Privacy policy

Our store system is powered by Shopify, which supports the delivery of all Services to you.
This Privacy Policy sets out how we collect, use and disclose your personal data when you browse, access, purchase, transact via the Services, or communicate with our team. If any inconsistency exists between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail concerning the collection, processing and disclosure of your personal information.
Please read this Privacy Policy thoroughly. By accessing and using any part of the Services, you confirm that you have read, understood and agree to the collection, usage and disclosure practices of your information outlined below.

1. Personal Information We Collect & Process

“Personal information” means data that identifies you, or can be reasonably linked to you or another individual. Anonymized or de-identified data that cannot trace back to you is not classified as personal information.

We collect and process the below categories of personal information (including derived inferences) based on your interaction modes, residential region and legal permissions:
  1. Contact information: Full name, residential address, billing address, delivery address, phone number and email address
  2. Financial information: Credit/debit card numbers, financial account details, payment credentials, transaction records, payment confirmation slips and other settlement data
  3. Account information: Username, login password, security question answers, personalized preferences and system settings
  4. Transaction records: Product views, cart additions, wishlist items, purchase, return, exchange and cancellation histories
  5. Customer communication data: Content from your support inquiries, messages and dialogue records with our team
  6. Device metadata: Hardware model, browser type, network details, IP address and unique device identifiers
  7. Usage behavior data: Your operation paths, access time and interaction habits within our Services

2. Sources of Personal Information

  • Direct submission by you: When you register an account, browse the site, submit inquiries or actively provide personal details
  • Automatic system collection: Via device tracking, cookies and similar tracking technologies during your site visit and service use
  • Authorized third-party service providers: Partners we engage for technical operation, who process data on our designated behalf
  • Official cooperative business partners and other trusted third-party platforms

3. How We Utilize Your Personal Information

We process your personal data for the following legitimate purposes according to your service usage scenarios:

(1) Deliver, Customize & Optimize Services

Fulfill contractual obligations, process payments, arrange order fulfillment and delivery; store your preference records; send account and order notifications; handle returns, exchanges and after-sales requests; enable product reviews; recommend matching goods to build personalized shopping experiences; continuously upgrade and improve our platform functions.

(2) Marketing & Promotional Operations

Send marketing notifications via email, SMS or postal mail; display targeted ads on our website or third-party platforms based on your browsing, cart and purchase behaviors.

(3) Account Security & Fraud Prevention

Verify account identity, secure payment and shopping environments; detect, investigate and respond to fraudulent, illegal, risky or malicious behaviors; safeguard platform operation security.

If you register an account, you bear full responsibility for protecting your login credentials. We strongly advise not sharing your username, password or access details with any third party.

(4) Customer Service & Communication

Respond to consultation demands, provide timely after-sales support, maintain stable business communication and cooperation.

(5) Legal Compliance & Rights Enforcement

Comply with local applicable laws and official legal notices (including inquiries from police and government authorities); participate in civil investigations, pending or ongoing litigation; investigate and penalize potential violations of our service terms and policies.

4. Circumstances of Personal Information Disclosure to Third Parties

We only share your personal data with external parties under legitimate scenarios regulated by this policy:
  1. Authorized service suppliers: Shopify platform, IT operators, payment processors, data analytics teams, customer support outsourcers, cloud storage providers, warehousing and logistics fulfillment partners
  2. Marketing cooperation partners: For targeted advertising and promotion services. Shopify assists personalized ad delivery across multi-merchant platforms. Partners will process your data per their own privacy statements.

    Depending on your location, you have the right to opt out of targeted advertising based on cross-platform browsing activity via our dedicated opt-out entry.
  3. Voluntarily authorized disclosure: When you actively request us to share data for delivery, social media login or widget function activation
  4. Internal corporate affiliates within our enterprise group
  5. Special business & legal scenarios: Merger, acquisition, bankruptcy asset transfer; response to subpoenas, search warrants and legal summons; enforcement of service agreements; protection of platform, brand, user and third-party legal rights

5. Cooperation Relationship with Shopify

Our store and Services are hosted on Shopify’s system. Shopify independently collects and processes your access data to operate, stabilize and optimize platform services. Your submitted information will be transmitted to Shopify and overseas third-party vendors to support order and platform functions.
We activate Shopify’s advanced operation tools to develop our business; Shopify may analyze your store interaction data together with cross-merchant platform records. In such cases, Shopify acts as an independent data controller and handles your data rights requests.

You may check Shopify’s official Consumer Privacy Policy and submit data rights applications via the Shopify Privacy Portal link provided by Shopify.

6. Third-Party External Links

Our website may contain hyperlinks to unaffiliated third-party platforms. We suggest you review their independent privacy and security policies before accessing external sites. We take no responsibility for the data safety, information accuracy and reliability of external third-party websites.

Content you post on public social widgets can be viewed by other platform users without extra usage restrictions by us or third parties. Link placement does not equal official endorsement of external platforms unless explicitly stated.

7. Minors’ Personal Data

Our Services are designed exclusively for adult users. We do not intentionally collect personal information of minors under the local age of majority.

If you are a parent or legal guardian and discover your child has submitted personal data to us, please contact our support email below to request full deletion of relevant records.

As of the effective date of this policy, we have no knowledge of selling or sharing personal information of users under 16 years old under the definition of local privacy regulations.

8. Data Security & Information Retention

No internet transmission or electronic storage system achieves absolute invulnerable security. We cannot guarantee 100% data safety during online transmission. Please avoid sending sensitive confidential information via unencrypted channels.
We retain your personal data for a reasonable period determined by multiple factors: maintenance of your active account, continuous service provision, legal compliance requirements, dispute resolution and contract enforcement needs.

9. Your Data Rights & Optional Controls

Based on your country/region’s privacy laws, you may hold part or all of the below rights (rights are not absolute; we may decline requests permitted by law):
  1. Access Right: Request a copy of all personal data we store about you
  2. Deletion Right: Apply for permanent removal of your stored personal information
  3. Correction Right: Revise inaccurate or outdated personal records
  4. Data Portability Right: Obtain your personal data file and authorize transfer to a third party under specific conditions
  5. Targeted Ad Opt-out Right: Refuse sale/share of your data for personalized advertising

    If your browser activates Global Privacy Control (GPC), we will automatically mark your current device and browser as opted out; we will extend the opt-out to your linked Shopify account if matched. We do not recognize other generic “Do Not Track” browser signals besides GPC (official site: https://globalprivacycontrol.org/).

Message Subscription Management

We may send periodic promotional emails; you can unsubscribe anytime via the unsubscribe link inside marketing emails. After unsubscription, we will still send essential transactional emails for order updates and account management.

How to Exercise Your Rights

You may submit rights applications through the designated entry on our website or contact us via the below email address. For Shopify-processed data, refer to Shopify’s privacy page: https://privacy.shopify.com/en
We will not impose unfair treatment or discrimination against users who exercise legal data rights. We require identity verification before processing your application as required by law. You can appoint an authorized agent to submit requests on your behalf with official power-of-attorney proof; we may also require direct identity validation from you. All valid requests will receive formal replies within statutory timelines.

10. Complaint Channels

If you have disputes regarding our data processing practices, please first contact our support team. Subject to local regulations, you may appeal our internal decision or file an official complaint with your local data protection authority.

11. Cross-Border Data Transmission

Your personal information may be transferred to, stored and processed in countries outside your residential territory.

For data exported from the European Economic Area (EEA) or the United Kingdom, we adopt recognized legal transfer mechanisms such as European Commission Standard Contractual Clauses (SCCs) or UK equivalent authorized contracts, unless the receiving country holds official adequacy recognition for data protection standards.

12. Policy Updates

We reserve the right to revise this Privacy Policy to match updated business operations, legal rules and compliance requirements. Revised versions will be published on our website with an updated “Last updated” date, and formal notifications will be issued when legally mandatory.

Contact Information

For inquiries about this privacy policy, data processing practices or submitting data rights requests, please reach us via email: qiduoecom@gmail.com