Privacy Policy

1. Data controller

The data controller for this service is Zhentao Wen, who runs GuideByMe as an individual. Privacy contact: [email protected]. We have not appointed a Data Protection Officer; requests are handled by the operator personally.

2. What we collect

Browsing needs no account. We do not ask for a password and we do not build advertising profiles. If you email us we keep your address and message so we can reply. If you buy a guide, our Merchant of Record shares basic order details with us — name, email and what you bought — so we can deliver the files and support you. Full card numbers are handled by the payment processor and are never stored on our servers. Server logs record access time, IP address and browser type for security and troubleshooting.

3. How we use it

To provide and deliver the files you buy (performance of a contract); to process payment and issue receipts (contract); to answer your messages and after-sales requests (contract or legitimate interest); to keep the site secure and prevent fraud (legitimate interest); to understand overall traffic so we can improve the content (legitimate interest); and to meet tax and accounting duties (legal obligation). We do not use your data for advertising and we do not sell it.

4. Cookies and analytics

This site sets no advertising or cross-site tracking cookies. We may use privacy-friendly analytics to understand overall traffic; those tools do not track you across sites and do not build personal profiles. You can clear or block cookies in your browser without affecting browsing or downloads.

5. Sharing and disclosure

We do not sell your personal information. We share it only as needed to run the shop: payment and orders are handled by Waffo Pancake (Merchant of Record, PCI-DSS compliant), which processes card data exclusively; email and hosting providers process data under confidentiality obligations. We may disclose information where required by law, court order or a competent authority.

6. Data security

The site is served over HTTPS throughout; order and correspondence records are accessible only to the operator, with least-privilege access control. If a security incident affects your rights, we will notify you and the relevant regulator within 72 hours of becoming aware, as required by law.

7. Retention

Correspondence is kept only as long as needed to resolve your question, normally no more than 2 years. Order and transaction records are kept as required by tax and accounting law, normally 6 years. Server security logs are kept for no more than 90 days. After that, data is deleted or anonymised.

8. Your rights

You can ask to see, correct, delete or export the personal data we hold, and you can restrict or object to certain processing or withdraw consent. Write to [email protected] and we will respond within 30 calendar days. If you think we have handled your data badly, you have the right to complain to your local data protection authority.

9. Children

This service is intended for people aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe your child has given us information, contact us and we will delete it promptly.

10. International transfers

Our service providers (payment, email, hosting) may be located outside China. Where data is transferred across borders we send it only to recipients with comparable protection and require them to keep it confidential and protect it.

11. Third-party links

This site may link to third-party sites, such as our payment provider. This policy covers only the information we collect ourselves; we are not responsible for third-party data practices, so please read their policies before use.

12. Changes to this policy

If we make material changes we will announce them on this page and by email to customers who have ordered, at least 15 days before they take effect, and update the date above. Continuing to use the service after that means you accept the change.

13. Contact

Privacy questions and rights requests: [email protected]. We usually reply within one business day (Mon–Fri, 09:00–18:00 UTC+8).