iScanBot Institutional Edition Privacy Policy

    I. How We Collect Your Personal Information
    We understand that the purpose of your use of our products or services is to assist you in conducting diagnosis and treatment activities, and therefore you need to provide us with your personal information and that of patients. You promise that when processing the above information, you have the qualifications required by the laws, regulations and relevant provisions of the People's Republic of China to conduct data processing activities such as collection, use, and external provision, and have the right to authorize us to process the aforementioned patient personal information. You promise that before providing us with patient personal information, you have obtained the patient's consent or signed a relevant informed consent form with the patient to provide us with the patient's personal information, and allow us to process the patient's personal information in the manner described in this agreement. Before collecting patient data of minors who have reached the age of 14, you have obtained the express consent of the minor or their guardian; for those under 14 years of age, you have obtained the express consent of their guardian. If you fail to obtain the above consent, you shall not collect relevant patient personal information.
    (I) Circumstances in which we collect your personal information
    We will only collect and use your personal information for the following purposes:
    1. User Login
    When you log in to iScanBot Institutional Edition, we need to collect your mobile phone number. We collect the above information to help you log in to iScanBot Institutional Edition and provide you with the services of iScanBot Institutional Edition. If you do not provide such information, we will not be able to help you log in to your account and provide you with services normally.
    2. Cloud Medical Record Management
    When you use the cloud medical record management service function, we need to collect your name, mobile phone number, and institution of employment. At the same time, we need to collect the patient personal information you provide, including the patient's name, gender, date of birth, photos, medical record information (doctor's diagnosis and treatment information, patient's teeth, facial, full-body photos, X-ray photos, intraoral scan data), etc. The purpose of collecting the above personal information is to help you upload and download cloud data, classify patient medical record information, provide you with cloud medical record storage services, and help you establish and manage patient information and files. If you do not provide the above information, we will not be able to help provide cloud storage services and other functions based on cloud storage services.
    3. 2D Medical Image Intelligent Analysis
    When you use the 2D medical image intelligent analysis service, we need to collect your name, mobile phone number, institution of employment, and physician practice certificate. At the same time, we need to collect the patient personal information you provide, including the patient's name, gender, date of birth, photos, and medical record information (doctor's diagnosis and treatment information, patient's teeth, facial, full-body photos, X-ray photos, intraoral scan data). The purpose of collecting the above personal information is to use AI algorithms to intelligently analyze the patient's condition based on the patient medical record information you provide, and present the analysis results to you in the form of a report for use as reference material when conducting diagnosis and treatment activities for patients. If you do not provide such information, we will not be able to provide you with the 2D medical image intelligent analysis service, but this will not affect your use of our other services.
    4. 3D Treatment Plan Design
    When you use the 3D treatment plan design service, we need to collect your name, mobile phone number, institution of employment, and physician practice certification. At the same time, we need to collect the patient personal information you provide, including the patient's name, gender, date of birth, photos, and medical record information (doctor's diagnosis and treatment information, patient's teeth, facial, full-body photos, X-ray photos, intraoral scan data). The purpose of collecting the above personal information is to use AI algorithms to intelligently design the patient's condition based on the patient medical record information you provide, and present the design results to you in the form of a plan for use as reference material when conducting diagnosis and treatment activities for patients. If you do not provide such information, we will not be able to provide you with the 3D treatment plan design service, but this will not affect your use of our other services.
    5. Online Review and Feedback
    When you use the online review and feedback function, we need to collect your name, mobile phone number, institution of employment, and physician practice certificate. At the same time, we need to collect the patient personal information you provide, including the patient's name, gender, date of birth, photos, and medical record information (). The purpose of collecting the above personal information is to review the patient's treatment situation based on the patient medical record information you provide. If you do not provide such information, we will not be able to provide you with the online review and feedback function, but this will not affect your use of our other services.
    6. AI Algorithm Research
    When you use the 2D medical image intelligent analysis and 3D treatment plan design functions, we may use the collected personal information for AI algorithm research to provide you with more accurate AI algorithm analysis services in the future and improve your user experience. We need to collect the patient personal information you provide, including the patient's name, gender, date of birth, photos, and medical record information (). The purpose of collecting the above personal information is to optimize the AI algorithm of iScanBot Institutional Edition based on the patient medical record information you provide and the AI algorithm analysis conclusions of iScanBot Institutional Edition, so as to provide you with better algorithm services in the future. If you do not provide such information, we will not be able to optimize the algorithm, but this will not affect your use of our other services.
    7. System and Service Troubleshooting
    When any failure occurs when you use the functions of iScanBot Institutional Edition, we may need to collect personal information related to the failure from you and patients to troubleshoot system and service failures. If you do not provide such information, we may not be able to troubleshoot system and service failures in time, compensate for losses caused by the failure, and help you use the functions of iScanBot Institutional Edition normally.
    8. Other Purposes
    When you use the functions of iScanBot Institutional Edition, we may collect your and patients' personal information in accordance with relevant laws, regulations, normative documents and other relevant provisions, or collect your and patients' personal information in accordance with the provisions of administrative organs, judicial organs and other relevant departments.
    (II) In the following circumstances, we do not need to obtain your consent to process your personal information:
    1. Necessary for maintaining national security, defense security and national interests;
    2. Necessary for concluding and performing a contract in which you are a party;
    3. Necessary for performing statutory duties or legal obligations;
    4. Necessary for responding to public health emergencies, or protecting the life, health and property safety of natural persons in emergency situations;
    5. Processing personal information within a reasonable scope for public interest purposes such as news reporting and public opinion supervision;
    6. Necessary for cooperating with judicial activities such as criminal investigation, litigation, trial and execution;
    7. Necessary for protecting major legitimate rights and interests such as your or others' life, health and property, and it is difficult to obtain the consent of the personal information subject;
    8. Processing your personal information that you have disclosed yourself or that has been lawfully disclosed within a reasonable scope in accordance with legal provisions;
    9. Necessary for medical business such as treatment, payment or health care, and it is difficult to obtain the consent of the personal information subject, after authorization and permission by a doctor;
    10. Using restricted datasets for scientific research, medical/health education or public health purposes, after authorization and permission by a doctor.
    (III) How We Use Cookies
    1. To ensure the normal operation of iScanBot Institutional Edition and provide you with a more convenient access experience and promotion services, we will store Cookies, Flash Cookies or other local storage provided by browsers on your computer or mobile device that usually contain identifiers, site names, and some numbers and characters (collectively referred to as "Cookies"). With the help of Cookies, we will simplify your repeated login steps and store your browsing preferences and other data.
    2. You can manage or delete Cookies according to your preferences. You can refuse to accept Cookies or clear all Cookies saved in your mobile device by modifying browser settings. If you refuse to accept, you will need to repeat login steps, change user settings and other operations every time you visit iScanBot Institutional Edition, which may cause inconvenience to your use of iScanBot Institutional Edition.
    

    II. How We Use Your Personal Information
    1. We use your personal information according to the purpose of collection to provide you with our product or service functions.
    2. The personal sensitive information we collect has been displayed in this Privacy Policy through prominent identification. Please be aware that once your personal sensitive information is leaked, tampered with or illegally used, it will cause damage to your personal or property safety. To prevent your personal sensitive information from being leaked or illegally used, we have taken appropriate technical and management protection measures to protect your personal information security as much as possible.
    3. Please note that all personal information you provide when using our products or services will continue to authorize us to use during the period when you use our products or services, unless you delete or cancel your account in the iScanBot Institutional Edition system background.
    4. As our products or services are upgraded, we may adjust the business functions described in this Privacy Policy and the personal information collected and used. When new products or services are related to the products or services we currently provide, the personal information collected and used will have a direct or reasonable connection with the original processing purpose. When we want to use your personal information for scenarios that have no direct or reasonable connection with the original processing purpose, or for other purposes not stated in this Privacy Policy, we will inform you through updating this Privacy Policy, relevant product pages and other privacy documents, and through pop-ups, push notifications and other methods, and will only collect and use this part of personal information after obtaining your express consent.
    

    III. How We Entrust Processing, Share, Transfer, and Publicly Disclose Your Personal Information
    (I) Entrusted Processing
    We may entrust third-party service providers to assist us in processing your personal information, or entrust third parties to process the patient personal information you provide after obtaining your consent, so that third-party service providers can assist us in providing products or services. The above entrusted processing will only occur when necessary and is bound by the purposes stated in this Privacy Policy. We will require the entrusted party to comply with strict confidentiality obligations and take effective confidentiality measures through written agreements, due diligence and other methods, and prohibit them from using the entrusted personal information for purposes other than the entrusted purpose.
    (II) Sharing
    1. We may share the personal information you provide with our affiliated companies. However, we will only share necessary personal information when necessary and are bound by the purposes stated in this agreement. If our affiliated companies want to change the processing purpose of personal information, they will again seek your authorization and consent. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    2. We may share your order information, account information, device information, location information and other relevant personal information with third parties such as partners to ensure the smooth completion of the products and services provided to you. However, we will only share your personal information for legal, legitimate, necessary, specific and clear purposes, and will only share the personal information necessary to provide products and services. Our partners have no right to use the shared personal information for any other purpose. Our partners include the following types:
    (1) Suppliers of goods or technical services
    We may share the personal information you provide with third parties that support our functions. These supports include supplying goods or providing infrastructure technical services, payment services, data processing, etc. for us.
    (2) Partners who jointly promote with us
    In order to enhance your experience of browsing and using iScanBot Institutional Edition and enable you to learn about relevant product or service information in time, we may entrust other enterprises to provide joint promotion for our products and services. We may share the personal information you provide and the non-personal information you provide with partners who jointly promote with us. For this purpose, we will separately inform you and obtain your consent. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    3. We may provide your personal information externally in accordance with legal provisions, the necessity of litigation and dispute resolution, or in accordance with the requirements of administrative and judicial organs in accordance with the law, and other necessities for performing legal obligations. If we provide your personal information to third parties to fulfill legal obligations, we will record the corresponding personal information provision behavior. If you need to understand the external provision of your and the personal information you provide, you can contact us by phone, email and other methods. After verifying your identity, we will inform you of the relevant information about the external provision of personal information.
    4. For responding to public health emergencies, or when it is necessary to protect your life, health and property safety in emergency situations, if we provide your personal information to third parties, we will inform you of the relevant information at an appropriate time (such as after the emergency is eliminated).
    5. In scenarios where we actively provide personal information externally, for entities that receive your personal information, we will sign strict sharing agreements with them, requiring the receiving party to process your personal information in accordance with legal provisions, our instructions and the content of this Privacy Policy, and requiring the receiving party to re-obtain your consent when changing the processing purpose and processing method. At the same time, we will conduct due diligence on the receiving party before providing your personal information externally to review whether the receiving party's processing purpose, processing method, etc. are legal, legitimate and necessary, the impact on your personal rights and security risks, and whether the receiving party has taken legal, effective technical measures and management measures appropriate to the degree of risk to protect the security of personal information.
    6. We may provide your personal information externally to other entities that you have agreed to.
    (III) Transfer
    1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer the personal information you provide to other parties. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    2. As our business continues to develop, we may experience situations such as merger, division or bankruptcy liquidation, in which case we need to transfer your personal information. When the above situation occurs, we will inform you of the name and contact information of the personal information recipient and require the recipient to continue to protect your personal information. If the personal information recipient changes the original processing purpose and processing method, we will require the recipient to re-obtain your consent.
    (IV) Public Disclosure
    1. With your explicit consent or based on your active choice, we may publicly disclose the personal information you provide. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    2. If we determine that you have violated laws and regulations or seriously violated our relevant agreement rules, or to protect the personal and property safety of our and our affiliated companies' users or the public from infringement, we may disclose your personal information in accordance with laws and regulations or relevant agreements. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    (V) Third-Party Access Management
    In order to provide you with richer and more complete functions, our application will embed third-party software development tools (referred to as "SDK"), or allow third parties to obtain relevant information through application programming interfaces (referred to as "API"), and provide services to you in the above ways. We will conduct strict security testing on SDKs and APIs that third parties use to obtain relevant information, and agree on strict data protection measures with them to comply with this Privacy Policy and relevant data security measures to protect your personal information security.
    1. In order to continuously improve the performance and user experience of our app, we use DCloud to collect and statistically analyze app operation logs (such as application startup data and exception error logs). DCloud will collect your device unique identification code (IMEI/android ID/DEVICE_ID/IDFA, SIM card IMSI information, OAID) to associate the collected app operation logs. For details, please visit 《DCloud User Service Terms》
    2. In order to provide you with app message push, we use push technology services provided by GeTui Co., Ltd. We may provide your device platform, device manufacturer, device brand, device identification code and other device information; MAC address, application list information, network information and location-related information to GeTui Co., Ltd. for providing you with message push technology services. When we push messages to you, we may authorize GeTui Co., Ltd. to perform link adjustment and mutually activate closed SDK push processes to ensure that you can receive the messages we push to you in time. For details, please visit 《GeTui User Privacy Policy》.
    The SDK name of the push service (GeTui UniPush) module is GeTui Message Push (com.igexin), and we may obtain your BSSID, SSID and other device-related information.
    To ensure that all manufacturer models can receive pushes, UniPush may integrate the following manufacturer push SDKs, and the scope of personal information collection involved is the same as or less than the GeTui SDK (com.igexin):
    Huawei HMS push (com.huawei.hms):[Privacy Statement]
    Meizu Flyme push (com.meizu.cloud): [Privacy Statement]
    OPPO push (com.heytap): [Privacy Statement]
    vivo push (com.vivo.push): [Privacy Statement]
    MiPush (com.xiaomi.push): [Privacy Statement].
    3. In order to better optimize the app experience, we use the third-party service Bugly to provide mobile developers with professional exception reporting and operation statistics, help developers quickly discover and solve exceptions, master product operation dynamics, and follow up on user feedback in time. Bugly may record your device platform, device manufacturer, device brand, device identification code, device MAC address, software installation list and other information. For details, please visit 《Bugly SDK Personal Information Protection Rules》
    4. Our product integrates Umeng+ SDK. Umeng+ SDK needs to collect your device Mac address and unique device identification code (IMEI/android ID/IDFA/OPENUDID/GUID/IP address/SIM card IMSI information) to provide statistical analysis services, calibrate report data accuracy through geographic location, and provide basic anti-cheating capabilities. For details, please visit 《Umeng Service Terms》
    5. In order to ensure that users have a better experience when using the app, we need to obtain device sensor permissions to achieve screen orientation switching on different pages.
    6. We will only publicly disclose the personal information you provide under the following circumstances:
    (1) With your explicit consent or based on your active choice, we may publicly disclose the personal information you provide. If it involves patient personal information, we will obtain the patient's authorization and consent through you or by ourselves;
    (2) If we determine that you have violated laws and regulations or seriously violated iScanBot's relevant privacy terms and rules, or to protect the personal and property safety of iScanBot users or the public from infringement, we may disclose your personal information in accordance with laws and regulations or iScanBot's relevant privacy terms and rules after obtaining your consent. If it involves patient personal information, we will obtain the patient's authorization and consent through you or by ourselves.
    
    

    IV. How We Store Your Personal Information
    (I) Storage Location
    In accordance with legal provisions, we will store your personal information collected and generated during operations within the territory of the People's Republic of China within the territory of the People's Republic of China. Currently, we will not transfer the collected personal information overseas. If we need to transfer your personal information outside the territory of the People's Republic of China in the future, we will strictly implement cross-border data operations in accordance with the personal information cross-border transfer requirements stipulated by laws and regulations, and obtain your separate consent in advance. If it involves patient personal information, you shall obtain the patient's authorization and consent.
    (II) Storage Period
    1. When you use our products or services, we will continuously store your personal information during the period of providing products or services according to business needs, unless you independently cancel authorization, delete this information or cancel your account. When your account is inactive for a long time or there are other circumstances sufficient to determine that you no longer use the products or services we provide, we will stop storing your personal information, and any losses caused thereby shall be borne by you.
    2. We only store your personal information for the minimum period necessary to provide products or services. After exceeding the necessary period, we will delete or anonymize your personal information.
    3. In accordance with the laws and regulations of the People's Republic of China, we will save network log information for more than 6 months.
    4. The default storage period for personal information by us cannot meet the long-term storage requirements for medical institutions to keep medical records as stipulated by laws, regulations and normative documents. We do not serve as the sole entity for your medical institution to keep medical records. Your medical institution should keep medical records by itself, or separately select the long-term storage service we provide to meet the medical record keeping requirements of medical institutions.
    

    V. How We Protect Your Personal Information
  (I) Security Protection Measures
  We have used security protection measures that meet industry standards to protect the personal information you provide, and prevent data from unauthorized access, public disclosure, use, modification, damage or loss. We will take all reasonable and feasible measures to protect your personal information. For example, we will ensure the security of information you submit online through encrypted transmission; the storage system as the background and the user information collection system as the foreground are physically separated and do not share the same server; regularly conduct security assessments and audits on network equipment and security equipment at security boundaries, patch vulnerabilities in time, and eliminate weak passwords; regularly conduct system and code-level vulnerability scans, and patch discovered security vulnerabilities and configuration non-conformities in time; all operation and maintenance personnel who access personal electronic information need to operate through a bastion host using two-factor authentication, and all operation behaviors are completely recorded; we will use trusted protection mechanisms to prevent data from malicious attacks; we will deploy access control mechanisms to ensure that only authorized personnel can access personal information; we will hold security and privacy protection training courses to strengthen employees' awareness of the importance of protecting personal information. We have established an information security management team and established detailed system security management systems, and we have passed the relevant national certifications for data security.
  (II) Security Incident Handling
  If a personal information security incident occurs, we will inform you in time in accordance with legal requirements: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to prevent and reduce risks independently, and remedial measures for you. We will inform you of the relevant situation of the incident in time by email, letter, phone, push notification and other methods. When it is difficult to inform each personal information subject one by one, we will publish announcements in a reasonable and effective manner. At the same time, we will also actively report the disposal of personal information security incidents to regulatory authorities as required.
  If you have any questions about our personal information protection measures, you can contact us through the contact information stated in this Privacy Policy. If you find that your personal information has been leaked, especially if your account and password have been leaked, please contact us immediately through the contact information stated in this Privacy Policy so that we can take corresponding measures.
    

    VI. How You Should Manage Your Personal Information
    Please keep your account information properly and be responsible for the security of your account information and the behaviors implemented through the account. Unless otherwise provided by relevant laws and with our consent, your account is limited to your personal use and shall not be borrowed, transferred, gifted, inherited or allowed to be used by others in any way. In accordance with the laws and regulations and national standards of the People's Republic of China, combined with common practices in other countries and regions, we guarantee that you can exercise the following rights over your personal information:
    (I) Query and Copy Your Personal Information
    You have the right to query your personal information. You can query or copy your personal information through "Personal Center", or you can contact us by email and other methods according to the contact information stated in this Privacy Policy to query or copy your personal information. Under the premise of complying with relevant legal provisions and technical feasibility, we will provide you with a copy of your personal information that can be copied within a reasonable period through appropriate methods. If you find that your account has security vulnerabilities or is being used illegally, please send a written request to our company email to notify us in time and you can report to relevant departments to protect your personal information security.
    (II) Correct and Supplement Your Personal Information
    When you find that the personal information we process about you is incorrect or incomplete, you have the right to require us to make corrections or supplements. You can contact us through the contact information stated in this Privacy Policy.
    (III) Delete Your Personal Information
    You have the right to require us to delete the personal information collected by iScanBot Institutional Edition. You can delete part of your personal information by editing personal account information (logging in to your account and through the "Personal Center" function), or you can directly submit relevant requirements by sending an email. You understand that before deleting your and the personal information you provide or canceling your account, we will verify your identity information. Except as otherwise provided by law, if a user cancels, we will delete your personal information and stop providing services to you (including but not limited to stopping login, ordering and other functions, and your account points will be cleared, etc.). Please note that when you delete the corresponding information from our services or we receive and agree to your deletion request, we may not immediately delete the corresponding information from the backup system, but will delete this information when the backup is updated.
    In addition, we will delete your personal information under the following circumstances:
    1. You withdraw your consent when processing your personal information based on consent;
    2. If our processing purpose has been achieved, cannot be achieved, or it is no longer necessary to use your personal information to achieve the processing purpose;
    3. If you no longer use our products or services;
    4. If we no longer provide products or services to you, or the storage period has expired.
    5. Other circumstances stipulated by law.
    If we decide to respond to your deletion request, we will also try to notify entities that have obtained your personal information from us at the same time, requiring them to delete in time, unless otherwise provided by law, or these entities have obtained your independent authorization. If you want to delete your personal information, you can contact us through the contact information provided in this Privacy Policy.
    After you or we assist you in deleting relevant information, due to applicable legal and security technical limitations, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and restrict any further processing of it until the backup can be cleared or anonymized.
    (IV) Change the Scope of Your Authorization and Consent
    The various business functions of iScanBot Institutional Edition require basic personal information to be completed. For the collection and use of additionally collected personal information, you can give or withdraw your authorization and consent at any time. You can contact us through the contact information provided in this Privacy Policy for authorization changes. Please understand that when you withdraw your consent, we will not be able to continue to provide you with the services corresponding to the withdrawn consent, but this will not affect the personal information processing services carried out based on your authorization.
    (V) Transfer Your Personal Information
    If you need to transfer your personal information to other platforms, enterprises or organizations, you can contact us through the contact information provided in this Privacy Policy. We will review your request, and under the premise of meeting the conditions stipulated by the cyberspace administration department and technical feasibility, we will provide you with ways to transfer the corresponding personal information.
    (VI) Other Rights
    If you have questions about our personal information processing rules, you can contact us through the contact information provided in this Privacy Policy, and we will explain the relevant personal information processing rules to you. Under the premise of complying with legal provisions, you have the right to restrict or refuse our processing of your personal information. If you want to exercise this right, you can contact us through the contact information provided in this Privacy Policy, and we will process and reply as soon as possible after receiving your request.
    (VII) Limitations on Rights Response
    For security purposes, you may need to provide a written request or prove your identity in other ways. We may first ask you to verify your identity before processing your request. We will make a reply within a reasonable period. For your reasonable requests, we will not charge fees in principle. For those groundless repeated requests, requests that exceed reasonable limits, require excessive technical means, bring risks to the legitimate rights and interests of others, or other unrealistic requests, we may refuse.
    Under the following circumstances, we will not be able to respond to your request:
    1. Related to our performance of obligations stipulated by laws and regulations;
    2. Directly related to national security and defense security;
    3. Directly related to public security, public health, and major public interests;
    4. Directly related to criminal investigation, prosecution, trial and execution of judgments;
    5. We have sufficient evidence that the user has subjective malice or abuses rights;
    6. For maintaining major legitimate rights and interests such as the life and property of users or other individuals, but it is difficult to obtain the consent of the person;
    7. Responding to the user's request will cause serious damage to the legitimate rights and interests of the user or other individuals and organizations;
    8. Involving trade secrets.
    

    VII. How We Protect Minors' Personal Information
    Our products or services are mainly aimed at doctors. The process of using products or services may involve the collection of minors' personal information, but we will not actively collect personal information from minors. When collecting information about minors over 14 years of age, you should obtain the consent and permission of the minor or their guardian; when collecting personal information about children (minors under 14 years of age), you should obtain the consent of their guardian. For personal information collected with the guardian's consent to use our products or services, we will only use, share, transfer or disclose this information when permitted by laws and regulations, with the guardian's explicit consent, or when necessary to protect children. If there is evidence that we collected minors' personal information without verifying age in advance or without obtaining verifiable guardian consent, we will try to delete the relevant information as soon as possible after knowing and verifying.
    

    VIII. How We Revise and Update This Agreement
    1. To provide you with better services and as our business develops, this Privacy Policy will also be updated accordingly. However, without your explicit consent, we will not reduce the rights you should enjoy under this Privacy Policy. We will issue updated versions on the client of our products or services, remind you of the updates of relevant content through announcements or other appropriate methods, and please also visit iScanBot Institutional Edition to learn about the latest Privacy Policy in time.
    2. For major changes, we will also provide more prominent notices (we will explain the specific changes to the Privacy Policy through methods including but not limited to email, text messages, or special prompts on browsing pages).
    3. Major changes referred to in this Privacy Policy include but are not limited to:
    (1) Major changes in our service model. Such as the purpose of processing personal information, the types of personal information processed, the way personal information is used, etc.;
    (2) Major changes in our ownership structure and organizational structure. Such as owner changes caused by business adjustments, mergers and divisions, etc.;
    (3) Changes in the main objects of external provision, transfer or public disclosure of personal information;
    (4) Major changes in your rights and ways of exercising them in personal information processing;
    (5) When the responsible department, contact method and complaint channel for our personal information security processing change;
    (6) When the personal information security impact assessment report indicates high risks.
    4. If you do not agree to the changes, you have the right to provide feedback to us through the contact information we disclose. If the feedback is adopted, we will adjust the changes as appropriate. If you still do not agree to the changes that have taken effect, you should stop using iScanBot Institutional Edition from the effective date determined by the changes, and the changes will not have effect on you; if you continue to use iScanBot Institutional Edition after the changes take effect, it will be deemed that you agree to the changes that have taken effect.
    5. We will also archive the old version of this Privacy Policy for your reference.
    

    IX. How to Contact Us
    If you have any questions or suggestions about iScanBot Institutional Edition or this Privacy Policy, or if you wish to make any complaints about iScanBot Institutional Edition or its content, please contact us at support@iscanbot.com
    and we will process it within 15 working days.
    If you are not satisfied with our reply, you can seek resolution by filing a lawsuit with the People's Court where Hangzhou iScanBot Technology Co., Ltd. is located.