WOD mDX Privacy Policy — Your Data Protection Assurance

WOD mDX (Shanghai) Co., Ltd. (collectively "WOD mDX", "we", "us" or "our") respects your privacy and understands how important privacy is to you. This policy applies to the websites owned and operated by WOD mDX. It describes the information practices of the WOD mDX websites, including what information is collected, how it is used, with whom it is shared and how it is protected.

This policy describes how WOD mDX handles your personal data in our corporate business, but it may not cover all possible personal data processing scenarios. The WOD mDX websites may contain links to other websites, for whose privacy practices or content we are not responsible.

Therefore, we recommend that you read the dedicated privacy statement or notice together with this privacy statement before using a specific website, application, product or service.

This statement describes:

1. How we collect and use your personal data
2. How we use cookies and similar technologies
3. How we disclose personal data
4. How to access and control your personal data
5. How we protect and retain your personal data
6. How we process children's personal data
7. Third-party providers and their services
8. International transfers of your personal data
9. Updates to this statement
10. How to contact us

01 How We Collect & Use Your Personal Data

Personal data refers to any data that, alone or combined with other data, can be used to identify an individual. Depending on how you interact with us, you may provide us with such data when you use our websites, applications, products or services — for example when you create a user account or contact us for support; or we may obtain usage data by recording your interactions with our websites, products or services, such as through cookies or by receiving usage data from software running on your device. Where permitted by law, we also obtain data from public and commercial third-party sources. The data we collect depends on how you interact with WOD mDX, including the websites you visit or the products or services you use, such as name, gender, company name, job title, address, email address, telephone number, login information (account and password), photos and identity information. We also collect the information you provide to us and the content of messages you send to us, such as the information you fill in during an inquiry, your questions, or the information you provide for customer support. When you use WOD mDX products or services, you may be required to provide your personal data. In some cases you may choose not to provide such data, but this may prevent us from providing the corresponding products or services, or it may mean that we are unable to respond to or resolve any issues you raise.

We may use your personal data for the following purposes:

1. Creating an account.
2. Fulfilling your transaction or service requests, including fulfilling orders; delivering, activating or verifying products or services; providing training and certification and managing and processing the results of such training and certification; participating in online or offline events; making changes as requested by you or providing information you have requested (for example, marketing materials or white papers on products or services); and providing technical support.
3. With your consent, contacting you; sending you information about products and services that may interest you; inviting you to participate in WOD mDX exhibitions, market research or satisfaction surveys; or sending you marketing information. If you do not wish to receive such information, you can unsubscribe at any time.
4. Sending you important notices, such as notifications of operating system or application updates and installations.
5. Providing you with a personalized user experience and personalized content.
6. Authenticating and managing suppliers and business partners, and communicating or conducting business with them.
7. Conducting internal audits, data analysis and research to improve our products and services.
8. Analyzing business operating efficiency and measuring market share.
9. Troubleshooting errors when you choose to send us error details.
10. Synchronizing, sharing and storing the data you upload or download, as well as the data required to perform the upload and download.
11. Protecting the security of our products, services and customers or users, and implementing and improving our loss-prevention and anti-fraud programs.
12. Complying with and enforcing applicable legal requirements, relevant industry standards or our policies.

WOD mDX may also collect and use non-identifiable data. Non-identifiable data refers to data that cannot be used to identify an individual. For example, WOD mDX collects aggregate statistics, such as the number of visitors to its websites. WOD mDX collects such data to understand how users use its websites, products and services. By doing so, WOD mDX can improve its services to better meet customer needs. WOD mDX may, at its own discretion, collect, use, process, transfer or disclose non-identifiable data for other purposes. We will endeavor to keep your personal data separate from non-identifiable data and use each separately. If personal data is mixed with non-identifiable data, it will still be treated as personal data.

When WOD mDX processes your personal data, it will do so on an appropriate legal basis in accordance with applicable law, including:

• processing your personal data to perform a contract when responding to your transaction or service requests;
• processing your personal data based on your consent;
• processing your personal data based on our or a third party's legitimate interests when contacting you, carrying out marketing or market research, improving our products and services, or implementing and improving our loss-prevention and anti-fraud programs. These legitimate interests include enabling us to manage and operate our business more effectively and to provide our products and services; protecting the security of our business, systems, products, services and customers; internal management and compliance with internal policies and procedures; and other legitimate interests described in this policy;
• we may also process your personal data based on compliance with and enforcement of legal obligations.

02 How We Use Cookies & Similar Technologies

A. Cookies. To ensure the normal operation of our websites and applications, we may need to place a small piece of data called a cookie on your computer or mobile device. A cookie is a text file stored on a computer or mobile device by a web server. The content of a cookie can only be retrieved or read by the server that created it. Cookies typically consist of an identifier, the site name, and some numbers and characters. Cookies are unique to the browser or application you use, enabling the website or application to store data such as your preferences or the items in your shopping cart.

Like many other websites or internet service providers, we use cookies to improve the user experience. Cookies allow a website or application to remember your settings, such as language, preferred font size or other browser preferences. This means you do not need to set your preferences on every visit. If you disable cookies, the website will treat you as a new visitor every time you load a web page. For example, if you leave a website you are logged in to and then return, you will need to log in again. We do not use cookies for any purpose other than those mentioned in this statement. You can manage or delete cookies according to your preferences. For more information, please visit AboutCookies.org.

In addition, we may use local storage objects (LSOs), such as Flash cookies and HTML5, to store content information and preferences. Vendors and partners that provide certain features on our websites or display advertisements based on your web browsing activities may also use LSOs (such as HTML5) to collect and store information. Various browsers may offer their own management tools to remove HTML5 LSOs.

You can clear all cookies stored on your computer, and most web browsers offer the option to block cookies. However, if you do so, you will have to change your user settings each time you visit our websites. To learn how to manage your browser's cookie settings, please refer to the help documentation of your browser (such as Internet Explorer, Google Chrome, Mozilla Firefox, Safari or Opera).

03 How We Disclose Personal Data

If certain services are provided by WOD mDX's authorized partners, WOD mDX will share your personal data with such partners as described in this policy. For example, when you purchase certain products or services from WOD mDX online, we must share your personal data with our partners in order to provide you with the corresponding services. In addition, as an international company, we may share personal data among WOD mDX sites in other languages.

If required by applicable law or in response to legal process, WOD mDX may also disclose your personal data to relevant law enforcement agencies or other government agencies. WOD mDX may also disclose your data where there is a reasonable need to do so, such as to perform a contract, and where we believe such disclosure is necessary and appropriate to prevent physical harm or property damage, or to investigate possible or actual illegal activities.

04 How to Access & Control Your Personal Data

We endeavor to maintain accurate, complete and up-to-date personal data. Please ensure that all personal data you submit to us is correct.

To the extent required by applicable law, you may (i) have the right to access certain personal data we hold about you, (ii) request that we update or correct inaccuracies in that data, (iii) object to or restrict our use of your personal data, and (iv) request that we delete your personal data from our databases. To exercise these rights, please contact us. For security purposes, we may require that you make your request in writing. Please note that we may refuse your request if we reasonably consider it to be fraudulent, infeasible, or likely to jeopardize the privacy of others.

Where permitted by applicable law, when we process your personal data based on your consent, you have the right to withdraw your consent at any time. However, withdrawal does not affect the lawfulness or validity of processing based on your consent prior to the withdrawal, nor does it affect any data processing carried out on legal grounds other than your consent.

05 How We Protect & Retain Your Personal Data

The security of your personal data is important to us. We use appropriate physical, administrative and technical measures to protect your personal data against unauthorized access, disclosure, use, modification, damage or loss. For example, we use encryption to ensure data confidentiality, protection mechanisms to prevent attacks, and access control mechanisms to allow only authorized access to your personal data. We also provide security and privacy training to our employees to ensure they have a solid understanding of personal data protection. Although no security measure can guarantee absolute security, we are fully committed to protecting your personal data. Accordingly, although we will take appropriate measures to protect your personal information, WOD mDX cannot determine or guarantee the security of the information you provide to us or obtained from our websites, and you therefore use our websites at your own risk. For information on how to report security issues, problems or possible incidents to WOD mDX and the WOD mDX information security team, please contact us at the address listed in Section 10. In the event of a personal information security incident, we will notify you in a timely manner and report to the regulatory authorities as required by laws and regulations.

We retain your personal data no longer than is necessary for the purposes described in this statement, unless a longer retention period is required or permitted by law. The retention period may vary by scenario, product and service. The criteria we use to determine the retention period include: the length of time the personal data is needed to fulfill business purposes (including providing products and services; maintaining corresponding transaction and business records; controlling and improving the performance and quality of products and services; ensuring the security of systems, products and services; handling possible user inquiries or complaints; and locating problems), whether you have consented to a longer retention period, and whether laws, contracts and other equivalent documents impose special requirements on data retention. We retain your registration information for as long as your account is necessary for us to provide you with the products and services you require. You may choose to deactivate your account, at which point we will stop providing products and services to you through your account and will delete or anonymize your relevant personal data within a necessary period, unless otherwise required by special legal requirements that do not permit deletion.

06 How We Process Children's Personal Data

Our websites, applications, products and services are not directed to children. A child as defined by applicable local law shall not register for or use our websites, applications, products or services without the consent of a parent or guardian. If personal data of a child is collected with parental consent, we will only use or disclose such data in a manner permitted by law, with the explicit consent of the parent or guardian, or as necessary to protect the child. If WOD mDX becomes aware that it has collected personal data of a child without obtaining verifiable parental consent in advance, it will delete such data as soon as possible.

07 Third-Party Providers and Their Services

During your use or experience of our services, you may receive content or links to web pages from third parties other than WOD mDX. WOD mDX has no control over the content or websites after redirection, but you may choose whether to use such links, view the content, or access the products or services provided by third parties.

Personal data you provide on third-party websites is collected and processed solely by the third party, independently of WOD mDX's processing activities. Such third parties are not bound by this statement. Please read and understand their statements before submitting personal data to them.

08 International Transfers of Your Personal Data

WOD mDX is an international company. Accordingly, the personal data we collect may be processed or accessed in the country or region where you use our products or services, or in other countries or regions where we or our affiliates, service providers or business partners are located. Different jurisdictions may have different data protection laws. In addition, because we may not have data centers in your country, your personal data may be transferred to data centers outside your country for storage. In such cases, we take appropriate measures to ensure that data is processed in accordance with this statement and applicable law. This includes transferring data subjects' personal data from the EU to countries or regions that the European Commission considers not to ensure an adequate level of data protection. In such cases, we may use various legal mechanisms, such as signing standard contractual clauses approved by the European Commission, obtaining the data subject's consent for cross-border data transfers, or implementing security measures such as anonymizing personal data before cross-border transfer.

09 Updates to This Statement

We reserve the right to update or amend this statement at any time. The statement posted here will always be the latest version. If we make material changes to this statement, we may notify you through different channels, such as posting a notice on our websites or sending you a direct notice. Where required by applicable data protection laws, we will also seek your consent for any material changes that affect the way we use your personal information. We encourage you to review this page periodically for the latest information on our privacy practices.

10 How to Contact Us

If you have any privacy-related complaints or questions, please contact us. We will respond to you within 30 working days.

When your personal data is processed by WOD mDX under this statement, the WOD mDX entity that provides you with the products or services, or that has signed or is about to sign a contract with you, is the data controller of the relevant personal data. Contact details are listed at the footer of this website.