Privacy Policy

1. Scope and controller

This policy applies to the official Esio website operated by Xiamen Esio Biotechnology Co., Ltd. (“Esio,” “we,” or “us”), including product, support, partnership, and newsletter forms.

The data controller is Xiamen Esio Biotechnology Co., Ltd., principally operating in Xiamen, Fujian, China. Privacy questions and rights requests may be sent to sales@esiobiotech.com with the subject “Personal Data Rights Request.”

2. Data we collect

• Data you provide: first and last name, work email, inquiry topic, message, and any product, partnership, or support details you choose to provide
• Newsletter data: the email address you submit separately to receive Esio updates; submitting an inquiry does not subscribe you to marketing
• Technical and security data: IP address, browser and device type, operating system, timestamp, page path, referrer, and necessary security or error logs
• Preference data: language and light, dark, or system theme choices
• Do not submit patient names, identity documents, test results, medical records, medical images, or other sensitive patient data through website forms

3. Purposes, methods, and legal bases

• Handle product, sales, technical support, distribution, partnership, and other inquiries, including requested pre-contractual communications
• Send company and product updates when you separately subscribe, and process unsubscribe requests
• Protect the website, prevent misuse, troubleshoot errors, and operate forms and email delivery
• Use cookie-free, aggregated traffic measurement to understand and improve website performance
• Comply with applicable legal, regulatory, accounting, and dispute-resolution obligations
• Depending on the context and applicable law, we rely on consent, steps requested before entering a contract, legal obligations, or legitimate operational interests that do not override your rights

4. Required data and your choices

Name, work email, topic, and message are required to process a contact request. Without them, we may be unable to handle or respond to your inquiry.

Newsletter subscription is separate from contact inquiries. You may submit an inquiry without subscribing and may unsubscribe through the method provided in a message or by emailing sales@esiobiotech.com. We may retain a minimal suppression record to prevent further mailings.

5. Sharing and service providers

We disclose data only as necessary to service providers supporting website hosting and security, Alibaba Enterprise Mail for email delivery and receipt, Vercel Web Analytics for cookie-free aggregate traffic statistics, and error-monitoring services if enabled.

Email services may process the name, email, topic, and message you submit. Analytics may process page path, referrer, time, country or region, browser, and device category in aggregated form. Hosting and security providers may process IP addresses and access logs. Providers may use data only for the agreed purpose and under applicable data-protection requirements.

We do not sell personal data or use it for cross-site advertising. We do not disclose it to unrelated third parties unless authorized, necessary for a lawful business transaction, or required by law.

6. International processing

Esio is located in China. When visitors outside China submit an inquiry or subscription, the data is transmitted to China and processed by Esio and its email provider. Hosting, security, or aggregate analytics services may also operate in other countries or regions.

Where international processing occurs, we apply measures required by applicable law, such as purpose limitations, contractual safeguards, security or transfer assessments, and—where required—specific notice, separate consent, or another valid transfer mechanism.

7. Retention

General inquiries and communications are retained for no more than 24 months; newsletter data is retained until you unsubscribe; security and error logs are generally retained for no more than 90 days. Aggregate analytics data follows the applicable service reporting cycle.

If data becomes part of a contract, transaction, distributor, or support relationship, we may retain it longer to meet contractual, financial, product-regulatory, or dispute requirements. We delete or anonymize data after the applicable period, and backup copies expire through normal rotation.

8. Your rights

Depending on applicable law, you may request access, a copy, correction, completion, deletion, restriction or objection, withdrawal of consent, data portability, or lodge a complaint with a competent regulator.

Send requests to sales@esiobiotech.com and describe the right you wish to exercise. We may request reasonable information to verify identity. We respond within the period required by applicable law and explain any refusal and available complaint route.

9. Security, sensitive data, and children

We use measures proportionate to risk, including access controls, transport protection, least privilege, logging, and provider management, but no network transmission or storage method is completely secure.

This website is directed to medical, research, distribution, and other professional or business users, not children. If we learn that we collected a child’s data without appropriate authorization, we will delete it or take other steps required by law.

10. Changes and contact

We may update this policy for business, technical, or legal changes. The last-updated date appears on this page, and material changes will be highlighted appropriately.

Questions about this policy or our processing may be sent to sales@esiobiotech.com.