1. Processing of personal data

1.1Royal Craft ("UPUPYES") respects and understands the importance of protecting your personal data. This privacy policy (hereinafter "Privacy Policy") regulates the relationship regarding the use of the UPUPYES app (hereafter "the App") and/or our website, Royal Craft, (hereafter "the Website") between you as a user and UPUPYES, who operates and owns the App and the Website.

1.2 When you use our services, UPUPYES collects data about you as a person. In this Privacy Policy, you can read about the data UPUPYES collects, what rights you have, how and for which purposes UPUPYES processes the data, and how you can contact UPUPYES, if you have questions about our processing of personal data.

2. Data controller

2.1 Data processed by UPUPYES will be processed in accordance with applicable data protection legislation.

2.2 UPUPYES is the data controller of the personal data collected in connection with your use of our services.

2.3 Contact

Hangzhou Royal Craft Industrial Co.,LTD.

Room 2404B, Yinfeng Building, No 1505 Binsheng Rd., Xixing Sub-district, Binjiang District, Hangzhou, Zhejiang ,China

support@royalcrafttools.com

3. Purpose and legal basis

3.1 Personal data are all kinds of information that can be directly or indirectly attributed to you. When you use our services, such as our App, we collect and process several such personal data about you.

3.2 Creating a user profile in the App: When you create a user profile in the App, the App requires you to register several data about you as a person. The data required to create a user profile is name, gender and email address. The collection of this personal data is necessary to fulfil the agreement between you and UPUPYES about your use of the App. This is based on point (b) of Article 6(1) of the General Data Protection Regulation.

3.3 Statistics for improving and optimising services: When you visit or use the App, we process data about you and your use of the App. The data we collect about you when you use the App is your user ID, IP address, network location, app version, and information about your device, including, among other things, the phone model and operating system of your mobile device. The purpose of collecting this data is to generate useful and accurate statistics to improve and optimise the content of our services, as well as to answer questions from you on our chat function. The collection of this personal data is based on a legitimate interest in being able to answer your questions via chat messages on our Website, as well as to improve and optimise our services, cf. point (f) of Article 6(1) of the General Data Protection Regulation.

3.4 Purchase of products: When you purchase a product from us, we collect the data that you provide. This is typically name, address, email address, telephone number, method of payment, postcode, country, information about which products you buy and possibly have returned, as well as information about queries and complaints. The purpose is to enable us to deliver the products that you have ordered and otherwise fulfil our agreement with you, including handling any returns and complaints. We may also process data about your purchases to comply with legislation, including obligations related to bookkeeping and accounting. The legal basis for the processing is point (b) of Article 6(1) of the General Data Protection Regulation, referring to our mutual agreement on your purchase on our Website. Also, the processing is necessary to comply with a legal obligation, cf. point (c) of Article 6(1) of the General Data Protection Regulation.

3.5 Collection of geographical location: For us to provide you with relevant and accurate traffic information when you need it, UPUPYES collects data about your location (geographic location) via the App. Once the App and your UPUPYES device are connected, your location data will be collected on an ongoing basis. Our collection of your location data is necessary for us to provide the services to you. If we do not collect data about your location, we, for instance, cannot warn you that you are close to traffic control. The processing of the above personal data is necessary for the performance of an agreement with you, cf. point (b) of Article 6(1) of the General Data Protection Regulation.

3.6 Registration for system and product testing: If you have accepted an invitation from us for testing system and/or products, we may collect personal data about you. This happens if you provide us with data about your identity on your own accord, e.g. if you provide us with your name in connection with you giving us feedback on system and/or product testing. The type of data we process about you depends on what identity data you provide, e.g., your name, email address, ID number. Also, we process data about the content of the feedback that you give us when testing systems and/or products. The processing of the above personal data is necessary for the fulfilment of an agreement with you, in accordance with point (b) of Article 6(1) of the General Data Protection Regulation.

3.7 Social media: UPUPYES is active on several social media sites, including LinkedIn, Facebook, and Instagram. When you interact with us on these media, you make data available to us and the social medium, such as when you respond to our posts, comment on, or share it, and we process data that you "like" UPUPYES or follow us on social media. Also, general data about you is processed in the form of, e.g. identification data, contact information, your profile picture, etc. The legal basis for the processing is UPUPYES's legitimate interest in marketing us on social media, cf. point (f) of Article 6(1) of the General Data Protection Regulation. When using Facebook, Facebook uses the data collected on UPUPYES's Facebook page, and UPUPYES and Facebook can be considered as joint data controllers for the processing of data. You can read more about joint controllership arrangements with Facebook here.

3.8 Marketing To For targeting marketing materials, including advertising via Facebook and other channels, UPUPYES uses your name, email address, city, postcode, telephone number, and ID number. This personal data is only collected if you have expressly consented to receiving such marketing materials. Your consent to the use of this data for marketing purposes is given in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). You can withdraw your consent at any time with effect for the future by unsubscribing from receiving such materials or by contacting us directly.

3.9 Signing up for our newsletter: UPUPYES uses your email address when sending you newsletters, e.g., about new features and other material relating to UPUPYES, provided that you have consented to the receipt of electronic marketing by email. The collection of this personal data is based on a legitimate interest in being able to send you marketing material, cf. point (f) of Article 6(1) of the General Data Protection Regulation. You can withdraw your consent at any time with effect for the future by unsubscribing from receiving our newsletter or by contacting us directly.

3.10 Support:

If you use UPUPYES's support solutions (telephone, email, or messages) for questions about the use of UPUPYES's services, e.g., in relation to solving technical issues, UPUPYES will use your email address, content in the messages, and the other data you provide to UPUPYES. The purpose of the collection is to be able to respond to your request for our support. The collection of this personal data is necessary to fulfil the agreement between you and UPUPYES on your use of our services. This is based on point (b) of Article 6(1) of the General Data Protection Regulation. If you do not wish to provide UPUPYES with this data, do not use our support solution.

3.11 Anonymisation of data: All data associated with the UPUPYES user profile is anonymized at the time when the user deletes their UPUPYES profile, e.g., if the user no longer wishes to use UPUPYES´s service, but no later than 30 days after request. All data Associated with UPUPYES´s user profile is anonymized at the time when UPUPYES deletes the user´s UPUPYES profile on its own initiative, e.g., due to the user´s misuse of UPUPYES´s service or breach of the agreement with UPUPYES. If the user has not logged in to their user profile for 3 years, the user profile is deactivated, and data associated with it is anonymized. Once a week, UPUPYES´s system scans for user profiles where have no log in logs for the past 3 years, after which all data is anonymized and cannot be recreated.

4. Security

4.1 We process your personal data securely and confidentially in accordance with applicable law, including the General Data Protection Regulation.

4.2 We have taken technical and organisational measures to prevent your data from being accidentally or unlawfully deleted, published, lost, degraded, or made available to unauthorised persons, misused, or otherwise processed in violation of the legislation.

5. Storage period

5.1 We store data for the time allowed by legislation, and we delete the data when it is no longer necessary or relevant. The period depends on the nature of the data and the reason for storing the data. Therefore, it is not possible to give a general timeframe for when data is deleted.

6. The right to withdraw consent

6.1 You always have the opportunity to get to know what data we have registered about you, and you can withdraw your consent (if you have given such consent) at any time. If you wish to receive the data or withdraw your consent, please contact us at support@royalcrafttools.com. If you choose to withdraw your consent, this will not affect the legality of our processing of your personal data based on your previous consent until the time of the withdrawal. If you choose to withdraw your consent, it will not take effect until that time.

7. Your rights

7.1 Under data protection legislation, you, as the data subject, have several rights in relation to UPUPYES's processing of your personal data. If you wish to exercise your rights, please contact us at support@royalcrafttools.com.

7.2 As a rule, you can exercise your rights free of charge at any time. If you ask for additional copies of data or your requests are manifestly unfounded or excessive, we may either charge a fee for providing the data or refuse to comply with the request.

7.3 Insight in and rectification of personal data: As a user of our services, you always have the right to access what personal data is registered about you. By contacting us in writing, you can learn what personal data we as a data controller process about you, what the purpose of the processing is, and who receives the data, as well as several other data. If you find that the personal data you have provided to us is inaccurate or misleading, please contact us about this, and we will rectify this data.

7.4 Right to erasure: You have the right to have your personal data erased by us without undue delay if UPUPYES no longer has a purpose in the processing of your personal data, or you object to the processing of your personal data that is carried out for direct marketing purposes or which takes place pursuant to point (f) of Article 6(1) of the General Data Protection Regulation. Please note that in some cases, we are not obliged to erase your personal data.

7.5 Right to restriction of processing: You have the right to restrict our processing of your personal data, e.g. if you dispute the accuracy of your personal data or you have objected to the processing of your personal data based on legitimate interests under point (f) of Article 6(1) of the General Data Protection Regulation. In such a case, we will only store your personal data until your objection is handled.

7.6 Right to data portability: You have the right to have the data you have provided to UPUPYES in a structured, commonly used, and machine-readable format, transferred where the processing is based on an agreement under point (b) of Article 6(1) of the General Data Protection Regulation or your consent, in accordance with point (a) of Article 6(1) of the General Data Protection Regulation.

7.7 Right of objection: You always have the right, for reasons relating to your particular situation, to object to our processing of your personal data if the processing is based on legitimate interests under point (f) of Article 6(1) of the General Data Protection Regulation. If you object to the processing, we are no longer entitled to process your personal data unless we can demonstrate compelling legitimate reasons for continued processing.

7.8 Right of appeal: If you have any questions regarding the processing of your personal data, the exercise of your rights, or wish to complain about our processing of your personal data, you are welcome to contact UPUPYES using the contact information in section 2.3 above.

8. Entrustment and transfer of personal data

8.1 We use external companies as suppliers to deliver our services in the best viable way. These external suppliers are data processors and process your personal data in connection with their provision of services to us. The processing of data by processors is contractually regulated in accordance with Art. 28 General Data Protection Regulation.

8.2 Our data processors only process personal data in accordance with our instructions and in accordance with the legal requirements for data processors.

8.3 We store your personal data securely and confidentially on servers in controlled facilities and within the European Economic Area (EEA).

9. Changes to the Privacy Policy

9.1 UPUPYES continually updates and changes the Privacy Policy so that it is continually adapted to legislation and technological developments. If we make changes to the Privacy Policy, you will be informed of this the next time you use the Website/App and by email to the email address that you have provided to us. This notification will include the nature of the changes and, if applicable, your rights in connection with the changes.

9.2 We may change the Privacy Policy at any time and without notice. The latest version is always available on the Website or in the App.

10. Version

10.1 This Privacy Policy was last updated in January 2025 and replaces all previously applicable policies.