The Bioserica® brand is operated by Nanjing Bioserica Antibacterial Materials Technology Co., Ltd. and its respective affiliates (hereinafter referred to as “the Company” or “we”). Due to channel specialization, specific services are provided by the respective operating entities. We are committed to delivering high-quality products and services, but certain services require access to some of your personal information (personal information refers to any information recorded electronically or otherwise that can identify a natural person either alone or in combination with other information). Therefore, we need to collect and use your relevant information. We fully recognize the importance of personal information to you and will implement corresponding security measures as required by law to protect the security and controllability of your personal information. In light of this, we have formulated this Privacy Policy (“Policy”).

(1) Our Official Accounts: Including Bioserica WeChat Official Account, Bioserica Era WeChat Official Account, Bioserica Era WeChat Official Account, Fengqi Jinling WeChat Official Account, Jiangsu Hehe WeChat Official Account, and Bioserica New Materials WeChat Official Account;

(2) Our company's social media accounts: including Bioserica Era Facebook Official Account, Bioserica Era Instagram Official Account, Bioserica Era WhatsApp Official Account, Bioserica Era Official WhatsApp (Enterprise Edition) Account, Bioserica Era Official TikTok Account; as well as Bioserica Official Xiaohongshu Account, Bioserica Era Ainyou Xiaohongshu Account, and Bioserica Era Official Weibo Account.

(3) Our company's WeCom accounts, WeCom groups, and any WeChat or WeCom accounts of our employees involved in collecting personal information.

This policy is crucial when you use this channel. We will detail our activities related to collecting, using, sharing, transferring, entrusting processing, storing, publicly disclosing, and protecting your personal information when you use the products and/or services provided through this channel. Therefore, we urge you to carefully read and fully understand this policy. Provisions that may significantly impact your rights and interests are highlighted in bold or other prominent formats for your special attention.

Before using the products and/or services we provide through this channel, you must carefully read and fully understand this policy to determine whether you agree to its terms. Your use or continued use of the products and/or services we provide through this channel (including but not limited to actively providing us with your personal information) signifies your agreement to this policy and your authorization for us to collect, use, share, transfer, entrust processing, store, publicly disclose, and protect your information in accordance with this policy. If you do not agree to this Policy, please immediately cease using the products and/or services we provide through this channel and refrain from providing us with your personal information.

If you lack full civil capacity, please carefully read and fully understand this Policy under the supervision of your legal guardian. Ensure you obtain your guardian's explicit consent before using the products and/or services we provide through this channel or providing us with your personal information. If the information you provide contains another person's personal information, you must ensure you have obtained lawful and sufficient authorization before providing such information to us. If you are a corporate entity, we may collect personal information of your product operators. You hereby confirm that you have obtained lawful and sufficient authorization to represent your product operators in acknowledging and agreeing to this policy. For brevity, you and your product operators are collectively referred to as “you” below.

Please note that this Policy does not apply to products or services provided to you by other third parties. Such third-party products or services are governed by their own privacy policies as disclosed to you.

This Policy will help you understand the following:

1. How we collect and use your personal information

2. How We Share, Transfer, Entrust Processing, and Publicly Disclose Your Personal Information

3. Your Rights

4. How We Store and Protect Your Personal Information

5. How We Handle Personal Information of Minors

6. Revisions and Updates to This Policy

7. Contact Information

8. Other

1 How We Collect and Use Your Personal Information

We collect information to provide you with various products and/or services, understand your needs, establish, maintain, and develop our relationship, and comply with laws, regulations, and regulatory requirements.

While using this channel for services, you may utilize its chat/consultation features. When communicating with our customer service representatives/staff via these features, you may provide us with shopping-related information, including your preferences, clothing habits, and size details. If purchasing our products through customer service/staff, you may provide recipient name, address, and phone number to complete the order (you must ensure consent from the recipient). We may retain records of our communications with you to ensure your issues are resolved.

You understand and agree that to optimize your experience, we may further refine our technology and introduce new features while improving and/or launching new products and/or services through this channel. This may involve adjustments to the content, methods, or purposes of personal information collection. In such cases, we will notify you of changes related to personal information collection and use through updates to this policy, pop-up notifications, page prompts, or other means. We will provide you with options to consent and collect/use such information only after obtaining your explicit consent. Should you have any questions during this process, you may contact us via the methods listed in Section 7, and we will respond within 15 business days. 1.1 Exceptions

In accordance with laws, regulations, and relevant national standards, we may process your personal information without obtaining your authorization or consent under the following circumstances:

(i) When necessary for us to perform our statutory duties or legal obligations;

(ii) When necessary to respond to public health emergencies or protect the life, health, and property safety of individuals in urgent situations;

(iii) Processing personal information within reasonable limits for public interest activities such as news reporting or public oversight;

(iv) Processing personal information voluntarily disclosed by individuals or otherwise lawfully made public, within reasonable limits as stipulated by the Personal Information Protection Law;

(v) Necessary for the conclusion and performance of a contract at your request, or for human resources management pursuant to legally established labor regulations and collectively negotiated agreements;

(vi) Other circumstances prescribed by laws and administrative regulations.

2 How We Share, Transfer, Entrust Processing, and Publicly Disclose Your Personal Information

2.1 Sharing

We may share your personal information with third-party companies, organizations, and individuals under the following circumstances:

(i) Sharing with explicit consent: We will share your personal information with other parties after obtaining your explicit consent;

(ii) Sharing under statutory circumstances: We may share your personal information as required by applicable laws for litigation dispute resolution, or pursuant to statutory requirements from administrative, judicial, supervisory, or prosecutorial authorities (including but not limited to regulators or other agencies of us or any affiliated company, or organizations/individuals designated by such regulators or agencies);

(iii) Sharing within the scope permitted or required by laws and regulations to protect the legitimate rights and interests of us, other third parties, or the public from harm;

2.2 Transfer We will not transfer your personal information to any other company, organization, or individual, except in the following circumstances:

(i) With explicit consent: We will transfer your personal information to other parties only after obtaining your explicit consent;

(ii) When required by law: We may transfer your personal information in compliance with laws and regulations or pursuant to lawful requests from administrative, judicial, supervisory, or prosecutorial authorities (including but not limited to regulators or other agencies overseeing us or any affiliated companies, or organizations/individuals designated by such regulators or agencies);

(iii) In cases of merger, acquisition, or bankruptcy liquidation: If personal information transfer is involved, we will inform you of the recipient's name and contact details. We will require the subsequent holder of your personal information to remain bound by this Policy. Otherwise, we will require such company or organization to obtain your authorization and consent again.

2.3 Entrusting Processing

Certain specific features within our products and/or services are provided by third parties. We may entrust such third parties to process your personal information. We will only entrust them to process your personal information for the purposes explicitly stated in this Policy. We will require third parties to process personal information within the scope of our entrustment, in accordance with applicable laws and this Policy, and to implement relevant confidentiality and security measures. We will supervise the personal information processing activities of third parties. If a third party processes your personal information beyond the scope of our entrustment, they will separately obtain your consent.

2.4 Public Disclosure

We will only publicly disclose your personal information under the following circumstances:

(i) After obtaining your explicit consent;

(ii) Disclosure required by law: We may publicly disclose your personal information when compelled by law, legal proceedings, litigation, or mandatory requirements from government authorities (including but not limited to regulators or other agencies of ours or any affiliated company, or organizations/individuals designated by such regulators or agencies).

3. Your Rights

In accordance with relevant Chinese laws, regulations, standards, and common practices in other countries and regions, we ensure you can exercise the following rights regarding your personal information:

3.1 Access and Modify Your Personal Information

You have the right to access and modify your personal information. You may access and modify your personal information either independently or by contacting us. If you choose to access or modify your personal information by contacting us, you may reach us at any time via the contact details specified in Section 7 of this Agreement. We will respond to your access or modification request within 15 business days.

3.2 Deleting Your Personal Information

You may request deletion of your personal information under the following circumstances:

(i) If our processing of personal information violates laws and regulations;

(ii) If our processing of personal information breaches our agreement with you;

(iii) If the processing purpose has been fulfilled, cannot be fulfilled, or is no longer necessary to achieve the processing purpose;

(iv) If we no longer provide products and/or services to you, or the retention period has expired;

(v) If you withdraw your consent;

(vi) Other circumstances stipulated by laws and administrative regulations.

You may contact us at any time via the contact details specified in Section 7 of this Agreement. We will respond to your deletion request within 15 business days. When we decide to comply with your deletion request, we will promptly remove your personal information from our systems. However, due to technical constraints, we may not be able to immediately delete corresponding information from backup systems. In such cases, we will ensure that the relevant information in backup systems is not reused for daily operations or other purposes, and will delete such information promptly when backup systems are updated.

3.3 Withdrawing Your Authorization Consent

You have the right to withdraw your authorization. You may contact us via the contact details provided in Section 7 of this Policy to choose to withdraw your authorization for certain personal information. We will respond to your request within 15 business days. After you withdraw the relevant authorization, we will no longer process the corresponding personal information. However, your decision to withdraw authorization will not affect the processing of personal information previously conducted based on your authorization.

3.4 Obtaining a Copy of Your Personal Information

You have the right to obtain a copy of your personal information. You may contact us via the contact details provided in this policy, and we will respond to your request within 15 business days.

3.5 Responding to Your Requests

For security purposes, you may be required to submit a written request or provide other proof of identity. We may first ask you to verify your identity before processing your request. We will respond within the timeframe stipulated by applicable laws and regulations or this Policy.

We generally do not charge fees for reasonable requests. However, for repeated requests that exceed reasonable limits, we may charge a reasonable cost fee based on the circumstances. We may refuse requests that are groundless and repetitive, require disproportionate technical means (e.g., developing new systems or fundamentally altering existing practices), pose risks to the legitimate rights and interests of others, or are otherwise impractical.

If we decide not to respond to your request, we will notify you of this decision and the reasons for it. You may contact us via the contact details provided in this policy to file a complaint.

4. How We Store and Protect Your Personal Information

4.1 How We Store Your Personal Information

We retain your information only for the period necessary to fulfill the purposes stated in this policy and within the time limits required by laws and regulations.

(a) Storage Location

We will store your personal information within the People's Republic of China. Currently, there are no scenarios involving cross-border transfer of your personal information or provision of personal information to overseas entities. Should cross-border storage or provision of personal information to overseas entities become necessary, we will explicitly notify you separately and obtain your authorization and consent again. We will strictly require the recipient to process your personal information in accordance with this Policy and relevant laws and regulations.

(b) Storage Period

In principle, you authorize us to store your personal information during your use of our products and/or services. We will store your personal information for the shortest period necessary to achieve the purposes for which you authorized its use. After the aforementioned storage period expires, we will delete or anonymize your personal information. Where laws and regulations impose mandatory requirements, we will process your personal information in accordance with such mandatory provisions.

4.2 Protection of Your Personal Information

(a) Technical Protection: We employ encryption technologies and anonymization techniques that meet or exceed industry standards, along with other reasonable and feasible measures, to protect your personal information. We also implement security protection mechanisms to prevent malicious attacks on your personal information.

(b) Institutional Safeguards: We establish dedicated security departments, security management systems, and data security processes to protect your personal information. We implement strict data usage and access protocols to ensure only authorized personnel can access your personal information, and conduct regular security audits of our data and technology systems.

(c) Written Restrictions on Partners: Before sharing your personal information with business partners, we will strictly require partners to fulfill their information protection obligations and responsibilities. We will sign data security protection agreements with them prior to cooperation. If third parties or our business partners breach these agreements, they shall bear corresponding legal liabilities.

(d) Information Security Incident Handling: To address potential risks such as personal information leakage, destruction, or loss, we will promptly notify you in accordance with legal requirements. This notification will include: the basic details and potential impact of the security incident; the measures we have taken or will take to address it; recommendations for you to independently prevent and mitigate risks; and the remedial measures available to you. We will promptly notify you of incident details via email, letter, phone call, or push notifications. When individual notification is impractical, we will publish announcements through reasonable and effective means. Additionally, we will proactively report the handling of personal information security incidents to regulatory authorities as required.

(e) Although we have implemented the aforementioned reasonable and effective measures and complied with standards mandated by relevant laws and regulations, please understand that the internet environment is not 100% secure. We will make every effort to ensure the security of the personal information you provide to us. If our physical, technical, or administrative safeguards are breached, resulting in unauthorized access, public disclosure, alteration, or destruction of information that harms your legitimate rights and interests, we will bear corresponding legal liability. Unless otherwise stipulated by laws and regulations, our liability shall be limited to the direct losses incurred by you.

5. How We Handle Personal Information of Minors

We place particular emphasis on protecting minors' personal information, as our channels primarily target adults. Minors under the age of 14 should not use this channel without obtaining consent from their parents or guardians. If you are under 14 years of age, you should read this policy with your parent or guardian before using our products and/or services. You must ensure you have obtained your guardian's consent before using our products and/or services and providing us with your information. If your guardian does not consent to your use of our products and/or services or provision of information to us under this policy, please immediately cease using our products and/or services. For personal information collected from minors with parental consent, we will only use or publicly disclose such information when permitted by law, explicitly authorized by the parent or guardian, or necessary to protect the minor.

If we discover that we have collected personal information from a minor without prior parental or guardian consent, we will make reasonable efforts to delete the relevant data as soon as possible.

6. Policy Revisions and Updates We may update the terms of this Policy based on service updates and relevant legal requirements. Such updates form part of this Policy and will be notified to you via platform announcements or other appropriate means before the revisions take effect. In such cases, your continued use of our products and/or services constitutes your agreement to be bound by the revised Policy. We will not restrict your rights under this Policy without your explicit consent.

For material changes, we will provide more prominent notice (including reminders via push notifications, pop-ups, or other means to prompt you to review the changes).

Material changes referred to in this Policy include but are not limited to:

(i) Significant alterations to the products and/or services we provide. Examples include changes to the purpose of processing personal information, the types of personal information processed, or the manner in which personal information is used;

(ii) Significant changes in our control structure, such as ownership changes resulting from mergers, acquisitions, or reorganizations;

Changes in the primary recipients of personal information sharing, transfer, or public disclosure;

(iv) Significant changes in your rights regarding personal information processing and the methods for exercising such rights;

(v) Changes to the department responsible for personal information security, contact information, or complaint channels;

(vi) When a personal information security impact assessment report indicates high risk;

(vii) Other significant circumstances or situations that may substantially affect your personal rights and interests.

We will indicate the date of each update and archive the previous version of the document for your reference. Should you wish to review it, you may contact us at any time via the contact details provided in Section 7 of this Policy.

7 Contact Information

If you have any questions, comments, or suggestions regarding this policy, or if you require assistance with withdrawing authorization, deleting, accessing, modifying, or protecting your personal information, or if you have any disputes, complaints, or reports concerning personal information security, you may contact us at any time through the following methods:

Our Entity Name: Nanjing Hesu Times Antibacterial Materials Technology Group Co., Ltd.

Mailing Address: [1st Floor, Building 5, Hesu Times Sci-Tech Park, No. 520 Zhongshanmen Street, Qixia District, Nanjing]

Phone: [400-928-8663]

Email: [bioserica@tian-an.net ]

We will make every effort to provide you with a satisfactory solution and complete your request within 15 business days.

8. Miscellaneous.

8.1 Headings for all clauses in this Policy are for convenience only and shall not be used to interpret or limit the meaning of this Policy.

8.2 Should any provision of this Policy be deemed void, invalid, or unenforceable, such provision shall be deemed severable and shall not affect the validity or enforceability of the remaining provisions of this Policy.

8.3 For certain specific products and services, we may establish separate privacy policies, which will be disclosed to you prior to providing such specific products or services. In the event of any inconsistency between such specific privacy policies and this Policy, the specific privacy policy shall prevail.

8.4 The interpretation of this Policy and the resolution of disputes arising hereunder shall be governed by the laws of the People's Republic of China. In the event of any dispute concerning the execution or performance of this Policy, the parties shall endeavor to resolve such dispute through friendly consultation. If consultation fails, either party may bring an action before the People's Court with jurisdiction over the defendant's domicile.