This Privacy Policy explains how KunMing ChengHeXue E-Commerce Co., Ltd. collects, uses, stores and protects personal information when you visit the HarvestLearn website at harvestlearn.buzz, send a letter to the field desk, call the desk or book a field classroom service. The site and the desk are run by the developer known as HarvestLearn, which is the working name used for the field classroom practice of KunMing ChengHeXue E-Commerce Co., Ltd., a company registered at Room 904, 9/F, Block A, Guofang Building, No 46 Wuyi Road, Wuhua District, KunMing City - 650000, China (CN). We write plainly here so that anyone teaching, studying or planning a system with us can understand exactly what happens to their information.
1. Who we are
The data controller for the website and for the field desk is KunMing ChengHeXue E-Commerce Co., Ltd., a company established in China and operating under the developer name HarvestLearn. The company provides computer integrated systems design and related professional, scientific and technical services, and it runs the field classroom activities described on this website, including course sheets, paddy notes, student letters, term windows, lesson review rounds and field sittings.
Our registered and working address is Room 904, 9/F, Block A, Guofang Building, No 46 Wuyi Road, Wuhua District, KunMing City - 650000, China (CN). You can reach the desk by email at learn@harvestlearn.buzz or by telephone at +17693042919 during the business hours published on the contact page. When this policy refers to we, us or our, it means KunMing ChengHeXue E-Commerce Co., Ltd. acting through the HarvestLearn desk.
Because the desk serves people in several regions, we aim to apply a consistent standard to every visitor and every correspondent, regardless of where they live. Where local law gives you stronger rights than this policy describes, those stronger rights always apply.
2. Scope of this policy
This policy covers personal information processed through the website at harvestlearn.buzz, through email and telephone correspondence with the field desk, and through the delivery of our field classroom services. It does not cover websites, platforms or services operated by other organisations, even where we link to them or mention them in a lesson.
If you work for a client organisation and your employer has signed a separate data processing agreement with us, that agreement may add further detail about how we handle information on the employer behalf. Where the two documents differ, the signed agreement controls for the work it covers, and this policy continues to apply to everything else.
This policy is written for the general visitor. It is not a contract and it does not create rights beyond those provided by applicable law. The terms that govern the use of our services are set out separately in our Terms of Service.
3. Information we collect
We collect only the information the desk actually needs to answer a letter, run a term or keep a record. The categories below describe what that usually means in practice.
Information you give us directly
- Your name, or the name you prefer to be addressed by, when you write to the desk.
- Your email address and, where you choose to share it, your telephone number.
- The subject line and content of any letter you send, including the details of the system, classroom or programme you want to discuss.
- The organisation you represent, your role there and any written material you attach to your note.
- Booking details for a field sitting, including the site address and the names of the people who will attend.
- Payment and billing details when a term is agreed, handled through the invoicing route described in the agreement for that term.
Information created while we work together
- Course sheets, paddy notes and lesson review records that name the client team and the people responsible for each row.
- Correspondence history, so that every question and answer can be traced without asking you to repeat yourself.
- Meeting notes from field sittings, including attendance and the decisions written on the day.
Information collected automatically
- Basic technical information sent by your browser, such as the type of device, the browser version and the operating system.
- The pages you visit on this website and the time spent on each page, in aggregate form.
- The address of the page that referred you to us, where your browser sends it.
- Server log entries that record errors and unusual traffic so the site can be kept available.
We do not ask for sensitive personal information, such as health data, biometric data, political opinions or religious beliefs. If you send such information to the desk without being asked, we will handle it with care, but we may ask you to remove it from the record where it is not needed for the work.
4. How we collect information
Most of what we know about you arrives because you chose to send it. The contact form on this website passes your name, email address, selected subject and message into your own email program, and you decide whether to send the resulting letter. In that sense the form is a convenience rather than a data collection machine: nothing leaves your device until you complete the send action.
Technical information is collected automatically by our hosting environment when your browser requests a page. This is ordinary server behaviour and is used to keep the site running, to spot errors and to understand which pages are useful. It is not used to build a profile of you as an individual.
Some information comes to us from other people. If a colleague introduces you by email, or a partner sends us the name of a contact who will join a field sitting, we receive that information from them. We ask those who introduce others to do so only where the person expects it.
5. Why we use information
We use personal information for a small number of clear purposes. Each purpose below is tied to real tasks at the field desk rather than to broad data gathering.
- Answering your letters. We need your name and email address to reply, and we keep the thread so that later answers stay consistent.
- Preparing a course sheet. We use the details you provide to scope a term, name the rows and agree the harvest.
- Running a term. We use client contacts and meeting records to keep paddy notes accurate and to make sure decisions reach the right people.
- Billing and administration. We use billing details to issue invoices and to keep the accounts of the company in order.
- Keeping the site available. Server logs help us find errors, block abuse and make the website load reliably.
- Improving the material. When questions repeat, we improve the written handouts, and we use aggregated reading statistics to decide which pages need work.
- Meeting legal duties. We keep records where accounting, tax or other law requires them.
We do not sell personal information. We do not rent contact lists. We do not use your letters to train models for other clients, and we do not repurpose a private note as a public case study without written permission.
6. Legal bases for processing
Where the law requires us to identify a legal basis for handling personal information, we rely on the following grounds.
- Contract. We process information that is necessary to prepare and deliver a term you or your organisation has agreed to.
- Legitimate interests. We answer enquiries, keep the website available and improve our written material because doing so serves the reasonable interests of visitors, clients and the desk itself, without overriding your rights.
- Legal obligation. We keep certain records because accounting, tax and other laws require it.
- Consent. Where we ask for consent, for example before adding you to a mailing list, we rely on that consent and you may withdraw it at any time.
When we rely on legitimate interests, we weigh the benefit to the desk against the effect on the individual. Where the effect would be unfair or unexpected, we do not proceed unless a different basis applies.
9. Service providers
Like most organisations, we rely on a small number of providers for infrastructure. A hosting provider stores the files that make up this website and records access logs. An email provider carries letters to and from learn@harvestlearn.buzz. An accounting provider helps keep the company books. Each provider is chosen for reliability and is bound to use information only for the service it supplies.
We review our providers periodically and remove any that cannot meet the standard we expect. Where a provider experiences a security incident that affects personal information in our care, we act on the incident as if it had happened at the desk itself, including notifying the appropriate authorities and the affected people where the law requires it.
10. International transfers
The desk is based in KunMing, China, and some service providers operate infrastructure in other countries. Information may therefore be processed outside the country where you live. When that happens we take reasonable steps to ensure the information remains protected, including contractual terms with providers and a preference for providers that publish clear data handling commitments.
If you are in a region whose law restricts transfers, and you would prefer that your information stay within that region, write to the desk before sending detailed material. We will explain what can be arranged and, where a term cannot proceed without a transfer, we will say so plainly before any work begins.
11. How long we keep information
We keep information only for as long as we need it for the purpose it was collected, or for as long as the law requires. The periods below describe our usual practice.
- Enquiries that do not lead to work. Letters are kept for up to twenty four months so that later questions can be answered in context, then deleted unless you ask for earlier removal.
- Working records for a term. Course sheets, paddy notes and review records are kept for the term and for three years afterwards, because clients often return to the same plot and benefit from the earlier notes.
- Billing and accounting records. These are kept for the period required by tax and company law, which is usually several years.
- Server logs. Access logs are kept for a short period, typically ninety days, and then discarded in the ordinary course of operations.
- Mailing list entries. Kept until you unsubscribe or ask to be removed, plus a short period needed to record the request.
When a retention period ends, information is deleted or anonymised so that it can no longer be linked to a person. Backups that contain the information are overwritten in the normal backup cycle.
12. How we protect information
We take the protection of personal information seriously. Access to the desk records is limited to the people who need it for their row, and accounts are protected by strong passwords and two factor authentication where the provider supports it. Devices used for the work are kept updated, and the office at Room 904 is locked outside working hours.
The website is served over encrypted connections, so information you type into a page travels to your own device securely. Because the contact form hands your message to your email program, the security of the final delivery depends in part on the email provider you use. If you need to send highly sensitive material, ask the desk for an alternative route before sending.
No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify the relevant authority and the affected people without undue delay, and we will explain what happened and what we have done about it.
13. Your privacy rights
Depending on where you live, you may have some or all of the rights described below. We honour these rights for everyone who writes to the desk, not only where the law compels it.
- Right to be informed. You can ask what information we hold about you and why we hold it.
- Right of access. You can request a copy of the personal information we hold about you.
- Right to correction. You can ask us to fix information that is wrong or incomplete.
- Right to deletion. You can ask us to delete information that we no longer need, subject to legal retention duties.
- Right to restrict processing. You can ask us to pause the use of your information while a question about it is resolved.
- Right to object. You can object to processing based on legitimate interests, and we will stop unless we have a compelling reason to continue.
- Right to data portability. You can ask for a copy of information you gave us in a common electronic format.
- Right to withdraw consent. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful use.
- Right to complain. You can raise a concern with us and, where applicable, with a supervisory authority.
To exercise a right, write to learn@harvestlearn.buzz with the words privacy request in the subject line. We may ask for enough information to confirm that you are the person concerned, and we usually respond within thirty days. There is no charge for a reasonable request, though we may charge a fair fee where a request is clearly excessive.
14. Privacy for children
The field desk serves professional teams and adult learners. This website is not directed at children, and we do not knowingly collect personal information from anyone under the age of sixteen. If a lesson brings younger students into a classroom that uses our material, the school or teaching organisation is responsible for obtaining any consent required by law.
If you believe a child has sent personal information to the desk, write to learn@harvestlearn.buzz and we will delete the information promptly unless we are required to keep it. We do not use information relating to children for marketing of any kind.
15. Marketing and newsletters
The desk sends occasional short notes about new written material, term windows and field sittings. We send these only to people who have asked for them, usually by confirming in a reply to a letter. Every note includes a way to unsubscribe, and an unsubscribe request is honoured promptly and permanently.
We do not buy contact lists and we do not add people to a mailing list simply because they once wrote to us. If you receive a note from us that you did not ask for, reply with the single word stop and we will remove the address and confirm the removal in writing.
16. Third party links
This website may link to resources maintained by other organisations, including standards bodies, documentation sites and partner companies. Those sites operate under their own privacy policies, and we cannot control how they collect or use information. We provide links because they are useful for a lesson, not because we endorse the privacy practices of the destination.
We encourage you to read the privacy notice of any site you visit before sending personal information to it. If you follow a link from this site and find that the destination is no longer appropriate, write to the desk and we will review the link.
17. Automated decisions and profiling
The desk does not make automated decisions about individuals and does not build behavioural profiles for advertising. The only automated processing on this website is the ordinary technical work of serving pages and recording errors. Any decision that affects a client, such as accepting a booking into a term window, is made by a person who has read the relevant letter.
If we ever introduce a feature that makes a significant decision without human review, we will describe it here, explain the logic in plain language and offer a route to request human reconsideration.
18. Changes to this policy
We review this policy at least once a year and whenever the desk changes how it handles information. When the substance of the policy changes, we update the date at the top of the page and, where the change is significant, we place a short notice on the homepage for a reasonable period.
Earlier versions remain available on request, so that a client can see what applied at the time a letter was sent. If you have an open term with the desk, we will send you the updated policy in writing before the change takes effect.
19. Complaints and supervisory authorities
We would rather hear a concern early than learn about it from a regulator. If you are unhappy with the way the desk has handled your information, write to learn@harvestlearn.buzz and describe the issue. We will acknowledge the complaint in writing, investigate it and reply with our findings, usually within thirty days.
You also have the right to complain to a data protection authority in the region where you live or work, or where the issue occurred. We will cooperate with any such authority and provide the information it reasonably requests. Raising a complaint with us first usually leads to a faster resolution, but it is never a condition of contacting an authority.
20. How to contact us
For any question about this policy, any request to exercise a right, or any concern about the handling of personal information, use the details below. The desk reads every message and aims to reply within two working days.
Controller: KunMing ChengHeXue E-Commerce Co., Ltd. (developer name HarvestLearn)
Address: Room 904, 9/F, Block A, Guofang Building, No 46 Wuyi Road, Wuhua District, KunMing City - 650000, China (CN)
Email: learn@harvestlearn.buzz
Phone: +17693042919
Website: https://www.harvestlearn.buzz
If you write by post, please mark the envelope with the words privacy request so that it reaches the right row of the desk without delay. Thank you for taking the time to read this policy.