Shengxin Electronic Co., Ltd operates this store and website, including all related information, content, features, tools, products and services, as well as GPS tracking devices, mobile applications, websites, and related services, in order to provide you, the customer, with a curated shopping, product, and GPS tracking experience (the "Services"). Shengxin Electronic Co., Ltd is powered by Shopify for its online store, which enables us to provide shopping-related Services to you. This policy distinguishes online store services, device services, mobile application services, location tracking services, and marketing/analytics services. The website itself does not collect your high-precision location information; we use location information only when you use a purchased GPS tracking device and have provided your consent authorization.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, use our GPS tracking devices or mobile applications, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

•  Contact details including your name, address, billing address, shipping address, phone number, and email address.
•  Financial information including credit card, debit card, financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details.
•  Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
•  Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
•  Device information including information about your device, browser, network connection, IP address, unique identifiers, device ID, IMEI number, SIM card information, device model, system information, and diagnostic information.
• Location information including GPS data used to provide tracking services, such as real-time location, location history, geofence events, and related alerts. The website does not collect your high-precision location information. Only when you use a purchased GPS tracking device and separately authorize us will GPS positioning data, real-time coordinates, historical track records and geofence trigger alerts generated by the tracking device be treated as sensitive personal information.
•  Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services, app activity logs, crash reports, and diagnostic data. Cookie identifiers, analytics events and marketing identifiers are separately governed by the Cookies & Tracking Technologies section below.

Cookies & Tracking Technologies

We use cookies, web beacons, pixel tags, local storage and other similar tracking technologies on our website to distinguish necessary functional tracking, analytical tracking and marketing tracking:

•  Necessary Cookies: Mandatory for normal operation of store login, order settlement and device binding pages; cannot be disabled.
•  Analytical Cookies: Record page browsing, App crash logs and device access records to optimize service performance; you may reject this type of tracking.
•  Marketing Cookies: Deliver targeted product advertisements based on your browsing and purchase records; fully optional, and you can opt out at any time.

When you first access our website, a cookie consent pop-up will be displayed for you to separately confirm or reject analytical and marketing tracking. Except for mandatory necessary cookies, you may clear browser cache or adjust device privacy settings to disable tracking at any time.

We share analytical and marketing tracking data with Shopify, Firebase and Google Analytics only as described in this Privacy Policy and subject to the user's consent choices where required by law.

•  Shopify: Analytical and marketing tracking data, store browsing records, cart and order activity where enabled. Privacy Policy: https://privacy.shopify.com
•  Firebase: App crash logs, device access records, diagnostics, analytics events and notification-related identifiers. Privacy Policy: https://firebase.google.com/support/privacy
•  Google Analytics: Cookie identifiers, page browsing events, browser/device data, approximate location, referral and usage events. Privacy Policy: https://policies.google.com/privacy

Personal Information Sources

•  Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
•  Automatically through the Services including from your device when you use our products or services, visit our websites, use our mobile applications, use GPS tracking devices, and through the use of cookies and similar technologies.
•  From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
•  From our partners or other third parties.

Consent and Permission Controls

We separate user permissions into three independent categories and do not treat acceptance of one category as acceptance of the others.

•  Necessary Service Authorization: Required to create an account, complete checkout, bind a device, process payments, deliver products, provide customer support, maintain security, and operate core GPS tracking functions requested by you.
•  Sensitive Location Authorization: The website does not collect your high-precision location information. Only when you use a purchased GPS tracking device is separate authorization required before collecting GPS data, historical track records or geofence alerts generated by that device. This authorization is not bundled with account registration or shopping checkout.
•  Marketing and Advertising Authorization: Optional consent for promotional emails, targeted advertising cookies and cross-context advertising where applicable. You may reject or withdraw this consent without affecting core shopping or GPS tracking services.

You may withdraw optional authorizations through the app settings, device system permissions, browser cookie settings, unsubscribe links, or by contacting the privacy officer email listed below.

How We Use Your Personal Information

Provide, Tailor, and Improve the Services

We use your personal information to provide you with the Services, including to perform our contract with you, process payments, fulfill orders, remember preferences, send account notifications, process purchases, returns, exchanges or other transactions, create and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews, and create a customized shopping experience.

For GPS tracking services, the website itself does not collect your high-precision location information. Only when you use a purchased GPS tracking device and authorize us will we use location and device information generated by the tracking device to show real-time and historical location, send alerts and notifications, support geofence features, improve product performance, maintain device functionality, and provide customer support.

Marketing and Advertising

We use your personal information for marketing and promotional purposes, such as sending marketing, advertising and promotional communications by email, text message or postal mail, and showing online advertisements for products or services on the Services or other websites.

Marketing and advertising uses are optional where consent or opt-out rights are required by law, and disabling marketing tracking will not disable necessary service functions.

Security and Fraud Prevention

We use your personal information to authenticate your account, provide secure payment, shopping, product and tracking experiences, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure our services.

Communicating with You

We use your personal information to provide customer support, respond to you, provide effective services and maintain our business relationship with you.

Legal Reasons

We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, civil discovery, litigation, adversarial legal proceedings, and enforcement or investigation of potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

•  With Shopify, vendors and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, shipping, hosting, map services, analytics, messaging and push notification services.
•  With cloud service providers, including AWS, to host and operate the Services.
•  With map and location service providers, including Google Maps, to provide map display, location, route, geofence and related GPS tracking features.
•  With analytics and messaging providers, including Firebase and Google Analytics, to help us analyze app and website performance, diagnose issues, send notifications and improve the Services.
•  With business and marketing partners to provide marketing services and advertise to you, only where permitted by law and subject to your consent or opt-out choices where required.
•  When you direct, request or consent to our disclosure of certain information to third parties, such as to ship products, provide GPS tracking functionality, enable map services, or use social media widgets or login integrations.
•  With our affiliates or otherwise within our corporate group.
•  In connection with a business transaction such as a merger or bankruptcy, or to comply with applicable legal obligations and protect or defend the Services, our rights, and the rights of users or others.

Third-Party Service Providers and Privacy Policy Links

•  Shopify: Contact details, account data, order and transaction data, payment-related checkout data, browsing and cart activity, cookie/advertising identifiers where enabled. Privacy Policy: https://privacy.shopify.com
•  AWS: Account identifiers, device identifiers, GPS/location records, server logs, diagnostics, support and security records. Privacy Policy: https://aws.amazon.com/privacy/
•  Google Maps: Latitude and longitude coordinates and device/network metadata required to render maps and routes. Privacy Policy: https://policies.google.com/privacy
•  Firebase: Device identifiers, Firebase installation IDs, crash logs, app activity, notification tokens and diagnostic data. Privacy Policy: https://firebase.google.com/support/privacy
•  Google Analytics: Cookie identifiers, page browsing events, device/browser data, approximate location, referral and usage events. Privacy Policy: https://policies.google.com/privacy

Relationship with Shopify

The shopping-related Services are hosted by Shopify, which collects and processes personal information about your access to and use of the shopping-related Services in order to provide and improve those Services for you. Information you submit to the shopping-related Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to requests to exercise rights over use of your personal information for these purposes.

To learn more about Shopify privacy practices, visit: https://privacy.shopify.com

Third-Party Services, Websites, and Links

The Services may provide links to websites or other online platforms operated by third parties. We may also use third-party services such as AWS, Google Maps, Firebase, Google Analytics, analytics providers, payment processors, shipping providers and push notification providers. These third parties may process your personal information in accordance with their own privacy policies.

If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites or services.

Sensitive Location Data Notice

The website does not collect your high-precision location information. Only when you use a purchased GPS tracking device and separately authorize us will we use GPS positioning data, real-time coordinates, historical track records and geofence trigger alerts generated by the tracking device; such information is sensitive personal information under GDPR, CCPA/CPRA and PIPL.

Collection Scope & Frequency

Our GPS tracking devices and companion App use location information according to the following rules:

•  Website access: The website itself does not collect your high-precision location information.
•  GPS tracking device use: Only when you use a purchased GPS tracking device and separately provide explicit consent authorization will we use location information generated by that tracking device.
•  Default reporting frequency: After location authorization, the GPS tracking device reports location information once every 10 minutes by default. You may independently modify the location reporting interval in the App.

Separate Consent Requirement

Location information generated by the GPS tracking device requires independent pop-up authorization; we will not bundle location permission with account registration or shopping checkout. You may withdraw location access permission at any time via device system settings or the App function switch, and you may independently adjust the location reporting interval in the App. Disabling location permission will make real-time tracking, historical track playback and geofence alarm functions unavailable.

Data Retention Rule

Real-time location cache data is cleared automatically within 24 hours; historical track and geofence alert records shall only be stored for a maximum of 180 days, and will be permanently deleted after expiration without manual operation.

Third-Party Sharing Scope

We only transmit latitude and longitude coordinate data to Google Maps for map rendering and route display. We will not share your complete historical location records with any advertising or marketing partners.

 You may disable or withdraw location permission at any time; the specific unavailable features are real-time tracking, historical track playback and geofence alarm functions.

Children's Data

The Services are not intended to be used by children without appropriate parental or guardian consent. We do not knowingly collect any personal information about children under the age of majority in your jurisdiction without such consent. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request deletion.

Parents or guardians are responsible for approving GPS tracking of minors, and the Services must not be used to track any person without lawful authority or consent.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age, as those terms are defined in applicable law.

Security and Retention of Your Information

We use reasonable security measures to protect your personal information, including data encryption, secure cloud infrastructure and access controls.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

Fixed Data Retention and Deletion Rules

•  Real-time location cache: retained for 24 hours and automatically cleared within 24 hours.
•  Historical track records: retained for a maximum of 180 days and automatically and permanently deleted after expiration.
•  Geofence alert records: retained for a maximum of 180 days and automatically and permanently deleted after expiration.
•  App crash logs and diagnostic records: retained for 90 days, then deleted or de-identified.
•  Analytical cookie identifiers and analytics events: retained for 13 months unless the user rejects analytics earlier.
•  Marketing cookie identifiers and advertising preference records: retained for 13 months; user may opt out at any time.
• · Account profile and device binding records: retained for the account term plus 30 days, then deleted within 30 days after verified account deletion unless legally required for dispute or security handling.
•  Order, payment confirmation and invoice records: retained for 7 years for tax, accounting, chargeback, warranty and legal compliance.
•  Customer support communications: retained for 3 years after case closure, then deleted or de-identified.
•  Security and fraud-prevention logs: retained for 180 days, extended only for an active security incident, legal claim or regulatory request.
•  If a security incident affects your personal information, we will notify you and applicable regulators within the time limits required by applicable law.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.

•  Right to Access / Know. You may have a right to request access to personal information that we hold about you.
•  Right to Delete. You may have a right to request that we delete personal information we maintain about you.
•  Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
•  Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request transfer to a third party, in certain circumstances and with certain exceptions.
•  Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may opt out of the sale or sharing of personal information or targeted advertising processing as defined by applicable privacy laws.
•  Managing Communication Preferences. You may opt out of promotional emails at any time by using the unsubscribe option displayed in our emails. Marketing opt-out does not affect service, security, order, product notice or account messages.
•  Account Deletion. You may request deletion of your account by using the in-app deletion function or by contacting us at support@trackrhino.net. After verification, account profile and device binding records will be deleted within 30 days, while location history and geofence alert records will be deleted according to the maximum 180-day rule unless earlier deletion is supported in the App.

Regional Privacy Rights

•  GDPR (EU/UK). You may have rights to access, correct, delete, restrict processing of, object to processing of, request portability of your personal data, and withdraw consent where processing is based on consent.
•  California (CCPA/CPRA). You may request access to, deletion of, and correction of personal information.  We do not sell personal information for monetary consideration. Some disclosures for cross-context behavioral advertising may be considered a 'share' under California law, and eligible users may opt out.
•  China (PIPL). GPS location data is sensitive personal information and is processed only with your consent where required by applicable law. Where required by PIPL, we will seek separate consent for processing sensitive personal information, providing personal information to third parties, public disclosure, and cross-border transfer.
•  Other Regions. We comply with applicable local privacy laws, including APPI, PIPA and LGPD, where applicable.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision or lodge your complaint with your local data protection authority.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or the applicable UK equivalent. If we transfer personal information out of mainland China, we will follow applicable PIPL cross-border transfer requirements and obtain separate consent where required.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

Shengxin Electronic Co., Ltd

Customer Support Email: support@trackrhino.net

Website: www.trackrhino.net

Address: Room E10, Unit 18, Floor 12, New City Centre, No.2 Lei Yue Mun Road, Kwun Tong, Kowloon

Personal Information Protection Officer / Privacy Complaints Email: privacy@trackrhino.net

For the purpose of applicable data protection laws, we are the data controller of your personal information.