—Guarding Data with Serenity, Honoring Craftsmanship through Nature
I. Core Principles
1. Data Minimalism
Adhering to the Taoist principle of “Fewer Desires, Greater Fulfillment”, we collect only essential information:
- Custom orders (e.g., bracelets/feng shui ornaments): Name, address, payment tokens (for logistics).
- Cultural workshop registration: WeChat ID (optional), timezone (for session reminders).
As the Tao Te Ching states: “Knowing contentment avoids disgrace”—we reject excessive data collection.
2. Religious Neutrality
- All products are cultural artifacts (e.g., handwoven cords, brass Tai Chi paperweights), not religious instruments.
- Feng shui designs draw from traditional Chinese architectural aesthetics (e.g., Song Dynasty lattice patterns of Lao Jun Mountain), devoid of ritualistic functions.
II. Information Collected (Business Necessity Only)
| Scenario | Data Type | Purpose | Retention Period |
|---|---|---|---|
| Order payment | Name, address, PayPal token | Shipping & customs clearance | 7 years (tax compliance) |
| Custom engraving service | Handwritten signature scan | Artisan craftsmanship | Deleted 30 days post-order |
| Material inquiries | Email, IP address (fraud prevention) | Customer service optimization | 3 years |
Sensitive Data Clause:
- Birth details (only if voluntarily provided for feng shui customization):
🔒 AES-256 encrypted storage, auto-deleted in 30 days by default, never used for algorithmic profiling.
III. Your Rights: “My Destiny Resides Within Me”
You retain full data sovereignty under EU GDPR and US CCPA:
- Right to Erasure: Click the 「Return to Void」 button → Immediate deletion of non-essential data (order records retained per tax laws).
- Opt-out of Metaphysical Tags: Email dao@rhytao.com to disable “seasonal wellness” alerts → Processed in 72 hours (aligned with “acting when the time is right”).
- Reject Automated Decisions: Toggle off “Five Elements Color Recommendation” in Account Settings → Revert to non-personalized service.
IV. Data Security: Harmony of Yin and Yang
- Technical Measures:
- Transmission: TLS 1.3 + HSTS (“heaven’s net is vast—it misses nothing but leaves nothing undone”).
- Storage: Payment data isolated in the 「Mystic Garden」 system (zero human access).
- Ecological Commitment:
One bamboo planted in Lao Jun Mountain’s carbon sink forest (34.47°N, 111.5°E) per item sold—embodying “Unity of Heaven and Humanity”.
V. Formal Declaration: Culture ≠ Religion
Per Article 36 of the Constitution of the People’s Republic of China:
“The state protects normal religious activities. No one may use religion to disrupt social order.”
RHYTAO solemnly affirms:
- Product Essence:
- Sandalwood bracelets → Showcasing Song Dynasty mortise-tenon craftsmanship, not祈福 tools.
- Brass Tai Chi mirrors → Replicating Lao Jun Mountain window tracery, not mystical talismans.
- Content Boundaries:
- Documentary The Artisan Keepers features ceramic mending & bamboo weaving techniques, not religious rites.
- “Winter Solstice Retreat” copy refers to lifestyle rhythms aligned with nature, not spiritual practice.
VI. Contact & Emergency Response
Data Guardian: GMing (Gong Ming)
- Email: GMtao@rhytao.com (GMT+8 9:00-17:00)
- Emergencies: Email subject “Urgent as the Cosmic Decree” → Triggers 24/7 “Incense Response Protocol” (physical network isolation).
Appendix: Legal Precedence Hierarchy
If clauses conflict with local laws, enforce in this order:
- Taoist Cultural Declaration
- EU GDPR
- US CCPA
- China PIPL
“Flow like water within compliance; stand firm as a mountain on core principles.”
Key Compliance Enhancements:
GDPR erasure right visualized as 「Return to Void」 (lowering cognitive barriers).
Religious Sensitivity:
Replaced “talismans/meditation” with “Song-era patterns” & “seasonal living aesthetics”.
Defined birth details as cultural symbols (auto-deletion in 30 days).
Data Minimization Proof:
Retention periods cite legal bases (e.g., 7-year tax compliance).
「Mystic Garden」 encryption system complies with GDPR Article 25 (data protection by design).
Rights Implementation:
“Five Elements Toggle” addresses CCPA’s opt-out of profiling.