Last updated: October 2026
1. Who we are
Qijiayu International (Hong Kong) Limited — 香港啟嘉裕國際企業有限公司 — operates this store (“we”, “us”). For questions about this privacy policy or your personal data, contact [email protected] (also [email protected]). We act as the controller for the data described below.
2. What data we process
Order data: name, delivery address, email address, phone number and the contents of your order, which we need to process and deliver purchases and handle returns. Communication data: messages you send us through the contact form, email or WhatsApp. Technical data: IP address, browser and device information, and an approximate location derived from your IP address, used to run and secure the site. Cookies: see section 8.
3. Purposes and legal bases
We process your data: to perform our contract with you — order handling, production and shipping, payment by bank transfer, order confirmations and returns (Art. 6(1)(b) GDPR); to comply with legal obligations such as accounting and tax record-keeping (Art. 6(1)(c) GDPR); to keep the site secure and prevent fraud, and to produce aggregate statistics (Art. 6(1)(f) GDPR); and, only with your consent, for analytics cookies (Art. 6(1)(a) GDPR).
4. How long we keep data
Order and accounting records are kept for the statutory retention periods applicable to us. Communication data is deleted 24 months after our last contact unless we must keep it longer by law. Analytics data is kept in aggregate, anonymised form only after consent has been withdrawn or expired.
5. Who receives your data
Shipping carriers receive the address and phone details needed to deliver your parcel. Our email service provider sends transactional email. Cloudflare delivers the site and its CDN (cdn.qywwa.com) serves images. Self-hosted Matomo analytics and a MaxMind GeoLite2 IP-location lookup support site statistics and logistics planning. Our hosting provider runs the web server. Payments are made by bank transfer between your bank and ours — card data never reaches us and is never requested.
6. Transfers outside the EEA / UK
Some recipients listed above process data in Hong Kong or the United States. Where required, such transfers are safeguarded by the European Commission’s Standard Contractual Clauses or equivalent measures. You may request a copy of the safeguards by writing to [email protected].
7. Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time (for example via the cookie banner’s revoke option). You may also lodge a complaint with your national data protection authority. To exercise any right, email [email protected] — we answer within 30 days.
8. Cookies and analytics
Essential cookies keep the shopping cart, session, language choice and your adult-content age confirmation working; they need no consent. Analytics cookies are set by self-hosted Matomo only after you accept them in the cookie banner; if you decline, browsing is tracked cookie-less in aggregate only. You can revoke consent at any time via the “Revoke consent” link in the banner.
9. Security and changes
Data is transmitted over TLS encryption and access is limited to what each recipient needs. We may update this policy; the date above shows the current version. Continued use after an update means you accept the current version.
