Privacy Policy

1. Information we collect

• Merchant accounts: business and contact names, email addresses, phone numbers when provided, account preferences, invitations, and authentication records. Passwords are stored as hashes.
• Connected stores: store domains and identifiers, authorized access credentials, connection status, and settings needed to provide the integration.
• Products and inventory: product descriptions, images, variants, prices, store product mappings, stock requests, reserved quantities, and branding or packaging selections.
• Orders and shipping: relevant order identifiers, purchased items, quantities, payment and fulfillment status, recipient names, delivery addresses, and contact details supplied for order fulfillment. We also process shipping quotes, tracking information, cancellations, and order changes.
• Payments and support: balance transactions, invoices, payment references and status, notifications, and information you send when contacting us. Card details entered on Stripe-hosted payment pages are handled by Stripe; our application does not store full card numbers or card security codes.
• Technical information: session cookies, request and error logs, and network information such as IP addresses where recorded by our infrastructure or security controls.

Information comes from you, your authorized store connection, and service providers involved in payments or fulfillment. The information available through a store connection depends on the permissions granted and the platform's access rules.

2. How we use information

We use information to manage accounts and store connections; import and synchronize products; process stock requests; calculate and record charges; fulfill and ship orders; return tracking updates; handle cancellations, refunds and support; and send operational notices. We also use necessary information to protect accounts, investigate errors or misuse, and meet legal and accounting obligations.

Where applicable data protection law requires a legal basis, these activities rely on performing our agreement with merchants, complying with legal obligations, legitimate interests in operating and securing the service, or consent where required. We process shopper data on merchants' instructions to provide fulfillment, except where an independent legal obligation applies.

3. When we share information

We share information as needed with the connected commerce platform, shipping carriers and fulfillment partners, hosting and infrastructure providers, payment processors such as Stripe, and email providers such as Zoho ZeptoMail. For example, a carrier needs a recipient's delivery details, and a transactional email provider processes the recipient address and message content. A current list of sub-processors, including their processing locations, is maintained in our Data Processing Agreement.

Access is limited to information needed for the relevant service. Authorized Hongxiu staff may access information to perform their work. We may also disclose information where required by law, to protect legal rights, or in connection with a business transfer subject to applicable safeguards.

We do not sell personal information or use shopper order data for unrelated advertising. Internal merchant branding and packaging instructions are used for fulfillment and are not intended for display to shoppers in the storefront.

4. Retention and uninstalling

We retain information for as long as needed to provide the service, complete outstanding orders and stock commitments, resolve disputes, maintain required financial records, and comply with applicable law. Retention depends on the type of record and the purpose for keeping it; we do not promise a single fixed deletion period for all data.

Uninstalling the Shopify app removes its authorized store access. It does not by itself close your separate Portal account or erase records needed for existing orders, reserved inventory, balances, or legal obligations. You may request account closure or deletion using the contact address below. We also handle applicable platform data requests and deletion notices. Information that must be retained will be limited to the relevant purpose.

5. Your choices and rights

Merchants can manage available account and email preferences in Portal settings and revoke a store integration through the commerce platform. Essential service messages, such as password reset emails, may still be sent when needed. Session cookies are used for authentication; blocking them may prevent sign-in.

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of your personal information, and to withdraw consent where processing relies on consent. You may also complain to your local data protection authority.

Send requests to service@wearhongxiu.com. We may verify your identity and authority before acting. If you are a shopper, contact the store where you placed your order first. We can assist the merchant with requests relating to information we process for that store.

6. Security and international processing

We use measures such as HTTPS, authenticated access, password hashing, and access controls to protect information. No storage or transmission method is completely secure.

Our service providers and fulfillment operations process information outside your country, including in China and the other locations listed in our Data Processing Agreement. Where personal data is transferred from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on the Standard Contractual Clauses approved by the European Commission (Commission Implementing Decision (EU) 2021/914), Module Two (controller to processor), together with a transfer assessment and the security and minimization measures described in the Data Processing Agreement. Contact us for information about processing relevant to your account.

The Portal is intended for business users, not children. We do not knowingly create Portal accounts for children.

7. Contact and updates

For privacy questions or requests, contact Hongxiu Clothing at service@wearhongxiu.com.

We may update this policy as our services or obligations change. The date above identifies the latest revision. Where required, we will provide additional notice of material changes.