1. Purpose and Scope of the Policy
(1) Purpose
This Privacy Policy is designed to clarify the rules for ShinyFur Cross-Border Independent Site (hereinafter referred to as “the Site”) to collect, store, use, transmit, and protect the personal information of users (hereinafter referred to as “you”, including consumers from the United States, the United Kingdom, and other English-speaking countries who purchase pet products through the Site). It safeguards your data privacy rights, complies with the European Union’s General Data Protection Regulation (GDPR) and Google Platform Data Compliance Requirements, and ensures that the entire data processing process is transparent, legal, and secure.
(2) Scope of Application
This Policy applies to all online service scenarios of the Site, including but not limited to account registration, product browsing, order placement, payment settlement, after-sales consultation, and participation in marketing activities. It does not apply to the information processing behaviors of third-party platforms (such as payment institutions, logistics service providers, and social media plug-ins); please refer to their independent policies for third-party privacy rules.
2. Types and Methods of Data Collection
(1) Necessarily Collected Personal Information
- Identity Identification Information: When registering an account, we collect your full name, email address, and mobile phone number (for account verification, login, and after-sales notifications). When placing an order that requires delivery, we collect your shipping address (including postal code), contact name, and phone number (to ensure accurate delivery of goods).
- Transaction Information: When an order is generated, we collect your order number, details of purchased products (pet food, toys, clothing, etc.), payment amount, payment method (e.g., last 4 digits of credit card number, PayPal account information, used only for transaction confirmation; complete payment passwords are not stored), and transaction time.
- Device and Browsing Information: Through Cookies and similar technologies (such as web storage, pixel tags), we collect your device model, operating system, browser type, IP address, access time, browsing history (e.g., pet product categories viewed, duration of stay), and search records (e.g., “small dog food”, “cat teaser wand”). This data is used to optimize page experience and recommend personalized products.
(2) Optionally Collected Personal Information
- Pet-Related Information: When participating in the Site’s “Pet Growth Profile” or “Product Trial Feedback” activities, you may voluntarily provide your pet’s breed, age, weight, and health status. This information is used to recommend more suitable pet products for you (e.g., recommending dog food for your pet’s age group). Not providing such information will not affect basic shopping services.
- Marketing Preference Information: You may choose whether to agree to receive marketing emails (e.g., new product notifications, discount activities), text messages, or follow the Site’s social media accounts from the Site. This information is used to send targeted promotions related to pet products, and you can unsubscribe at any time.
(3) Collection Methods
- Active Provision: Information you actively enter or upload when registering an account, filling out an order, submitting a consultation, or participating in activities.
- Automatic Collection: Device and browsing data automatically collected by the Site’s technical systems (such as server logs, Cookies) when you use the services.
- Third-Party Acquisition: With your authorization, we obtain transaction confirmation information from payment institutions (e.g., PayPal) and delivery progress information from logistics service providers (e.g., DHL). Such acquisition is solely for the purpose of completing transactions, and third parties must comply with GDPR data transmission requirements.
3. Purposes and Restrictions of Data Use
(1) Core Usage Scenarios
- Providing Basic Services: Using your identity and address information to complete order delivery, and using transaction information to generate order confirmations and process refunds/after-sales services.
- Optimizing User Experience: Based on browsing and search records, optimizing the Site’s page loading speed, adjusting product category displays, and recommending pet products that meet your needs (e.g., if you frequently browse cat litter, the Site’s homepage will prioritize displaying cat litter-related products).
- Ensuring Account Security: Identifying abnormal logins (e.g., login from an unfamiliar location) through IP address and device information, sending verification notifications to you, and preventing account theft.
- Compliant Communication: Sending order status updates (e.g., “Shipped”, “Awaiting Delivery”) and after-sales processing progress (e.g., “Refund Accepted”) to you via email or text message. Such notifications cannot be canceled (as they are necessary for service provision).
(2) Rules for Marketing-Related Use
- We will only send you pet product promotions (e.g., “End-of-Season 50% Off Pet Clothing”) and new product launch notifications (e.g., “New Smart Pet Feeder Launch”) after you explicitly consent (e.g., checking “Agree to receive marketing information” during registration, or actively subscribing to activities). Information will be sent via email or text message, and you can cancel subscription through the following methods:
- Click the “Unsubscribe” button at the bottom of marketing emails;
- Send an email to admin@shinyfur.com with the subject “Cancel Marketing Subscription + Mobile Number/Email”;
- Call the customer service hotline +8613770407616 or inform us of your request via WhatsApp (same number as the hotline).
- We will not sell or rent your marketing preference information to any third party. Only in scenarios where “the Site collaborates with third parties on marketing activities” (e.g., cooperative activities with pet welfare organizations) will we share necessary information after obtaining your separate authorization, and third parties must sign a data protection agreement.
(3) Restrictions on Data Use
- Data will only be used within the scope necessary to “achieve the purpose of collection” and will not be misused beyond the scenario (e.g., using browsing records for marketing promotions unrelated to pet products).
- If data needs to be used for scenarios beyond the original purpose (e.g., changing from “order processing” to “user behavior analysis”), we will notify you in advance via the Site’s homepage announcement or email and obtain your separate consent.
4. Data Storage and Protection Measures
(1) Storage Period
- Necessary Information (Identity, Transaction, Address): Retained for 5 years from the date of your last use of the Site’s services (in compliance with the “data minimization” and “storage limitation” principles of GDPR). After the expiration, data will be automatically anonymized (personally identifiable information will be deleted, and only statistical data such as “pet food sales in a certain region” will be retained).
- Optional Information (Pet Information, Marketing Preferences): You can delete this information at any time through account settings. If not actively deleted, it will be retained for 3 years from the date of collection and automatically cleared after expiration.
- Information Required by Law to Be Retained (e.g., Transaction Records for Tax Filing): Retained in accordance with the time limits specified by relevant laws in the United States, the United Kingdom, and the European Union, and legally destroyed after expiration.
(2) Security Protection Measures
- Technical Protection: Adopting SSL encrypted transmission technology (indicated by the “https” logo on the page) to protect the data transmission process; using firewalls and intrusion detection systems to prevent server attacks; desensitizing and storing sensitive information (e.g., mobile phone numbers, addresses) (only partial characters are displayed, such as “+1XXX-XXX-1234” for mobile phone numbers).
- Management Norms: Only authorizing necessary internal personnel of the Site (e.g., customer service staff, order processors) to access data, and requiring login to the system via account password and two-factor authentication (e.g., SMS verification code); conducting regular GDPR compliance training for employees, signing data confidentiality agreements, and strictly prohibiting unauthorized disclosure of user information.
- Emergency Response: In the event of a data breach (e.g., unauthorized access to information due to system vulnerabilities), the Site will notify you of the breach (including the type of leaked information and scope of impact), emergency measures (e.g., password modification guidelines) via your reserved email/SMS within 72 hours. It will also report to EU data protection authorities (e.g., UK ICO) and the Google Platform, and cooperate with investigation and handling.
5. Data Sharing and Cross-Border Transmission
(1) Sharing Rules
- Necessary Third-Party Sharing: Data will only be shared to complete services, and third parties must comply with the same protection standards:
- Logistics Service Providers (e.g., DHL, FedEx): Sharing your shipping address and contact information for product delivery; third parties shall not use this information for other purposes.
- Payment Institutions (e.g., PayPal, Credit Card Companies): Sharing transaction amounts and order numbers for payment settlement and risk prevention.
- Customer Service Tool Providers: Sharing your consultation records (including name and order number) to assist in handling after-sales issues (e.g., “pet toy damage replacement”).
- Prohibited Sharing Scenarios: We will not share your personal information with irrelevant third parties (e.g., non-pet industry merchants, data intermediaries) unless the following circumstances apply:
- Explicit written consent from you;
- Mandatory requirements by law (e.g., court summons, regulatory investigation);
- Protection of the legitimate rights and interests of the Site or users (e.g., responding to fraudulent orders, preventing illegal activities).
(2) Compliance with Cross-Border Transmission
The Site’s servers are located in China. When providing services to users in the United States and the United Kingdom, data transmission must comply with GDPR cross-border data flow requirements:
- If data is transmitted outside the EU (e.g., stored on servers in China), the “EU Standard Contractual Clauses (SCCs)” will be used to ensure that the data protection level is not lower than the standard within the EU.
- Data transmission for U.S. users complies with the “EU-U.S. Data Privacy Framework”, and data transmission for UK users complies with the UK ICO Cross-Border Data Rules, ensuring that the entire transmission process is traceable and auditable.
6. User Data Rights (Core Rights Granted by GDPR)
You can exercise the following data rights through the Site’s “Account Settings – Privacy Center” or by contacting customer service:
- Right of Access: Query the details of your personal information collected by the Site (e.g., historical orders, stored pet information). The Site will provide free query results within 1 month (complex cases may be extended to 2 months with prior notice).
- Right of Rectification: If you find errors in your personal information (e.g., incorrect spelling in the shipping address, wrong pet age), you can apply for modification. The Site will complete the rectification within 24 hours after verification.
- Right to Erasure (Right to Be Forgotten): If you no longer use the Site’s services, you can apply to delete all your personal information (except information required to be retained by law). The Site will complete the deletion and provide a confirmation certificate within 30 days.
- Right to Data Portability: You can apply to export your order information, shopping preferences, and other data in a structured, machine-readable format (e.g., CSV file) for transfer to other compliant platforms. The Site will provide the exported file within 15 days.
- Right to Object: You can object to the Site’s use of your data for non-essential scenarios such as “personalized marketing” or “user behavior analysis”. After objection, the Site will immediately stop using the relevant data without affecting basic shopping services.
- Right to Withdraw Consent: If you previously consented to the collection of pet information or the receipt of marketing information, you can withdraw your consent at any time. After withdrawal, the Site will no longer collect or use the relevant data (already collected data will be processed in accordance with the storage period).
If you encounter obstacles in exercising the above rights, you can contact customer service for assistance through the following channels:
- Email: admin@shinyfur.com (response within 24 hours);
- Phone: +8613770407616 (Working Hours: Beijing Time 9:00-18:00, Monday to Friday; English support available);
- WhatsApp: +8613770407616 (supports 24-hour messaging, responses during working hours).
7. Cookie Usage Rules
(1) Types and Functions of Cookies
- Necessary Cookies: Used to ensure the basic operation of the Site’s functions, such as remembering your account login status and saving shopping cart items. These Cookies cannot be disabled; disabling them will prevent normal order placement.
- Functional Cookies: Used to optimize service experience, such as remembering your shipping address (no need to re-enter it for future orders) and recording language preferences (default display in English/Chinese).
- Analytical Cookies: Used to count the Site’s visit volume and product browsing popularity (e.g., “1,000 monthly views for a certain cat scratch board”). Data is only used for internal operation analysis and is not linked to personal identity.
- Marketing Cookies: Used to send targeted advertisements. For example, after you browse “large dog leashes”, you may see relevant advertisements for the Site on Google search pages. Such Cookies can only be enabled with your consent.
(2) Cookie Management Methods
You can manage Cookies through the following methods:
- When visiting the Site for the first time, a “Cookie Consent Pop-up” will appear. You can choose “Allow All”, “Only Necessary Cookies”, or “Custom Selection”.
- You can modify Cookie permissions later through browser settings (e.g., Chrome: “Settings – Privacy and Security – Cookies and Other Site Data”) and delete stored Cookies (deletion may require you to re-login to your account and re-enter your address).
8. Protection of Minors’ Data
The Site’s services are mainly for adult consumers and do not actively collect personal information of minors under the age of 16. If a minor uses the Site with the consent of a guardian, the guardian must assist in completing account registration and be responsible for the minor’s data usage behavior. If the Site is found to have mistakenly collected minors’ information, the guardian can contact customer service (admin@shinyfur.com) to apply for deletion, and the Site will complete the processing and provide feedback within 7 days.
9. Policy Updates and Notifications
- The Site will regularly revise this Privacy Policy based on GDPR revisions, Google rule updates, and business adjustments. After revision, the Policy will be announced in a prominent location on the Site’s homepage (e.g., top announcement bar) for a public notice period of no less than 7 days.
- If the policy revision involves core clauses such as “expanding the scope of data collection” or “changing the purpose of data use”, a special notice will be sent to your reserved email/SMS. Your continued use of the Site’s services will be deemed acceptance of the revised Policy.
10. Dispute Resolution and Contact Information
(1) Dispute Resolution
If you have objections to data processing behaviors, you can first negotiate a resolution through customer service channels. If negotiation fails, you can file a complaint with the data protection authority of the country/region where you are located within the EU (e.g., UK Information Commissioner’s Office ICO, German Federal Data Protection Authority) or resolve the dispute through arbitration (in accordance with the provisions of the Site’s User Agreement).
(2) Contact Information
- Data Protection Officer Email: admin@shinyfur.com (handles data rights applications and privacy complaints);
- Customer Service Phone: +8613770407616 (Working Hours: Beijing Time 9:00-18:00, Monday to Friday);