Privacy Policy

Scope of Application

1.This policy applies to all information processing activities when you access, browse, register, purchase Hanfu products (including customization services) on this website, and use related services.

2.This policy does not apply to the following situations:

• External websites or services accessed via links on this website (such as payment gateways or logistics tracking platforms);
• Information collected by third-party advertisers displayed on this website (please refer to the third-party’s official privacy statement for their privacy rules).

Information Collection and Acquisition

We collect only the information necessary to provide Hanfu products and services, categorized into three types:

(1) Information You Actively Provide

1.Account and Order Information: Name, email address, mobile number, and password provided during registration; shipping address, contact number, and payment account details (e.g., last four digits of credit card used for verification) entered when placing orders.

2.Customization Service Information: If you choose to customize Hanfu (e.g., size adjustments, embroidery pattern customization), you must provide body measurements such as height, chest circumference, shoulder width, as well as personalized requirements like pattern preferences and text content.

3.Communication and After-Sales Information: Problem descriptions, product photos, and proof of logistics anomalies provided through customer service inquiries and after-sales feedback.

(2) Automatically Collected Information

1.Technical and Device Information: IP address during access, browser type, device model, operating system version; web browsing history (e.g., viewed Hanfu categories, duration spent on pages).

2.Cookies and Tracking Technologies: Cookies record your login status, shopping cart contents, and size preferences to optimize page loading speed and recommendation accuracy. You may disable non-essential cookies in your browser settings, though this may affect your shopping experience.

3.Location-Related Information: If you enable location permissions, this information is solely used to display nearby logistics warehouses or customs clearance port details. Precise geographic location data is not stored.

(3) Information Shared with Third Parties

1.Payment Service Providers (e.g., PayPal, Stripe): We only receive your basic payment account information to complete transactions. We do not store full credit card details.

2.Cross-Border Logistics Providers (e.g., DHL, FedEx): We share your shipping address and contact information to facilitate order delivery and tracking. Logistics providers must comply with their own privacy policies.

Purpose of Information Use

1.Core Service Support: Processing order payments, Hanfu production (including custom sizing), logistics distribution, and post-sales issue resolution.

2.Experience Optimization: Recommending suitable Hanfu styles based on your browsing history and purchase preferences (e.g., suggesting matching accessories for Ming-style robes you selected); analyzing page loading speeds, size chart clarity, and other factors to enhance service quality.

3.Security and Compliance: Verifying account identity, preventing fraudulent activities (e.g., detecting abnormal orders), and meeting customs clearance and registration requirements in target countries/regions.

4.Essential Notifications: Informing you via email or SMS about order status (e.g., “Your custom horse-face skirt is now in production”), shipping updates, policy changes, and other important information.

Information Sharing and Disclosure Restrictions

1. Prohibition on Data Sales: We will never sell or rent your personal information to third parties in any form, whether for commercial purposes or otherwise.

2. Limited Sharing Principle: Necessary information is shared only with partners such as payment processors and logistics providers, who are contractually obligated to:

• Use information solely for service fulfillment and immediately cease access upon service completion;
• Implement security measures no less stringent than those of this website.

3. Legal Disclosure Circumstances: Information may only be disclosed under the following circumstances:

• With your explicit written consent;
• In response to legally mandated requirements such as court subpoenas or customs compliance inspections;
• To protect the personal and property safety of this website’s users (e.g., addressing fraudulent orders).

Data Storage and Cross-Border Transfer

1.Retention Period:

• Account Information: Deleted or anonymized within 6 months after account cancellation.
• Order and Customization Data: Retained for 2 years after transaction completion (for post-sales traceability and compliance with target market tax filing requirements).
• Cookie Data: Non-essential cookies are automatically cleared when you exit your browser.

2.Cross-Border Transfer:

• Your information is stored in international server regions compliant with target market privacy regulations (e.g., EU-compliant and US-compliant data centers). Cross-border transfers are secured via encryption technology (SSL+AES-256) prior to transmission.
• For EU user data, we have executed Standard Contractual Clauses (SCCs) to ensure post-transfer data protection standards meet the requirements of the EU General Data Protection Regulation (GDPR).

Your Rights and How to Exercise Them

Under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), you have the following rights:

1.Right to Access and Rectification: Log in to your account’s “Personal Center” to view and modify your personal information and order history. For customized data corrections, please contact customer service.

2.Right to Erasure: If your information is no longer required for service provision, email [email protected] to request deletion. We will respond and provide feedback within 15 business days.

3.Right to Data Portability: You may request export of your order history and basic account information in CSV format for migration to other platforms.

4.Right to Object and Withdraw Consent: You may disable cookies or unsubscribe from marketing emails at any time. Withdrawing consent does not affect the validity of prior information processing based on lawful consent.

5.Children’s Information Protection: This website does not provide services to minors under 13 years of age. If information from a minor is inadvertently collected, guardians may contact us for immediate deletion.

Information Security Safeguards

1.Technical Protection: Utilizes SSL encrypted transmission, server firewalls, and data de-identification storage to prevent information leakage and tampering.

2.Management Protocols: Access to necessary information is restricted to authorized personnel in production, customer service, and logistics roles. Regular privacy protection training and security audits are conducted.

3.Emergency Response: In the event of a data breach, you will be notified via email within 72 hours. We will report the incident to regulatory authorities and implement remedial actions to minimize impact.