PRIVACY POLICY

43.1 ADVENTURES PTE. LTD. PRIVACY POLICY (REVISED)

Last Updated: October 2026

1. Introduction & Overview

43.1 Adventures Pte. Ltd. ("43.1 Adventures", "we", "us", or "our") is committed to maintaining the highest standards of data protection, privacy, and security for all clients, website visitors, and participants in our high-performance snowboarding coaching programs. This Privacy Policy outlines how we collect, process, store, retain, and safeguard personal data across our operations in Singapore, the People's Republic of China (PRC), and internationally.

43.1 Adventures Pte. Ltd.（"43.1 Adventures"、"我们"或"我们的"）致力于为所有客户、网站访客及参与我们高端单板滑雪教学项目的学员，维持最高标准的数据保护、隐私与安全。本《隐私政策》阐述了我们在新加坡、中华人民共和国（中国）及国际运营中如何收集、处理、存储、保留及保护个人数据。

This policy is formulated in compliance with the Singapore Personal Data Protection Act (PDPA), the PRC Personal Information Protection Law (PIPL), the EU/UK General Data Protection Regulation (GDPR), the Malaysia Personal Data Protection Act (PDPA), and international data protection regulations. It applies strictly to snowboarding coaching services and direct digital client interactions.

本政策依据新加坡《个人数据保护法》（PDPA）、中国《个人信息保护法》（PIPL）、欧盟/英国《通用数据保护条例》（GDPR）、马来西亚《个人数据保护法》（PDPA）及国际数据保护法规制定，严格适用于单板滑雪教练服务及直接的数字客户互动。

2. Personal Data We Collect

We collect personal information necessary to safely manage coaching logistics, perform client health and safety assessments, and comply with legal requirements:

我们收集为安全管理教学后勤、进行客户健康与安全评估以及遵守法律要求所必需的个人信息：

Identity & Contact Data: Full legal name, passport/government identification details, nationality, date of birth, telephone number, residential address, and email address.

身份与联系数据： 法定全名、护照/政府身份证明详情、国籍、出生日期、电话号码、居住地址及电子邮箱。

Athletic, Health & Safety Disclosures: Snowboarding skill proficiency, physical fitness readiness, pre-existing medical conditions, physical injuries, and emergency contact details necessary for risk management during sports coaching.

运动、健康与安全披露： 单板滑雪技能水平、体能状况、既往病史、身体损伤情况及紧急联系人详情（为体育教学期间风险管理所必需）。

Financial & Payment Records: Billing addresses, bank account details, wire transaction confirmations, and official payment receipts.

财务与付款记录： 账单地址、银行账户详情、汇款确认及正式付款收据。

Communication & Support Logs: Direct correspondence histories conducted via WhatsApp, WeChat, Email, and website submission forms.

沟通与支持日志： 通过WhatsApp、微信、电子邮件及网站提交表单进行的直接通信记录。

Technical & Session Data: IP addresses, browser specifications, device identifiers, and functional web session cookies gathered during platform visits.

技术与会话数据： 平台访问期间收集的IP地址、浏览器规格、设备标识符及功能性网络会话Cookie。

Special Categories of Data (Sensitive Personal Information): Health declarations, medical conditions, and injury history disclosed for safety assessment purposes constitute sensitive personal information under applicable privacy laws. Such data is collected solely for the purpose of ensuring client safety during coaching sessions and is subject to enhanced security and access restrictions.

特殊类别数据（敏感个人信息）： 为安全评估目的而披露的健康声明、医疗状况及伤病历史，构成适用隐私法下的敏感个人信息。此类数据仅用于确保客户在教学期间的安全，并受更严格的安保和访问权限限制。

3. Purposes and Legal Basis for Processing

Your personal data is processed strictly for legitimate, declared operational and legal purposes:

您的个人数据严格限于以下合法、已声明的运营及法律目的：

Service Provision: Delivery of customized snowboarding coaching sessions, instructor scheduling, and training progress management.

服务提供： 提供定制化单板滑雪教学课程、教练排期及培训进度管理。

Safety & Emergency Readiness: Assessing health disclosures, verifying risk acknowledgments, and coordinating emergency response measures when necessary.

安全与应急准备： 评估健康披露、核实风险确认书，并在必要时协调应急响应措施。

Financial Administration: Processing booking fees, issuing official tax invoices, auditing payments, and maintaining financial books.

财务管理： 处理预约费用、开具正式税务发票、审计付款及维护财务账簿。

Client Support & Inquiries: Managing booking updates, inquiries, and customer care via WhatsApp, WeChat, or Email.

客户支持与咨询： 通过WhatsApp、微信或电子邮件管理预约更新、咨询及客户关怀。

Marketing & Brand Media: Publishing promotional material or social media content (Facebook, Instagram, TikTok) strictly following explicit client consent.

营销与品牌媒体： 严格按照客户的明确同意发布推广材料或社交媒体内容（Facebook、Instagram、TikTok）。

Regulatory Compliance: Fulfilling statutory tax, legal defense, insurance underwriting, and government audit requirements.

法规遵从： 履行法定税务、法律抗辩、保险承保及政府审计要求。

3.1. Separate Consent (where PIPL applies)

Under Article 29 of the PRC Personal Information Protection Law, processing of sensitive personal information requires your separate consent. Under Article 39, cross-border transfer of personal information also requires your separate consent. Such consent will be obtained through a standalone affirmative action (such as a dedicated consent checkbox), independent of your general acceptance of this Policy or any other terms.

3.1. 单独同意（PIPL适用）

根据中国《个人信息保护法》第29条，处理敏感个人信息须取得您的单独同意。根据第39条，向境外提供个人信息亦须取得您的单独同意。该等同意将通过独立的明确操作（如专门的同意勾选框）取得，独立于您对本政策或任何其他条款的概括同意。

3.2. Third-Party Disclosures

Your personal data may be disclosed to the following categories of third parties strictly as necessary for the purposes outlined above:
(a) Insurance providers for the purpose of arranging coverage;
(b) Emergency response service providers for the purpose of coordinating medical assistance and rescue operations during coaching sessions; and
(c) Government authorities where required by law or to comply with statutory obligations.
All third-party recipients are contractually obligated to maintain the confidentiality and security of your personal data.

3.2. 第三方披露

您的个人数据可能被披露给以下类别的第三方，仅限为上述目的之必要：
（a）保险公司，为安排保险之目的；
（b）紧急救援服务提供方，为在教学期间协调医疗协助及救援行动之目的；以及
（c）政府机关，在法律规定或为履行法定义务所必要时。
所有第三方接收方均有合同义务对您的个人数据予以保密并确保其安全。

4. Cross-Border Data Transfers & Network Architecture

Because 43.1 Adventures Pte. Ltd. operates as a Singapore entity conducting coaching programs internationally (including Xinjiang, PRC) for global clients, personal data may be transmitted across international borders:

由于43.1 Adventures Pte. Ltd.作为新加坡实体，为全球客户提供国际教学项目（包括中国新疆），个人数据可能跨境传输：

Compliance & Encryption Standards: Cross-border data transfers between Singapore, the PRC, and global destinations adhere to recognized international encryption protocols, standard contractual clauses, and local statutory requirements.

合规与加密标准： 新加坡、中国及全球目的地之间的跨境数据传输，遵守公认的国际加密协议、标准合同条款及当地法定要求。

PIPL Cross-Border Transfer Mechanism: In accordance with Article 38 of the PRC Personal Information Protection Law and the Measures for the Standard Contract for Cross-Border Transfer of Personal Information, we adopt one of the following mechanisms as the compliance pathway for providing personal information overseas: (i) passing a security assessment organized by the Cyberspace Administration of China (CAC); (ii) obtaining certification from a CAC-accredited agency; or (iii) entering into CAC standard contractual clauses with the overseas recipient and filing them with the provincial CAC. The specific mechanism applicable will be notified to you prominently prior to the submission of your personal information.

PIPL跨境传输合规路径： 根据中国《个人信息保护法》第38条及《个人信息出境标准合同办法》，我们采用以下机制之一作为向境外提供个人信息的合规路径：（i）通过国家网信部门安全评估；（ii）经专业机构认证；或（iii）与境外接收方订立标准合同并向所在地省级网信部门备案。具体适用的机制将在您提交个人信息前以显著方式告知。

PRC Network Compatibility: Our digital platforms are engineered for seamless accessibility within the PRC without relying on blocked Google scripts or external dependencies.

中国网络兼容性： 我们的数字平台设计为可在中国境内无缝访问，不依赖被屏蔽的Google脚本或其他外部依赖。

5. Communications & Social Media Integration

We manage communication channels and media exposure with strict privacy protocols:

我们通过严格的隐私协议管理沟通渠道和媒体曝光：

Messaging Channels (WhatsApp / WeChat / Email): Conversation logs and booking requests are archived to ensure accurate execution of coaching instructions, record service quality, and maintain liability logs.

通讯渠道（WhatsApp/微信/电子邮件）： 对话日志和预约请求被存档，以确保教学指导的准确执行、记录服务质量并维护责任日志。

Social Media Engagement: Public interactions on official channels (Facebook, Instagram, TikTok) are subject to platform terms and this policy. Photos, videos, or athletic footage captured during coaching are utilized for brand media only upon receipt of an executed media consent waiver.

社交媒体互动： 在官方渠道（Facebook、Instagram、TikTok）上的公开互动受平台条款和本政策约束。教学过程中拍摄的照片、视频或运动影像，仅在收到签署的媒体同意书后方可用于品牌媒体。

6. Cookies & Web Technologies

Our website utilizes essential and functional cookies required to maintain secure user sessions, remember language preferences, and ensure page loading speed. We do not deploy third-party tracking cookies or advertising technologies without explicit user consent, and we respect Do Not Track (DNT) signals where supported by browsers.

我们的网站使用必要的功能性Cookie，以维持安全的用户会话、记住语言偏好并确保页面加载速度。未经用户明确同意，我们不部署第三方追踪Cookie或广告技术，并在浏览器支持的情况下尊重"请勿追踪"（DNT）信号。

6.1. Cookies Constituting Personal Information Processing

For cookies that constitute personal information processing (such as those collecting IP addresses or device identifiers), we will provide clear notice and obtain your consent prior to setting such cookies, in accordance with applicable laws (including PRC PIPL).

6.1. 构成个人信息处理的Cookie

对于构成个人信息处理的Cookie（如收集IP地址、设备标识符等），我们将依据适用法律（包括中国PIPL）的要求，在设置此类Cookie前向您提供清晰告知并取得您的同意。

6.2. Managing Cookies

You can choose to accept or decline cookies through your web browser settings or our site's consent banner. Disabling certain cookies may affect website functionality or prevent you from submitting inquiry forms.

6.2. 管理Cookie

您可以通过浏览器设置或网站同意横幅选择接受或拒绝Cookie。禁用某些Cookie可能会影响网站功能或导致无法提交咨询表单。

7. Data Retention Protocols

In accordance with statutory mandates, personal data is retained only for pre-defined windows necessary to fulfill operational, tax, and legal liability obligations:

根据法定要求，个人数据的保留期限仅限于履行运营、税务及法律责任义务所需的预设期间：

8. Data Security Measures

We deploy robust organizational and technical security controls to safeguard personal data against loss, unauthorized access, alteration, or unlawful disclosure. Access to client health disclosures and legal documentation is strictly restricted to authorized operational staff and designated coaching personnel bound by confidentiality obligations.

我们部署了强有力的组织和技术安全控制措施，以保护个人数据免受丢失、未经授权访问、篡改或非法披露。对客户健康披露及法律文件的访问严格限于受保密义务约束的授权运营人员和指定教学人员。

8.1. Personal Information Protection Impact Assessment (where PIPL applies)

For processing activities that trigger the requirement under Article 55 of the PRC Personal Information Protection Law (including processing sensitive personal information and providing personal information overseas), we conduct a personal information protection impact assessment prior to processing and retain the assessment report for at least three years.

8.1. 个人信息保护影响评估（PIPL适用）

对于触发中国《个人信息保护法》第55条要求的情形（包括处理敏感个人信息、向境外提供个人信息等），我们在处理前进行个人信息保护影响评估，并至少保存评估报告三年。

8.2. Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority and affected individuals in accordance with applicable legal requirements. Where the Malaysia Personal Data Protection (Amendment) Act 2024 applies, we will notify the Commissioner within 72 hours of becoming aware of the breach, and notify affected data subjects within 7 days after notifying the Commissioner (where the breach causes or is likely to cause significant harm).

8.2. 数据泄露通知

在发生个人数据泄露事件时，我们将依据适用法律的要求，及时通知相关监管机构及受影响的个人。对于马来西亚个人数据保护法（2024年修订）适用的情况，我们将在知悉泄露后72小时内通知专员，并在通知专员后7日内通知受影响的数据主体（如泄露可能导致重大损害）。

9. Your Legal Rights

Under the Singapore Personal Data Protection Act (PDPA), you have the following rights regarding your personal data. Depending on your jurisdiction of residence, you may also have additional rights under applicable local laws (including PIPL, GDPR, or Malaysia PDPA), and nothing in this policy limits those rights where they apply:

根据新加坡《个人数据保护法》（PDPA），您对您的个人数据享有以下权利。根据您的居住司法管辖区，您可能还享有适用当地法律（包括PIPL、GDPR或马来西亚PDPA）下的额外权利，本政策中的任何内容均不限制这些权利在其适用时的效力：

Access & Correction: Request access to your personal records or request corrections to inaccurate or incomplete information.

查阅与更正： 请求查阅您的个人记录，或请求更正不准确或不完整的信息。

Consent Withdrawal: Withdraw consent for the processing of your personal data at any time (including marketing communications, optional media sharing, and processing of sensitive personal information), without affecting the lawfulness of processing based on consent before its withdrawal. The scope of withdrawal is not limited to marketing purposes.

撤回同意： 随时撤回对个人信息处理的同意（包括营销通讯、可选媒体分享以及敏感个人信息处理），且不影响撤回前基于同意的处理的合法性。撤回范围不限于营销目的。

Erasure & Deletion: Request the deletion of personal data, subject to mandatory statutory retention rules (e.g., tax or legal liability defense).

删除权： 请求删除个人数据，但须遵守法定强制保留规则（如税务或法律责任抗辩）。

Right to Data Portability (where Malaysia PDPA applies): Under Section 43A of the Malaysia Personal Data Protection (Amendment) Act 2024, you have the right to request the transfer of your personal data from one data controller to another, subject to technical feasibility and compatibility of the data format.

数据可携带权（马来西亚PDPA适用）： 根据马来西亚《个人数据保护法》（2024年修订）第43A条，您有权请求将您的个人数据从一个数据控制者转移至另一个数据控制者，但须符合技术可行性及数据格式兼容性要求。

Automated Decision-Making: We do not currently engage in automated decision-making (including profiling) that produces legal or similarly significant effects on you. If we do so in the future, we will inform you prior to such use and provide you with an option not based on personal characteristics or a convenient means to refuse.

自动化决策： 我们目前不使用自动化决策（包括画像）作出对您产生法律或类似重大影响的决定。如未来使用，我们将在使用前向您告知相关信息，并提供不针对个人特征的选项或便捷拒绝方式。

Complaint to Supervisory Authority (where GDPR applies): If you are located in the EU/EEA, you have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

向监管机构投诉（GDPR适用）： 如您位于欧盟/欧洲经济区，您有权向您惯常居所地、工作地或涉嫌侵权地所在成员国的监管机构提出投诉，而不影响您寻求司法救济的权利。

Inquiries & Complaints: Submit inquiries or complaints regarding our data handling practices directly to our Data Protection Officer.

查询与投诉： 直接向我们的数据保护官提交关于我们数据处理实践的查询或投诉。

10. Updates to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect operational changes or evolving legal standards. Any material changes will be communicated to you via email or through a prominent notice on our website at least fourteen (14) days prior to the effective date. We encourage you to review this policy periodically.

我们保留不时更新本隐私政策的权利，以反映运营变化或不断发展的法律标准。任何重大变更将在生效日期前至少十四（14）天通过电子邮件或我们网站上的显著通知告知您。我们建议您定期查阅本政策。

11. Data Protection Contact Information

Data Protection Officer: 43.1 Adventures Pte. Ltd. (Singapore)

Email: admin@431adventures.com

Inquiries: For data access, corrections, or privacy queries, please email with subject line 'Privacy Request'

数据保护官: 43.1 Adventures Pte. Ltd. (Singapore)

电子邮箱: admin@431adventures.com

查询: 如需查阅、更正或隐私查询，请发送邮件并注明主题"Privacy Request"