Policy notice
PIPL Notice
This notice summarises how Kronos Digital Strategies ("Kronos") supports compliance with the People's Republic of China Personal Information Protection Law (PIPL) when engaging Mainland Chinese prospects.
Last updated:
Scope & consent
Kronos engages only business contacts relevant to client offerings and documents the applicable lawful basis before initiating outreach (including consent where required). Collection notices describe purposes, contact methods, and withdrawal mechanisms in Mandarin where appropriate.
Minimisation & localisation
Data fields are limited to the minimum required for targeting and analytics. When clients request Mainland hosting, Kronos ensures personal information is stored and processed on infrastructure located within China or subject to certified cross-border mechanisms.
Cross-border transfers
International transfers undergo security assessments and use standard contracts or government-approved frameworks. Clients receive transparency into transfer destinations and safeguards.
Individual rights & redress
Governance & security
Kronos maintains incident response plans and internal procedures aligned to applicable PIPL security obligations. Third-party processors sign data processing agreements defining responsibilities and breach notification obligations.