Privacy Policy
Last updated: 4 November 2026
This Privacy Policy explains how ChengDu SaintErFang Trading Co., Ltd. gathers, uses, stores and protects personal information when you visit our website at saintsquare.lat, write to our lane desk, call our bell line or use the services of our integrated systems work. The website and its written materials are produced and maintained by the developer known as SaintSquare on behalf of the company, and this policy describes the practices that SaintSquare follows at the lane desk. We wrote it in plain language on purpose, because a privacy document should be read and understood rather than skimmed and filed. Please take a few minutes to read it fully before you send us a sheet, a letter or a telephone call.
We are a small, careful house. We do not sell personal information, we do not build advertising profiles and we do not pass a trader letter to an unrelated party. Our systems are designed to gather only the notes we need, to trade only the facts a task requires and to rest, meaning to delete, information that has served its purpose. The sections below set out the detail of that promise in the order in which a person usually meets our desk.
1. Who We Are
The controller of the personal information described in this policy is ChengDu SaintErFang Trading Co., Ltd., a company registered in China. Our registered and operating address is No 61, 1/F, No 548 Gaopeng West Road, Wuhou District, ChengDu City - 610000, China (CN). Our website is reachable at saintsquare.lat, our letter desk is square@saintsquare.lat and our bell line is +12705884250.
The developer name SaintSquare identifies the person and the studio that built and maintains this website and its written materials. When this policy refers to the developer, it means SaintSquare acting for the company. When it refers to the company, it means ChengDu SaintErFang Trading Co., Ltd. Both are bound by the practices described here, and both answer to the same desk.
We work in computer systems design and related services within the professional, scientific and technical sector. That means we build, integrate and look after systems for other organisations, and we occasionally receive personal information inside the documents of a project. We treat that information with the same care as the information we gather at our own window.
2. Scope of This Policy
This policy covers the website at saintsquare.lat, the electronic mail that reaches our letter desk, the telephone calls that reach our bell line, the forms on our contact page and any written or verbal exchange that grows out of them. It also covers the records that our lane desk keeps about a project once an engagement has begun.
This policy does not cover the practices of other websites that you may reach through a link from our pages. It does not cover the internal records that a client organisation keeps about its own staff, even where those records relate to a system that we designed. If we act as a processor for a client, the client is responsible for the notice it gives to its own people, and we follow the written instructions of that client.
Where a specific project contract contains privacy terms that differ from this policy, the contract terms take priority for the information that falls inside that contract. This policy fills the gaps and explains our general habits.
3. Information We Gather
We try to keep the list short. The categories below describe what we may gather when you choose to use the desk.
Information you give us directly
- Your name and the name of the organisation you represent.
- Your electronic mail address and, where you offer one, your telephone number.
- The subject and the content of the message that you send through the contact form or by direct mail.
- Any documents, drawings, notes or square sheets that you attach to a message or hand to us at the window.
- Your preferences about how we should reply, for example by mail or by telephone.
Information gathered automatically
- The internet protocol address from which your browser reaches our pages.
- The type of browser and the operating system that you use.
- The pages that you visit and the time of your visit.
- The address of the page that referred you to us, where your browser sends that address.
- Coarse information about the country or region from which you connect.
Information from project work
- Contact lists and role descriptions supplied by a client for the purpose of a project.
- System logs and configuration records that our engineers review while integrating or supporting a system.
- Correspondence about a support request, including the steps that were taken to resolve it.
We do not ask for financial account numbers, health records, biometric identifiers or government identity numbers through our website. If such material arrives by accident, we remove it from our ordinary records and advise the sender, unless a law or a project contract requires us to hold it.
4. How We Gather Information
Most of the information we hold arrives because a person chose to send it. You fill the contact form, you write a letter, you call the bell line, or you sit at the cloister bench with a sheet in your hand. We do not buy contact lists, we do not scrape addresses from other websites and we do not obtain personal information from data brokers.
A smaller part of the information is gathered automatically by the servers that deliver our pages. That information is used to keep the site working, to spot abuse and to understand in general terms which pages are useful. It is not used to single out a visitor for attention.
During a project, our engineers may receive information from a client system with which they have been asked to work. We gather that information only as far as the task requires, and we record on the trader sheet why it was needed and how long it may be kept.
5. Why We Use Information
Every use of personal information at our desk answers one of a short set of questions. We list the questions here so that you can judge whether our practice is modest.
- To reply to your letter, your form or your call and to continue the conversation until it is settled.
- To prepare a proposal, a drawing set or a scope note for a project that you have asked us to consider.
- To deliver, integrate and support a system under a contract with your organisation.
- To keep the accounts, invoices and tax records that the law requires of a trading company.
- To keep our website secure, available and free of automated abuse.
- To improve the clarity of our written material and the usefulness of our pages.
- To defend a legal claim or to answer a lawful request from a public authority.
We do not use the information for automated decision making that produces legal effects for you. We do not use your letter to train a general purpose model. We do not combine information gathered at our website with information from other sources in order to build a richer picture of you.
6. Legal Bases for Processing
Where the law of your region asks us to name a legal basis, we rely on the following bases, chosen to fit the situation.
Performance of a contract
When you or your organisation has engaged us, we process the information that is necessary to carry out the engagement and to keep its records in order.
Steps taken before a contract
When you ask for a proposal, a reading of a sheet or a discussion of a project, we process the information that is necessary to answer you and to prepare the ground for a possible contract.
Legitimate interests
We have a legitimate interest in keeping our desk secure, in understanding how our pages are used and in communicating with the people who choose to write to us. We weigh that interest against your rights and we keep the processing narrow.
Consent
Where we ask for your agreement, for example before adding you to an occasional newsletter, the processing rests on that consent. You may withdraw it at any time by writing to our letter desk, and the withdrawal does not affect work that was already lawful.
Legal obligation
We process certain accounting and tax records because the law requires a trading company to keep them for a set period.
8. Trader Letters and Correspondence
A trader letter is the heart of our desk. We read it carefully, we index it under the name of the sender and we answer it with a named clerk. The letter and the reply are kept together so that a later reader can follow the thread without asking you to repeat yourself.
We keep correspondence for the period described in the retention section below. We do not publish a letter, quote it on our website or share it with a third party unless you have asked us to do so, or unless the law compels it.
If you send a letter by mistake to the wrong desk, write to us at once and we will help you recall it, provided it has not already been answered and filed under a project. Our clerks are trained to treat a misfiled letter as confidential and to hand it back to the sender where possible.
10. Service Providers and Processors
Like any working desk, we rely on a few suppliers. A hosting provider keeps the website and its mailboxes running. A network provider carries the traffic between your browser and our pages. An accounting service helps us keep the books that the law requires. A security service may review logs for signs of intrusion.
Each supplier is chosen for reliability and is bound by a written agreement that limits the use of the information to the service we have asked for. We do not permit a supplier to use our records for its own marketing, and we ask each supplier to tell us promptly if a breach touches our data.
Where a supplier subcontracts part of its work, the same limits travel with the subcontract. We review our list of suppliers once a year and remove any that no longer earn its place.
11. International Transfers
Our desk sits in ChengDu, and our primary records are kept there. Some of our suppliers operate servers in other countries, so a message that you send us may pass through or be stored in a different region on its way to the desk.
Where we transfer personal information across a border, we use a lawful transfer mechanism, such as a standard contractual clause or an approved framework, and we ask the receiving party to protect the information to a standard that is at least as strong as the one described in this policy.
If you would like to know which regions are involved for a particular matter, write to the letter desk and we will tell you in plain terms.
12. How Long We Keep Information
We keep information only for as long as it serves the purpose for which it was gathered, and then we retire it.
- An enquiry that does not lead to a project is kept for up to two years, so that a later message can be understood in context.
- Correspondence tied to an active project is kept for the life of the project and for the period set by the contract afterwards.
- Accounting and tax records are kept for the period that the law of China requires, which is currently ten years for the principal books.
- Server logs are kept for a short rolling window, usually no more than ninety days, unless a security incident requires a longer look.
- A record tied to a legal claim is kept until the claim is finally settled.
When a period ends, we delete the record or reduce it to an aggregate form that no longer identifies a person. We prefer deletion, and we review the shelves at the end of each year to make sure that what remains is still needed.
13. How We Protect Information
We protect information with the habits of a careful desk rather than the promises of a slogan. Access to our records is granted by role, reviewed at each bell round and removed when a person leaves the company. Messages travel over encrypted connections where the receiving service supports them. Backups are kept apart from the working copies, and a restore is tested from time to time.
Our engineers keep the systems that we build and the systems that we use up to date. Passwords are held in a managed store, not on a note stuck to a monitor. A clerk who suspects a breach writes a short incident note at once, and the desk decides within a day whether a notification is needed.
No arrangement is perfectly safe, and we will not pretend otherwise. What we promise is attention, speed and honesty. If a breach of our records puts your information at risk, we will tell you without undue delay and we will explain what we know, what we are doing and what you can do.
14. Your Rights and Choices
You have rights over the personal information that we hold about you. We honour them for everyone who writes to our desk, and we do not charge a fee for a reasonable request.
- You may ask what information we hold about you and receive a copy.
- You may ask us to correct information that is inaccurate or incomplete.
- You may ask us to delete information that is no longer needed, subject to a legal duty that requires us to keep it.
- You may ask us to limit the use of your information while a question about it is being settled.
- You may object to a use that rests on our legitimate interests, and we will weigh the objection in good faith.
- You may withdraw a consent that you gave earlier, without affecting work that was already lawful.
- You may ask for a portable copy of information that you supplied to us under a contract or a consent.
To exercise a right, write to square@saintsquare.lat with the subject line Privacy Request, or call +12705884250. We may ask a small number of questions to confirm that you are the person concerned, and we will answer within thirty days. If a request is complicated, we will tell you why more time is needed before the thirty days run out.
If you are not satisfied with our answer, you may complain to the data protection authority of your region. We would rather hear from you first, and we will do our best to settle the matter at the desk.
15. Privacy for Children
Our lane desk serves organisations and the adults who work for them. We do not knowingly gather personal information from a child under the age of sixteen, and our website is not addressed to children.
If a parent or guardian believes that a child has sent personal information to our desk, please write to square@saintsquare.lat and we will look for the record, delete it where we can and confirm the result to you. If the information sits inside a project record held for a client, we will ask that client to help us remove it.
16. Measurement and Analytics
We want to know whether our pages are clear and whether the desk is easy to reach. To answer that question we may count visits in aggregate, look at which pages are opened and note which links are used most often.
We prefer measurement that does not build a profile of an individual. Where a tool can be configured without cookies and without a persistent identifier, we use that setting. Where a tool requires a cookie, we describe it in the cookie section and offer a way to refuse.
We do not sell the results of our measurement, and we do not combine them with a trader letter in order to identify a person who has not told us who they are.
17. Marketing and Newsletters
We send a short occasional note to clients and contacts who have asked for it. The note describes new lanes at the desk, changes to our service sheet and anything else that a working relationship should know. We do not send it to a list that we bought or borrowed.
Every note carries a plain way to leave the list, and a request to leave is honoured at once. Leaving the list does not affect the letters that belong to an active project.
We do not use an advertising network to follow you around the web, and we do not ask a social platform to build a lookalike audience from our contacts.
18. Third Party Links
Our pages may link to another website, for example to a standards body, a supplier or a public register. Those websites have their own privacy practices, and we cannot control them.
We choose our links with care, but a link is not an endorsement of every practice on the far side. We encourage you to read the privacy notice of any site that asks for your information, especially where it asks for more than a name and a message.
19. Changes to This Policy
We review this policy once a year and whenever our practices change in a material way. The date at the top of the page tells you when the current version took effect.
If a change affects your rights, we will describe it in plain language and, where the law requires, we will ask for your consent again. A continued use of the desk after a change means that you have seen the new version, but it does not remove a right that the law gives you.
Earlier versions are kept in our records, and you may ask for a copy by writing to the letter desk.
20. How to Contact Us
We would rather answer a question than receive a complaint, so please write to us early. The letter desk at square@saintsquare.lat is read every working day, and the bell line at +12705884250 is answered during posted hours.
You may also visit the cloister lane at No 61, 1/F, No 548 Gaopeng West Road, Wuhou District, ChengDu City - 610000, China (CN). If you plan to climb the steps, send a short note first so that a clerk can meet you at the arch window.
The developer SaintSquare and the company ChengDu SaintErFang Trading Co., Ltd. share responsibility for the practices described in this policy, and either of them can help you with a privacy request. Thank you for reading to the end. A desk that is trusted is a desk that is read.