About
EC CRM Privacy Policy
Effective Date: May 29, 2025
1 Acceptance and Scope of Application of the Policy
1.1 Policy acceptance
EC CRM is operated by Easy Connection (HK) Limited, and we strictly comply with the Personal Data (Privacy) Ordinance (Chapter 486 of the Hong Kong legislation) to protect the privacy rights of users' personal data.This policy explains how we collect, use, store, and protect your personal information, as well as your legal rights.Please note that when you register and use EC CRM, it is deemed that you have agreed to and complied with this policy.If you do not agree with the content of this policy, please stop using our products or services to prevent us from continuing to collect/process your personal information in accordance with this policy.
1.2 Scope of application
This policy applies to all products and services we provide to you through our website, software, and new forms that emerge with technological development.This policy does not apply to products or services provided to you by our affiliated companies, third-party service providers, or other third parties. Such products or services are subject to the personal information processing rules separately explained by the service provider to you.
2. Purpose and category of collecting personal information
2.1 Purpose of Collection
We only collect necessary information for the following legitimate purposes:
Provide CRM services (such as customer management, automated marketing, data analysis);
Fulfill contractual obligations with users (such as account registration, technical support);
Optimize product functionality and security (such as log analysis, anti fraud, ensuring stable software operation, improving and optimizing service experience);
Comply with legal requirements (such as responding to regulatory inquiries, preventing and investigating fraud and other criminal activities, making or being able to make disclosures in accordance with laws, rules, court orders in any region, or any disclosure required by government, regulatory or law enforcement agencies);
Any other use related to or otherwise agreed upon by you from time to time.
2.2 Data Categories
2.2.1 We may collect the following categories of personal information:
| category | specific content |
| Enterprise User Information | Email account, name, mobile phone number, company name, department, position, landline number, address |
| customer information | Customer's name/title, phone number, gender, date of birth, email account, company name, website address, company address, social media accounts (WhatsApp, Facebook, LinkedIn, Line, WeChat), customer tags manually or automatically generated by AI (such as interests, needs, intention).You need to ensure that your clients understand how you (and us on your behalf) collect and process their personal information.If you collect any sensitive personal information from customers (such as information about health, race, ethnicity, genetics, biometric, union membership, political views, philosophical or religious beliefs, criminal history, or sexual interests), you should obtain the customer's explicit consent to use and process this information. |
| Business interaction data | Customer communication records (calls, chat content), advertising platform behavior data (clicks, form submissions) |
| Technical identification information | Device model, system version number, unique device identifier (referring to a string of characters included in the device by the device manufacturer, which can be used to uniquely identify the corresponding device, such as the IMEI number, Android-ID, IMSI, SIM serial number of the phone, collectively referred to as "device information") |
| AI generates data | Customer intention label, sales progress label, call summary |
2.2.2 Information collected by third-party SDKs.
We will embed a third-party SDK in the EC CRM software, which will collect your personal information according to the following table:
SDK | Purpose and Method of Use | Types of data collected | SDK provider | Privacy Policy Link | protective measures |
|---|---|---|---|---|---|
EngageLab WhatsApp Registration SDK
| Used to integrate customers' WhatsApp business accounts and their corresponding phone numbers
| WhatsApp account name, account ID, phone number, message limit
| EngageLab | https://www.engagelab.com/zh_CN/license/privacy?fbclid=IwAR1OTwu6Wc94wUc94_kJ6hncXm5UTuqMNwfyl3hW1r5CCV0KBf8RD-Y3Hyc_aem_Acc2P4xIKEbV4VKiz9xUWgP9zQYprgyOgoAP_unpwKtEuOldMbXhzUH1xIqv8zPYJyglFH6oGAjGIMxQFXz4n6dk | encryption |
Microsoft Cloud Storage | Upload document | Network connection status, device model, system version | Microsoft Cloud | encryption | |
Microsoft Cloud Monitoring | Monitor web page performance, errors, and data statistics | Device type, device version, system version, geographic location information, network device manufacturer, IP address, network mode | Microsoft Cloud | encryption |
3. Use and Transfer of Personal Information
1 Data usage
We will only use your information within the following scope:
Provide CRM functions to enterprise users (such as customer tag management, automated marketing);
Generate business analysis reports (such as sales funnel, ROI calculation);
Improve product experience (such as anonymizing data for AI model training).
3.2 Data Transfer
We may transfer data to the following third parties and ensure that they comply with regulatory requirements:
receiver | Transfer purpose | Guarantee measures |
third-party service provider | Provide services | Sign data processing agreement |
Related parties | Technical support and data collaboration | Internal data protection policy constraints within the group |
Institutions required by law | Responding to legal requests from courts and regulatory agencies | Only provide necessary information and request the presentation of legal documents |
If there are other situations where we share or transfer your personal information, we will obtain your explicit consent and authorization.
4. Data Security and Retention
4.1 Safety measures
1 Technical support: Passed ISO27001 information security management certification and Level 3 security certification, using encrypted transmission, access control, and regular security audits;Management measures: Employees receive privacy training and sign confidentiality agreements with third parties.
2 You understand and agree that no security measure can be flawless, and there are no absolutely perfect security measures on information networks.Software may be affected by various factors, including but not limited to user reasons, network service quality, social environment, etc;It may also be subject to various security issues, including but not limited to others illegally using user data for real-life harassment;Users downloading and installing other software or accessing other websites may contain viruses, Trojan programs, or other malicious programs that threaten the security of your terminal device information and data, thereby affecting the normal use of the software.Therefore, you should strengthen your awareness of information security and personal information protection, and properly safeguard the security of registered account information and account passwords.
3 If you use third-party services through EC CRM, the third party is the processor of your personal information. We only provide platform technology services to the third party and do not assume joint and several liability for the processing of your information by the third party.
4.2 Storage period and location
1 Term: During the account's existence period and 6 months after cancellation (unless otherwise provided by law).
2 Location: Singapore server.Before cross-border transmission, the legal protection level of the recipient's location will be evaluated and contractual terms will be adopted to constrain it.
5 Cookies and similar technologies
We will inform you of our cookie policy through pop ups and other means when you use our website, and you have the right to choose to accept or reject our cookie policy in whole or in part.
6 Your rights
1 Access and correction: Request to access or correct the personal information we hold about you;
2 Refuse direct marketing: Refuse to receive promotional messages sent through this product (can be unsubscribed through system settings or by contacting customer service);
3 Delete data: request the deletion of non essential retained data (excluding those limited by legal or contractual obligations);
4 Complaint: Submit a complaint to the Office of the Privacy Commissioner for Personal Data in Hong Kong.
5 Exercise of rights: Contact our customer service and we will respond within 40 days.
7 other
7.1 Direct Marketing
If we send you promotional information through this product (such as mass marketing):
Obtaining consent: Use customer information for direct marketing only with the explicit consent of enterprise users;
Unsubscribe mechanism: Each promotional message contains a unsubscribe link, and you can choose not to receive it at any time.
7.2 Policy Revision
Please understand that the features and services we provide to you are constantly updated and developed. We reserve the right to modify this policy from time to time to respond to changes in applicable laws and regulations, as well as the products and services we offer.When the terms of this policy change, we will post the updated privacy policy on our official website.We will update the date at the top of this policy. Please review this policy regularly to check for updates.
7.3 Language Versions and Conflict Resolution
This Policy is provided in Simplified Chinese, Traditional Chinese, and English versions. In the event of any discrepancies or inconsistencies between the different language versions, the Simplified Chinese version shall prevail.
8. Contact Us
Address: Room 607, 6th Floor, Building 16W, Hong Kong Science Park Phase III, Pak Shek Kok, New Territories, Hong Kong (Tai Po Town Lot No. 204)
Email:xujundi@ecqun.com
