1. Scope and processing principles
This policy explains how 5AIBA BIM and the operator identified on this page process personal information for accounts, licensing, membership transactions and support. We process information lawfully, fairly and only as necessary. Third-party software and payment providers have their own privacy notices.
Depending on the context, processing is based on performing the service contract, meeting legal obligations, your consent or another applicable lawful basis. You may refuse optional processing without affecting unrelated basic services. Accepting this policy at registration does not replace separate consent where it is required.
2. Information, purposes and necessity
Accounts and verification: registration uses a username, email and password; the server stores a password hash for authentication. Depending on the sign-in, recovery or profile features used, we may also process a phone number, name, verification code and verification records you provide. Required details establish or verify your account; the relevant function cannot be completed without them.
Memberships and payments: we process account identifiers, purchased disciplines and periods, amounts, order numbers, payment channels, transaction references, payment or refund status and access validity for payment reconciliation, activation, support and financial records. Enter payment passwords and payment verification codes only on the relevant provider’s trusted page, never in site feedback.
Plugin sessions and security: we process account permissions, device session identifiers, sign-in times, IP addresses, client or browser information and necessary access, activity and error records to verify sessions, prevent account misuse and diagnose problems. A device session identifier manages sessions; it does not itself grant access to local project files.
Feedback: we process the contact name, category, subject, message, source page, associated account and replies to respond to your request. Avoid unrelated personal information, trade secrets or complete project files. Obtain any necessary permission and redact details before sharing a relevant excerpt.
Reminders and language: we store your reminder preference and language choice. You can turn expiry reminders off in your account. If email delivery is available and reminders are enabled, service expiry notices may be sent to your account email. Automatic language selection uses browser language preferences, without location permission.
3. Cookies and browser storage
The site uses local storage, session storage and necessary cookies for session credentials and account summaries, language preferences, orders awaiting verification and required security state. Language preferences can be kept for one year. Sign-in state is affected by credential expiry, sign-out or clearing local data. These mechanisms support the service and do not imply consent to third-party advertising tracking.
You can clear or restrict this storage in your browser settings. You may then need to sign in again, choose a language or locate an outstanding order manually. Clearing browser data does not automatically delete your server-side account or legally required transaction records. Sign out after using a shared device.
4. Service providers and third parties
To complete your chosen payment, we send necessary order numbers, amounts and product or discipline descriptions to the payment service used for the order and receive payment and refund results. The system supports direct Alipay and EZFP channels; enabled providers and methods are shown at checkout. Read the provider’s rules and privacy notice before paying.
Hosting, backups and email delivery require infrastructure or email providers. These providers should process information only as necessary under agreed instructions, with confidentiality and security obligations. We do not provide personal information to unrelated third parties except where legally required, necessary for the contract or supported by appropriate consent. We do not sell personal information.
5. Retention, location and security
Information is stored on servers and backups supporting the site and retained only as long as necessary for its purpose. After account services end, transaction, financial, security or dispute records required by law remain until the relevant retention period expires. Other information is deleted or anonymized as applicable. Backups are cleared according to their cycle and restricted to recovery and security purposes while retained.
If personal information is provided outside China, we will disclose the overseas recipient, purposes, information categories and rights procedures, and complete applicable transfer requirements and any necessary separate consent. This policy is not a blanket authorization for overseas transfers. You may use Issue feedback to ask about storage and recipients relevant to your information.
We use HTTPS, password hashing, access controls and backups to protect information, and restrict administrative access. If a personal information security incident occurs, we will take remedial action and notify affected users and authorities as required by law. No internet service can guarantee absolute security; please also protect your account and working materials.
6. Access, correction, deletion and account closure
Your account page shows your profile, discipline validity and feedback, with available profile and reminder settings. Use Issue feedback on this page to request access to or a copy of other personal information, correction, withdrawal of consent, deletion, account closure or an explanation of processing. We will verify only necessary identity details and respond within applicable legal time limits.
Account closure and rights requests involving server data are currently reviewed manually; sending feedback does not complete them automatically. We will review outstanding orders, remaining access and refund arrangements with you before closure. Closure or withdrawal does not invalidate earlier lawful processing or remove records that must be retained by law. If a request cannot be fulfilled, we will explain why and identify available remedies.
7. Children and minors
The service is primarily for users with professional needs. Children under 14 should not submit personal information themselves. A guardian should contact us first for any required specific notice and consent. Guardians may request verification and deletion of information submitted without consent. General acceptance of this policy does not replace required guardian consent.
8. Contact and policy updates
For privacy requests, use Issue feedback on this page with “Personal information” or “Account closure” in the subject and include a contact email. Do not provide passwords or verification codes. Signed-in users can read replies in their account. You can also submit feedback while signed out; include contact details for verification and a response.
Policy updates are dated on this page. Significant changes to processing purposes, methods or categories will be prominently disclosed. Where renewed consent is legally required, the related processing will begin only after that consent is obtained. You may also make a lawful privacy complaint or seek judicial relief.