Updated on: September 17, 2025      Effective Date: September 24, 2025

I. Introduction

Welcome to the official website of the Primecare Research Lab (hereinafter referred to as "we" or "us"). With full recognition of and respect for your personal information, we are committed to handling it in strict accordance with legal and regulatory requirements as well as the principles of legality, legitimacy, and necessity. We implement practical and feasible security technologies and management measures to ensure the security of your information.

This Privacy Policy aims to help you understand how we collect, use, store and protect your personal information when you use our website customer consultation services, submit information or interact with us, as well as how you can exercise your related rights. Before you fill in information or use our services, please read this policy carefully and ensure you understand all its contents. By clicking "Submit" or continuing to use our services, you indicate that you understand and agree to all terms of this policy.

II. How We Collect and Use Your Information

We collect the following information only when you voluntarily provide it, for purposes such as providing you with customer consultation services, follow-up contact and personalized recommendations:

(1) Customer Consultation Information

When you fill out a customer inquiry form on our website, we collect the following information:

1. Title (e.g., Ms., Mr.)
2. Name
3. Country/Region
4. Date of Birth
5. Contact Phone Number
6. Email Address

We collect such information to:

• Provide you with introductions to Primecare Research Lab's related services;
• Contact you to confirm service needs, schedule visits, or conduct follow-ups;
• Match you with the most suitable service consultant or branch based on your age group and location;
• Send you information about relevant events or promotions with your consent.

(2) Creating a Primecare Research Lab Customer Profile

To ensure a continuous warmer and better-tailored service experience for you, we will create a "Saint Bella Customer Profile" (non-registered account-based) based on the information you submit.

With such a profile created, you will enjoy the following services:

• Personalized Service Recommendations: We may recommend relevant service plans, care programs, branch events, etc., based on the region, age, and consultation content you provided.
• Dedicated Customer Advisor Service: We will assign you a dedicated service personnel or advisor who can review your past consultation history during subsequent communications to provide advice more closely aligned with your actual situation.
• Interactive Communication: When you interact with us via the website, phone, WeChat or mini-programs, etc., our advisors can access your profile to provide you with follow-up service.
• Event Reminders and Customized Content Push: With your prior consent, we may use your contact information to notify you about new services, promotional activities from Saint Bella/Little Bella, or invitations to experience days.

You understand and agree that:

• The information provided should be true and accurate;
• We will use this information for service purposes and store it in your customer profile;
• You can request us to modify or delete this profile at any time (please refer to the "Your Rights" section for details).

(3) Additional Services and Technical Explanations

To improve the usability and experience of our web services, we may use necessary cookies and similar technologies. These technologies do not require the activation of permissions on your device (such as location, contacts, etc.) but may record some necessary information through your browser to ensure service functionality.

1.Use of Cookies and Similar Technologies

Cookies and similar device identification technologies are commonly used on the internet. When you visit the Saint Bella/Little Bella official website, we may send one or more cookies or anonymous identifiers (hereinafter collectively referred to as "cookies") to your device to collect, identify, and store information related to your visit to our website and the use of its services.

Our purposes for using cookie technology include but are not limited to:

• Ensuring the normal operation and security of the website, e.g., preventing malicious attacks;
• Improving access efficiency, such as recognizing information you have already filled in to avoid duplicate entries;
• Recording pages, activities, and consultation content you are interested in for the analysis and optimization of the page structure and content layout;
• Recommending service content you might be interested in or pushing relevant event information, with your authorization.

We promise not to use cookies for purposes other than those described in this privacy policy.

2. Cookie Management and Your Choices

You can manage or delete stored cookies through your browser's settings, including:

• Clearing your browser cache;
• Disabling third-party cookies;
• Setting a "Do Not Track" preference;
• Blocking certain websites from setting cookies.

Please note: Disabling or restricting cookies may prevent some features of this website from functioning properly, resulting in the failure to successfully submit inquiry forms or slow page response, etc.

If you need to understand how to manage your cookie settings, please refer to the relevant help documentation for the browser you are using (e.g., Chrome, Firefox, Safari, Edge, etc.).

III. Information Storage and Protection

(1) Storage Duration

We retain your personal information only for the minimum period necessary to achieve the purposes described in this privacy policy, unless otherwise required by laws and regulations (such as mandatory retention requirements for administrative, financial, tax, or compliance reasons).

Our criteria for determining information retention periods include but are not limited to:

1. Whether the purposes of providing services, appointments, follow-ups, etc., to you have been completed;
2. Whether retention is necessary to handle user inquiries, complaints, or dispute resolution;
3. Whether retention is necessary to ensure service quality and security;
4. Whether there are clear legal, regulatory requirements, or regulatory guidance;
5. Whether you have separately authorized a longer retention period.

Once the above purposes are achieved or the retention period expires, we will delete or anonymize the relevant information in accordance with the law to protect your privacy and security.

(2) Storage Location

Personal information collected and generated within the People's Republic of China will be stored on servers located within China in accordance with legal requirements. Currently, we will not actively transfer your personal information overseas.

If cross-border transfer becomes necessary due to specific business requirements (in case of cooperation with international rehabilitation institutions or overseas data processing service providers, etc.), we will, in accordance with laws and regulations such as the "Personal Information Protection Law of the People's Republic of China":

• Fulfill legal obligations such as conducting security assessments, signing standard contracts, or obtaining certifications;
• Clearly inform you of the recipient's information, purpose of use, storage location, and your exercisable rights before the transfer;
• And obtain your separate consent in accordance with the law.

If cross-border transfer scenarios arise in the future, we will update this policy based on the latest compliance requirements and obtain your authorization again.

(3) Storage Security

We have established a stringent data security protection system, including but not limited to the following measures:

1. Technical Protection Measures:

• Using HTTPS protocol encryption to secure information transmission;
• Enabling TLS/SSL for the website to prevent man-in-the-middle attacks;
• Using access control, firewalls, intrusion detection, and other security technologies to prevent unauthorized access;
• Regularly backing up data and conducting vulnerability scanning and remediation.

2.Organizational and Management Measures:

• We have designated personnel responsible for information protection and established security management systems;
• Been providing information protection and compliance training for employees;
• Established strict access control and audit mechanisms.

3. Security Incident Emergency Response:

In the event of a data breach, alteration, loss, or other security incident, we will:

• Activate emergency plans and assess the impact of the incident;
• Notify you promptly via email, phone call, SMS, or website announcement within the time-frame stipulated by law;
• Report to the relevant competent authorities and cooperate with investigations;
• Provide necessary remedial measures and risk warnings.

(4) Suggestions for Customer Account Security

If you submit information or establish a customer profile through this website, we recommend that you:

• Safeguard your own contact information as well as verification methods including the email;
• Contact us immediately through official channels if you discover any information leakage or misuse;
• Exercise caution with unfamiliar calls, messages, or links to avoid being deceived.

IV. Partners Involved in Data Processing, Transfers, and Public Disclosure

(1) Partners Involved in Data Processing

1. Basic Principles

In the course of our business cooperation with partners, we will adhere to the following principles of data processing:

• Legitimacy, Justification, and Minimization Principle: We will process your personal information only for lawful, justified, and specific purposes, and within the minimum scope necessary.
• User Right to Know and Right to Decide Principle: We will safeguard your right to know about and make decisions regarding the processing of your personal information.
• Security Assurance Priority Principle: We will assess the data protection capabilities of our partners and, through contractual agreements, stipulate their security obligations, usage restrictions, and other requirements to prevent the misuse and disclosure of your personal information.

2.Scope of Partners

Our partners in the following functions or scenarios may include:

• Technical service providers for website hosting, data storage and form system, etc.
• External communication service providers (e.g., for SMS, email) for customer service and appointment reminders, etc.
• Training institutions, postpartum rehabilitation institutions and maternal &child health service organizations in collaboration, or other related service providers.
• Recipients of information as required by laws and regulations (e.g., regulatory or judicial authorities).

3. Entrusted Processing

We may engage authorized service providers to process necessary personal information on our behalf so as to provide:

• Website operation support and information system maintenance;
• Collection and preliminary organization of form information;
• Preliminary screening and archiving of customer information;
• SMS and email notification services, etc.

These partners will only access your information to the extent necessary to perform their contractual duties and are not permitted to use it for any purpose beyond those stated in this Policy.

4. Joint Processing

If we jointly provide services or activities with partner training institutions, postpartum rehabilitation institutions, or branch service providers, it may be necessary to jointly process certain customer information (such as your title, contact information, needs, preferences, etc.). To the extent permitted by law, we will enter into agreements with such partners to clarify the boundaries of processing and security responsibilities, and we will fulfill our information protection obligations in accordance with the law.

5. Examples of Cooperation Scenarios

(1) Partner Service Recommendations

To enhance service quality and meet your further needs for services such as postpartum care or rehabilitation, we may provide your basic consultation information (such as title, region, contact number, service interest) to partner training institutions, rehabilitation institutions, or maternal-infant service providers so that they can provide you with personalized service introductions. We will ensure that such partners use your information only within the authorized scope and bear confidentiality obligations.

(2) Advertising Analytics Services

We may entrust third parties to perform tasks such as website traffic analysis or event promotion effectiveness analysis. These parties will not identify you personally during their processing.

(3) Technology and Platform Support Services

To ensure website security and proper functionality, our technical service providers may collect de-identified device information through cookies or log systems, solely for purposes such as fault diagnosis and performance surveillance.

(2) Transfer of Personal Information

If, due to corporate mergers, divisions, liquidation, asset transfers, or other transactions, we need to transfer your personal information to a third party, we will inform you beforehand of the transferee's name, contact details, processing purpose and methods, and will require the transferee to continue its restriction by the terms of this Privacy Policy. If the transferee intends to change the original processing purpose or methods, we will obtain your consent again.

(3) Public Disclosure

We generally will not publicly disclose your personal information. However, we may disclose it based on necessity in the following circumstances:

1. When we have obtained your explicit consent and authorization.
2. Where disclosure is mandatory due to legal, regulatory, or supervisory requirements.
3. If you have seriously violated laws, regulations, or platform rules, or to protect the safety of others or public safety, we may disclose relevant information as required by law.

(4) Cessation of Operations

Should we cease operations of the Primecare Research Lab platform, we will promptly stop collecting personal information, delete the information we have stored, or carry out anonymization in accordance with the law. We will notify you through a website announcement or via the contact information you have provided.

(5) Circumstances Where Consent is Exempted by Law

According to laws and regulations such as the Personal Information Protection Law of the People's Republic of China, we may process your personal information without obtaining your prior consent in the following circumstances:

1. Where it is necessary for the conclusion or performance of a contract to which you are a party.
2. Where it is necessary for the performance of statutory duties or obligations.
3. Where it is necessary to respond to public health emergencies or to protect the life, health, and property safety of individuals in an emergency.
4. Where the processing is carried out within a reasonable scope for purposes such as news reporting or public opinion supervision for the sake of the public interest.
5. Where the information processed is personal information that you have made public yourself or that has been lawfully made public, within a reasonable scope.
6. Other circumstances stipulated by laws and administrative regulations.

V. Your Rights

You have full control over your personal information. In accordance with relevant laws and regulations, we will protect the following rights you have regarding your personal information and will handle your requests appropriately, provided they meet legal requirements:

(1) Access, Correction, and Supplementation

You have the right to access, correct, and supplement the personal information we hold about you.

If the information you provided during your consultation is incorrect or needs updating, you can contact us to exercise this right.

If you create an account through our system in the future, we will provide a web-based login portal for you to manage and update your information independently.

(2) Copying

You have the right to request a copy of the personal information we hold about you. You can:

• Submit a request by emailing our privacy contact address.
• Or contact the customer service of the Primecare Research Lab to process your request.

(3) Deletion

You may request us to delete the personal information you provided in the following circumstances:

1. Our processing of your information violates laws or regulations.
2. We collected or used your information without obtaining your consent.
3. We have fulfilled the processing purpose, or it can no longer be achieved.
4. You actively withdraw your authorization, or we terminate the product or service.
5. The relevant information has exceeded a reasonable retention period or is no longer necessary.

If you request deletion, we will process it as soon as possible after verifying your identity and will, to the extent possible, notify our partners who have received your information to delete the corresponding data (unless otherwise stipulated by law).

Please note that due to the security requirements of our backup systems, some deleted information may be retained in backups for a short period, but it will be stored separately and will no longer be used.

(4) Withdrawing Consent or Adjusting the Scope of Authorization

You can contact us at any time to withdraw your authorization for the collection or use of specific information (for example, to stop receiving service recommendations or event invitations).

Please note that withdrawing consent will not affect processing activities that were carried out based on your consent prior to the withdrawal, but some service features may become restricted as a result.

(5) Canceling Your Personal Profile (if applicable)

If we have created a customer profile or associated account for you, you can apply for its cancellation in the following ways:

• Contact customer service to request account cancellation.
• Or send an email to our privacy contact address, specifying the identifier of the account or personal profile you wish to cancel.

After cancellation, we will no longer provide you with related services and will delete or anonymize all your information as required by law.

(6) Restricting Automated Decision-Making

If we use algorithm-based automated decision-making mechanisms in certain services (e.g., information recommendations) and such decisions have a significant impact on your lawful rights and interests, you have the right to request an explanation or to object to decisions based solely on automated processing. You can contact us via customer service or email.

(7) Response Mechanism

To ensure information security, when you submit a rights request, we may need to verify your identity (e.g., by confirming your phone number or email, or requesting relevant records). We will respond and process your request within 15 working days.

We reserve the right to reasonably refuse requests that are repetitive, unfounded, excessive, or infringe upon the lawful rights and interests of others.

To exercise the rights mentioned above, you can contact us via:

• Email: [privacy@primecarenursing.com]
• Phone: [400-123-4567]
• Office address: First Floor, Building 6, Phase VI, Information Port, No. 666 Jianshe Second Road, Xiaoshan District, Hangzhou City, Zhejiang Province

VI. Protection of Minors

In e-commerce activities, we presume you have the corresponding capacity for civil conduct. If you are a minor, we require you to have your parent or other guardian carefully read this Policy and use our services or provide information to us only with their prior consent.

We do not actively collect personal information from individuals under the age of 14. If we discover a child's information has been provided without guardian consent, we will immediately take steps to delete it. If you are a child's guardian and discover an issue, please contact us promptly.

VII. Policy Updates

To provide you with better products and services, we continuously strive to improve our products, services, and technology. When new services are provided or business process changes occur, we may update our Privacy Policy to inform you of specific changes. However, we will not restrict the rights you enjoy under this Policy without your explicit consent. We will publish any changes to this Policy on a dedicated page.

For significant changes, we will also provide more prominent notice (including, for example, notifications through our website announcements or pop-up prompts).

Significant changes referred to in this Policy include but are not limited to:

• Significant changes in our business model, such as changes in the purpose of processing personal information, the types of personal information processed, or how personal information is used.
• Changes in the data controller due to business adjustments, mergers or acquisitions, where the new controller changes the original processing purposes or methods.
• Changes in the main recipients with whom personal information is shared or to whom it is publicly disclosed.
• Significant changes in your personal information rights and how to exercise them.
• Changes in the contact details of the person responsible for personal information protection or the channels for complaints.
• When a Personal Information Protection Impact Assessment report indicates the product has a significant impact on individual rights and interests.

VIII. Contact Us

If you have any questions, comments or requests regarding this Policy or the processing of your information, please feel free to contact us via:

• Email:[privacy@Primecarenursing.com]
• Phone: [400-123-4567]
• Address: 1st Floor, Building 6, Phase 6 of Information Port, No. 666 Jianshe 2nd Road, Xiaoshan District, Hangzhou

Appendix: Definition of Terms (If Needed)

To help you understand the terminology in this Policy more clearly, key terms are defined as follows:

      Primecare Research Lab: Collectively referring to the website platform, customer inquiry pages, and related service systems operated and maintained by Saint Bella or its affiliates, it is used to provide users with functions such as full-cycle family care service consultation, appointment scheduling, customer management, and information push.

      Personal Information: Referring to any information recorded by electronic or other means related to an identified or identifiable natural person, including but not limited to name, contact information, date of birth, address, consultation content, browsing history, etc, it does not include information that has been anonymized and cannot be used to identify a specific individual.

      Sensitive Personal Information: Referring to personal information that, if leaked or illegally used, may lead to the infringement of human dignity or harm to personal or property safety, it mainly includes identification numbers, health information, location information and bank account details, etc.

      Customer Profile (Personal Data): Referring to the collection of data we establish to provide you with continuous, personalized service, based on the personal information you submitted on the Saint Bella/Little Bella website, this profile is not a registered account system, but it contains your basic information, service preferences, and interaction records.

      Cookies and Similar Technologies: Referring to small data files stored through a browser or terminal device, they help us identify user devices, save preferences, enhance user experience, and deal with page performance analysis and recommendation optimization.

      Partners: Referring to third-party institutions that have established business relationships with Saint Bella/Little Bella, such as service cooperation, data processing entrustment, or customer service linkage, they include but are not limited to technical service providers, customer service platforms, postpartum rehabilitation institutions, legal and compliance advisors, etc.

      Entrusted Processing: It refers to our act of delegating certain personal information processing tasks to external service providers based on service needs, while supervising and managing their processing activities.

      Joint Processing: It refers to a situation where we and a specific partner jointly determine the purpose and methods of processing under the premise of providing joint services to customers yet each assuming their respective information protection responsibilities.

      De-identification: It refers to the technical processing of personal information to make it impossible to identify a specific individual and unable to be restored through other information. De-identified information is no longer considered personal information.

      Anonymization: It refers to the processing of personal information to make it impossible to identify a specific individual and unable to be restored. Information processed through anonymization cannot be used to identify any individual and is considered desensitized information.

      Information Subject: It refers to "you" under this Privacy Policy, meaning the natural person whose personal information is being collected or processed.