Personal Information and Privacy Policy

This website is provided by Gan & Lee Pharmaceuticals . (hereinafter referred to as "Gan & Lee Pharmaceuticals" or "we"). Given the nature of the Internet, this website will inevitably have direct or indirect interactions with you. Therefore, we hereby explain how we collect, use, share, store, and protect your personal information, and how you can manage your personal information during your interaction with this website, in compliance with all applicable data protection regulations. Please be sure to read this carefully. You must fully understand and agree to these terms. Using our services means that you fully and unreservedly accept these terms. You confirm that you have read the following information and authorize us to process your personal information in accordance with legal provisions and these terms.

This Privacy Policy will help you understand the following:

I. How We Collect and Use Your Information

II. How We Use Cookies and Similar Technologies

III. How We Share and Disclose Your Information

IV. How We Protect Your Information

V. How We Store Your Information

VI. Your Rights

Ⅶ. How We Handle Information of Minors

Ⅷ. How the Policy is Updated

Ⅸ. How to Contact Us

Ⅹ. Governing Law and Dispute Resolution

I. How We Collect and Use Your Information

1. We collect personal information following the principle of minimum necessity. When you use this website, with your consent and confirmation, this website will ask you to provide some personal data through forms and other means. This personal data includes:

Name;

Phone number;

Email address;

Country/region of residence;

Address;

Profession (for example, if you are a healthcare professional who wants to learn about our products);

Other personal information you choose to provide to us, such as website messages.

In addition to the aforementioned information, when you proactively consult with or provide feedback to our customer service team, we will collect the communication content and contact information you provide to us to handle your inquiries, answer your questions, and follow up on our services. When you voluntarily participate in our questionnaire surveys, we will collect the questionnaire responses you submit for user research and to improve our products and services.

Note: If you proactively submit sensitive personal information related to medical health during customer service communications or questionnaire responses, we will only use this information to process your current request and will not use it for any other purposes than those stated in these terms.

2. When you use this website, with your consent and confirmation, this website will use your personal information. This personal information includes:

Your IP address: We will collect and identify your IP address. If your IP address is identified as being located in mainland China (specifically referring to areas other than Hong Kong and Macau Special Administrative Regions and Taiwan), you will be redirected to the Gan & Lee CN site (i.e., this site): www.ganlee.com.cn; if your IP address is identified as being located outside of mainland China, you will remain on the Gan & Lee Global site: www.ganlee.com.

3. The website may only process your collected personal data when any one of the following conditions applies:

Your personal consent has been obtained;

To comply with legal requirements, fulfill obligations, cooperate with law enforcement, or for other legitimate reasons;

It is necessary to respond to public health emergencies or to protect the life, health, and property of natural persons in an emergency;

To process personal information that you have consented to and confirmed within a reasonable scope as stipulated in these terms;

Other circumstances stipulated by laws and administrative regulations.

Third-party companies may collect your behavior or data when you browse this website. The data collection and utilization behavior of third-party companies should comply with relevant national laws and regulations, as well as the third party's own provisions on user privacy and data protection. However, this website's privacy statement and site statement do not constitute any commitment to the content, authenticity, or personal information protection systems of such third-party websites. We should not bear any legal liability for any adverse consequences to your person or property resulting from visiting such websites.

II. How We Use Cookies and Similar Technologies

Cookies are a type of technology. When a user uses this website, which is equipped with Cookies, the website's server will automatically send Cookies to your browser and store them on your computer's hard drive. The Cookies are responsible for recording your future activities on this website, personal data, browsing habits, consumption habits, and even credit records.

By using Cookie technology, this website can provide you with more thoughtful and personalized services. This website will use Cookies to track your browsing habits and other preferences in order to provide you with information you are interested in or to store your password, so you do not have to re-enter it every time you visit this website.

III. How We Share and Legally Disclose Your Information

1. Sharing: The content we share, the reasons for sharing, and the protective measures we implement depend on the identity of the third party and their personal information processing terms. This website will not provide sensitive personal information related to medical health that you submit, such as your name, contact information, diseases, and treatments, to such third parties, and will certainly not sell it. We entrust our partner Baidu to collect statistics on your IP address for background traffic analysis. Please note that this type of IP address can be traced to a specific individual.

Equipment Information

For example, the end user's hardware model, operating system version, equipment configuration, unique device identifier, international mobile equipment identity (IMEI), SIM international mobile subscriber identity‌ (IMSI), iOS identifier for advertising‌ (IDFA), Android open anonymous device identifier‌ (OAID), Android ID, device MAC address), device location information (location information obtained via GPS, Bluetooth, or Wi-Fi signals), and device status information (such as the list of installed device applications)

Log Information

Requests sent by the end user when accessing Baidu Statistics, such as hardware equipment information, the version of the terminal device's operating system, and the date, time, and duration of the end user's access to the service.

Location Information

The end user's device location information

Application List Information

The list of applications on the end user's device.

Other Information

The statistical analysis service will collect the following information based on different statistical dimensions: Software Development Kit (SDK)/Application Programming Interface (API)/JavaScript (JS) code version, browser type, internet service provider (ISP), IP address, timestamp, application identifier, application version, application distribution channel, device display screen height/width, screen resolution, terminal manufacturer, time zone, and network status (e.g., Wi-Fi), and telecommunications operator.

To ensure the implementation of relevant functions of this website and the safe and stable operation of the application, we may integrate SDKs provided by third parties to achieve related purposes. The specific third-party SDKs integrated are listed as follows:

We have signed a personal information entrustment processing agreement with the third party, stipulating the processing purpose, duration, and security obligations, prohibiting the entrusted party from using your information beyond the scope or disclosing it externally, and we supervise its data processing activities.

You can refuse related statistical tracking through your browser's Cookie settings; disabling it will only affect the website's statistical functions and not the basic browsing of the website.

2. Disclosure in accordance with the law to cooperate with competent authorities: When administrative authorities or judicial authorities issue official legal documents to this website/Gan & Lee Pharmaceuticals in accordance with their legal authority and legal procedures, requiring this website to disclose your personal information, this website will cooperate and provide it in accordance with the laws. To the extent permitted by law, for the information provided by us in strict accordance with legal procedures to fulfill our assistance obligations, Gan & Lee Pharmaceuticals should not bear any responsibility.

In addition, this website provides services such as a comment section/message board. In the comment section/message board, the content you actively post will become public information accessible to others. Therefore, we remind you and ask you to carefully consider whether it is necessary to disclose your personal information in the aforementioned areas. Please do not disclose sensitive personal information related to medical health, such as your name, contact information, medical condition, or medical history, in the aforementioned areas. If you inadvertently post personal information in a comment or message, you can contact us to request that the relevant content be processed.

IV. How We Protect Your Information

We have implemented corresponding technical and management systems and taken security measures to protect your personal information and prevent unauthorized access, public disclosure, use, alteration, damage, or loss. However, please understand that an absolutely secure information environment cannot be achieved on the Internet, and we will continuously improve our security protection capabilities.

V. How We Store Your Information

1. Storage Location

Personal information collected and generated during our operations within the People's Republic of China will be stored within the territory of China. If future business operations require us to provide your personal information to entities outside the territory, we will strictly comply with the "Personal Information Protection Law" and other laws and regulations. We will only implement the cross-border transfer after completing the statutory procedures (including security assessments, personal information protection certification, or signing standard contracts for cross-border personal information transfer), and only in the following circumstances:

We have obtained your separate consent, and other conditions stipulated in personal information protection regulations are met. If the transferred content includes sensitive personal information such as medical health data, we will also explain to you the necessity of the transfer and its impact on your personal rights and interests;

It is necessary to provide the information overseas to fulfill statutory duties or obligations as explicitly stipulated by laws and administrative regulations. When the aforementioned cross-border transfer occurs, we will inform you of the identity of the overseas recipient, the purpose of processing, the types of personal information being transferred, and the ways you can exercise your personal information rights with the overseas recipient.

2. Storage Period

We will take reasonable and feasible measures to avoid collecting and processing irrelevant personal information. We will only retain your personal information for the minimum period necessary to achieve the purposes described in this policy, following the principle of minimum necessity, unless there are mandatory retention requirements stipulated by laws or administrative regulations. Even if you separately agree for us to continue processing, we will still adhere to the principle of minimum necessity.

After the storage period expires, we will delete or anonymize your personal information. If it is not possible to delete such information due to legal requirements, we will cease all processing other than storage and security protection. For medical-related information such as customer service inquiries and health consultations, we will adhere to the retention requirements in accordance with applicable pharmaceutical regulatory provisions.

VI. Your Rights

According to the "Personal Information Protection Law of the People's Republic of China", you have the following rights regarding your personal information:

To access and copy your personal information;

To request the supplementation or correction of inaccurate or incomplete personal information;

To request the deletion of your personal information under legally stipulated circumstances;

To withdraw your consent and request the restriction of the processing of your personal information;

To request the transfer of your personal information under legally stipulated conditions;

Other rights stipulated by laws and administrative regulations.

You can submit a request to exercise the above rights by [filling in the email / customer service contact information]. We will first verify your identity and respond to your request within the legally prescribed time limit. For information that must be retained according to laws and administrative regulations (including records related to pharmacovigilance, adverse reactions, etc.), we have the right not to delete it or to only stop processing other than storage and security protection, in accordance with regulatory requirements. If we are unable to support your request, we will explain the reasons to you. 

VII. How We Handle Information of Minors

The services of this website are not intended for minors, and all content and services provided by this website are designed for adults aged 18 and above. General web browsing is not restricted for minors. We do not actively collect personal information from minors. All individuals requesting personalized services from us must be at least 18 years of age.

Individuals under the age of 18 who request any personalized services must provide a consent form signed by their parent or guardian in advance, so that we can explain to them how we collect, use, or disclose their child's personal data. Parents can also refuse our use of their child's personal data and prevent their child from participating in certain feature pages that require personal data. If we discover that any person under the age of 18 has provided us with their personal data, we will only use this data to contact this person directly and inform them of our policy: that the consent of their parent or guardian must be obtained before we collect their personal data. If we identify that a minor under the age of 14 has submitted personal information to us without the explicit consent of a guardian, we will take reasonable measures to delete such information and will not retain or use it. If a minor's guardian discovers that the person under their guardianship has submitted personal information to us without permission, they can contact us through the channels specified in this policy to request access to and deletion of the corresponding information.

We will only process the personal information of minors under the age of 14 after obtaining the explicit consent of a guardian and establishing special rules for processing personal information. Without the guardian's consent, we will not use, share, or disclose such personal information to third parties. The guardian has the right to withdraw consent at any time. After withdrawal, we will promptly delete the minor's personal information, except where retention is required by laws and administrative regulations.

Ⅷ. How the Policy is Updated

To provide you with a better website browsing experience, we may revise this Privacy Policy. However, without your explicit consent, we will not diminish the rights you are entitled to under laws, regulations, and this policy. After the policy is updated, we will update the version number, update date, and effective date of the policy document, and publish the updated version on this website. For general adjustments, we will provide a notification through a website announcement. Please check the "Privacy Policy" in the navigation bar at the bottom of this website for the latest version. 2. For major changes, we will also provide a more prominent notice. We will explain the specific changes to the Privacy Policy through methods including, but not limited to, email notifications or special prompts on the browsing page.

The major changes referred to in this Privacy Policy include, but are not limited to:

Substantial changes in our information processing model. Such as adjustments to the purpose of processing personal information, the types of personal information processed, and the way personal information is used;

Major changes in the company's ownership structure, organizational structure, etc. Such as changes in the responsible entity for personal information processing due to business adjustments, mergers and acquisitions, etc.;

Changes in the main recipients of shared, transferred, or publicly disclosed personal information;

Major changes in the content and methods of exercising your rights related to personal information;

When there are changes in our responsible department for personal information security, contact methods, and complaint channels;

When a personal information security impact assessment report indicates a high risk.

Special Note: If the above major changes involve changes to the purpose of processing, the method of processing, or the types of personal information collected, we will re-obtain your explicit consent in accordance with the law. For non-substantive adjustments that do not change the rules for processing personal information, we will only provide notification.

We will also archive previous versions of this Privacy Policy for your review.

To ensure you can receive notifications in a timely manner, we recommend that you inform us promptly when your contact information is updated. For general policy revisions that do not change the rules for processing personal information, your continued access to and use of this website after the policy takes effect will be deemed as your acknowledgement and acceptance of the revised policy. If a major change occurs that requires re-obtaining your explicit consent, we will not infer your consent from your continued browsing of the website. Such changes will only take effect for you after you have actively confirmed them. We encourage you to review this policy every time you browse this website. The latest version can be viewed through the "Privacy Policy" link in the navigation bar at the bottom of the website.

Ⅸ. How to Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy or matters related to your personal information, or if you wish to file a complaint or report, please contact us through the following methods:

Personal Information Protection Officer Email: media@ganlee.com

Tel: 010-56965000

Address: No. 8, Nanfeng West 1st Street, Huoxian Town, Tongzhou District, Beijing

For comments you submit regarding this site's Privacy Policy, we will respond to your request within 30 working days. If you are not satisfied with our response, especially if our personal information processing has harmed your legitimate rights and interests, you can also file a complaint or report with regulatory authorities such as the Cyberspace Administration, telecommunications, public security, and industry and commerce departments.

Ⅹ. Governing Law and Dispute Resolution

The governing law of this Privacy Policy is the law of the People's Republic of China. Any disputes related to this Personal Information and Privacy Policy should be resolved through litigation in the people's court with jurisdiction in the place where the Company is registered.

Note: The update date for this version of the policy is September 1, 2026.