1. Who we are

Shanghai Longhui Information Technology Co., Ltd., trading as HuaLore Shop (“HuaLore Shop”, “we”, “us” or “our”), is responsible for the personal information described in this policy.

Business address: Jinshan, Shanghai, China
Privacy email: support@longwinshop.com

2. Scope

This policy applies to personal information processed through our website, online store, customer service, order fulfilment, marketing and related business operations. It does not govern a third party’s independent website, app or service, even if we link to it.

Some regions give “personal information”, “personal data” or similar terms a specific legal meaning. In this policy, these terms generally mean information that identifies, relates to, describes or could reasonably be linked with an individual or household.

3. Information we collect

Information you provide

• Identity and contact information: name, email address, telephone number, billing and delivery addresses.
• Order and transaction information: products purchased, order value, currency, discounts, shipping option, customs information, returns, refunds and customer-service history.
• Account information: username, password in protected form, saved addresses, wish lists and account preferences.
• Payment information: payment method, transaction identifier, payment status and limited billing details. Full card numbers are normally collected and processed by the payment provider rather than HuaLore Shop.
• Communications and content: emails, contact-form messages, support requests, survey responses, product reviews, comments, photographs or other content you submit.
• Marketing preferences: newsletter subscriptions, consent records and communication choices.

Information collected automatically

• Device and network information: IP address, browser, operating system, language, device identifiers and approximate location inferred from IP.
• Usage information: pages viewed, links selected, referring page, search activity, cart activity, session times and interactions with our website or messages.
• Cookie and similar-technology information: identifiers and preferences stored by WordPress, WooCommerce and enabled analytics, security, payment, customer-service or advertising tools.
• Security information: login events, failed payment or authentication attempts, fraud indicators, spam signals and technical logs.

We do not ask you to provide sensitive information such as health data, biometric identifiers, religious beliefs or precise geolocation to purchase ordinary products. Please do not include unnecessary sensitive information in order notes, reviews or customer-service messages.

4. Sources of information

We collect information directly from you, automatically from your browser or device, and from service providers involved in a transaction. Those providers may include payment processors, fraud-prevention services, website hosting and security providers, analytics services, YunExpress, customs intermediaries and destination-country delivery partners.

If another person sends a gift to you, we may receive your name, delivery address and telephone number from the purchaser. The purchaser is responsible for providing that information lawfully.

5. How and why we use personal information

Where we rely on legitimate interests, we consider the benefit of the processing, its necessity and its effect on your rights. You may object to certain processing as described below.

Information required for payment, delivery, tax, customs or fraud prevention is necessary to process an order. If you do not provide it, we may be unable to accept or fulfil the purchase.

6. Cookies and similar technologies

Cookies are small text files or similar identifiers placed on your browser or device. Our WordPress and WooCommerce website may use:

• Strictly necessary cookies for security, checkout, cart contents, login, load balancing and remembering privacy choices;
• Preference cookies for language, currency, location and display settings;
• Analytics cookies to understand visits and improve website performance;
• Advertising or social-media technologies, if enabled, to measure campaigns, limit repeated advertising or personalise content.

Where consent is required, non-essential cookies should remain disabled until you make a choice through our cookie banner or preference centre. You can change available choices there and can also control cookies in your browser. Blocking necessary cookies may prevent checkout, login or other core functions from working.

If comments are enabled and you choose to save your details, WordPress may store your name, email address and website in convenience cookies. Logged-in users may receive authentication and display-preference cookies. Embedded content from another website may place its own cookies or collect interaction data under that provider’s policy.

For the full list of cookies and similar technologies we use, what each one does and how to manage or withdraw consent, please see our Cookie Policy.

7. How we share personal information

We disclose only the information reasonably necessary for the relevant purpose. Recipients may include:

• Website and commerce providers supporting hosting, WordPress/WooCommerce, databases, backups, content delivery, email and customer service;
• Payment and fraud-prevention providers processing transactions, authenticating payments and managing disputes;
• Logistics and trade providers, including YunExpress, warehouses, customs brokers, customs authorities and destination-country postal or courier partners;
• Analytics, advertising and communications providers, but only where enabled and subject to applicable consent or opt-out requirements;
• Professional advisers, such as accountants, auditors, insurers and legal advisers;
• Authorities or other parties where reasonably necessary to comply with law, enforce agreements, protect rights and safety, investigate fraud or respond to lawful requests;
• A successor organisation in connection with a merger, financing, restructuring, sale or transfer of all or part of our business, subject to appropriate protections.

Service providers may process information for us under contractual restrictions. Some recipients, such as payment providers, customs authorities and local carriers, may also act as independent controllers under their own privacy notices.

8. International data transfers

HuaLore Shop is operated from China and sells internationally. Your information may be processed in China, the country where you place an order, the destination country, and other locations where our service providers operate. Privacy laws in those locations may differ from those in your country.

For transfers that require a recognised legal mechanism, we take steps appropriate to the service and applicable law. These may include an adequacy decision, approved standard contractual clauses or another permitted safeguard. You may contact us for more information about safeguards relevant to your information.

9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose collected, including to fulfil orders, provide customer service, maintain security, meet tax, accounting, customs and recordkeeping duties, resolve disputes and enforce agreements.

• Order, payment-status, customs, return and refund records are retained for the period required by applicable commercial, tax, accounting and limitation laws.
• Account information is generally retained while the account remains open and for a reasonable period after closure for security, backup and dispute purposes.
• Customer-service records are retained for a reasonable period after the matter closes, taking account of warranty, chargeback and legal-claim periods.
• Marketing information is retained until you unsubscribe, withdraw consent or object, after which we may keep minimal suppression information so we can respect the choice.
• Technical and security logs are kept for periods proportionate to troubleshooting, fraud prevention and system security.

When information is no longer needed, we delete, anonymise or securely isolate it, subject to backup cycles and legal restrictions.

10. Your privacy rights

Depending on your location and the applicable law, you may have the right to:

• request access to or a copy of your personal information;
• correct inaccurate or incomplete information;
• request deletion of information;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent at any time, without affecting processing already carried out;
• object at any time to direct marketing;
• complain to the privacy or data-protection authority where you live, work or believe a violation occurred.

To exercise a right, email support@longwinshop.com and describe your request. We may ask for information reasonably necessary to verify your identity and protect your account. You may use an authorised agent where local law permits. We will respond within the period required by applicable law and will explain if an exception applies.

EU/EEA residents may contact the data-protection authority in their country. UK residents may contact the Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve the concern.

11. United States state privacy disclosures

If a US state privacy law applies to HuaLore Shop and your information, you may have rights to know or access information, correct it, delete it, obtain a portable copy, opt out of certain targeted advertising, sale or sharing, and appeal a decision about your request. You will not receive discriminatory treatment for exercising an applicable privacy right.

Categories handled in the preceding 12 months

Depending on how you used the website, we may have collected identifiers and contact details; customer-record information; commercial and transaction information; internet or electronic activity; approximate geolocation; customer-service and submitted content; and inferences such as likely product interests. We collect these from the sources and for the purposes described in Sections 4 and 5.

We may disclose these categories for operational business purposes to the service-provider categories listed in Section 7. HuaLore Shop does not sell personal information in exchange for money. However, some analytics or advertising technologies, if enabled, may be treated as “sale”, “sharing” or targeted advertising under certain state laws. Where applicable, we will provide a cookie preference or opt-out mechanism and recognise legally required browser-based preference signals.

We do not knowingly sell or share personal information of individuals under 16. To submit a state privacy request or an appeal, email support@longwinshop.com with the subject “Privacy Request”.

12. Security and automated fraud screening

We use reasonable administrative, technical and organisational measures designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Protect your account password and contact us if you suspect unauthorised activity.

We or our payment and fraud-prevention providers may use automated signals to identify suspicious transactions. This can result in an order being held, requiring verification or being declined. Where applicable law provides rights concerning a solely automated decision with legal or similarly significant effects, you may request human review by contacting us.

13. Children’s privacy

Our store is intended for a general adult audience and is not directed to children under 13 or a higher minimum age required by local law. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child provided information improperly, contact us so we can investigate and delete it where required.

14. Changes to this policy and contact

We may update this Privacy Policy when our practices, technology or legal obligations change. We will post the revised version on this page and provide additional notice where a material change requires it.