17TRACK Product Privacy Policy

Date of release: March 27, 2026

Effective date: March 27, 2026

Welcome to the 17TRACK website, application, device, and other related software.

This policy applies to all functions and services of the 17TRACK products we provide, including the mobile app, website, mini-program, Tracking API, and Shopify application. Before using any of the functions or services we provide, please carefully read and thoroughly understand the 17TRACK Product Privacy Policy (hereinafter referred to as "this Privacy Policy"), and only start using it after confirming that you fully understand and agree to it. This Privacy Policy does not apply to services provided by other third parties. Before choosing to use third-party services, you should fully understand the product functions and privacy protection policies of the third-party services before deciding whether to use the corresponding functions or services.

The entity responsible for processing your personal information (i.e., the personal information processor/controller, hereinafter referred to as "we" , "us" , or "17TRACK") is determined by your geographic location as follows:

l Users in China: If you are a registered user of this service and are located within China, the entity responsible for processing your personal information is DEMON NETWORK TECH CO., LTD.

l Users in Other Overseas Regions: If you are a registered user of this service and are located in an overseas region outside of China, the entity responsible for processing your personal information is VASTAR SINGAPORE TECHNOLOGY PTE. LTD.

To protect your relevant rights, this Privacy Policy explains how 17TRACK's related products collect, use, and store your personal information, as well as the rights you have. Please read, understand, and agree to this policy before using 17TRACK's related products and services. Important information regarding your personal information rights has been highlighted in bold; please pay special attention.

We will check and update our policy from time to time. Please visit this page regularly to ensure you are aware of the latest version of the Privacy Policy.

Your use or continued use of 17TRACK's related products and services means that you understand we will obtain necessary personal information based on providing services to you or for other legitimate purposes and will process such personal information in the manner described in this Privacy Policy.

This Privacy Policy will help you understand the following:

I. How We Collect and Use Your Personal Information

II. How We Share, Transfer, and Disclose Your Personal Information

III. How We Store Your Personal Information

IV. How We Protect Your Personal Information

V. Your Rights

VI. How We Handle Minors' Personal Information

VII. How Your Personal Information is Transferred Globally

VIII. How We Use Cookies and Similar Technologies

IX. Changes to This Policy

X. Contact Us

Appendix I: Developer Information

Appendix II: EU Appendix

Appendix III: US Appendix

I. How We Collect and Use Your Personal Information

1. To provide services to you and enterprise users, optimize our services, and ensure account security, 17TRACK collects information that you proactively provide, authorize, or that is generated from your use of the service during registration and usage, as follows:

(1) Registration and Login

When you register an account or log in to an existing account, you need to provide us with your email address. We will verify your identity by sending a verification code. After successful registration, we will generate an account nickname for you based on your email address. To ensure account security, you need to set a password for your account.

(2) Shipment Tracking

When you use the shipment tracking function, we will collect the tracking number you query. You may choose to provide the carrier, product category information, and add remarks.

When you use the Shopify app plugin for product shipping and tracking, we will collect your email address, store name, your order buyer's email address, name, phone number, address, and order information.

(3) Issuing Invoices

When you need an invoice for purchasing 17TRACK products, we will collect your invoice information, including the invoice entity, address, and tax number.

(4) Operation and Security Operations

When you use 17TRACK services, we will collect your IP address for security, service, analysis, and compliance purposes in accordance with the law.

(5) Tracking API

As the Tracking API is intended for enterprise clients, when you register as a contact person for an enterprise client, we will collect your mobile phone number, email address, company name, and account password.

When you use the logistics tracking and air freight tracking functions on behalf of an enterprise client, we will assist you in processing logistics order numbers based on the enterprise user's instructions and our agreement with them. If you wish to enable email notifications for carrier status, you can provide your email address.

2. Providing Security
When you use the 17TRACK application, to ensure account security and conduct data analysis, we may collect your device information (AndroidID, GAID, SIM card, SD card data, SN, device brand, device model, system platform, operating system version). This information helps us identify devices, troubleshoot issues, and prevent fraudulent activities.

3. Special Note on AndroidID

Our purpose in collecting AndroidID is:

l Ensuring Service Security: Through AndroidID, we can identify devices, prevent malicious attacks and fraudulent activities, and protect your personal information and account security.

l Optimizing Service Experience: By combining AndroidID with other device information, we can analyze your device usage to optimize service performance.

l Data Analysis and Improvement: We may use AndroidID for anonymized data analysis to understand user behavior and improve our products and services.

We collect AndroidID automatically through the 17TRACK application when you use the service, without requiring you to provide it manually.

Please understand that the features and services we provide are constantly evolving. If a feature or service not mentioned above collects your information, we will separately inform you of the content, scope, and purpose of the collection through page prompts, interaction processes, website announcements, etc., to obtain your consent.

4. System Permissions

When you use the 17TRACK application, it may request the following primary device permissions:

No.	Device Permission	Corresponding Function	Purpose	Can be Disabled or not
1	Storage Read/Write Permission	User saves tracking number	Used for users to save tracking number barcodes to local storage on low-version Android devices	Yes
2	Camera Permission	Scan tracking number	Used for users to activate the camera to scan tracking number barcodes for quick addition and query	Yes
3	Clipboard Read Permission	Convenient tracking number query	Used for users to conveniently query after copying a logistics tracking number and entering the App	Yes
4	Device Brand	Record device changes	Troubleshooting	Yes
5	Device Model	Record device changes	Troubleshooting	Yes
6	System Platform	Record source of issue feedback	Troubleshooting	Yes
7	Operating System Version	Record device changes	Troubleshooting	Yes

II. How We Share, Transfer, and Disclose Your Personal Information

1. Sharing

We do not share your personal information with other organizations or individuals, except in the following circumstances:

l After obtaining your separate consent, we will share your personal information with other parties.

l We may share your personal information externally in accordance with legal and regulatory provisions, the needs of litigation or arbitration resolution, or as requested by administrative or judicial authorities in accordance with the law.

l To ensure the realization of product-related functions and the safe and stable operation of the application, we may integrate services provided by third parties to achieve related purposes. Please refer to the "Third-Party Information Sharing and SDK List and the "Personal Information Collection List"" for details.

2. Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

(1) Transfer with Explicit Consent: After obtaining your explicit consent, we will transfer your personal information to other parties.

(2) In the event of a merger, division, dissolution, acquisition, or declaration of bankruptcy, if a transfer of personal information is involved, we will inform you of the name and contact information of the recipient of the personal information. We will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require that company or organization to obtain your authorization and consent again.

3. Public Disclosure

We will only publicly disclose your personal information in the following circumstances:

(1) After obtaining your separate consent ; and

(2) Disclosure Based on Law: We may publicly disclose your personal information when required by law, legal process, litigation, or mandatory requirements from government authorities.

4. Exceptions to Obtaining Prior Authorization for Sharing, Transferring, and Publicly Disclosing Personal Information

Prior authorization is not required for sharing, transferring, or publicly disclosing your personal information in the following situations:

(1) When necessary for fulfilling statutory duties or legal obligations ;

(2) When directly related to national security or defense security ;

(3) When necessary for the conclusion or performance of a contract to which you are a party ;

(4) When directly related to public safety, public health, or major public interests, e.g., responding to public health emergencies or protecting the life, health, and property safety of natural persons in emergencies ;

(5) When directly related to criminal investigations, prosecutions, trials, or enforcement of judgments ;

(6) When necessary to protect your or another individual's significant legitimate rights and interests such as life or property, yet it is difficult to obtain your authorization ; and

(7) When processing personal information that you have made public or that has been legally disclosed (e.g., through legitimate news reports, government information disclosure) within a reasonable scope as per laws and regulations.

III. How We Store Your Personal Information

The personal information of your 17TRACK account will be transferred and stored on Tencent Cloud servers in Guangzhou, China, and simultaneously stored on Tencent Cloud servers in the United States. Other personal information will be transferred and stored on Tencent Cloud servers in the United States. If you are a user in China, your personal information is stored only on Tencent Cloud servers in Guangzhou, China.

Unless a longer retention period is required or permitted by law, we will retain information collected from or about you for the shortest time necessary to fulfill the purposes described in this Privacy Policy. When the information is no longer needed for these purposes, we will delete it or store it in an anonymized form. In determining this retention period, we consider various criteria, including the type of service you request or provide, the nature of our relationship with you, the impact of deleting certain information on the services we provide to you, and legally required retention periods. Please note that after you successfully apply to cancel your 17TRACK account, we will complete the review of your account cancellation as soon as possible. After the application is approved, we will completely delete your personal data. If we cease operating a product or service, we will notify you individually or via public announcement and delete your personal data after ceasing operations.

IV. How We Protect Your Personal Information

We use industry-standard security measures to protect the personal data you provide from unauthorized access, public disclosure, use, modification, damage, or loss. We will take the following reasonable and feasible measures to protect your personal data:

l We use encryption technology to ensure data confidentiality ;

l We use trusted protection mechanisms to prevent malicious attacks on data ;

l We have deployed access control mechanisms to ensure that only authorized personnel can access personal data. We have organized security and privacy training courses to raise employee awareness of the importance of protecting personal data ; and

l We will use secure encryption technology to protect your personal data during transmission. We take all appropriate organizational, managerial, and technical measures to protect the security of the personal data you provide within our internal organization.

If our physical, technical, or administrative safeguards are breached, resulting in unauthorized access, public disclosure, alteration, or destruction of data, thereby harming your legitimate rights, we will assume responsibility. In the unfortunate event of a personal data security incident, we will promptly inform you in accordance with legal and regulatory requirements: the basic situation and potential impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and mitigate risks, and remedial measures for you. We will notify you of the incident-related information promptly via email, letter, phone, or push notification.

While our business aims to protect your personal information, please understand that 100% security does not currently exist anywhere, whether online or offline. A 17TRACK account requires a username and password to log in. Please keep your username and password safe and never disclose them to third parties.

V. Your Rights

Based on your local relevant laws, regulations, standards, and common practices in other countries and regions, we guarantee you the following rights regarding your personal data. You have the right to request that we:

1. Access Your Personal Information

You have the right to access your personal information, except for exceptions stipulated by laws and regulations. If you wish to exercise your data access right, you can do so by:

Account Information: If you wish to access or edit the profile information in your account ;

App Path: Homepage → Click "My Account" at the bottom left → Click "My Account" at the top left to enter the personal information display page → View nickname, country or region, email ; and

Web Path: Personal Homepage → Click the avatar at the top right → Expand pop-up and click "Account Information" → View nickname, country/region, email.

2. Correct Your Personal Information

When you discover that the personal information we process about you is inaccurate, you have the right to request that we make corrections. You can submit a correction request using the methods listed in "1. Access Your Personal Information."

If you cannot correct this personal information through the links above, you can contact us using the contact details listed in the "Contact Us" section of this Privacy Policy. We will respond to your correction request within 5-7 business days.

3. Delete Your Personal Information

You can submit a request to delete your personal information by sending an email to us in the following circumstances:

l If our processing of personal information violates laws or regulations ;

l If we collect or use your personal information without your consent ;

l If our processing of personal information violates our agreement with you ;

l If you no longer use our products or services, or you cancel your account ; and

l If we no longer provide products or services to you.

If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us, requesting them to delete it promptly, unless otherwise stipulated by laws and regulations or these entities have obtained your independent authorization.

4. Cancel Your Account

You can cancel your previously registered account at any time. You can do so by:

App Users: Homepage → My Account → Cancel Account ;

Users of Other Services: You can send an email requesting account cancellation using the contact details listed in the "Contact Us" section. We will respond and perform the relevant operations within 5-7 business days after verifying your identity.

After canceling your account, we will stop providing products or services to you and delete your personal information immediately.

5. Obtain a Copy of Your Personal Information

You have the right to obtain a copy of your personal information. If you need a copy of your personal information collected by us, you can contact us using the details in the "Contact Us" section. We will respond within five ( 5 ) to seven ( 7 ) business days after verifying your identity. We will provide the copy of your personal information via email. Subject to compliance with relevant laws and technical feasibility, we will provide a copy of your personal information upon your request.

6. Data Portability Right
You can contact us via the methods described in the "Contact Us" section to exercise your legal right to data portability. Subject to compliance with national laws and regulations, if you request to transfer your personal information to another data controller you designate, we will provide the means for transfer in accordance with relevant regulations.

7. Responding to Your Above Requests

We will respond to the above requests within five ( 5 ) to seven ( 7 ) business days. Please see the "Contact Us" section for contact information.

We may be unable to respond to your request in the following circumstances:

l Requests related to the data controller's fulfillment of obligations under laws and regulations ;

l Requests directly related to national security or defense security ;

l Requests directly related to public safety, public health, or major public interests ;

l Requests directly related to criminal investigations, prosecutions, trials, or enforcement of judgments ;

l Requests where the data controller has sufficient evidence to prove that the data subject has subjective malicious intent or abuses rights ;

l Requests where responding is necessary to protect the life, property, or other significant legitimate rights and interests of the data subject or another individual, yet it is extremely difficult to obtain the individual's consent ;

l Requests where responding to the data subject's request would cause serious harm to the legitimate rights and interests of the data subject or other individuals/organizations ; and

l Requests involving commercial secrets.

VI. How We Handle Minors' Personal Information

Our products and services are intended for adults. Children under the age of 18 are not permitted to use our products or services without the consent of a parent or guardian. For cases where children's personal information is collected with parental consent, we will only use or disclose this information as permitted by law, with the explicit consent of the parent or guardian, or when necessary for the protection of the child. If we discover that we have collected a child's personal information without verifiable parental consent, we will take steps to delete that data as quickly as possible. If, at any time, a guardian has reason to believe that we have collected personal information of a minor, please contact us using the contact details provided in this Privacy Policy.

VII. How Your Personal Information is Transferred Globally

In principle, personal information collected and generated within the territory of the People's Republic of China will be stored within the territory of the People's Republic of China. In special circumstances, subject to compliance with Chinese laws and regulations, we may cooperate with third-party service providers outside the country to process user personal information as needed for the service. If we need to transfer your personal information outside the People's Republic of China, we will do so in accordance with relevant national laws, regulations, and standards.

We commit to adhering to the highest privacy protection standards for the processing and transfer of personal information globally. When you use our services, your personal information may be transferred to Tencent Cloud servers located in Guangzhou, China, and the United States. Such international transfers will follow strict data protection and privacy security measures, ensuring a level of protection equivalent to that provided locally.

For personal information transferred to Tencent Cloud servers in Guangzhou, China, and the United States, we comply with relevant privacy and data protection laws in China and the United States, including but not limited to ensuring appropriate security measures (such as encryption and access controls) are in place to protect data security and privacy. Additionally, we will monitor relevant legal changes to ensure our practices can adapt promptly and protect users' privacy rights.

For personal information of EU users, we will transfer data in accordance with the requirements of the General Data Protection Regulation (GDPR). This means that when personal information leaves the European Economic Area (EEA), we will transfer it by adopting standard contractual clauses approved by the European Commission or when the recipient country ensures an adequate level of data protection. We commit to regularly assessing the data protection level in the recipient country and ensuring the effective implementation of protective measures.

If you have questions or need help regarding the cross-border transfer of your personal information, please contact us.

VIII. How We Use Cookies and Similar Technologies

We use cookies and other similar technologies to enhance your experience when using this service. When you use this service, we may use relevant technologies to send one or more cookies or anonymous identifiers to your device to collect and store information about your access and use of this service. We promise not to use cookies for any purposes other than those described in this Privacy Policy. We use cookies and similar technologies mainly for the following functions or services:

l Accelerating navigation

l Tracking website usage

l Identifying user identity, access rights, and preferences

l Conducting research and diagnostics to improve our content, products, and services

You can reject or manage cookies or data statistics tools through your browser settings. However, please note that disabling cookies or data statistics tools may prevent you from enjoying the optimal service experience, and some services may not function correctly.

Necessary Cookies

Cookies	Description	Validity Period
_yq_bid	Protects website service security.	One (1) year
Country	Records the user's region or country to optimize the user experience.	One (1) week

IX. Changes to This Policy

To ensure you always understand how we collect, use, and disclose your information, Shenzhen Dimeng Network Technology Co., Ltd. reserves the right to post any changes or updates to this Privacy Policy on this website and encourages you to periodically review this Privacy Policy for the latest information. Once we change this Privacy Policy, we will notify you by updating the "Effective Date" at the top of this Privacy Policy.

X. Contact Us

If you have any questions about this Privacy Policy or need further information, please feel free to contact us via:

Contact Person (Data Protection Officer): Mr. Yi Hou
Phone Number: +86-0755-86171718
Email: bis@17track.net

Appendix I: Developer Information

To ensure transparency, we provide the complete developer information:

Developer: DEMON NETWORK TECH CO., LTD.

Phone Number: +86-0755-86171718

Email: bis@17track.net

Appendix II: EU Appendix

The additional disclosures in this section apply only if you are located in the European Economic Area (EEA). This document supplements our "17TRACK Product Privacy Policy" and describes how we handle your personal data (for the purpose of this appendix, "personal data" has the same meaning as "personal information") when you use our products and/or services. In the event of any inconsistency between the "17TRACK Product Privacy Policy" and this appendix, this appendix shall prevail.

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable local data protection laws, as appropriate.

1. EEA Representative
Our representative in the EEA is iuro Rechtsanwälte GmbH t/a Prighter, with the contact address at Schellinggasse 3, 1010 Vienna, Austria.

2. For What Purposes Do We Process Personal Data?
Please refer to Article I of the "17TRACK Product Privacy Policy."

3. What Are the Legal Bases for Our Data Processing?
The legal basis for our collection and use of personal data described in this policy depends on the type of personal data we collect and the specific context in which we collect it, including but not limited to the following circumstances:

l Necessary for the performance of a contract we have with you (GDPR Article 6(1)(b)) ;

l Where you have provided explicit consent for us to process your personal data (GDPR Article 6(1)(a)) ;

l Where necessary for the purposes of the legitimate interests pursued by us or by a third party, in specific jurisdictions, including but not limited to (GDPR Article 6(1)(f)):

Ø Providing, maintaining, and promoting our services.

Ø Detecting, preventing, and addressing violations of our user terms or service agreements, including abuse, fraud, misuse, and other trust and security-related risks.

Ø Protecting our legitimate rights and interests, as well as those of others.

Ø Striving to provide you with a positive user experience.

Ø Complying with laws or regulations outside the EEA.

Ø Maintaining the security and integrity of our products and/or services and related platforms and systems.

Ø Improving our products and/or services and developing new services.

Ø Managing our relationship with users.

l Necessary for compliance with a legal obligation to which we are subject under applicable law (GDPR Article 6(1)(c)).

Subject to applicable law, the specific purposes for which we process personal data and the corresponding legal bases are as follows:

Purpose of Processing	Legal Basis
Providing Account Services	Necessary for the performance of a contract
Shipment Tracking	Necessary for the performance of a contract
Security Assurance	Based on our or a third party's legitimate interests
Optimizing Service Experience & Data Analysis	Based on our or a third party's legitimate interests

4. Which Categories of Recipients Receive Personal Data from Us?
Please refer to Article II of the "17TRACK Product Privacy Policy."

5. Where Is Your Personal Data Processed, and on What Basis Do We Transfer It Cross-Border?
Your personal data will be processed in China, and we may disclose personal data to third parties located in China and the United States. We take steps to ensure that our processors provide an adequate level of data protection by ensuring appropriate safeguards are in place and implementing suitable data transfer arrangements. If you have any questions or need more information, you can contact us.

6. How Long Do We Process Personal Data?
We retain your personal data only for as long as necessary for the purposes for which it was processed or as required by law. The retention period depends on the purpose for which we collected and used it and our need to retain it to comply with applicable laws (including meeting any legal, regulatory, tax, accounting, or reporting requirements). If we retain personal data solely to meet legal requirements, we will take steps to prevent further processing of that data. Once personal data is no longer necessary for the purposes for which we collected it, we will delete it.

7. What Data Protection Rights Do You Have?
In the EU, you have the following rights, subject to the conditions of the GDPR and/or local data protection laws:

(1) Right to Object: Where we process your personal data based on legitimate interests, you may have the right to object to such processing on grounds relating to your particular situation, subject to applicable law. You can exercise this right by contacting us. Please note that in certain circumstances, we may have compelling legitimate grounds to continue processing your personal data that override your rights, but we will inform you of this where applicable.

(2) Right to Access: You have the right to know what personal data we process about you, including but not limited to: the categories of personal data we collect, the business or commercial purpose for collection, the categories of third parties with whom we share personal data, and other relevant information required by law. Subject to applicable law, you have the right to access and obtain a copy of your personal data.

(3) Right to Rectification: You have the right to request the correction of inaccurate personal data concerning you.

(4) Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data, provided that the data is not necessary for the purposes required by law or for security and integrity purposes.

(5) Right to Restrict Processing: You have the right to request restriction of processing of your personal data. In such cases, the data will be marked and may only be processed by us for specific purposes.

(6) Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another entity without hindrance from us.

(7) Right to Withdraw Consent: You have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

(8) Right to Lodge a Complaint with a Supervisory Authority. You can view the list of EEA supervisory authorities and their contact details at the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

To submit a request to exercise your privacy rights, you can contact us by sending an email to bis@17track.net. When submitting a rights request, please specify the scope and basis of your request and provide us with necessary information to verify your identity. To process your request, we may contact you to confirm your identity and may ask for further information about your request to clarify its scope and expedite our response. Typically, we will respond to your request within one month of receipt and complete the processing within the timeframe stipulated by applicable law.

8. Do You Need to Provide Your Personal Data to Us?
You are not under a legal obligation to provide personal data to us. However, without receiving certain personal data from you, we will not be able to provide our products and/or services.

Appendix III: US Appendix

The additional disclosures in this section apply if you are located in the State of California, USA. If you are located in another US state, we will refer to this appendix and process your personal data in accordance with the requirements of applicable law. This document supplements our "17TRACK Product Privacy Policy" and describes how we handle your personal data when you use our products and/or services. In the event of any inconsistency between the "17TRACK Product Privacy Policy" and this appendix, this appendix shall prevail.

We process your personal data in accordance with the California Privacy Rights Act ("CPRA") and applicable local data protection laws, as appropriate.

1. Collection and Use of Your Personal Data. We have collected and used your personal data in the past twelve ( 12 ) months as described in Article I of the "17TRACK Product Privacy Policy" .

2. Disclosure of Personal Data. We have disclosed personal data to third parties for business purposes in the past 12 months as described in Article II of the "17TRACK Product Privacy Policy" .

3. Your Rights. As a US resident, you may exercise the following rights:

l Right to Know: Upon verification of your identity, you have the right to know the following information about our collection and disclosure in the past twelve ( 12 ) months: the categories of personal data we have collected about you; the categories of sources from which personal data is collected; the categories of personal data disclosed to third parties for business purposes, and the categories of recipients; the categories of personal data sold and the categories of third parties involved; and the business or commercial purpose for collecting or selling personal data ;

l Right to Correct: You have the right to correct inaccurate personal data we hold about you ;

l Right to Delete: You have the right to request the deletion of personal data we have collected, subject to certain exceptions ; and

l Right to Opt-Out: You have the right to opt out of the sale and/or sharing of your personal data and sensitive personal data to third parties, now or in the future.

You also have the right not to be discriminated against for exercising these rights. However, please note that exercising these rights may limit our ability to process your personal data. For example, if you submit a deletion request, we may be unable to continue providing our products and services to you or interact with you in the same way.

4. Limit Use of Sensitive Personal Data. You also have the right to request the limitation of the use and disclosure of sensitive personal data, subject to certain exceptions. If you wish to limit the use of your sensitive personal data, please contact us as described in Article VII of this Privacy Policy. Currently, we use and disclose this data to third-party cloud service providers to provide you with account creation, login, and related services.

5. Opt-Out of Sale or Sharing of Your Personal Data. Based on the definitions of "sale" and "share" under the CPRA, we do not believe we engage in such activities and have not engaged in such activities in the 12 months prior to the effective date of this Privacy Policy.

6. Submitting Consumer Rights Requests. You may submit a request to exercise your consumer rights using the contact details provided in the "Contact Us" section below. We need to verify your identity before processing your request, which may require requesting additional personal data from you or asking you to log into your account. In some cases, we may deny or limit your request, particularly if we cannot verify your identity or locate your information in our systems, or where permitted by law. You may designate an authorized agent to make a request on your behalf, provided we receive written authorization from you granting the agent permission to make the request. We may deny a request from an agent if we cannot reasonably verify the authorization or verify your identity.

7. Appeal. If we decline to take action on your request, you may appeal our decision by contacting us using the contact details provided in the "Contact Us" section.

If the appeal is denied and you are a California resident, you may submit a complaint to the California Attorney General by clicking the following link: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.

8. Contact Us. If you have any questions regarding this appendix or wish to exercise your privacy rights, you may contact VASTAR SINGAPORE TECHNOLOGY PTE. LTD. Please contact us by calling +1 350 600 8221 or sending an email to bis@17track.net.