Privacy Policy

This Privacy Policy applies to www.chinabiotechgroup.com and chinabiotechgroup.com (the Site), including its public information pages and inquiries sent to the contact address published on the Site. China Biotech Group / 中国生物科技集团 is the publication name used on the Site. References to we, us, and our in this policy refer to the administration of this website under that name.

The Site describes research, development, and international coordination in the life sciences in general terms. This policy concerns personal information associated with visiting the Site and corresponding with its administration. It is not a privacy notice for a clinical study, patient service, research-participant database, or independently operated payment service.

For questions about this policy, website administration, or the handling of your information, contact contact@chinabiotechgroup.com. A separate project or service that involves different data processing should provide its own information identifying the responsible operator and the applicable privacy terms before that processing begins.

• Contact website administration

You can read the public pages without creating an account or submitting a contact form. If you email us, the information received can include your name, email address, organization, professional role, the subject and contents of your inquiry, attachments, and the correspondence needed to respond. Your email provider may also include routing and message metadata.

Provide only information that is relevant to your inquiry and that you are entitled to share. Do not send patient records, identifiable genetic information, medical histories, identity-document scans, payment-card credentials, passwords, wallet private keys, or recovery phrases to the general contact address. An appropriate secure channel and specific processing terms would be needed for information requiring additional protection.

Sending an inquiry is voluntary. If you do not provide a reply address or enough context, we may be unable to answer. Reading the Site does not require you to disclose your identity or enter into a research or commercial relationship.

When your browser requests a page, the hosting and delivery infrastructure processes technical information needed to return it. Depending on the request and the provider's configuration, this can include an IP address, requested URL, request time, browser or device information, HTTP headers, referring page, response status, and diagnostic or security logs. Approximate location may be derived from an IP address; this is not precise device-location tracking.

Such information supports page delivery, troubleshooting, availability, and protection against malicious traffic. It can be processed by infrastructure providers even when you have not contacted us. The amount of logging, access to logs, and retention depend on the service and its configuration; the Site does not promise anonymous browsing merely because it has no account-registration form.

The current public pages do not ask you to sign in, subscribe to a newsletter, or select personalized advertisements. Cookies or similar technologies used by hosting or security infrastructure may nevertheless support essential delivery, protection, or technical operation. Browser caching may store page assets, fonts, and installation-related resources on your device.

The Site loads its Noto fonts from Google Fonts. Loading these resources causes your browser to connect to Google-operated font servers and transmit the technical information needed for the request, including your IP address and request headers. This connection is distinct from a customer account or payment transaction. Google's privacy information describes its handling of information associated with its services.

The Site also includes an existing Grok app-builder extension script served from grok.com. Requesting that script transmits technical request information to its operator, and the script can run in your browser to support app-builder features. Its handling of information is governed by the relevant provider terms and privacy information. These external-resource connections are part of the current Site, even when no inquiry is sent.

You can manage cookies and site data through your browser settings, remove cached resources, or use browser controls to restrict third-party requests. These choices may affect appearance or functionality. If optional tracking or a new feature requiring consent is introduced, the relevant information and any legally required consent mechanism must be provided before it is used. Visiting the Site is not treated as consent to every possible future use of your information.

• Google Privacy Policy
• Grok provider privacy information

Information associated with the Site is used for the purposes relevant to your interaction. Where the GDPR, UK GDPR, or another law requiring a specified legal basis applies, the basis depends on the particular activity; an inquiry does not automatically authorize unrelated processing.

• Providing and maintaining the Site, diagnosing faults, and protecting it from abuse: legitimate interests in operating a functional and secure informational website, subject to the applicable balancing of those interests with your rights.
• Responding to questions and professional correspondence: legitimate interests in handling inquiries; steps at your request before a contract, where the correspondence genuinely concerns a proposed contract.
• Keeping records necessary to comply with binding legal requirements or respond to a lawful request: compliance with the applicable legal obligation.
• Processing for an optional purpose that legally requires permission: your consent, which can be withdrawn for that purpose without affecting the lawfulness of processing before withdrawal.

If information is needed for a materially different purpose, the applicable notice and legal basis must be addressed before that use. This policy does not authorize the collection of identifiable clinical or genetic research data through ordinary website inquiries.

Technical information is processed by providers involved in operating the Site. The Site is hosted through Vercel, Google Fonts supplies its external fonts, and Grok serves its app-builder extension script. Correspondence can also be processed by email-delivery and mailbox providers. The relevant providers may process information on behalf of the website administration or for their own service-security and legal purposes, according to their role and terms.

Access to inquiry information should be limited to people and providers who need it to handle the inquiry, administer the Site, obtain professional advice, or meet legal obligations. Information may be disclosed when legally required, to address a substantiated security incident or fraud, or to establish, exercise, or defend legal rights. A provider's involvement is not permission to disclose information unrelated to its purpose.

The Site does not provide a visitor-data marketplace or an advertising audience service. Personal information received for website inquiries is not offered for sale or used by the website administration for cross-context behavioral advertising. Where applicable law gives additional opt-out rights, you can contact us to exercise them.

• Vercel Privacy Notice

The current public Site is informational and has no shopping cart, payment checkout, or facility for uploading identity-verification documents. Reading these pages does not initiate a financial transaction. This policy does not state that any payment provider has approved the Site or activated a service for it.

If you independently use an external service, that service's operator determines the information it requires and provides its own privacy notice. A separately identified payment provider, including MoonPay where actually used, may collect identity, payment, wallet, transaction, and compliance information under its own applicable terms. You should review that provider's notice before submitting information.

An external provider's processing is distinct from information received by the website administration. Any transaction information actually shared with us would require an identified purpose and applicable privacy disclosure. Referring to an independent provider does not remove responsibility for personal information we ourselves receive or determine how to use.

• MoonPay Privacy Policy

Internet hosting, font delivery, and email services can involve infrastructure and personnel in more than one country. Information may therefore be processed outside your country of residence, where data-protection rules can differ. A reference to international coordination on the Site is not itself permission to send personal information to any location or party.

Where applicable law restricts an international transfer, the transfer requires the appropriate legal mechanism and safeguards. These may include an applicable adequacy decision or approved contractual safeguards, depending on the recipient and transfer. Contact us for information about a transfer associated with your inquiry and any safeguards relevant to it. This policy does not represent that every provider or country has received an adequacy determination.

Information should be retained only for as long as reasonably necessary for the purpose for which it is processed, including a period required by applicable law or necessary to resolve an ongoing dispute. Different types of information may require different retention periods.

For correspondence, relevant factors include whether the inquiry remains open, whether a continuing professional relationship exists, and whether a record is needed to address a complaint or legal obligation. Technical-log retention depends on the hosting or security service, the nature of a fault or incident, and the relevant provider settings. Cached resources on your device are controlled by your browser and can be cleared by you.

You can ask about retention relating to your information or request deletion. Where information must be kept for a legitimate and legally permitted reason, the reason and any applicable limitation will be explained. Backups and provider-managed systems may remove information according to their own deletion cycles rather than immediately from every copy.

The Site is delivered over HTTPS. Hosting, account-access controls, and the limitation of information requested help reduce exposure. Security also depends on the configuration of service providers and the way correspondence is handled; no website, email system, or transmission method can guarantee absolute security.

Use the contact address published on the Site and avoid including unnecessary sensitive information. If you believe information has been exposed, misdirected, or misused, contact us with a description of what happened. Do not include passwords or complete financial credentials in an incident report. Any breach notification required by applicable law remains governed by that law.

Your rights depend on your location, the law applicable to the processing, and the basis on which information is used. Where applicable, these can include the following rights. They are not a representation that every privacy law applies to every visitor or that every request must be granted without a legally recognized exception.

• Request access to personal information and information about how it is processed.
• Request correction of inaccurate information or completion of incomplete information.
• Request deletion, restriction of processing, or a portable copy where the law provides that right.
• Object to processing based on legitimate interests, including for reasons relating to your particular situation. Where information is used for direct marketing, object to that use at any time.
• Withdraw consent for a consent-based purpose; withdrawal does not make earlier lawful processing unlawful.
• Exercise applicable rights to opt out of sale, sharing, targeted advertising, or certain profiling, and appeal a refusal where the relevant law provides an appeal right.

You can decline to send an inquiry, limit the information in a message, or manage browser storage without creating an account. Applicable rights can be exercised without discriminatory treatment for making a lawful request.

Send a request to contact@chinabiotechgroup.com with the subject Privacy request. Explain the right you wish to exercise and provide enough context to locate the relevant information, such as the email address used for correspondence and an approximate date. An authorized representative may act where permitted by law, subject to reasonable verification of that authority.

Verification should be proportionate to the request and the risk of disclosing information to the wrong person. Do not send identity documents unless a justified need and an appropriate method have been explained. Requests will be addressed within the time required by the applicable law; any lawful extension, refusal, or limit should be explained, together with available appeal rights.

You may also complain to the data-protection authority or other regulator competent for your location or the processing concerned. Where UK data-protection law applies, this includes the Information Commissioner's Office. Contacting us first does not prevent you from exercising a statutory complaint right.

• Send a privacy request
• UK ICO complaint information

The Site is directed to general professional information about the life sciences, rather than services for children. It is not designed to solicit personal information from people under 18. If you believe a child has provided personal information, contact us so the circumstances and any necessary deletion or other protective steps can be assessed.

The Site is not a channel for enrolling research participants or collecting identifiable health or genetic data. Such activities require appropriate notices, lawful authority, and any relevant ethical or regulatory approvals. The general language on the Site and this policy do not supply those requirements.

The public information pages do not offer credit decisions, patient assessments, or personalized eligibility decisions. Hosting providers may automatically filter suspicious requests to protect the Site. Such technical protection is distinct from making a decision about a research or commercial relationship.

An independent financial or payment provider may use its own fraud-prevention and verification processes under its privacy notice. If a future Site feature introduces automated decisions with legal or similarly significant effects, the relevant processing, rights, and required safeguards must be disclosed for that feature before it is used.

This policy may be updated to reflect changes to the Site, its providers, or legal requirements. The effective date appears at the top of the page. Material changes require appropriate notice and, where the law requires it, new consent; publication alone does not retrospectively authorize a new use of information.

The Terms of Service explain the scope and permitted use of the informational Site. This Privacy Policy explains information handling rather than granting permission for unrelated processing. The detailed policy text is provided in English; the Chinese headings and introductory line are navigation aids and summaries.

• Terms of Service