Privacy Policy

TOYOTA TSUSHO NEXTY ELECTRONICS SHANGHAI CO., LTD ("we", "us", or "the Company"), as the processor of personal information (including information that can directly identify you, or that can be easily matched with other information to identify you, hereinafter referred to as “personal information”. Personal information refers to various information related to an identified or identifiable natural person recorded electronically or by other means, but does not include anonymized information) under the Personal Information Protection Law of the People's Republic of China (“PIPL”) and other applicable data protection laws, fully recognizes that the proper processing of personal information constitutes our social responsibility. All personnel of the Company shall strictly adhere to this Privacy Policy(“Policy”) to ensure comprehensive protection of your personal information. Please read this Policy carefully. You are under no obligation to consent to this Policy. If you do not wish us to process your personal information as described herein, please refrain from providing your personal information to us. However, please note that in this situation, the Company may be unable to provide you with services, and you may not be able to access or use some functions of the website, and this may affect your customer satisfaction.

1. Compliance with Laws and Regulations
We strictly comply with PIPL, associated regulations, guidelines, and relevant legal frameworks governing personal information protection in order to protect personal information.
2. Collection of Personal Information
When obtaining personal information, the company will disclose or inform the purpose of use and acquire it through legal and proper means within the necessary scope to achieve such purpose. Additionally, the company may also obtain personal information from service providers or co-users, or acquire it due to business succession resulting from mergers or other reasons.
3. Security Management Measures for Personal Information
We implement appropriate organizational, physical and technical safeguards to protect against unauthorized access, loss, destruction, alteration, or leakage of personal information. Specifically, in terms of organizational security management measures, the Company will, based on the actual business situation, establish a management system for personal information protection and handle personal information properly and prudently in accordance with internal regulations and other provisions. In addition, the Company will conduct education and publicity activities related to personal information protection for directors, senior officers and employees and others who handle personal information, and adopt appropriate personnel safety management measures.
4. Personal Information and the Purpose and Method of Use

Note: We do not collect sensitive personal information in these scenarios. Additionally, we advise you not to actively input your sensitive personal information during smart chats.


We will renew this Policy and notify you via pop-up or prominent notice and seek renewed consent to the updated content of the Policy if the content of your personal information or the purposes or methods of use changes.
5. Exemptions from Consent for Collecting and Using Personal Information
Customers understand and acknowledge that we are not required to obtain their consent when collecting and using personal information in the following circumstances.
(1) When necessary for the fulfillment of our legal obligations and responsibilities.
(2) When directly related to national security or defense.
(3) When directly related to public safety, public health, or significant public interests.
(4) When directly related to criminal investigations, prosecutions, trials, or enforcement of judgments.
(5) When necessary to protect the life, health, or property safety of you or other individuals in an emergency situation.
(6) When necessary for the establishment or fulfillment of a contract in which you are a party.
(7) When collecting personal information that the customer has voluntarily disclosed to the public within a reasonable scope based on applicable laws and regulations.
(8) When collecting personal information of customers from legally disclosed information within a reasonable scope based on applicable laws and regulations, such as through legitimate news reports or government information disclosure.
(9) When necessary to maintain the safe and stable operation of the products or services we provide.
(10) When it is necessary to handle personal information within a reasonable scope in order to carry out acts such as news reporting or public oversight for the public interest.
(11) When an academic research institution needs to conduct statistical or academic research for the public interest, and when the results of such research or explanations are provided externally, provided that the personal information contained in the results is processed in a de-identified manner.
(12) Other situations specified by laws and administrative regulations.
6. Third-Party Personal Information Sharing
Except for the circumstances permitted by the PIPL, relevant laws on personal information protection and other laws and regulations, as well as the circumstances stipulated in this Policy, the Company will not provide the personal information it has obtained to any third party without your separate consent. At that time, the Company will only share necessary personal information, and such sharing behavior will be subject to the purposes and methods of use stipulated in this Policy. If the purpose or method of use of sharing your personal information changes, or if such purpose or method of use is changed by a third party, the Company will seek your consent again. Unless otherwise stated, these third parties shall not collect, use or transfer personal information, etc. on behalf of the Company. Therefore, the Company shall not be held responsible for the collection, use or transfer of personal information by these third parties. Currently, the Company will only share your personal information with third parties in the following circumstances:
For specific methods and rules regarding the collection and use of your personal information by third parties, please refer to the relevant service agreements and privacy policies of those third parties.
7. Exemptions from Prior Consent for Sharing, Transfer, or Disclosure of Personal Information
In the following circumstances, the Company may share, transfer, or disclose personal information without obtaining your prior consent:
(1) When necessary to fulfill obligations or duties prescribed by applicable laws and regulations;
(2) Where directly related to national security or defense security;
(3) Where directly related to public safety, public health, or significant public interests;
(4) Where directly related to criminal investigation, prosecution, trial, or execution of judgments;
(5) In emergencies, when necessary to protect the life, health, or property safety of you or other individuals;
(6) Processing of personal information that you have voluntarily disclosed to the public, within reasonable limits permitted by applicable laws;
(7) Collection of your personal information from legally disclosed information lawful news reporting or government information disclosure) within reasonable limits permitted by applicable laws;
(8) Other circumstances stipulated by laws or administrative regulations.
8. Processing Method of Minors' Personal Information
Minors may not create user accounts without parental or guardian consent. Before using the Service, minors should read this Privacy Policy with their guardians and ensure guardian consent to using the Service or providing personal information to the Company is obtained.
For personal information of children under 14, the Company will comply with the PIPL, this Privacy Policy, and regulations such as the Provisions on the Cyber Protection of Children's Personal Information for storage, use, and disclosure, safeguarding the rights of children and guardians on the children’s personal information.
Minors' personal information collected with guardian consent will only be used/disclosed within legally permitted scopes, with explicit guardian consent, or when necessary to protect the child. If we discover collection of children's information without the guardian’s prior consent, we will promptly take appropriate measures to delete it as soon as possible.
9. Cross-Border Transfers
In principle, personal information collected or generated by the Company in the People's Republic of China (the areas within China excluding Hong Kong, Macau and Taiwan, hereinafter the same) will be stored in China. If there is a need to transfer your personal information outside of China, the Company will obtain your personal consent and fulfil the procedures stipulated in the relevant laws and regulations. When transferring personal information outside of China with your consent, the Company will provide you with prior reference information on the personal information protection system of the country or region, the protection measures taken by the third party, etc., and inform you of the name of the recipient outside of China, the contact information, the purpose and manner of handling, the type of personal information, and the manner and procedure for you to exercise the rights to the recipient. Cross-border transfer is limited to cases where it is necessary due to business requirements, and the Company will conduct a security impact assessment in accordance with the law and regulations and require the overseas recipient to comply with the requirements for the protection of personal information as stipulated in this Privacy Policy to ensure that the level of protection is not lower than the standard in China.
10. Retention Period
The Company will retain personal information only for as long as is reasonably necessary to fulfill the purpose for which it was collected (or no less than the minimum retention period if such period is specified in the relevant laws, or no more than the maximum retention period if such period is specified), including to meet legal, tax and accounting requirements. After the expiration of the retention period, the Company will delete or anonymize the personal information.

The Company may extend the retention period in the event of a complaint from a user or when the Company believes there is a possibility of litigation.

In determining a reasonable retention period for personal information, the Company will take into account the amount and nature of the information, its confidentiality, the potential risk of improper use or disclosure, the purpose of the processing, the feasibility of alternative measures, and applicable legal, tax, accounting or other requirements.
11. Statutory Rights
In certain circumstances, you have the following rights in relation to your personal information.
(1) The right to access the personal information we hold and process about you.
(2) The right to restrict or refuse the Company's holding and processing of your personal information.
(3) The right to freely withdraw consent to the Company's holding and processing of your personal information.
(4) The right to review, browse and copy your personal information processed by the Company.
(5) The right to request that your personal information be transferred to the person you have nominated to process your personal information (please note that relevant legal requirements must be met).
(6) the right to have your personal information corrected or supplemented where the personal information we hold or process about you is inaccurate or incomplete.
(7) The right to have your personal information erased.
(8) The right not to be subject to automated decision-making.
(9) The right to have your personal account deleted.

You also have the right to file a complaint with the supervisory authority having jurisdiction over the protection of personal information, but it is recommended that you contact us as a matter of priority before filing a complaint, so that we have the opportunity to respond to your concerns.

For the personal information we hold, if you request to exercise the above rights (including requesting disclosure of information, correction, supplementation, deletion, suspension of use, erasing, ceasing to provide the personal information to third parties, or account cancellation, etc.), please contact us through the contact information provided in Article 13 “Contact Information and Consultation Window”. The Company will truthfully respond to and process the request and provide feedback within 15 business days after confirming the requestor is the owner of the personal information (or his/her agent).

However, please note that if exercising the above rights may cause damage to your own or a third party's life, body, property or other rights and interests, or seriously hinder the normal operation of the Company's business, or violate laws and regulations, the Company may refuse to provide all or part of the information.

We hope you could understand that to ensure your identity verification and the exercise of rights, the Company may require you to provide specific information to prevent unauthorized third parties from obtaining personal information.

In principle, you do not need to bear any costs when exercising the above rights. However, if the request is obviously groundless, repetitive or excessive, the Company may require you to bear reasonable costs or refuse to handle unreasonable requests.
12. Incident Response Measures
In the event of an incident such as personal information leakage, the Company will immediately investigate the facts and causes, implement measures to prevent secondary damage and recurrence, and handle the situation properly. At the same time, in accordance with the requirements of laws and regulations, we will promptly inform you of the basic information and potential impact of the leakage incident; the measures that the Company has taken or intends to take; the preventive or mitigating suggestions that you can take independently; and the remedial solutions for you. We will inform you of the progress of the incident through email, letters, phone calls, push notifications, etc. If it is difficult to notify each user individually, we will adopt reasonable and effective methods to make public announcements. Additionally, the Company will proactively report the handling of the incident of leakage of personal information to the regulatory authorities as required.
13. Contact Information and Consultation Window
If you have any opinions, suggestions, complaints or other needs regarding the processing of personal information by the Company, please contact us via the following email address. We will respond and provide a reasonable explanation within 30 days or within the period stipulated by laws and regulations.
Email of the Personal Information Protection Officer: service@pandaroid.com (Japanese language consultation is supported)
14. Continuous Improvement
The company will continuously improve the personal information processing mechanism to ensure compliance and update this Privacy Policy in a timely manner. The updated version takes effect from the date of its announcement. If significant changes are involved, your consent will be obtained again for the changes made. The updated version will take effect upon consent. If you refuse to agree, you may not be able to continue using the relevant service functions.
15. Use of Cookies
This website uses cookie technology, which is a small file sent by a website to the user's website browsing software (browser), and is now commonly used by most websites. Through cookies, this website can identify the user's past visit history, etc., so as to provide more optimized content display and services for users who visit again. Unless otherwise specified, this website does not obtain personal information through cookies. Users can disable cookies through their browser settings by themselves if they do not wish the browser’s relevant information be collected. Please note, however, that disabling may result in some services not working properly.
Enacted and Published on October 10, 2024
Revised on May 15, 2026
(In Articles 4 and 6, the parts in bold are the revisions)