Mannlee Privacy Policy

(A) Sharing

Since some services are provided by authorized partners, Mannlee may share your personal information with third parties. We share your personal information only for purposes that are lawful, proper, necessary, specific, and clear. Our authorized partners are not allowed to use the shared information for any purposes beyond those stipulated in this policy. Should they wish to change the purpose of use, we will seek your consent again.

Before sharing any information, we assess the data security capabilities of the third parties involved and enter into strict confidentiality and data security agreements with them. These agreements require that they handle your information in accordance with our instructions and this Privacy Policy. If your personal information is to be shared with parties other than those listed below, we will do so only with your explicit consent. Sharing may occur with the following:

• Data Analytics Service Providers: To improve service quality and promotional effectiveness, we may transfer necessary personal information to data analytics service providers. We only perform demographic analysis on group data rather than individual profiling.
• Affiliated Companies: In order to enhance our service quality or provide you with new services, we may share your personal information internally within Mannlee and its affiliated companies—limited to organizations under Mannlee’s control or subsidiary relationships.
• Partner Door and Window Suppliers and Service Providers: To offer you superior customization services, we may share some of your information (such as customization requirements and contact details) with partner suppliers and service providers. We ensure that these partners adhere strictly to confidentiality agreements to protect your personal information.

(B) Transfer

We will not transfer your personal information to companies, organizations, or individuals outside of Mannlee and its affiliated companies except in the following circumstances:

• With your explicit authorization or prior consent.
• When required by laws, legal procedures, mandatory government requests, or judicial rulings.
• As stipulated in other legal agreements (such as these Terms) that you have signed.
• In the event of mergers, acquisitions, or bankruptcy proceedings—if personal information is transferred, the new entity must agree to be bound by this Privacy Policy; otherwise, your consent will be obtained again.

(C) Public Disclosure

We will not publicly disclose your personal information except in the following cases:

• With your explicit consent.
• Legal Disclosure: When required by law, legal procedures, litigation, or mandatory requests by competent government authorities.

Furthermore, the sharing, transfer, or public disclosure of personal information does not require your consent in the following circumstances:

• When related to national security and defense.
• When related to public safety, public health, or major public interests.
• When related to criminal investigations, prosecutions, trials, or enforcement of judgments.
• When necessary to protect significant lawful rights (such as life or property) when obtaining consent is impractical.
• When the personal information has been voluntarily disclosed by you.
• When collected from legally public sources, such as legitimate news reports or government disclosures.

(D) Security Measures

Mannlee will, in accordance with applicable laws and the cybersecurity protection system, establish a comprehensive data security management system covering all stages. We conduct data security training and adopt industry-standard security measures and technical safeguards to store and protect your personal information, thereby reducing the risk of disclosure, damage, misuse, unauthorized access, unauthorized disclosure, or alteration.

• Technical Security Measures: Use encryption during data transmission; strictly control data access permissions (especially for bulk operations); perform security testing (including vulnerability scanning and penetration testing) before application system deployment and promptly remediate any security issues; regularly back up data and test recovery procedures; and establish monitoring and auditing systems for comprehensive data security.
• Other Security Measures: Establish a company confidentiality and information security committee, issue internal guidelines on personal information protection, and coordinate overall information security efforts; require all employees and outsourced personnel to sign confidentiality agreements and assign data access strictly according to job responsibilities; conduct regular security education and training; and perform periodic risk assessments on data processing activities with reports submitted to relevant authorities.
• Incident Response: To address risks such as data leakage, damage, or loss, we have established pre-deployment security testing processes and internal handling procedures (including emergency response protocols) along with remedial measures. In the event of a security incident, we will immediately take action, inform you promptly about the incident details and risks, explain the measures taken or planned, provide suggestions on how you might mitigate risks, and fulfill our reporting obligations to the authorities. If individual notification is impractical, we will issue a public notice on our platform.