01 Introduction
This Privacy Policy explains how VirtueNest, a developer and operator of computer systems design services, collects, uses, and protects information when you visit and use this website. The services offered through this site are developed and operated by the developer VirtueNest. VirtueNest is a brand of Changsha Xuxiannai Trading Co., Ltd., located at No. 82, Zhuanqiang Group, Shantian Village, Chunkou Town, Liuyang, Changsha - 410000, China (CN).
By using this website, you agree to the practices described in this policy. If you do not agree with any part of this policy, please stop using the website and contact us with any questions you have. We encourage you to read this document carefully and to revisit it from time to time, because we may update it as our services evolve. This policy applies only to this website and to the services we operate directly; it does not apply to third-party platforms that may link from our pages.
02 Information We Collect
We collect two broad categories of information: information you provide directly, and information collected automatically when you browse the site. Information you provide includes your name, email address, phone number, company name, and any message content you send through our contact form or by email. When you request a proposal or enter into an engagement, we may also collect billing details and technical information needed to perform the work.
Information collected automatically includes browser type, operating system, device type, pages visited, time of visit, referral source, and a general location derived from your internet address. We do not knowingly collect sensitive categories of information, such as health records or financial account credentials, through this website. The volume of data we hold is kept to the minimum needed to run the site, answer your inquiries, and deliver our services.
We also collect information when you participate in surveys, register for events, or correspond with our support team. This information is limited to what the specific activity requires, and each collection point explains its purpose at the moment you provide the data. We will not add hidden fields or surprise requests for data that a service does not need.
03 How We Use Your Information
We use your information for a limited and clearly defined set of purposes. We respond to your questions, prepare proposals, and deliver the services you request. We improve the website by studying how visitors navigate its pages and which content is most useful. We secure the website against abuse, fraud, and unauthorized access, and we investigate any suspicious activity that may affect your data.
We send administrative messages when required to operate the service, such as confirmations of receipt or changes to terms. We may use aggregated and anonymized statistics to understand our audience and to report on the performance of the website. We do not sell your personal information, and we do not use it to build advertising profiles about you without your consent. Any new use of your information will be described in an update to this policy before it takes effect.
04 Legal Basis for Processing
Where data protection law requires a lawful basis for processing, we rely on one or more of the following grounds. First, processing is necessary to perform a contract with you or to take steps before entering a contract, such as preparing a quote you requested. Second, processing is necessary to comply with a legal obligation, such as tax, accounting, or record-keeping rules that apply to our business.
Third, processing is in our legitimate interest to operate the website, respond to inquiries, maintain security, and improve our services, provided that this does not override your rights and freedoms. Where consent is required, we ask for it in a clear and specific way and allow you to withdraw it at any time with the same ease with which you gave it. If you have questions about which basis applies to a particular activity, please contact us.
06 Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We share information only in limited and necessary circumstances. We may share data with service providers who process it on our behalf, such as web hosting, email delivery, and analytics providers, and these providers are contractually bound to protect your data and to use it only for the purposes we specify.
We may disclose information when the law requires it, such as in response to a valid court order, a lawful regulatory request, or a legal obligation that applies to our business. We may transfer information in connection with a reorganization, merger, or acquisition of our business, and in that event we will require the receiving party to honor the commitments in this policy. Where a transfer is not covered by the cases above, we will seek your consent first.
07 International Data Transfers
Your information may be processed in China, where the company is established, and in other countries where our service providers operate. When we transfer personal information across borders, we take reasonable steps to protect it, including using appropriate safeguards and contractual protections required by applicable law. The practices described in this policy apply wherever your information is processed.
We review our transfer arrangements regularly to confirm that they remain adequate as laws and business relationships change. Where the law of your country gives you additional protections for cross-border transfers, we will honor those protections. If you have questions about how a particular transfer is protected, please contact us, and we will explain the safeguards we use in plain terms.
08 Data Security Measures
We apply administrative, technical, and physical measures to protect your information. Access to personal data is limited to staff who need it to perform their duties, and each person receives the minimum level of access their role requires. We use encryption in transit for data transmitted over the internet and apply access controls to the systems that store personal data.
We monitor our systems for unusual activity and respond to suspected incidents in a structured manner, with clear owners and documented steps. While no method of transmission or storage is completely secure, we work continuously to reduce risk and to keep our defenses current. If we learn of a security incident affecting your data, we will notify you and the relevant authorities as required by law, and we will tell you what you can do to protect yourself.
Beyond technology, we train our staff on privacy and data handling so that good habits are automatic rather than accidental. New team members complete privacy induction before they are given access to systems, and we refresh that training regularly. When a process changes, we review its privacy impact before the change goes live.
09 Data Retention
We keep personal information only as long as it is needed for the purposes described in this policy. Inquiry messages and related correspondence are retained for a reasonable period after the matter is closed, so that we can answer follow-up questions and maintain continuity with clients. Where we are required by tax or accounting law to retain records, we keep them for the period that law requires.
When data is no longer needed, we delete it or transform it into an anonymous form that cannot identify you. We review our retention periods regularly to ensure that we do not keep data longer than necessary. In some cases, legal holds or pending disputes may require us to keep data beyond the usual period, and we will do so only for as long as the obligation lasts.
Automated records, such as server logs and analytics data, are retained for shorter periods than business correspondence, typically no longer than the period needed to diagnose issues and report on site performance. We prefer shorter retention over longer wherever the law allows it, and we make that choice visible to you in this policy.
10 Your Rights
Depending on where you live, you may have rights over your personal information. These may include the right to access a copy of the data we hold about you, the right to correct inaccurate data, the right to request deletion of your data, the right to restrict or object to processing, and the right to data portability where it applies.
You may also withdraw consent where processing is based on consent, and you may object to processing carried out in our legitimate interest. To exercise any of these rights, contact us using the details at the end of this policy. We will respond within the time frame required by applicable law, and we will verify your identity before acting on a request. We will not discriminate against you for exercising your rights.
11 Privacy for Children
This website and its services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. Our services are technical in nature and are intended for organizations and adult professionals. If you believe that a child has provided us with personal information without the consent of a parent or guardian, please contact us immediately.
We will investigate the matter and delete the information as soon as we can confirm that it came from a child. Parents and guardians are encouraged to supervise the online activity of children and to contact us with any concerns they have. We would rather remove data too quickly than keep a single record that might belong to a child.
12 Third-Party Services
This website may include links to third-party websites and services, such as business directories, professional networks, or software tools we recommend to clients. These third parties have their own privacy policies, and we are not responsible for their practices or for the content they host. When you leave our website, the collection and use of your information by another service is governed by that service policy.
We encourage you to review the privacy policy of any third party before providing information to it. A link on our site does not mean we endorse or control the linked service, and we are not liable for the data practices of independent providers. If a third-party tool is used as part of an engagement, we will name the tool in the project documentation and explain what data it receives.
Before recommending a third-party service as part of an engagement, we review its data practices and its security posture. We do not recommend tools whose handling of client data we cannot understand or verify. This review is documented, and we will share a summary of it with you on request.
13 Analytics and Advertising
We use analytics tools to understand how visitors use the website, such as which pages are popular, where visitors come from, and how long they stay. These tools may collect information about your device, browser, and activity in an aggregated or pseudonymous form. The purpose is to improve the quality and reliability of the site, not to profile you personally.
We do not currently run personalized advertising campaigns that build detailed profiles from your visits to this website. If we introduce advertising in the future, we will update this policy before it begins and, where required, ask for your consent before tracking for that purpose. You can disable analytics cookies in your browser at any time, and the site will continue to work normally.
14 Do Not Track Signals
Some browsers offer a Do Not Track setting that sends a signal to websites requesting that they not track your activity. Because industry standards for responding to these signals are still evolving, this website does not currently change its behavior based on Do Not Track signals. We do, however, limit the data we collect to what is needed for the operation and improvement of the site.
Our approach is deliberately conservative: we collect less data rather than more, and we keep it for shorter periods rather than longer ones. We will review our approach as standards develop and will update this policy accordingly. If a recognized standard for Do Not Track responses is widely adopted, we will implement it and describe the change on this page.
Because we rely on analytics to improve the site, the simplest way to limit what we learn about a visit is to block analytics cookies in your browser or to browse in a private window. Either choice does not reduce the functionality of the site in any way. If you would like a copy of the analytics data related to your visits, contact us and we will help.
15 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make significant changes, we will update the revision date at the top of this page and, where appropriate, notify you by email using the address you provided. We encourage you to review this page periodically to stay informed about how we protect your information.
Continued use of the website after a change takes effect means you accept the updated policy. The most current version of this policy always appears on this page, and older versions are retained on request. If a change affects how we use information you have already given us, we will explain the change and, where required, give you the opportunity to object before it takes effect.
To help you track our history, each version of this policy is dated, and a summary of the most recent changes is listed at the end of the document. If you subscribe to our mailing list, we will notify you of significant changes by email. Otherwise, the date at the top of this page is the single most reliable indicator of when the policy was last reviewed.
16 Contact Information
If you have questions, requests, or concerns about this Privacy Policy or about how we handle your personal information, please contact us. You can reach us by email at guide@virtuenest.mom or by phone at +17698004135. Our business address is Changsha Xuxiannai Trading Co., Ltd., No. 82, Zhuanqiang Group, Shantian Village, Chunkou Town, Liuyang, Changsha - 410000, China (CN).
We will respond to your message as soon as possible and typically within one business day. Please describe the nature of your question and, if your request concerns your personal data, include enough detail for us to verify your identity. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your information correctly.