Privacy Policy

This Privacy Policy (the “Policy”) applies to all pages and features of the official website b1.mtcsys.com (the “Website”) operated by Shanghai MTC Information Technology Co., Ltd. (“MTC”, “we”, “us” or “our”), including but not limited to product introductions, solution showcases, online consultation booking, resource downloads and interactive assessments.

This Policy does not apply to third-party websites or services linked from the Website. If you follow a link to a third-party page, please read that third party’s privacy policy carefully; we accept no responsibility for its content.

By accessing or using the Website, you confirm that you have read, understood and agree to be bound by this Policy. If you do not agree with any part of this Policy, please stop using the Website.

(a) Information you provide directly

When you submit a form on the Website (including “Book a consultation”, “Resource download” and “Management health check” forms), we collect the following details that you choose to provide:

• Name
• Company name
• Job title or role
• Phone number
• Email address
• Any business description or requirements you enter in the message field

All of the above is provided voluntarily. We never require personal information beyond what is necessary to deliver the service you request.

(b) Information collected automatically

When you visit the Website, our servers and analytics tools may automatically record the following technical information:

• IP address (used for regional identification and security protection)
• Browser type and version, operating system information
• Referrer URL, page navigation paths and time spent on pages
• Device resolution and language settings
• Cookies and local storage data (see Section 6)

This information generally cannot identify you directly on its own, although it may become identifying when combined with other data. We use it solely for website operations analysis and service improvement, and we do not sell it to third parties.

We use the information we collect for purposes including, but not limited to:

• Follow-up contact: responding to your enquiry or booking request. Our consulting team will contact you by phone or email to understand your business needs and arrange next steps.
• Delivering resources: sending you the product whitepapers, industry solutions, case studies and other materials you request.
• Service improvement: analysing website traffic to optimise page structure, content layout and user experience, and to continuously improve the quality of our digital services.
• Marketing communications: only with your explicit consent, sending you MTC product updates, industry reports and event invitations by email. You can unsubscribe at any time via the “unsubscribe” link at the bottom of each email, or by writing to info@mtcsys.com. We will process your unsubscribe request within 5 business days.
• Legal compliance: cooperating with government authorities or law-enforcement agencies to fulfil disclosure obligations where required by applicable laws and regulations.

We will not use your personal information for any purpose unrelated to those described above. If we need to extend the scope of use, we will obtain your consent first.

Personal information you submit through the Website is stored on security-hardened servers located in the Hong Kong Special Administrative Region of the People’s Republic of China, in compliance with the PRC Cybersecurity Law, Data Security Law, Personal Information Protection Law (PIPL) and the Hong Kong Personal Data (Privacy) Ordinance (PDPO).

We apply the following technical and organisational measures to protect your information:

• Encryption in transit: the Website is served entirely over HTTPS (TLS 1.2+), ensuring confidentiality and integrity of data in transit.
• Encryption at rest: sensitive fields (such as contact details) are stored in encrypted form in our database to prevent unauthorised access.
• Access control: only internal staff with a legitimate business need may access your personal information, through authorised systems, with strict operation-log auditing.
• Data retention: we retain your information only for the minimum period necessary to fulfil the purposes described in this Policy. Once the retention period expires, we securely delete or anonymise the data.

Despite these safeguards, no transmission over the Internet can be guaranteed to be 100% secure. If you become aware of any risk of disclosure of your personal information, please contact us immediately.

We do not sell, rent or otherwise commercially transfer your personal information to any third party.

In the following limited circumstances, we may share necessary information with specific third parties:

• Email service provider (Resend): we use Resend to deliver confirmation emails, resource download links and marketing communications. Resend accesses your email address only to the extent necessary to perform email delivery and may not use it for any other purpose.
• Disclosure required by law: we may disclose your information where required by laws and regulations, upon a lawful request from judicial or administrative authorities, or to protect the legitimate rights and interests of MTC and our users.
• Business transfers: in the event of a merger, demerger, reorganisation or asset acquisition, personal information may be transferred as a business asset. We will notify you in advance and ensure the recipient applies privacy protections no less stringent than this Policy.

We require every third-party processor entrusted with your information to sign a confidentiality agreement and to process your information only within the scope of the specific engagement.

The Website uses cookies and similar technologies to improve user experience, analyse traffic and optimise our content. The analytics tools we use are:

• Umami: an open-source web analytics tool self-hosted on our own servers, used for page-view statistics (page views, traffic sources, etc.). It does not use third-party cookies, and the data never leaves our servers.
• Google Analytics 4 (GA4): loaded only after you have given consent. It is used to analyse visitor behaviour, with anonymisation applied, in line with GDPR requirements.
• Microsoft Clarity: loaded only after you have given consent. It generates page heatmaps and anonymised session replays to help us improve the experience.
• Baidu Tongji: loaded only after you have given consent. It provides page-view statistics for visitors in mainland China.
• First-party event tracking: we deploy lightweight event-tracking scripts on key pages and interaction points to understand user journeys through the consultation flow, so that we can continuously improve the experience.

The cookies used by these tools are analytics or functional cookies only and contain no information that directly identifies you.

How to disable cookies: you can refuse or delete cookies in your browser settings. In Chrome, for example, go to Settings → Privacy and security → Cookies and other site data. Please note that disabling cookies may affect some features of the Website.

Under the PRC Personal Information Protection Law and related regulations, you have the following rights over the personal information you have submitted to us:

• Right of access: you have the right to know what personal information about you we hold and how it is processed.
• Right to rectification: if you find that the information we hold is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to erasure: to the extent permitted by law, you have the right to ask us to delete your personal information.
• Right to withdraw consent: for processing based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: if you believe we have infringed your personal-information rights, you have the right to lodge a complaint with the Cyberspace Administration of China or your local cyberspace authority.

To exercise any of these rights, please email info@mtcsys.com with the subject line “Personal Information Request” and describe your specific request. We will respond within 15 business days of receiving it.

We may revise and update this Policy from time to time in line with business developments, changes in laws and regulations, or regulatory requirements.

For material changes that affect your rights, we will give you advance notice by posting a prominent announcement on the Website homepage and, where applicable, by sending a notification email to the address you provided when submitting a form.

Your continued use of the Website after an update takes effect constitutes acceptance of the revised Policy. If you do not agree with the revisions, please stop using the Website and request deletion of your personal information as described in Section 7.

Previous versions of this Privacy Policy are kept on file for this page and are available on request.

If you have any questions, comments or suggestions about this Privacy Policy, please contact us:

We undertake to provide a written response within 15 business days of receiving any privacy-related request.