Privacy Policy

SunDew, developed and operated under Kunming JingYangLu Trading Co., Ltd., respects your privacy and is committed to protecting the personal data you entrust to us. This Privacy Policy explains in clear, comprehensive terms how we collect, use, store, share, and safeguard your information when you interact with our website at https://www.sundew.lol, engage our services, or otherwise communicate with us. We encourage you to read this document in its entirety to understand our practices regarding your data and the choices available to you.

1. Introduction

SunDew provides computer systems design and related services, including but not limited to systems architecture consulting, infrastructure engineering, platform development, data systems design, observability and site reliability engineering, security architecture, and managed operations. Our principal place of business is located at Attach 1-PL, No. 90 Xinxing Road, Donghua Street, Panlong District, Kunming, Yunnan, 650000, China, under the legal entity Kunming JingYangLu Trading Co., Ltd. Throughout this policy, references to SunDew, we, us, or our refer to this entity and the services we provide.

This policy applies to all individuals who visit our website, submit inquiries through our contact forms, subscribe to our communications, or engage us for professional services. By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately.

We have designed this policy to comply with applicable data protection laws including the Personal Information Protection Law of the Peoples Republic of China and, where applicable, the General Data Protection Regulation of the European Union and other relevant privacy frameworks that govern the jurisdictions in which our clients operate.

2. Information We Collect

We collect several categories of information depending on the nature of your interaction with SunDew. The data we gather falls broadly into the following classifications.

2.1 Personal Identification Information

When you fill out our contact form, request a consultation, or initiate a business relationship with us, we may collect your full name, email address, telephone number, organization name, job title, and any additional details you voluntarily provide in your message. This information is necessary for us to respond to your inquiry and to assess how we might serve your needs.

2.2 Technical and Usage Data

When you visit our website, our servers automatically record certain technical information. This includes your Internet Protocol address, browser type and version, operating system, referring URLs, pages visited, time and date of your visit, time spent on each page, and other diagnostic data. This information is collected through server logs and does not, by itself, identify you personally.

2.3 Communication Records

We retain records of correspondence when you contact us via email, telephone, or through our website contact forms. These records include the content of your messages, our responses, and any attachments exchanged. We maintain these records to ensure continuity in our client relationships and to improve the quality of our service.

2.4 Client Project Data

In the course of providing our computer systems design and related services, we may receive access to technical data, system configurations, source code repositories, infrastructure diagrams, database schemas, and other materials belonging to our clients. This data is governed by the terms of our service agreements and is handled with the highest degree of confidentiality.

3. How We Collect Your Information

We employ multiple collection methods, each suited to the type of information and the context of its provision. We collect information through three primary channels.

Direct collection occurs when you voluntarily provide information to us. This includes submitting the contact form on our website, sending us an email at connect@sundew.lol, calling our office at +15138400825, or providing information during consultation meetings and project onboarding processes.

Automated collection takes place as you navigate our website. Our web servers log standard HTTP request data, and we may use cookies and similar technologies to understand how visitors interact with our site. The specific cookies we deploy and how you can manage them are detailed in section ten of this policy.

In certain circumstances we may receive information about you from third-party sources. This could include referrals from existing clients, publicly available business directories, or professional networking platforms. When we receive information from such sources, we treat it with the same level of care as information collected directly.

4. Purpose of Data Collection

We collect and process your data only for clearly defined, legitimate purposes. We do not collect information beyond what is necessary for these purposes, and we do not use your data in ways that are incompatible with the purposes described below.

The primary purpose of data collection is to respond to your inquiries and to provide the services you have requested. When you submit a contact form, we use your information to understand your requirements and to prepare an appropriate response or proposal. In the context of an active engagement, we use client data to perform the systems design, architecture, implementation, or advisory work outlined in our service agreement.

We also use data to improve and maintain our website and services. Aggregated, anonymized usage patterns help us identify which sections of our site are most valuable to visitors and where we can improve navigation or content. We use technical data to diagnose server issues, prevent fraud, and ensure the security of our digital infrastructure.

Finally, we may use your contact information to communicate with you about service updates, relevant industry insights, or changes to our policies. You may opt out of non-essential communications at any time by contacting us or by following the unsubscribe instructions included in our messages.

5. Legal Basis for Processing

Our processing of personal data is grounded in one or more lawful bases as required by applicable data protection legislation. The specific basis depends on the nature of the data and the context in which it was collected.

Consent forms the basis for processing in cases where you have explicitly agreed to the collection and use of your data for a specific purpose. You may withdraw your consent at any time, though this will not affect the lawfulness of processing carried out prior to withdrawal.

Contractual necessity applies when the processing is required to perform a contract with you or to take steps at your request before entering into a contract. This covers data processed during project engagements, including the execution of statements of work and the delivery of agreed services.

Legitimate interest provides a basis for processing where we have a genuine and legitimate business reason that is not overridden by your rights and interests. This includes analyzing website usage to improve our services, maintaining the security of our systems, and communicating with existing clients about relevant service offerings.

Legal obligation applies where we are required to process your data to comply with applicable laws, regulations, court orders, or governmental requests. This includes tax and accounting obligations under the laws of the Peoples Republic of China.

6. Data Sharing and Third-Party Disclosure

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We share your information only in the limited circumstances described below and always under appropriate safeguards.

We may share data with service providers and subcontractors who perform functions on our behalf. These include cloud hosting providers, email delivery services, and analytics platforms. Each provider is contractually bound to process data only according to our instructions and to maintain confidentiality and security standards at least as protective as our own.

We may disclose information if required by law, such as in response to a valid court order, subpoena, or government investigation. We will make reasonable efforts to notify you of such disclosure unless prohibited by law.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

With your explicit consent, we may share information in ways not described above. Any such sharing will be clearly communicated to you in advance, and you will have the opportunity to decline.

7. Data Storage and Security Measures

Protecting the confidentiality, integrity, and availability of your data is a foundational principle of our engineering practice. We implement a multi-layered security architecture that spans physical, technical, and administrative controls.

All data transmitted between your browser and our servers is encrypted using Transport Layer Security protocols. Data at rest is encrypted using industry-standard encryption algorithms. Access to personal data is restricted to authorized personnel on a need-to-know basis and is protected by strong authentication mechanisms including multi-factor authentication where applicable.

We conduct regular security assessments, vulnerability scans, and penetration tests on our infrastructure. Our team follows secure development practices including code review, dependency auditing, and the principle of least privilege in all system designs.

Despite these measures, no method of electronic storage or transmission is completely secure. While we strive to protect your data using commercially acceptable means, we cannot guarantee absolute security. In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.

8. Data Retention Policy

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined by the nature of the data and the context of its collection.

Contact form submissions and related correspondence are retained for a period of twenty-four months following the last communication, after which they are securely deleted unless an ongoing client relationship exists.

Client project data is retained according to the terms specified in the service agreement and, absent specific contractual provisions, for a period of five years following project completion to address any latent issues or questions that may arise.

Server logs and technical usage data are retained for a rolling period of twelve months and are then automatically purged. Aggregated and anonymized data derived from these logs may be retained indefinitely for analytical purposes, as it cannot be used to identify any individual.

At the conclusion of the applicable retention period, data is securely deleted or anonymized using methods that prevent recovery or re-identification.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding the personal data we hold about you. We are committed to honoring these rights and will respond to verified requests within the timeframes required by applicable law.

The right of access means you may request a copy of the personal data we hold about you along with information about how it is being processed. We will provide this information in a structured, commonly used, and machine-readable format.

The right to rectification allows you to request correction of inaccurate or incomplete personal data we hold about you. We will promptly update our records upon verification of the corrected information.

The right to erasure, also known as the right to be forgotten, entitles you to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected or when you withdraw consent.

The right to restrict processing enables you to limit how we use your data in specific situations, for example while we verify the accuracy of contested data or while assessing an objection to processing.

The right to data portability allows you to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another data controller.

The right to object permits you to object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact us using the details provided in section fifteen of this policy. We may need to verify your identity before processing your request.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors originate. This section explains what these technologies are, how we use them, and how you can control them.

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to website operators. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a set period.

The cookies deployed on our site fall into several categories. Essential cookies are necessary for the website to function and cannot be disabled in our systems. Performance cookies collect anonymous information about how visitors use our site, helping us improve its functionality. Functionality cookies remember choices you make to provide enhanced, more personalized features.

You may control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website and limit your ability to use some features.

11. Third-Party Services and External Links

Our website may include links to external websites, plugins, and applications that are not operated by SunDew. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.

When you leave our website, we encourage you to review the privacy policy of every site you visit. This Privacy Policy applies solely to information collected by SunDew through our website and in the course of our service delivery.

We may integrate with third-party services in the delivery of our computer systems design and related services, such as cloud platform providers, monitoring and analytics tools, and collaboration platforms. These integrations are governed by the service agreements we have with our clients and the privacy policies of the respective third-party providers.

12. International Data Transfers

SunDew is headquartered in Kunming, Yunnan, China, and our primary data processing activities occur within the territory of the Peoples Republic of China. However, in the course of serving international clients and utilizing global cloud infrastructure, your data may be transferred to, stored in, or processed in countries outside your country of residence.

When we transfer personal data across international borders, we implement appropriate safeguards to ensure that the data remains protected in accordance with this Privacy Policy and applicable law. These safeguards may include standard contractual clauses approved by relevant data protection authorities, adequacy decisions where applicable, and contractual provisions that impose data protection obligations on the receiving party equivalent to those in your home jurisdiction.

By using our services, you acknowledge that your data may be transferred internationally as described above. If you have questions about the specific mechanisms we use for international data transfers, please contact us using the information in section fifteen.

13. Protection of Minors

Our website and services are not directed to individuals under the age of eighteen. We do not knowingly collect personal data from children or minors. Our services are designed for business professionals and organizations engaged in computer systems design and related technology initiatives.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately using the details below. Upon verification, we will take prompt steps to remove such information from our records and terminate any associated accounts.

We encourage parents and guardians to monitor their childrens online activities and to educate them about the importance of protecting personal information. SunDew fully supports international efforts to protect the privacy of minors in the digital environment.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. When we make material changes, we will revise the effective date at the top of this page and, where appropriate, provide more prominent notice such as an announcement on our website or a direct email notification to individuals with whom we have an ongoing relationship.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of our website and services after any modifications to this policy constitutes your acknowledgment and acceptance of the updated terms.

Historical versions of this Privacy Policy are maintained in our internal records and are available upon request. If you have questions about how a previous version of this policy applies to data collected during a specific period, please contact us.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to reach out. We take privacy matters seriously and will respond to your inquiry promptly and thoroughly.

You may contact our data protection team through any of the following channels:

Email: connect@sundew.lol
Telephone: +1 (513) 840-0825
Postal Address:
Kunming JingYangLu Trading Co., Ltd.
Attn: Data Protection
Attach 1-PL, No. 90 Xinxing Road
Donghua Street, Panlong District
Kunming, Yunnan, 650000
China (CN)

We aim to acknowledge all privacy-related inquiries within five business days and to provide a substantive response within thirty calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.