We collect only the information that a specific function actually needs, and nothing unrelated to the service. This page explains what information we collect, how it is used and kept, who it is shared with, and what rights you have over your own information.
Version v1.2 · Effective from the date this page is published
This policy is issued by the natural person Zhang Jifeng, who operates GIFUN LoadExpert (published as "Gifun Studio", referred to below as "we" or "us"), in accordance with the notification obligation in Article 17 of the Personal Information Protection Law of the People's Republic of China, and explains how we process your personal information in the course of providing container and pallet loading calculation services.
1.1 This policy applies to loadexp.com and its subpaths (including the /app/ application), and to the client applications on each platform. It applies to users located in mainland China, the Hong Kong Special Administrative Region of China, the Macao Special Administrative Region of China and the Taiwan region of China; see Article 8 for the specific notes on the law applicable to users in those regions.
1.2 Please read this policy before you use the service. By using the service you indicate that you understand the personal information processing rules described in this policy. This policy forms part of the Terms of Service.
We collect only the information that a specific function actually needs, and do not collect information unrelated to the service.
| Item collected | Purpose | Required |
|---|---|---|
| Username | Account identification, sign-in, attribution of loading records | Required |
| Sign-in password (stored after salted hashing, not reversible) | Authentication | Required |
| Account role (standard user / administrator) | Permission control | Required |
| Account validity period, creation time, enabled status | Managing the term of service, account security | Required |
Email address, mobile number, identity document number, real name, address, bank card or payment information, biometric information, precise location information.
The carton types, container types, dimensions, weights, quantities, cargo descriptions, loading constraints and other data you submit in order to use the service, together with the calculation results and plan summaries generated from them. The purposes are: to perform the loading calculation, to generate plans and the 3D visualisation, and to keep history for you.
Please note: do not submit data that is a state secret, the trade secret of another person, or data you are not authorised to submit (see Articles 5.3 and 5.4 of the Terms of Service).
| Item collected | Purpose |
|---|---|
| IP address | Security protection, identifying abuse, rate limiting of the free trial |
| Request time, request method, access path, feature category | Operational statistics, troubleshooting |
| HTTP status code, processing time | Performance and availability analysis |
| Username (where signed in), operation type, operation target | Security audit (permission-sensitive events only) |
Where an unregistered user uses the free trial function, we record the IP address, carton type, container type, number of cartons and space utilisation. The purposes are: cooldown control for the same IP address, site-wide daily quota control, and the sanitised statistics shown publicly.
Anything shown publicly is sanitised (the last part of the IP address is hidden); the full IP address is used only to decide rate limiting and is not disclosed externally.
The "request an account" form on the public site collects: name, company name, contact details, notes, IP address. The purpose is to handle your access request and to contact you.
Because registration for the service does not include an email address or a mobile number, the contact details in the form are the only means by which we can reach you of our own initiative — please make sure they are accurate.
The ticket title, body text, messages exchanged and a snapshot of the submitter's name. The purpose is to handle and reply to your questions.
Preferences that you configure yourself, such as container payload limit overrides (stored separately for each account). Once you sign in, the preference is bound to your account so that it stays the same across devices.
We use browser local storage to hold functional information, and not for tracking, profiling or advertising:
| Type | Content | Purpose | How it is cleared |
|---|---|---|---|
sessionStorage | Sign-in state, role, username, credential validity | Maintaining the sign-in session | Cleared automatically when the tab is closed or you sign out |
localStorage | Read marker for release notices, payload limit preferences | Avoiding repeated prompts, remembering your preferences | Can be cleared in your browser settings |
3.1 Storage location: the servers for this service are located in Hong Kong SAR, China. Your personal information is stored in the database on those servers.
3.2 Retention periods:
| Type of information | Retention period |
|---|---|
| Account information | For as long as the account exists; deleted or anonymised after the account is closed |
| Loading business data and history | Until you delete it yourself or close your account |
| Access logs | 6 months |
| Audit logs | 12 months |
| Free trial records | 12 months |
| Form submissions and tickets | A reasonable and necessary period after they have been handled |
3.3 Handling on expiry: where a retention period has expired we delete the information or anonymise it; where technical reasons prevent immediate deletion, we stop all processing other than storage and the necessary security protection.
3.4 Closing your account: you may apply to close your account by the means set out in Article 9 of this policy. After closure we delete or anonymise your personal information, except where laws or regulations require otherwise, or where it is necessary in order to deal with a dispute. Closure cannot be undone, and your loading history is deleted along with it.
4.1 We do not sell, rent or otherwise provide your personal information to any third party for profit.
4.2 Information may be shared only in the following circumstances:
4.3 The service includes no third-party service integration (no third-party analytics, no advertising, no external sign-in, no SMS or email service), so there is no situation in which personal information is provided externally as a result of a third-party integration.
4.4 Where a merger, acquisition, bankruptcy or similar event results in the transfer of personal information, we will inform you of the name and contact details of the recipient and require it to remain bound by this policy.
We take the following measures to protect your personal information:
Do not share your account or password with anyone else; if you notice anything unusual about your account, contact us immediately by the means set out in Article 11.
The service is aimed at the business scenarios of enterprises and professionals and is not aimed at children under the age of fourteen. We do not knowingly collect children's personal information. If you are a minor, please use the service with the consent and guidance of a guardian. If we discover that we have collected a child's personal information without first obtaining a guardian's consent, we will delete it as soon as possible.
7.1 The servers for this service are located in Hong Kong SAR, China, so your personal information is stored outside the mainland. For users in the mainland, this situation may constitute providing personal information abroad as that expression is used in the Personal Information Protection Law.
7.2 Under the Provisions on Promoting and Regulating Cross-border Data Flows, a party that is not a critical information infrastructure operator and that has cumulatively provided the personal information of fewer than 100,000 people (not including sensitive personal information) abroad since 1 January of the current year is exempt from filing a security assessment for data export, exempt from concluding a standard contract for the export of personal information, and exempt from obtaining personal information protection certification. The current scale of the service is far below that threshold, so this exemption applies.
7.3 The exemption above is premised on sensitive personal information not being involved. We therefore do not collect sensitive personal information such as identity document numbers, biometric data, financial account details, movement tracking data or information about children under the age of fourteen. If you enter such information yourself in an input field of the service, please delete it immediately and do not submit it again.
7.4 If the scale of the business or the types of information change so that the exemption no longer applies, we will complete the corresponding compliance procedures in accordance with law before continuing to provide the service.
8.1 We process personal information in accordance with the relevant laws of the People's Republic of China, including the Personal Information Protection Law, the Data Security Law and the Cybersecurity Law. Under Article 3 of the Personal Information Protection Law, where the personal information of natural persons within the territory of the People's Republic of China is processed outside that territory, that law likewise applies where the circumstances described in that Article are met.
8.2 The service is available to users including those in mainland China, the Hong Kong Special Administrative Region of China, the Macao Special Administrative Region of China and the Taiwan region of China. Your region may have legislation that specifically protects personal data (personal information); to the extent that it has mandatory effect, it applies with priority within its scope.
| User's region | Principal applicable law | Principal protection for you |
|---|---|---|
| mainland China | Personal Information Protection Law, Data Security Law, Cybersecurity Law of the People's Republic of China | Notification and consent, separate consent for sensitive personal information, access and copying, correction and completion, deletion, portability, withdrawal of consent, explanation, complaints and reports |
| Hong Kong SAR, China | Personal Data (Privacy) Ordinance (Cap. 486) | Six data protection principles; the right of access to and correction of personal data; the duty to inform of the purpose and manner of use |
| Macao SAR, China | Personal Data Protection Act (Law No. 8/2005) | The data subject's rights of access, correction, erasure and objection; processing must have a legitimate basis |
| Taiwan region of China | The local provisions on the protection of personal data | Enquiry or request for inspection, request for a copy to be issued, request for supplementation or correction, request to cease collection, processing or use, request for erasure |
8.3 This policy does not exclude and does not restrict any right you have under mandatory legal provisions in force in your region. If any provision of this policy is inconsistent with a mandatory legal provision in force in your region, the local provision governs to the extent of that inconsistency, and the remaining provisions continue in effect.
8.4 We do not carry out direct marketing: we do not use your personal information to send you commercial promotion, and we do not provide it to a third party for that party's own promotional purposes. As regards the regulation of direct marketing under the Personal Data (Privacy) Ordinance of the Hong Kong Special Administrative Region of China, the service does not involve use or provision for promotional purposes.
8.5 The channels for exercising your rights are the same: wherever you are located, you may make a request to us by the means set out in Article 11; we will reply within 15 working days of receiving the request. If you are not satisfied with the reply, you may complain to the competent authority in your region that handles personal data protection matters, or complain to the Cyberspace Administration, market regulation and other authorities of mainland China.
| Right | Description | How to exercise it |
|---|---|---|
| Access and copy | View the personal information we hold about you | View it directly in the application; or make a request as below |
| Correction and completion | Correct inaccurate or incomplete information | Change it yourself in the application; or make a request as below |
| Deletion | Ask for personal information to be deleted | Close the account; or make a request as below |
| Withdrawal of consent | Withdraw consent previously given to the processing of personal information | Close the account, or stop using the service |
| Closing the account | Delete the account and the data associated with it | Make a request as below |
| Explanation | Ask for this policy to be explained | Make a request as below |
| Complaints and reports | Complain to a regulator | Complain to the Cyberspace Administration, market regulation and other authorities |
How to make a request: by email to zhangjifeng@msn.com, or through the "ticket" function of the service. We will reply within 15 working days of receiving the request.
Please state the specific request and verifiable identity information in your application, so that we can confirm your identity and prevent anyone else from impersonating you.
10.1 We may update this policy because of changes in laws and regulations or adjustments to the business; an update will be published in a notice on the page or in a notification within the service, and will be marked with the date of the update.
10.2 Where an update involves a material change such as a change to the purposes or methods of processing or to the types of information, we will draw attention to it in a prominent way and, where necessary, seek your consent again.
Version v1.2 · Effective from the date this page is published. Please also read the Terms of Service.