Personal Information Protection Law (PIPL) Privacy Policy

Effective Date: April 9, 2026 Last Updated: April 9, 2026

1. Introduction

This Privacy Policy complies with the requirements of the Personal Information Protection Law of the People's Republic of China (PIPL) and explains how we collect, use, store, and protect your personal information.

2. Information of the Personal Information Processor

Company Name：The Longemont Shanghai

Contact email：shanghai@longemonthotels.com

Contact Address：No. 1116, Yan'an West Road, Shanghai, China

3. Collected Personal Information

We adhere to the principle of minimal necessity and collect only the following personal information：

• Personal Information: Name, Email, Phone Number, etc
• Device information: : IP address, browser type, operating system
• Data used: Page visits, click behavior, dwell time
• Payment Information: Credit Card, Payment Account Details

4. Handling Sensitive Personal Information

For sensitive personal information (such as biometric data, medical health, financial accounts, etc.), we will:

• Obtain your separate consent
• Inform the necessity of processing and its impact on personal rights
• Adopt strict protective measures

5. Your Rights

According to PIPL, you are entitled to the following rights:

• Right to be Informed：Understand the Rules for Personal Information Processing
• Right to Decide： Consent or Refusal to Process Personal Information
• Right to Inquiry：Access and Copy Your Personal Information
• Right to Correction：Rectification of Inaccurate Personal Information
• Right to erasure：request the deletion of personal information
• Right to Explanation：The right to request an explanation of the rules governing the processing of personal information

For inquiries regarding the exercise of rights, please contact: shanghai@longemonthotels.com

6. Storage of Personal Information

• Storage location：Within China
• Storage period： the minimum time necessary to achieve the purpose of processing
• Expiration Handling：After the retention period, we will delete or anonymize the data

7. Cross-border Transfer of Personal Information

If you need to provide your personal information to overseas entities, we will:

• Information to be provided to the overseas recipient
• Obtain your separate consent
• passing the security assessment organized by the national cyberspace administration
• Standard contract terms are adopted to safeguard your rights

8. Personal Information Security

We implement the following security measures：

• Data encryption transmission and storage
• Access control and permission management
• Regular security assessments and audits
• Establish an emergency response mechanism

9. Emergency Response Plan for Personal Information Leakage

In the event of a personal information breach, we will：

• Take remedial measures immediately
• Promptly notify the affected individuals
• Report to the relevant competent authority

10. Cookie Policy

Essential Cookies

Essential for basic website functionality Example: session_id, csrf_token, auth_token

Analyze Cookies

Help us understand how users utilize the website. Example: _ga, _gid, _gat

Preference Cookie

Remember the user's preference settings, such as language, theme, and timezone

11. Automated Decision-Making

If automated decision-making is used, we will ensure the transparency and fairness of the decisions and provide options unaffected by automated decision-making.

12. Protection of Minors' Information

For the personal information of minors under the age of 14, we will:

• Obtain the consent of their guardian
• Establish specialized rules for personal information processing

13. Policy Change

If we modify this policy, we will notify you via a website announcement or other means.

Version History