GDPR

GDPR

Introduction

Publishchain and all its affiliated entities are committed to protecting the data and personal information they collect in the course of its business activities and relationships.

Scope

This policy relating to the protection of data and personal information explains the practices of Publishchain regarding the processing, including the collection, use, disclosure, retention and destruction, of personal information in accordance with the privacy laws and regulations. The Data Protection Act 2018 is the current legal framework in the UK for the General Data Protection Regulation (GDPR).

The policy also describes the data protection rights of its users, including the right to object to certain of the processes carried out by .

Policy requirements

The policy was created in compliance with applicable privacy laws and regulations. Certain provisions of the Publishchain policy may exceed the requirements of these laws, in which case Publishchain will have full discretion with regard to their application.

Responsible for the protection of personal information

Publishchainis responsible for the processing of the Personal Information that it processes and has appointed a Privacy Protection Officer who ensures that Publishchain complies with the Privacy Protection Laws:

Liheng  Zhang

[email protected]

For any requests, questions or comments regarding this policy, please contact the person in charge by email.

Personal data and information collected by Publishchain

Personal contact information, including your first name, last name, address and telephone number, required for account registration, online purchase and delivery of our products or when requesting support regarding one of our products or services;

Billing-related information,

including debit card or bank account numbers (if required), as well as any other data required to process payments for accounts receivable and accounts payable;

Profile and preference data

, including email addresses and passwords to access Publishchainwebsites or password-protected service platforms. Preferences, such as language, when using our websites and receiving marketing emails from us;

Technical data

, including information collected during visits to our websites through the use of cookies or similar technology, Internet protocol (IP) address, connection data, browser type and version, device type, time zone settings, browser add-on types and versions, operating system and platform.

Purposes of collecting personal data and information

Publishchain collects data and personal information about its users for the purpose of managing its products and services as well as maintaining and establishing commercial relationships. Publishchain will collect, use and disclose this information only to the extent required for these purposes. If Publishchain should use or disclose personal information of a user for purposes other than for the management of its products or services, Publishchain will obtain the consent of the user before using or disclosing this information.

Consequences of a refusal to provide personal data and information

Any person who uses Publishchain's websites may refuse to provide personal data and information when requested, however Publishchain may not be able to complete the required process of the requested product or service. In this event, the product or service may not be provided.

Disclosure

Publishchainand its third-party service providers, such as Shopify, Stripe, AWS and Polygon, may operate outside of Canada. Any personal information or data of a user stored or accessed in foreign countries may be subject to the laws of those countries (for example, where a third party service provider operates globally). Therefore, personal information may be disclosed following valid requests or requirements from governmental authorities, courts or law enforcement authorities of foreign countries.

Retention

Publishchain will retain personal data and information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting and disclosure requirements and, asserting or defending its rights. Upon the expiration of the applicable retention period, Publishchain will securely destroy the data and personal information in accordance with applicable laws and regulations.

Accuracy

The accuracy of the data and information provided by a user to Publishchain remains the responsibility of the user. Publishchain makes reasonable efforts to maintain the accuracy of a user’s data and personal information, but in no way guarantees the veracity of the data and information provided.

Protection of data and personal information

Publishchain is committed to protecting the confidentiality, integrity, availability and privacy of a user’s data and personal information. Publishchain uses protective measures that are customary in the field of digital platforms and which are reasonable given the sensitivity of personal information.

Openness, transparency

Publishchain is committed to being transparent about its policies and invites those concerned to contact the Privacy Officer  with any questions or to visit the Publishchain website.

Rights of a user

Access:

You have the right to request a copy of or access your personal data and information that Publishchain maintains. However, Publishchain will not disclose data and personal information when their disclosure would reveal data and personal information about a person other than the person concerned or would constitute a violation of applicable laws. To obtain a copy of or view your data and personal information, please contact Publishchain using [email protected];

Opposition, erasure:

In certain circumstances, you also have the right to object to the processing of your data and personal information and to ask Publishchain to erase your data and personal information and limit accesses to it. It is important for the user to be aware of the consequences of refusing to provide personal data and information. If you would like Publishchain to stop using your data and personal information, please contact Publishchain using [email protected];

Complaints:

If you believe that your rights to the protection of personal information or data may have been infringed, you have the right to file a complaint with the applicable supervisory authority or have recourse through a court. You can also contact Publishchain using [email protected]

Monitoring and control mechanism

The Publishchain  management team regularly conducts reviews of reported incidents and issues raised through incident reporting and the issue communication and escalation process to ensure no recurring problems.

Roles and responsibilities

It is the responsibility of the privacy protection officer of Publishchain to supervise activities related to the data protection and personal information policy. The officer communicates these policies and ensures that Publishchain members fully comply with all relevant aspects of the policies and related guidelines. The manager participates in incident reporting procedures as well as training and raising staff awareness of issues related to data protection. The officer acts as the official liaison of Publishchain to the relevant authorities, if required.

Update and review

The data protection and personal information policy takes effect on August 1, 2024.

Publishchain reserves the right to interpret the data protection and personal information policy at its sole discretion. Privacy Laws are constantly evolving and, accordingly, this policy may be subject to change from time to time by Publishchain, in its sole discretion and without notice or liability to any data subject or any other person.