ChinaSouvenirs Privacy Policy

1. Information We Collect

A. Personal Data

• Identity and Contact Information: Name, billing/shipping address, email address, phone number (collected during checkout or account registration).
• Payment Details: Processed securely through payment gateways; we only store the last 4 digits and a secure token for processing.
• Communication Records: Emails, product reviews, support tickets, chat messages.

B. Automatically Collected Data

• Cookies and Pixels: Used for cart retention, analytics, and advertising (see Section 7).
• Log Files: IP address, browser type, pages visited, timestamps.
• Device Information: Screen size, operating system, language settings (for display optimization).

C. User-Generated Content

• Photos, comments, messages, and wish list items that you voluntarily post on the website.

2. How We Use Your Information

• To process and ship orders efficiently.
• To send order confirmations, shipping updates, and marketing emails (with your consent).
• To prevent fraud and detect abuse.
• To improve our products, website performance, and overall user experience.
• To fulfill tax, shipping, or legal obligations.

3. Legal Basis (GDPR/PIPL Compliance)

• Contract Performance: Necessary for checkout processing and account creation.
• Legitimate Interests: For fraud prevention, analytics, and website security optimization.
• Consent: For marketing cookies and newsletter subscriptions.
• Legal Obligations: For invoicing and tax record-keeping as required by law.

4. Sharing and Disclosure

We do not sell your personal data. We only share your personal data with the following trusted parties to facilitate our services:

• Service Providers:
  • Payment gateways (PayPal, Stripe, etc.)
  • Logistics carriers (EMS, DHL, local postal services)
  • Email delivery services (e.g., MailPoet, SendCloud)
  • CDN and security services (e.g., Cloudflare)
• Legal Authorities: As required by law or to protect our rights and property.
• Business Transfers: In the rare event of mergers, acquisitions, or asset sales.

5. International Data Transfers

Your data may be processed and stored outside of China (e.g., through EU/US payment gateways). To ensure your data remains protected, we rely on:

• Payment data compliance with PCI-DSS standards.
• EU data transfer standard contractual clauses (SCCs).
• Adequate safeguards under GDPR/CCPA/PIPL regulations.

6. Data Retention

• Orders and Invoices: 7 years (as required by tax laws).
• Marketing Consent: Until you unsubscribe or 3 years of account inactivity.
• Cookies: 30 days to 2 years (please refer to the Cookie table in Section 7).
• Comments: Retained indefinitely unless you request deletion.

7. Cookies and Tracking

We use first-party and third-party cookies to enhance your experience. Below is a detailed breakdown:

Managing Cookies: You can block or delete cookies through your browser settings or our Cookie consent banner.

8. Your Rights (GDPR/CCPA/PIPL)

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete information.
• Deletion: Request the deletion of your account/data (subject to legally mandated retention periods).
• Data Portability: Receive your data in a structured, commonly used format.
• Opt-Out: Unsubscribe from marketing emails or withdraw cookie consent.
• Complaints: Lodge a complaint with your local data protection authority.

How to Exercise Your Rights:
Email: admin003@chinasouvenirs.com
Subject: “Data Subject Request”
We will respond to your request within 30 days.

9. Security Measures

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption (HTTPS) for all data transmission.
• Payment processing compliant with PCI-DSS standards.
• WAF and DDoS protection provided by Cloudflare.
• Regular automated backups and malware scans.
• Two-factor authentication (2FA) for administrator accounts.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media). We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies separately.

11. Children’s Privacy

Our services are not intended for children under the age of 16. We do not intentionally collect information from children. If you believe we have inadvertently collected such information, please contact us immediately for deletion.

12. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or applicable laws. The “Last Updated” date will be revised accordingly, and we will post a notice on the website for significant changes. Your continued use of this website after the change indicates your acceptance of the updated policy.