Client data is one of the foundations for us to provide high-quality services, and the security of client data is our top priority. Valuing and ensuring the security of client information is a fundamental policy of QTCCC. Complying with the confidentiality statement is not only a solemn commitment of QTCCC to clients but also the direct responsibility of QTCCC's management and every employee.

Our most important asset is the trust of our clients. We protect the security of client data by implementing material, electronic, and programmatic protective measures that comply with or exceed applicable legal requirements. We train our employees to handle client data in an appropriate manner. When we need to use services provided by other companies or organizations, we will require them to maintain confidentiality of the client data we provide them.

This statement clearly stipulates the following:

I The purpose for which QTCCC collects client data;

II The important measures taken by QTCCC to protect client data;

III Categories of organizations and individuals who may have access to QTCCC client data;

IV Rights of Clients and Relevant Institutions or Individuals to Access and Modify Client Information

I The purpose for which QTCCC collects client data.

1. Clients may need to provide relevant information about their company and products to QTCCC during the consultation period before signing the "Confirmation of Authorization" with QTCCC, as well as during the period of QTCCC providing services.

2. If the client fails to provide such information, QTCCC may not be able to provide the consulting or related agency services.

3. QTCCC or organizations and individuals who legally obtain this information from QTCCC may use the client's information for the following purposes:

(1) QTCCC develops service plans that meet the needs of data subjects for the services they wish to obtain;

(2) QTCCC answers questions related to data subjects and provides consulting services to them. 

(3) QTCCC signs a Confirmation of Authorization with the party whose information was obtained;

(4) QTCCC service process related to the "Confirmation of Authorization";

(5) Document and data notarization related to the "Confirmation of Authorization";

(6) Product inspection related to the "Confirmation of Authorization";

(7) Product registration related to the "Confirmation of Authorization";

(8) Fees related to the "Confirmation of Authorization";

(9) Relevant uses related to the "Confirmation of Authorization";

(10) Related uses between the data subject and QTCCC.

II Important measures taken by QTCCC to protect client data.

QTCCC will treat the acquired client data confidentially. Materials preserved in physical form will be properly secured and locked away, while computer data will be stored in computer host systems located in restricted areas. Access to this data will be prohibited except for authorized personnel or through the use of passwords. The QTCCC data security system has the following characteristics:

1. QTCCC's client data is supervised by a designated confidentiality officer. The confidentiality officer is responsible for ensuring that the transfer, access, or use of data is carried out legally and in accordance with confidentiality guidelines.  QTCCC's internal confidentiality guidelines strictly prohibit the direct or indirect disclosure, publication, or release of any client data to others, unless the client has given their consent (which should be traceable) or it is allowed within the scope of this statement.

2. Authorization to access data will only be issued when necessary. Issued authorizations must be reviewed regularly by the management.

3. A violation record procedure is in place to investigate any unauthorized attempt to access data.

4. Encryption technology is used to process sensitive data; video surveillance is used to protect data security.

5. Confidential data that no longer needed will be destroyed according to the internal data retention period.

6.  If a client has special confidentiality requirements, QTCCC will strictly comply with the confidentiality terms specifically agreed upon by both parties.

   
   

III Categories of organizations and individuals who may have access to QTCCC client data:

1.Relevant departments and employees within QTCCC who have direct or indirect working relationships with the data subject's related consultations or entrusted matters.

2.Any other organizations or individuals who have established or will establish any business relationships related to the data subject's consultations or entrusted matters with QTCCC. These organizations or individuals include but are not limited to express delivery companies for client data, customs clearance companies, and software service providers for QTCCC's network.

3.Organizations or individuals designated by the data subject who have business dealings with the data subject.These organizations or individuals are determined in writing by the data subject (such as the "Confirmation of Authorization" signed between the data subject and QTCCC). If the data subject proposes changes or additions to these organizations or individuals,a written confirmation letter signed and stamped by the data subject is required.

4.Government agencies, notary publics, inspection institutions, banking institutions, and other relevant organizations or individuals associated with the data subject's consultations or entrusted matters with QTCCC.

5.The "organizations or individuals designated by the data subject who have business dealings with the data subject" mentioned in the above point 3 have no right to designate or entrust agents to exercise the authority to access/know the data subject's data on their own, unless they obtain special written authorization signed and stamped by the data subject.

6.Any actual or proposed assignees of QTCCC, participants or affiliated participants in all or any part of QTCCC's assets or business, or transferees. In this case, QTCCC will notify the data subject before the data is transferred.

IV Rights of Clients and Relevant Institutions or Individuals to Access and Modify Clients Information.

1. The data subject should specify in the "Confirmation of Authorization" with QTCCC the institutions and individuals who are allowed to access their information. QTCCC will refuse any institutions or individuals (including those related to the data subject) outside of those specified from accessing any information of the data subject.

2.  Before the client signs the "Confirmation of Authorization" with QTCCC or gives written approval for related institutions or individuals to access their information, QTCCC will refuse any client-related institutions or individuals (except for the client's contact person) from accessing their information.

3. The data subject and related institutions or individuals must obtain written confirmation from the data subject for any modification made to the data subject's data placed with QTCCC.

4. For QTCCC, any request regarding accessing data or inquiring about data confidentiality policies or customary practices should be made to the following individuals:

   •CEO of QTCCC

   •Special Confidentiality Officer for Client Data from QTCCC Administration and Personnel Department

V Revision of Confidentiality Policy

QTCCC will revise its confidentiality policy from time to time to make it more effective in maintaining the confidentiality of client information and in accordance with the principle of protecting client confidentiality. If we make significant changes to the confidentiality policy, we will notify clients of such revisions in a timely manner. From the date of implementation of the new version of the "Confidentiality Statement," all previous versions of the "Confidentiality Statement" provided by QTCCC will be invalidated.

Effective Date: April 14, 2023