Privacy Policy

 

Policy Overview and Service Purpose

This Privacy Policy is formulated to standardize the collection, use, storage, protection, and management of user personal information on our natural and organic hair care e-commerce platform. As a global professional online retailer of premium hair care products, we attach great importance to the privacy security and personal information protection of all platform users and customers. This policy elaborates on all standardized rules for user data processing, clarifies the types of information we collect, the legitimate purposes of information use, information storage security measures, user privacy rights, and information sharing and protection mechanisms, covering all links of user data generation, transmission, storage, and use during platform shopping and service experience.

The core principle of this privacy policy is legality, necessity, transparency, and security. We only collect and use user information within the scope required by normal e-commerce operation and service provision, never collect excessive user private information, and never use user data for unauthorized commercial purposes. This policy applies to all users who browse the platform website, register accounts, place product orders, participate in platform service interactions, and enjoy after-sales support services, ensuring that every user’s personal privacy is fully protected during the entire platform use cycle.

All data processing behaviors of our platform strictly comply with global mainstream privacy protection specifications and e-commerce industry data security standards. We have established a complete internal privacy management system and data security protection mechanism to prevent user information leakage, abuse, illegal transmission, and unauthorized access, and build a safe, reliable, and trustworthy online shopping environment for global organic hair care consumers.

Types of Information We Collect

We collect user information that is necessary to support platform operation, order transaction, and after-sales service, which is divided into active submitted information and passive collected technical information. The actively submitted information refers to the personal data that users voluntarily fill in and submit when using platform services, including account registration information, order receiving information, payment settlement information, and service interaction information. Such information is directly used to complete user identity verification, order delivery, transaction settlement, and customer service docking, which is the basic data support for completing e-commerce transactions.

Account registration information includes user account identification data submitted during official platform account registration, which is used to establish exclusive user identity credentials, facilitate order record query, shopping history management, and personalized service matching. Order receiving information includes receiving address, contact identification information, and receiver basic information required for global product delivery, ensuring accurate completion of logistics distribution and parcel signing services. Payment information only includes transaction verification data generated in the payment process, and we do not store complete user payment account passwords and sensitive financial information.

Passively collected technical information refers to non-identifiable user device and browsing data automatically recorded by the platform system when users browse the website, including device type, browser model, website access time, page browsing track, operation behavior data, and network access environment information. Such technical information is used to optimize website operation stability, improve user browsing experience, analyze platform service effects, and solve technical faults, without involving user sensitive private content.

Legitimate Use of User Information

All collected user information is only used for legitimate platform operation and service provision purposes, and we strictly abide by the principle of purpose limitation. First, user information is used to complete e-commerce transaction services, including order confirmation, payment verification, product delivery arrangement, logistics information synchronization, and after-sales refund processing, ensuring the smooth completion of every product purchase transaction on the platform. Second, user data is used to maintain the normal operation of the website, optimize page display effects, fix system technical faults, and improve the stability and fluency of platform access.

Third, we use user browsing and transaction data for standardized platform operation analysis and service optimization, summarize user consumption preferences of natural organic hair care products, optimize product display classification, update premium hair care collections, and improve the matching degree between platform products and user needs. Fourth, user contact information is used to push necessary platform service notifications, including order status updates, logistics progress reminders, after-sales service feedback, and platform rule updates, ensuring users grasp key transaction information in a timely manner.

We will never use user personal information for unauthorized commercial promotion, illegal data trading, or irrelevant service scenarios. All data use behaviors are limited within the service scope agreed by this policy, and any expanded use of user information will comply with relevant privacy protection norms and maintain the transparency and standardization of data use.

Information Storage and Security Protection

We adopt industry-leading data storage technology and multi-dimensional security protection mechanisms to store and protect user personal information. All user data is stored in standardized encrypted cloud servers, with professional encryption algorithms for data transmission and storage to prevent data interception, theft, and tampering during network transmission. The platform has established strict data access permission management rules, only authorizing professional internal operation and technical personnel to access user data within the scope of job requirements, and all data access behaviors are fully recorded and traceable.

We implement regular data security detection and system maintenance, regularly update server security protection programs, fix potential system security vulnerabilities, and resist network attack behaviors such as hacking intrusion and data leakage. For user transaction and privacy data, we adopt classified storage management, encrypt sensitive information in layers, and set up automatic data backup mechanisms to ensure data integrity and security.

User information storage follows the principle of minimum retention period. We only retain user data during the valid service cycle and transaction record retention cycle. For expired and invalid user information, we will automatically and thoroughly clean up and destroy it in accordance with standardized data processing procedures to avoid redundant data accumulation and potential privacy risks. We strictly prohibit internal personnel from privately copying, exporting, or disclosing user information, and have formulated strict internal penalty mechanisms for data security violations.

Information Sharing and Disclosure Rules

We will not sell, trade, or rent user personal information to any third-party commercial institutions or individuals without the explicit consent of users. User private data is the core protected asset of the platform, and all data sharing behaviors strictly comply with the principle of legality and necessity. Only in the following legitimate scenarios will we share user information with authorized third-party service providers, and all sharing behaviors will be limited to the scope required by service completion.

First, to complete logistics and delivery services, we will share the necessary receiving information of users with official cooperative global logistics carriers, solely for the purpose of completing product transportation, customs clearance, and final delivery. Second, to complete payment settlement services, we will transmit necessary transaction verification data to formal payment channel institutions to ensure the smooth completion of order payment and refund settlement.

All third-party service providers who obtain user information have signed formal data confidentiality agreements with us, and they are strictly prohibited from using user information for service-unrelated purposes, disclosing user data to other parties, or conducting illegal data trading behaviors. Once the cooperative service is completed, the third party will no longer retain user valid information. In addition, we will disclose user information only when required by mandatory legal provisions, and ensure the standardization and compliance of disclosure behaviors.

User Privacy Rights and Management Channels

All platform users enjoy complete personal privacy rights, including information query right, modification right, deletion right, and data use objection right. Users can independently query their personal account information, order data, and platform service record information through the official account background at any time, and independently modify incorrect or expired personal information to ensure the authenticity and effectiveness of account data.

For user data that does not affect the normal retention of transaction records, users can apply for data deletion and cleaning through official service channels. We will verify user identity and complete data processing in accordance with standardized procedures. Users also have the right to object to the non-essential use of their personal information by the platform, and we will adjust the data processing mode in a timely manner according to user legitimate requirements.

We provide convenient privacy problem feedback channels for users. For any privacy doubt, information security problem, or data right demand, users can initiate service consultations and applications through official customer service channels. Our professional privacy management team will respond and process user demands in a timely manner to fully protect users’ legitimate privacy rights and interests.

Policy Update and Notification Mechanism

We reserve the right to update and optimize this Privacy Policy in a timely manner according to platform business development, industry standard updates, and compliance requirement adjustments. All policy revisions will focus on improving user privacy protection standards and adapting to standardized e-commerce data management requirements. After the policy is updated, we will display the latest official version on the platform’s dedicated policy page, and the updated policy will take effect immediately after publication.

We will remind users of policy updates through official platform notifications to ensure users understand the latest privacy protection rules. Users’ continued browsing, registration, ordering, and use of platform services after the policy update indicates recognition and acceptance of the latest Privacy Policy terms. We recommend users regularly check the official policy page to grasp the latest privacy management specifications and protect their own information security rights and interests.