Privacy Policy — Red Wisdom

Last Updated: July 31, 2025

1. Introduction

Red Wisdom, a brand operated by Kunming Li Hong Hui Trading Co., Ltd., a company registered at No.75 Tian Yuan Road, Dong Hua Street, Pan Long District, Kunming - 650000, China (CN), referred to throughout this policy as Red Wisdom, we, us, or our, is committed to protecting the privacy and security of your personal information. This Privacy Policy explains in detail how we collect, use, store, disclose, and safeguard your data when you visit our website at www.redwisdom.mom, use our services, communicate with us via email at service@redwisdom.mom or telephone at +1 (607) 249-2157, or otherwise engage with our business in any capacity.

We recognize that privacy is a fundamental right and a cornerstone of trust between our organization and the individuals and businesses we serve. As a provider of computer systems design and integrated IT services, we handle information with the same rigor and discipline that we apply to engineering mission-critical technology systems. This policy is designed to be transparent, comprehensive, and easy to understand, giving you a clear picture of our data practices and your rights.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of our website and services immediately. We reserve the right to update or modify this policy at any time, and we will post the revised version on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Red Wisdom operates in the computer systems design and related services industry, which falls under the broader categories of Professional, Scientific, and Technical Services as well as Computer Integrated Systems Design. Our data processing activities are conducted in accordance with applicable data protection laws, including but not limited to the Personal Information Protection Law of the Peoples Republic of China, the General Data Protection Regulation (GDPR) of the European Union where applicable, and other relevant regional and international privacy frameworks.

2. Information We Collect

2.1 Information You Provide to Us Directly

When you interact with our website or services, you may voluntarily provide us with certain categories of personal information. This includes but is not limited to the following:

Contact Information: Your full name, company or organization name, job title or role, email address, telephone number, physical mailing address, and country of residence. You provide this information when you fill out our contact form, request a consultation, subscribe to communications, or correspond with us directly.
Project Information: Details about your technology requirements, infrastructure specifications, business objectives, budget parameters, timeline constraints, and any other information you choose to share when describing your project or inquiry. This may include technical specifications, architectural diagrams, existing system documentation, and strategic planning materials.
Account Information: If we establish a client portal or account for you, we may collect usernames, passwords or authentication credentials, account preferences, and communication settings. We use industry-standard encryption and hashing techniques to protect authentication data.
Payment Information: When you engage our paid services, we may collect billing details including company registration numbers, tax identification numbers, bank account information for wire transfers, and invoicing addresses. Payment card information, if ever collected, is processed exclusively through PCI-DSS compliant third-party payment processors and is never stored on our own systems.
Communications: The content of any messages, emails, documents, or other materials you send to us, including attachments, meeting notes, and feedback. We retain correspondence records to maintain continuity in our professional relationships and to improve our service quality.

2.2 Information Collected Automatically

When you visit our website, certain types of information are collected automatically through standard internet technologies. This information helps us understand how visitors use our site and enables us to improve the user experience. The categories of automatically collected information include:

Log Data: Our servers automatically record information that your browser sends whenever you visit our website. This log data may include your Internet Protocol (IP) address, browser type and version, browser language preference, the pages of our website that you visit, the time and date of your visit, the time spent on each page, the referring website or source that brought you to our site, and other diagnostic data.
Device Information: We may collect information about the device you use to access our website, including the hardware model, operating system and version, unique device identifiers, screen resolution, and mobile network information if accessing via a mobile device.
Usage Data: Information about how you navigate and interact with our website, including click patterns, scroll depth, mouse movements, form interaction data, pages viewed, links clicked, and files downloaded. This data is aggregated and does not identify you personally unless combined with other identifiable information.
Location Data: We may infer your approximate geographic location based on your IP address to provide regionally relevant content and to comply with jurisdictional requirements. We do not collect precise geolocation data from your device.

2.3 Cookies and Similar Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and to collect usage analytics. A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. Cookies serve various purposes and can be categorized as follows:

Essential Cookies: These cookies are strictly necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. Our website cannot operate correctly without these cookies, and they do not require your consent under most data protection regulations.
Functional Cookies: These cookies allow our website to remember choices you make, such as your language preference or the region you are in, and provide enhanced, more personalized features. They may be set by us or by third-party providers whose services we have integrated into our pages.
Analytics Cookies: These cookies help us understand how visitors engage with our website by collecting and reporting information anonymously. We may use analytics services such as Google Analytics that set cookies to track metrics including page views, session duration, bounce rate, and traffic sources. The data collected via analytics cookies is aggregated and does not identify individual users.
Performance Cookies: These cookies collect information about how visitors use our website, for instance which pages visitors go to most often and whether they encounter error messages. These cookies do not collect information that identifies a visitor, as all information these cookies collect is aggregated and therefore anonymous.

You have control over cookies through your browser settings. Most web browsers allow you to refuse cookies, delete existing cookies, or alert you when a website attempts to set a cookie. Instructions for managing cookies can typically be found in your browser preferences or help documentation. Please note that disabling certain categories of cookies may affect the functionality and user experience of our website. By continuing to use our website without adjusting your browser settings to decline cookies, you consent to our use of cookies as described in this section.

3. How We Use Your Information

We use the personal information we collect for the following purposes, always grounded in a lawful basis for processing as defined by applicable data protection legislation:

3.1 Service Delivery and Client Engagement

The primary purpose for which we collect and process your information is to deliver the computer systems design and IT services you have requested. This includes but is not limited to: responding to your inquiries and providing the information you seek; preparing proposals, quotes, and statements of work; conducting technical assessments and requirements analysis; designing, architecting, and implementing technology solutions; managing ongoing client relationships and service delivery; providing technical support, troubleshooting, and maintenance; issuing invoices and processing payments; and communicating about project status, milestones, and deliverables.

3.2 Business Operations and Administration

We process personal information as necessary for the operation and management of our business. This includes: maintaining our internal records and client databases; performing accounting, auditing, and financial reporting functions; ensuring compliance with legal obligations and regulatory requirements; enforcing our contractual rights and terms of service; managing disputes, claims, and legal proceedings; detecting, preventing, and addressing fraud, security breaches, or technical issues; and evaluating and improving our business processes and service quality.

3.3 Communication and Marketing

With your consent where required by law, we may use your contact information to: send you information about our services that may be relevant to your business; share industry insights, technical articles, and case studies that may be of professional interest; invite you to events, webinars, or training sessions we organize; request feedback on our services to help us improve; and send administrative messages such as updates to our policies, terms, or service changes. You may opt out of receiving marketing communications at any time by contacting us at service@redwisdom.mom or by using the unsubscribe mechanism included in our communications.

3.4 Website Improvement and Analytics

We analyze aggregated and anonymized usage data to: understand how visitors interact with our website and identify areas for improvement; optimize the website structure, navigation, and content; diagnose and resolve technical issues affecting site performance; and make informed decisions about future website development and content strategy. This analysis is performed on aggregated data sets and does not target or profile individual users.

4. Legal Basis for Processing

We process personal information only when we have a lawful basis to do so under applicable data protection laws. The legal bases on which we rely include:

Contractual Necessity: Processing your information is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This applies when you engage us to provide services and we need to process your data to fulfill our obligations under that engagement.
Legitimate Interests: We process information where it is necessary for our legitimate business interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests. Our legitimate interests include operating and improving our business, maintaining the security of our systems, and marketing our services to relevant business contacts.
Consent: Where required by law, we obtain your explicit consent before processing your personal information for specific purposes, such as sending direct marketing communications or placing non-essential cookies on your device. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Legal Obligation: We may process your information to comply with applicable laws, regulations, court orders, or other legal processes, including tax and accounting obligations, regulatory reporting requirements, and lawful requests from public authorities.
Vital Interests: In rare circumstances, we may process information to protect the vital interests of an individual, such as in the case of an emergency involving a threat to life or health.

5. Data Sharing and Disclosure

5.1 Service Providers and Partners

We may share your personal information with trusted third-party service providers who perform functions on our behalf and are contractually bound to protect your data. These providers include: cloud hosting and infrastructure providers that store and serve our website and data; email service providers that facilitate our business communications; analytics providers that help us understand website usage patterns; payment processors that handle billing transactions; customer relationship management platform providers; accounting and professional services firms; and legal counsel when necessary. We carefully vet all service providers to ensure they maintain adequate data protection standards and we limit the data shared to only what is necessary for them to perform their designated functions.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, your personal information may be transferred to a successor entity or acquiring party as part of the transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy, to the extent required by applicable law.

5.3 Legal Compliance and Protection

We may disclose your personal information when we believe in good faith that such disclosure is necessary to: comply with applicable laws, regulations, legal processes, or governmental requests; enforce our Terms of Service or other agreements and investigate potential violations; protect the rights, property, or safety of Red Wisdom, our clients, employees, or the general public; detect, prevent, or otherwise address fraud, security, or technical issues; and protect against harm to the rights, property, or safety of Red Wisdom, our users, or the public as required or permitted by law.

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for purposes including industry analysis, demographic profiling, research, and marketing. This information does not constitute personal data and is not subject to the restrictions described in this policy.

6. Data Security

We implement and maintain technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices are informed by industry standards and include:

Encryption: We use Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers. Sensitive data at rest is encrypted using industry-standard encryption protocols such as AES-256.
Access Controls: Access to personal information is restricted to authorized personnel who require the information to perform their job functions. We enforce the principle of least privilege, granting only the minimum level of access necessary for each role. Multi-factor authentication is required for access to critical systems.
Network Security: Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, regular vulnerability scanning, and continuous security monitoring. We conduct periodic penetration testing to identify and remediate potential weaknesses.
Security Policies and Training: We maintain documented information security policies and procedures. All personnel with access to personal data receive regular training on data protection requirements, security best practices, and incident response protocols.
Physical Security: Our physical facilities and data centers are secured with access controls, surveillance, and environmental protections appropriate to the sensitivity of the data they house.
Incident Response: We maintain a formal incident response plan to address security breaches or data incidents. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities without undue delay, in accordance with applicable legal requirements.

While we strive to protect your personal information using commercially reasonable means, no method of transmission over the internet or method of electronic storage is one hundred percent secure. We cannot guarantee the absolute security of your data, but we are committed to continuously improving our security posture and responding promptly to any identified vulnerabilities.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, audit, or reporting requirements. The specific retention period depends on the nature of the information and the purpose for which it is processed:

Client Project Data: Information related to active client engagements is retained for the duration of the project plus a period of seven years following project completion to address any post-project inquiries, warranty claims, or legal obligations. This retention period aligns with standard commercial statute of limitations for contract-related claims.
Contact and Inquiry Data: Information provided through our contact form or direct inquiries is retained for a period of three years from the date of last communication, unless a client relationship is established, in which case the client data retention policy applies.
Financial and Transaction Records: Billing records, invoices, and payment information are retained for the period required by applicable tax and accounting regulations, typically seven to ten years depending on the jurisdiction.
Website Analytics Data: Aggregated and anonymized analytics data is retained indefinitely for trend analysis and benchmarking purposes. Raw log data containing IP addresses is retained for a maximum of ninety days before being anonymized.
Marketing Communications: Contact information used for marketing communications is retained until you unsubscribe or opt out, after which your details are added to a suppression list to ensure we honor your preferences.

When the retention period expires, we securely delete or anonymize your personal information using methods appropriate to the data type and medium, ensuring that it cannot be reconstructed or re-identified.

8. Your Data Protection Rights

Depending on your jurisdiction of residence and the applicable data protection laws, you may have the following rights regarding your personal information:

Right of Access: You have the right to request confirmation of whether we process your personal information and, if so, to obtain a copy of that data along with information about how and why we process it.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you without undue delay.
Right to Erasure: Also known as the right to be forgotten, you may request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when the data has been unlawfully processed.
Right to Restrict Processing: You have the right to request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability: Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes. Upon receiving an objection to direct marketing, we will cease processing for that purpose without undue delay.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe that our processing of your personal information violates applicable data protection laws.

To exercise any of these rights, please contact us at service@redwisdom.mom. We will respond to your request within the timeframe required by applicable law, typically within thirty calendar days. We may need to verify your identity before processing your request to protect your privacy and prevent unauthorized access. In some cases, we may not be able to fully comply with your request if doing so would conflict with our legal obligations, regulatory requirements, or the legitimate rights of others. If we deny any part of your request, we will explain our reasons in writing.

9. International Data Transfers

Red Wisdom is headquartered in Kunming, Yunnan Province, China. However, our business operations, service providers, and technical infrastructure may involve the transfer, storage, and processing of personal information across international borders. When we transfer personal information from one jurisdiction to another, we implement appropriate safeguards to ensure that your data receives an adequate level of protection consistent with this Privacy Policy and applicable law.

For transfers from the European Economic Area (EEA) or the United Kingdom to countries that have not been deemed to provide an adequate level of data protection by the relevant authorities, we rely on approved transfer mechanisms such as Standard Contractual Clauses (SCCs) adopted by the European Commission or the equivalent mechanism approved by the United Kingdom government. For transfers subject to the data protection laws of other jurisdictions, we implement comparable safeguards as required.

By using our website and services, you acknowledge that your personal information may be transferred to and processed in countries other than your country of residence, including China, the United States, and other locations where our servers, service providers, or affiliates are located. These countries may have data protection laws that differ from those in your jurisdiction. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

10. Childrens Privacy

Our website and services are not directed to, intended for, or marketed to individuals under the age of eighteen. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of eighteen. If we become aware that we have inadvertently collected personal information from a child under the age of eighteen without verifiable parental consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at service@redwisdom.mom so that we can take appropriate action.

In the context of our business-to-business services, we engage exclusively with corporate entities and professionals acting in their business capacity. We do not target consumers or individuals in their personal capacity, and our data collection practices are oriented toward business relationship management rather than consumer profiling.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, or services that are not owned, operated, or controlled by Red Wisdom. This Privacy Policy applies solely to information collected by Red Wisdom through our own website and services. We are not responsible for the privacy practices, content, or security of any third-party websites, even if they are linked from our pages. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information. The inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices by Red Wisdom.

We may also integrate third-party services such as analytics platforms and embedded content into our website. These third-party services may collect information about your interactions with our site independently of Red Wisdom. Their data collection is governed by their respective privacy policies, which we encourage you to review. We take reasonable steps to select reputable third-party service providers, but we do not control and are not responsible for their independent data processing activities.

12. California Privacy Rights

If you are a resident of the State of California in the United States, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable California privacy laws. These rights may include:

The right to know what personal information we collect, use, disclose, and sell or share about you, including the categories and specific pieces of personal information.
The right to request deletion of personal information we have collected from you, subject to certain exceptions provided by law.
The right to correct inaccurate personal information that we maintain about you.
The right to opt out of the sale or sharing of your personal information. Red Wisdom does not sell personal information as that term is defined under California law, nor do we share personal information for cross-context behavioral advertising purposes.
The right to limit the use and disclosure of sensitive personal information. Red Wisdom does not use or disclose sensitive personal information for purposes other than those necessary to provide our services or as otherwise permitted by law.
The right to non-discrimination for exercising any of your privacy rights under California law. We will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercised your rights.

To exercise your California privacy rights, please contact us at service@redwisdom.mom with the subject line California Privacy Rights Request. We will verify your identity before processing your request using the information you provide, which may include matching your name, email address, and other identifying details with the information we maintain. You may also designate an authorized agent to submit a request on your behalf, provided that the agent demonstrates written authorization from you and we are able to verify your identity directly.

13. European Economic Area and United Kingdom Privacy Rights

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR), the UK GDPR, and applicable national data protection laws. This section provides additional information specific to data subjects in these jurisdictions.

Data Controller: For the purposes of the GDPR and UK GDPR, the data controller responsible for your personal information is Kunming Li Hong Hui Trading Co., Ltd., operating as Red Wisdom, with its registered address at No.75 Tian Yuan Road, Dong Hua Street, Pan Long District, Kunming - 650000, China (CN). Contact for data protection matters: service@redwisdom.mom.

Data Protection Officer: While Red Wisdom is not legally required to appoint a formal Data Protection Officer under all circumstances, we have designated a privacy compliance point of contact to oversee our data protection practices. Inquiries and requests related to data protection can be directed to service@redwisdom.mom.

Purpose and Legal Basis Table: The following table summarizes the purposes of our data processing and the corresponding legal bases under the GDPR:

Responding to inquiries and providing requested information — Legitimate interests (responding to business inquiries) or pre-contractual steps at your request.
Delivering contracted services and managing client relationships — Performance of a contract to which you are a party.
Billing, invoicing, and financial administration — Performance of a contract and compliance with legal obligations (tax and accounting laws).
Sending direct marketing communications about our services — Consent (where required) or legitimate interests (business-to-business marketing).
Website analytics and performance monitoring — Consent for non-essential cookies; legitimate interests for essential operational data.
Security monitoring and fraud prevention — Legitimate interests (protecting our systems and data) and legal obligations.
Complying with legal obligations and responding to lawful requests — Legal obligation.

International Transfers: As described in Section 9, your personal information may be transferred outside the EEA or UK. When we make such transfers, we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission or the UK Information Commissioners Office, and we conduct transfer impact assessments as required.

Complaints: If you believe that our processing of your personal information infringes applicable data protection law, you have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In the UK, you may lodge a complaint with the Information Commissioners Office (ICO).

14. Data Protection in China

As a company registered in the Peoples Republic of China, Red Wisdom processes personal information in compliance with the Personal Information Protection Law of the Peoples Republic of China (PIPL), the Cybersecurity Law, and the Data Security Law, along with their implementing regulations and supporting guidelines.

Under the PIPL, we adhere to the principles of lawfulness, legitimacy, necessity, and good faith in our personal information processing activities. We process personal information with a clear and reasonable purpose that is directly related to the provision of our services. We collect only the minimum personal information necessary to achieve the processing purpose, and we do not excessively collect personal information.

In compliance with PIPL requirements, we provide you with the following specific notifications: the identity and contact method of the personal information handler (Kunming Li Hong Hui Trading Co., Ltd., contactable at service@redwisdom.mom); the purpose and method of processing, and the types and retention periods of processed personal information, all of which are detailed in this policy; the methods and procedures for you to exercise your rights; and when we engage any third party to process personal information on our behalf, we enter into agreements that specify the purpose, duration, method, type of personal information, protection measures, and the rights and obligations of both parties.

If we need to transfer your personal information outside of China, we will do so only after completing the necessary security assessments or obtaining the required certifications as mandated by the Cyberspace Administration of China and other competent authorities. We will also inform you of the recipients name, contact method, purpose and type of processing, and the method and procedure for exercising your rights against the overseas recipient.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations, or business operations. When we make changes, we will revise the Last Updated date at the top of this page. For material changes that significantly affect how we process your personal information or that materially alter your rights under this policy, we will provide prominent notice on our website before the changes take effect and, where appropriate and feasible, notify you directly via email or through our service communication channels.

We encourage you to review this Privacy Policy periodically. Your continued use of our website and services after any modifications to this policy constitutes your acknowledgment of the changes and your agreement to abide by the updated terms. If you do not agree with the revised policy, you must discontinue use of our website and services and may request deletion of your personal information as described in Section 8 above.

16. Contact Us About This Policy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, we encourage you to contact us through any of the following channels. We take privacy seriously and will make every effort to address your inquiry promptly and thoroughly.

Email: service@redwisdom.mom — This is the preferred and fastest channel for privacy-related inquiries.

Phone: +1 (607) 249-2157 — Available during business hours, Monday through Friday, 9:00 AM to 6:00 PM China Standard Time (CST).

Postal Mail: Red Wisdom / Kunming Li Hong Hui Trading Co., Ltd., No.75 Tian Yuan Road, Dong Hua Street, Pan Long District, Kunming - 650000, China (CN).

Website: www.redwisdom.mom — Visit our contact page to submit an inquiry through our online form.

We will acknowledge receipt of your inquiry within five business days and aim to provide a substantive response within thirty calendar days or sooner, depending on the complexity of your request and applicable legal requirements.

End of Privacy Policy. This document was last reviewed and updated on July 31, 2025.