclose your personal information publicly as required by law, legal proceedings, litigation or government authorities.

II、 How do we protect your personal information

1. We have adopted industry-standard security measures to protect the personal information you provide, preventing unauthorized access, public disclosure, use, modification, damage or loss of the data. We will take all reasonable and feasible measures to protect your personal information. For example, by using technical protection measures such as restricting unauthorized access and encryption to ensure the confidentiality of your  personal information.

2. We will take all reasonable and feasible measures to ensure that no irrelevant personal information is collected. We will retain your personal information only for as long as necessary to achieve the purposes described in this policy, unless an extension of the retention period is required or permitted by law.

3. We will do our best to ensure the security of any information you send to us, but please note that any transmission of information over the Internet is never absolutely secure.

4. In the event of an unfortunate personal information security incident, we will promptly notify you of the essential information and possible impact of the security incident, the measures we have taken or will take to deal with it, suggestions for you to independently prevent and reduce risks, and remedial measures for you by email. When it is difficult to inform each personal information subject individually, we will issue a public notice through reasonable and effective means. At the same time, we will also proactively report the handling of personal information security incidents as required by regulatory authorities.

III、Your Rights

In accordance with relevant Chinese laws, regulations, standards, and common practices in other countries and regions, we guarantee that you can exercise the following rights regarding your personal information:

1. Access to your personal information. You have the right to access your personal information, except as required by law. If you wish to exercise your data access right, you may send an email to dataprotection@crossdriver.com and we will respond to your access request within 15 business days.

2. Correcting your personal information. When you find that your personal information we have processed is incorrect, you have the right to request that we make corrections. You may submit a request for correction by sending an email to dataprotection@crossdriver.com and we will respond to your request for correction within 15 business days.

3. Deleting your personal information. You may request to delete your personal information in the following circumstances:

a) if we process your personal information in violation of laws;

b) if we collect and use your personal information without obtaining your consent;

c) if our processing of your personal information contravenes an agreement with you;

d) if you no longer use our website, products or services; and

e) if we no longer provide you with products or services.

If we respond to your request for deletion, we will also notify entities that have obtained your personal information from us to delete it promptly, unless otherwise required by law or if these entities have obtained your independent authorization.

When you delete information from our website or services, we may not immediately remove the corresponding information from our backup systems, but will delete it when the backup is updated.

4. Modifying the scope of your authorization. Each business function requires some basic personal information to be completed. You may give or withdraw your consent at any time for the collection and use of additional personal information collected.

When you withdraw your consent, we will no longer process the corresponding personal information. But your decision to withdraw consent will not affect the processing of your personal information that was previously carried out based on your authorization.

If you do not wish to receive commercial advertisements we send to you, you may reply unsubscription at any time.

5. Cancellation of your account. You can cancel your previously registered account at any time by choosing to do so in account management, or by sending an email to dataprotection@crossdriver.com to request cancellation. After you cancel your account, we will cease to provide you with products or services and delete your personal information at your request, except as otherwise required by law.

6. Obtaining a copy of your personal information. You have the right to obtain a copy of your personal information by requesting it by sending an email to dataprotection@crossdriver.com.

7. Constraining the automatic decision-making of information systems. In some business functions, we may make decisions based solely on non-human automatic decision-making mechanisms such as information systems and algorithms. If these decisions significantly affect your legitimate interests, you have the right to request an explanation from us, and we will also provide appropriate remedies.

8. Responding to your above requests. For security purposes, you may be required to provide a written request or otherwise prove your identity. We may first ask you to verify your identity before processing your request. We will respond within 15 business days.

For your reasonable requests, we generally do not charge any fees. However, for repeated requests that exceed a reasonable limit, a reasonable fee may apply.

We may refuse requests that are unjustified, repetitive or impractical, or that require excessive technical means (for example, require the development of new systems or fundamental changes to existing practices) or pose a risk to the legitimate interests of others.

We will not be able to respond to your request in the following circumstances:

a) related to personal information controller fulfilling obligations as required by laws and regulations;

b) directly related to national security and defense security;

c) directly related to public security, public health, and major public interests;

d) directly related to criminal investigation, prosecution, trial and enforcement of judgments, etc.;

e) where the personal information controller has sufficient evidence to show that the personal information subject has malicious intent or abuse of rights;

f) where it is necessary to protect the life, property or other major legitimate rights and interests of the personal information subject or another individual, but it is difficult to obtain the consent of the individual concerned; 

g) responding to the request of the personal information subject would cause serious damage to the legitimate rights and interests of the personal information subject or other individuals or organizations; or

h) involving trade secrets.

IV、 How do we process children's personal information

Our website, products and services are primarily targeted at adults. Children should not create their own accounts without the consent of their parents or guardians.

In cases where personal information of children is collected with the consent of the parents, we will only use or disclose such information when permitted by law, with the explicit consent of the parents or guardians, or when it is necessary to protect the child.

Although local laws and customs may define children differently, we consider anyone under the age of 14 as a child.

If we find that we have collected personal information of a child without prior verifiable parental consent, we will seek to delete the relevant data as soon as possible.

V、 How is your personal information transferred globally

As a general rule, any personal information collected or generated within Hong Kong, China, shall be retained exclusively within Hong Kong, China.

As we deliver products or services through global resources and servers, this means that—subject to your consent—your personal information may be transferred to overseas jurisdictions, or be accessed from such jurisdictions.

Such jurisdictions may have different data protection laws or even no relevant laws at all. In such cases, we will ensure that your personal information is adequately and equally protected as it would be within Hong Kong, China. For example, we will ask for your consent for the cross-border transfer of your personal information, or implement security measures such as data de-identification before the cross-border data transfer.

VI、Applicable laws and jurisdictions

This Privacy Policy is governed by and construed in accordance with the laws and regulations of the Hong Kong Special Administrative Region of China.

Any dispute, controversy, difference or claim arising out of or relating to this Policy, including the existence, validity, interpretation, performance, breach or termination thereof or any dispute regarding non-contractual obligations arising out of or relating to it shall be referred to and finally resolved by arbitration administered by the Hong Kong International Arbitration Centre (HKIAC) under the HKIAC Administered Arbitration Rules in force when the Notice of Arbitration is submitted. The law of this arbitration clause shall be Hong Kong law. The seat of arbitration shall be Hong Kong.

VII、 How is this policy updated

Our personal information protection policy may change.

We will not reduce the rights you are entitled to under this Policy without your explicit consent. We will post any changes to this Policy on this page. For material changes, we will also provide more prominent notifications (including for certain services, we will send notifications via email stating the specific changes to the Policy).

Material changes referred to in this policy include, but are not limited to:

1. There are significant changes in our service model. Such as the purpose of processing personal information, the types of personal information processed, the way personal information is used, etc;

2. We have significant changes in ownership structure, organizational structure, etc. Such as changes in ownership resulting from business adjustments, bankruptcies, mergers and acquisitions, etc.;

3. The main objects of personal information sharing, transfer or public disclosure change;

4. There are significant changes in your rights to participate in the processing of your personal information and the ways to exercise them; and

5. When there are changes in the department responsible for personal information security, contact information and complaint channels.

VIII、 How to contact us

If you have any questions, comments, or suggestions regarding this Policy, please contact us by email at dataprotection@crossdriver.com. In general, we will respond within 15 business days.