Privacy Policy

This Privacy Policy applies to all mobile games, applications and related services published by Weihao Trading Co., Ltd. ("we", "us" or "our"), including the games distributed under our studio brand MorningStudio (each, a "Game" and collectively, the "Services"). It explains, in plain language, what personal information we collect, how we use, share, store and protect it, and how you can access, correct, delete or otherwise control your information.

This is a single, universal policy that covers all of our Games. Because our Games differ in features and in how they are monetised, not every item described below applies to every Game, and the specific information collected may vary depending on which Game you play, its version and your region. Where a Game offers a feature that requires additional data, we will explain it in the Game or in a supplementary notice before we collect anything.

We understand how important your personal information is to you and we are committed to protecting it. We follow these principles: accountability, purpose limitation, consent and choice, data minimisation, security safeguards, individual participation, and transparency. We apply security measures consistent with industry standards to protect your personal information.

1. Who We Are

The controller responsible for your personal information (the "data controller" under the EU and UK General Data Protection Regulation) is:

• Weihao Trading Co., Ltd. ("伟浩贸易有限公司")
• Email: [email protected]
• Website: morningstudio.klchan.top

We are established in China. If you are in the European Economic Area or the United Kingdom, we will appoint a representative there where required by applicable law, and we will publish their contact details on this page. In the meantime, you may contact us directly using the details in Section 15.

2. Information We Collect

"Personal information" means any information that can be used, alone or in combination with other information, to identify you or to reflect your activity. We collect the following categories of information:

2.1 Information you provide directly

• Account and profile information: the nickname, profile picture, email address, password (stored in hashed form) and other details you provide when you create an account, or that we receive when you sign in through a third-party account.
• Support information: your correspondence with us and any attachments, screenshots or diagnostic details you choose to send.
• User-generated content: messages, posts, comments, images, audio or video that you create or share in interactive features of a Game.
• Purchase information (if the Game offers in-app purchases): order identifiers, product identifiers, purchase and refund records, and subscription status. We do not receive or store your full payment card number, bank account details or billing address; these are processed by the app store or payment provider you use.

2.2 Information collected automatically when you use a Game

• Device information: device model and manufacturer, operating system and version, device language and region, screen resolution and other technical attributes.
• Device and advertising identifiers: your advertising identifier (for example Apple's Identifier for Advertisers (IDFA) or Google's Advertising ID), app set ID, and other identifiers permitted by your platform and your device settings.
• Network information: IP address, network type, carrier or internet service provider, derived (coarse) country or region, and mobile country and network codes.
• Usage and log information: downloads and installs, launches, sessions, in-app events and progress, feature usage, level or content progression, advertising impressions and interactions, and the times and durations of your activity.
• Diagnostic information: crash logs, error reports, performance data and device state at the time of a crash.
• Approximate location: a coarse location inferred from your IP address (for example, at country level) that we use to serve appropriate content, comply with local law and prevent fraud. We do not collect your precise GPS location, and we do not use location data for advertising. If a Game needs location access for a specific feature, we will ask for your permission first.

2.3 Information from third parties

• Third-party sign-in providers (for example Apple, Google or other platform accounts), from which we may receive your unique identifier, email address, nickname and profile picture, depending on the permissions you grant.
• App stores, payment processors and platform partners, from which we receive order confirmations, purchase and refund records, and subscription status.
• Advertising, attribution and analytics partners, from which we receive device-level and aggregated data about installs, advertising impressions, clicks and campaign performance, as described in Section 5.

2.4 Device permissions

Depending on the Game, we may request the following permissions. You can grant or revoke them at any time in your device settings or in the Game. If you deny a permission, some features may not work, but the core gameplay will generally remain available.

Permission	Why we ask for it
Storage / files	To read and write local game data, cache resources, and save or upload images you choose to share.
Camera and microphone	Only when you choose to use a feature such as taking a photo, scanning a code, voice chat or recording audio.
Photos / media library	When you choose to upload or save an image.
Notifications	To send you service messages. You can turn promotional notifications off at any time in your device settings.
Tracking (iOS) / advertising ID	To show and measure advertising, including personalised advertising where you consent. See Section 5.

2.5 Information we do not collect

We do not intentionally collect information about your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data (including facial recognition templates), health data, or data concerning your sex life or sexual orientation, and we do not use, infer or target advertising on the basis of such information. Please do not send us such information.

3. How We Use Your Information

We use your personal information only for the purposes described below:

1. Providing and operating the Games: creating and managing your account, delivering content and features, saving your progress, processing in-app purchases and restoring entitlements, and providing customer support.
2. Advertising and monetisation: displaying advertising in free-to-play Games so that we can offer them at no cost, limiting how often you see the same advertisement, measuring whether advertising was delivered and how it performed, and preventing advertising fraud. See Section 5 for details and your choices.
3. Analytics and improving the Games: understanding how players use our Games, measuring retention and feature engagement, fixing bugs, improving performance and balancing difficulty. Where practicable, we use aggregated or de-identified information for these purposes.
4. Safety, security and fraud prevention: detecting, investigating and preventing cheating, hacking, unauthorised access, abuse, spam, malicious content and other activity that may harm players, the Games or third parties, and enforcing our terms of service.
5. Content moderation: reviewing content you submit in public or interactive areas to filter and remove content that is unlawful, harmful, harassing, hateful, sexually explicit, violent or otherwise objectionable, and to maintain a healthy environment.
6. Communications: responding to your requests and sending service-related notices, such as security alerts, updates to this Privacy Policy or changes to a Game. Where you have opted in or where permitted by law, we may send promotional messages, which you can opt out of at any time.
7. Legal and compliance: complying with applicable laws, regulations, court orders and lawful requests from competent authorities, verifying age where required, resolving disputes, and enforcing our legal rights.
8. Corporate transactions: evaluating or completing a merger, acquisition, financing, reorganisation or sale of assets, in which case we will handle your information as described in Section 7.2.

4. Legal Bases for Processing (EEA, UK and Switzerland)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal information on the following legal bases:

• Performance of a contract: to provide the Games and features you have requested and to perform our agreement with you, including maintaining your account and delivering purchased items.
• Legitimate interests: to keep our Games secure and free of fraud and cheating, to understand and improve how our Games perform, to prevent abuse, and to support our business operations, in each case where those interests are not overridden by your rights and interests. You have the right to object to processing based on legitimate interests (see Section 11.6).
• Consent: for personalised advertising, for storing information on or accessing information from your device for advertising and analytics purposes (where required), and for other processing for which we specifically ask your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Legal obligation: to comply with applicable law, including tax, accounting, consumer protection and lawful request obligations.
• Vital interests: where necessary to protect your vital interests or those of another person.

5. Advertising and Analytics

Many of our Games are free to play and are supported by advertising. This section explains how advertising works in our Games, what data is involved, and the choices available to you.

5.1 What our advertising partners collect

We work with third-party advertising networks, mediation platforms and measurement providers. To select, deliver and measure advertising, these partners and we may collect and process:

• your advertising identifier (IDFA on iOS, Advertising ID on Android) or another device or app identifier;
• your IP address, from which a coarse region may be derived;
• device and technical information, such as device model, operating system, language and screen size;
• advertising data, such as which advertisements were shown to you, when, whether they were viewed or clicked, and whether an install or in-app event followed; and
• inferred interests or audience segments, where personalised advertising is permitted and you have consented.

We do not share your name, email address, phone number, precise location, contacts, photos or any content you create with advertising partners, and we do not allow our advertising partners to build advertising profiles of users we know to be children.

5.2 Personalised and non-personalised advertising

Where you have given the consent required by applicable law, advertising partners may use your advertising identifier and the data described above to show you advertising that is more relevant to you (personalised or interest-based advertising). Where you have not consented, or where you have opted out, we request non-personalised or contextual advertising, which is selected based on the context of the Game rather than on a profile of you. Non-personalised advertising may still involve the collection of an advertising identifier for frequency capping, aggregate reporting and fraud prevention, where permitted by law.

5.3 Your choices and how to opt out

• iOS (App Tracking Transparency): on iOS 14.5 and later, we ask for your permission before tracking you across apps and websites owned by other companies. You can change your choice at any time in Settings → Privacy & Security → Tracking.
• Android: you can delete or reset your Advertising ID and, where available, opt out of personalised advertising in Settings → Google → Ads (the exact path varies by device manufacturer).
• In-game consent: if you are in the EEA, the UK or Switzerland, we present a consent dialogue before we use your information for personalised advertising or store information on your device for advertising purposes. You can change or withdraw your choices at any time from the privacy or settings option in the Game.
• Industry opt-out tools: you can also limit interest-based advertising from participating companies through the Digital Advertising Alliance, the Network Advertising Initiative or, in the EU, Your Online Choices.
• Do Not Sell or Share: California residents can opt out of the sale or sharing of personal information for cross-context behavioural advertising. See Sections 7.5 and 16.2.

Please note that opting out of personalised advertising does not mean you will stop seeing advertising in our free-to-play Games; it means the advertising you see will be less relevant to you.

5.4 Analytics and attribution

We use analytics, attribution and crash-reporting tools to understand installs, player behaviour, retention, errors and campaign performance. These tools may collect device and app identifiers, IP address, usage events and diagnostic data. We use them to operate and improve our Games, to detect fraud, and to measure whether our marketing is effective. Where required by law, we obtain your consent before using non-essential analytics technologies.

6. Cookies and Similar Technologies

Cookies are small text files placed on your device by a website or application. They typically contain an identifier and some information, such as a site or app name and a few characters. They help us remember information about your activity, such as session state, language preference and other settings, so that your next visit is easier and more useful.

Where our Games include web-based content, and on our websites, we and our partners use cookies, local storage, software development kits (SDKs), pixels and similar technologies to:

• keep you signed in and remember your session and preferences;
• remember your language and display settings;
• measure traffic, usage and the performance of the Games and our campaigns;
• detect and prevent fraud and abuse; and
• where permitted and subject to your consent, deliver and measure advertising.

We do not use cookies or similar technologies for purposes other than those described in this Privacy Policy. You can manage or delete cookies through your browser settings, and reset or restrict your advertising identifier in your device settings. Where required by law, we will present a consent notice before setting non-essential cookies, and you may change your choices at any time. For general information about cookies, please visit www.aboutcookies.org. For instructions on changing your browser settings, please refer to the official website of your browser (for example Google Chrome, Mozilla Firefox, Safari, Microsoft Edge or Opera).

Some browsers and mobile operating systems offer a "Do Not Track" or "Global Privacy Control" (GPC) signal. Where required by applicable law, we honour GPC signals as a valid request to opt out of the sale or sharing of personal information.

7. How We Share, Transfer and Disclose Your Information

7.1 Sharing

We may share your information within Weihao Trading Co., Ltd. and its affiliates so that they can help provide the Services to you, on a need-to-know and data-minimisation basis, and only for the purposes described in this Privacy Policy. If an affiliate needs to use your information for a new purpose, we will ask for your consent first.

We do not share your personal information with any company, organisation or individual outside Weihao Trading Co., Ltd. and its affiliates, except in the following circumstances:

1. With your consent: we will share your information with other parties when you have given us your explicit consent.
2. Legal requirements: we may share your information where required by law or in response to a binding request from a competent government authority, court or regulator.
3. Advertising, analytics and service providers: the Games incorporate third-party SDKs and services, including advertising networks, mediation platforms, analytics and crash-reporting tools, and attribution providers. These providers may collect information as described in Sections 5 and 7.3, acting as our processors or, in some cases, as independent controllers under their own privacy policies.
4. Platform and business partners: we may share limited information with app stores, payment processors, platform and distribution partners, customer support providers and co-publishers, strictly as necessary to distribute the Games, process transactions, handle support requests and perform accounting and reconciliation. Our partners are not permitted to use your information for any other purpose.
5. Aggregated and de-identified information: we may share aggregated or de-identified information that cannot reasonably be used to identify you, for example statistics about the number of players or the performance of a Game.

When we share information with third parties, we require them to protect it under written agreements that impose confidentiality and security obligations at least as protective as those in this Privacy Policy, and to process it only in accordance with our instructions.

7.2 Transfer

We will not transfer your personal information to any company, organisation or individual outside Weihao Trading Co., Ltd., except:

1. With your consent: after obtaining your explicit consent, we may transfer your personal information to another party; or
2. Corporate transactions: in connection with a merger, acquisition, reorganisation, sale of a business or assets, or bankruptcy liquidation, we may transfer your information as part of the transaction, in which case we will require the recipient to continue to be bound by this Privacy Policy. If the scope of collection or the purpose of use changes materially, we will require the recipient to ask for your consent again, and we will notify you as required by law.

7.3 Third-party SDKs used in our Games

The table below lists the categories of third-party SDKs and services typically integrated in our Games, together with what they may collect. The exact set varies by Game, version and platform, and we update this table as our integrations change. If you need confirmation for a particular Game, please contact us.

7.4 Disclosure

We will disclose your personal information publicly only:

1. after obtaining your explicit consent; or
2. where required by law, legal process, litigation, or a mandatory requirement of a government or regulatory authority. Where legally permitted, we will notify you of such a request before disclosing your information.

7.5 Selling and sharing under California law

We do not sell your personal information in exchange for money. However, when we disclose advertising identifiers and related device data to advertising partners to show you personalised (interest-based) advertising, this may be considered a "sale" or "sharing" for cross-context behavioural advertising under the California Consumer Privacy Act (as amended by the CPRA). Where we engage in such activity, we provide a "Do Not Sell or Share My Personal Information" option in the Game's privacy settings and in Section 16.2 of this policy, and we honour recognised opt-out preference signals such as Global Privacy Control. We do not sell or share the personal information of consumers we know to be under 16 without affirmative authorisation (opt-in for 13 to 15 year olds, and parental opt-in for children under 13).

8. International Data Transfers

We are established in China, and we work with service providers, including advertising and analytics partners, located in other countries, including the United States, the European Economic Area, the United Kingdom and other jurisdictions. As a result, your information may be transferred to, stored in and processed in countries other than the country in which you live. Data protection laws in those countries may differ from those in your country and may offer a different level of protection.

Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, the Swiss addendum, an adequacy decision (including the EU-US Data Privacy Framework where our partners are certified under it), or another lawful transfer mechanism, together with supplementary technical and organisational measures such as encryption in transit. Where required by law, we will obtain your consent before transferring your information.

You may contact us using the details in Section 15 to request more information about the safeguards we use, including a copy of the relevant contractual clauses.

9. How Long We Keep Your Information

1. We store your information in a secure manner, including through local storage (for example, on-device caches and preferences), databases and server logs.
2. Retention periods: we retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required or permitted by applicable law. As a general guide:
   • Account information: for as long as your account is active, and for up to 24 months after your last activity or account closure, unless a longer period is required by law.
   • Advertising identifiers and related advertising data: for a limited period, generally up to 18 months, after which they are deleted or aggregated.
   • Analytics and log data: generally up to 24 months, and longer where aggregated or de-identified.
   • Purchase and transaction records: for the period required by tax, accounting and consumer protection laws, which may be several years after the transaction.
   • Support records: generally up to 24 months after your request is resolved, so that we can handle follow-up questions and disputes.
3. Deletion on request: where you delete content, close your account or withdraw consent, we will delete or anonymise the relevant information within a reasonable period, except where we are legally required or permitted to retain it, for example to comply with tax law, resolve disputes or prevent fraud.

10. How We Protect Your Information

1. We use security measures that meet industry standards to protect the personal information you provide against unauthorised access, disclosure, use, modification, damage or loss. We take all measures reasonably practicable to protect your information.
2. Our data security capabilities include application-layer encryption, transport-layer encryption (such as TLS), database encryption, monitoring for anomalous network access, and monitoring for anomalous database access.
3. We take reasonable measures to ensure that we do not collect irrelevant personal information, and we retain your personal information only for the shortest period necessary to achieve the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
4. The internet is not a completely secure environment. We strongly recommend that you avoid sending personal information through unencrypted channels, and that you use a strong, unique password (combining numbers, upper- and lower-case letters and special characters, and avoiding names or birthdays) to help us keep your account secure.
5. Although we do our best to secure the information you send to us, no method of transmission or storage is completely secure. If our physical, technical or organisational safeguards are breached and your information is subject to unauthorised access, disclosure, alteration or destruction, we will bear the corresponding legal responsibility.
6. Security incidents: in the event of a personal data breach, we will notify you and the competent supervisory authority as required by applicable law, including the basic circumstances and likely consequences of the incident, the measures we have taken or will take, advice on how you can mitigate risk, and any remedial measures. We will notify you by email, in-app message, push notification or other appropriate means, or, where individual notification is impracticable or would involve disproportionate effort, by public announcement on this page or in the Game. We will also report the handling of the incident to the relevant authorities as required.

11. Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below. We do not discriminate against you for exercising them. To exercise any right, contact us using the details in Section 15.

11.1 Access

You can access your basic account information, such as your account name and profile, in the settings pages of the Game. If you cannot find the information you need, you may contact us and we will normally respond within 15 business days, or within the period required by applicable law.

11.2 Correction

You have the right to correct inaccurate or incomplete personal information, except in the limited circumstances provided by law. You may update your profile in the Game, or contact us, and we will normally respond within 15 business days.

11.3 Deletion

1. You may request deletion of your personal information where:
   1. our processing violates applicable law;
   2. we collected or used your personal information without your consent;
   3. our processing violates our agreement with you;
   4. you no longer use the Services, or you have closed your account; or
   5. we no longer provide the Services to you.
2. If we agree to your deletion request, we will also notify entities to which we have provided your personal information and require them to delete it promptly, unless the law provides otherwise or those entities have obtained your separate authorisation.
3. Because of how systems operate, information may not be deleted from backup systems immediately; it will be deleted when the backups are next updated. We may also retain a limited record of your request where the law requires us to keep it.

11.4 Closing your account

You may close your account at any time through the in-game account settings (for example, Settings → Account → Delete Account). Please note that once you close your account, you will no longer be able to use the related features, and your information and account-related materials will be deleted or anonymised. Please proceed with care. If you cannot close your account through the in-game settings, you may contact us and we will normally respond within 15 business days. If you signed in through a third-party account, you will need to request closure from that third party as well.

11.5 Withdrawing consent

You may withdraw consent you have given by changing the relevant settings (for example, by disabling a permission in your device settings, turning off a feature, changing your advertising consent choices in the Game, or unbinding a third-party account) or as provided by applicable law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, but we may no longer be able to provide the corresponding features. If you cannot withdraw consent through those settings, you may contact us and we will normally respond within 15 business days.

11.6 Objection, restriction and portability

Where applicable law provides for them, you may object to processing based on our legitimate interests (including profiling for direct marketing), ask us to restrict processing, or request a portable copy of the information you provided to us in a structured, commonly used and machine-readable format.

11.7 Opting out of marketing and personalised advertising

You can opt out of promotional emails by using the unsubscribe link, opt out of push notifications in your device settings, limit advertising personalisation by resetting or restricting your advertising identifier, and change or withdraw your advertising consent choices in the Game. California residents may also use the "Do Not Sell or Share My Personal Information" option described in Sections 7.5 and 16.2, and we honour Global Privacy Control signals where required.

11.8 Exercising your rights

To protect your account, we may ask you to verify your identity before we act on a request to correct or delete information, close an account or withdraw consent. We do not charge a fee for reasonable requests. However, we may charge a reasonable cost-based fee, or refuse to act, for requests that are manifestly unfounded, excessive or repetitive, that would require disproportionate technical effort, that would risk the rights of others, or that are otherwise impracticable. Where we refuse a request, we will explain the reason.

If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with your local supervisory authority. If you are in California, you may designate an authorised agent to make requests on your behalf, subject to verification of your identity and the agent's authority. We will respond to verified requests within the timeframes required by applicable law (generally 30 days, or 45 days for California requests, which may be extended where permitted, in which case we will tell you why).

11.9 Exceptions

We may be unable to respond to a request to correct or delete information, close an account or withdraw consent where:

1. it is directly related to national security or defence;
2. it is directly related to public safety, public health or significant public interests;
3. it is directly related to criminal investigation, prosecution, trial or enforcement of judgments;
4. there is sufficient evidence of malicious intent or abuse of rights (for example, where the request would harm public safety or the lawful rights of others, or would exceed what is achievable with reasonable technical means and commercial cost);
5. responding would seriously harm the lawful rights and interests of you or another person or organisation; or
6. it involves trade secrets.

12. Children's Privacy

Our Games are general-audience games that are not directed to children under 13 (or the minimum age in your country, see below), and we do not knowingly collect personal information from children without the consent required by applicable law. We take children's privacy seriously, and we configure our Games and our advertising to comply with the Children's Online Privacy Protection Act (COPPA) in the United States, Article 8 of the GDPR and the age thresholds set by EU member states, and equivalent laws elsewhere.

Age thresholds we apply:

• United States: children under 13 (COPPA).
• European Economic Area and the United Kingdom: children under 16, or the lower age set by the relevant member state (not below 13), for information society services offered directly to a child.
• Other regions: the minimum age set by applicable local law.

If any of our Games is listed in an app store's "Kids" or "Designed for Families" category, or is otherwise directed to a younger audience, then in that Game:

• we do not knowingly collect personal information from children, and we do not require an account or an email address to play;
• we do not serve personalised or interest-based advertising, and we configure our advertising partners so that only contextual advertising is requested and no advertising identifier is used to build a profile of the child;
• we do not collect precise location, contacts or other data that could identify a child; and
• we do not include social features that allow children to share personal information publicly.

13. Third-Party Services and Links

The Services may contain links to, or integrate, third-party websites, applications, SDKs, app stores or services that we do not control. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of every third-party service you use, including the app store from which you downloaded the Game and the advertising partners identified in Section 7.3.

14. Changes to This Privacy Policy

1. We may update this Privacy Policy from time to time, for example to reflect changes in our Games, technology, industry practices or applicable law.
2. When we make material changes, we will notify you through the Games (for example, by an in-app prompt, pop-up or announcement) or by other appropriate means such as email before the changes take effect, and we will update the "Last Updated" date at the top of this page. Where required by law, we will ask for your consent to the updated policy. Please read the updated Privacy Policy carefully. If you continue to use the Services after the changes take effect, we will treat this as acceptance of the updated Privacy Policy. If you do not agree with the changes, you may stop using the Services and, where available, close your account.
3. Because this policy covers all of our Games, a change may affect only some Games; where that is the case, we will explain which Games are affected. Previous versions of this Privacy Policy are available on request.

15. How to Contact Us

16. Additional Disclosures for Certain Jurisdictions

16.1 European Economic Area, United Kingdom and Switzerland (GDPR / UK GDPR)

• Controller: Weihao Trading Co., Ltd., contactable using the details in Section 15, is the controller of your personal information.
• Your rights: access, rectification, erasure, restriction, objection, portability, and the right not to be subject to decisions based solely on automated processing. You may withdraw consent at any time.
• Advertising consent: we rely on your consent for personalised advertising and for storing information on or accessing information from your device for advertising and analytics purposes, and we provide a consent dialogue that lets you accept or refuse each purpose.
• Complaints: you have the right to lodge a complaint with your local supervisory authority.

16.2 California, United States (CCPA / CPRA)

• Categories collected: identifiers (such as account name, advertising identifier and IP address); commercial information (purchase records); internet or other network activity (gameplay and advertising interactions); geolocation data (approximate, derived from IP address); and inferences drawn from the above.
• Purposes: as described in Section 3, including providing the Games, advertising, analytics, security and legal compliance.
• Disclosure to third parties: to advertising, analytics, attribution and platform providers as described in Section 7.3.
• Your rights: to know, access, correct and delete personal information; to opt out of the sale or sharing of personal information; to limit the use and disclosure of sensitive personal information; and not to be discriminated against for exercising your rights.
• Do Not Sell or Share My Personal Information: you can opt out through the privacy settings in the Game or by emailing us at [email protected] with the subject line "Do Not Sell or Share". We honour Global Privacy Control signals where required.
• Retention: as described in Section 9.
• Authorised agents: you may use an authorised agent to submit requests, subject to verification of your identity and the agent's authority.

16.3 Other regions

If you are located in a jurisdiction with data protection laws that grant you additional rights, such as Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), Japan (APPI), South Korea (PIPA), India (DPDP Act) or China (PIPL), we will honour the rights those laws provide, including rights of access, correction, deletion, withdrawal of consent and complaint to your local regulator. Where local law requires separate consent for the collection of sensitive information, for cross-border transfers, for advertising or for direct marketing, we will obtain that consent before carrying out the relevant processing. Where local law requires a local representative, we will appoint one and publish their details here.

If any provision of this Privacy Policy conflicts with mandatory local law, the local law will prevail to the extent of the conflict, and the remaining provisions will continue to apply.