Privacy Policy & Statement
Applies to yinglocrystal.com | Last updated 28 October 2026
This policy explains how Wuxi Fenghan Enterprise Management Partnership (Limited Partnership), operating the Yinglo brand ("we", "us"), collects, uses, shares, retains, and protects personal information through yinglocrystal.com, and how you can exercise your privacy rights. Shopify provides the ecommerce platform for the store. Our separate store policies govern purchases, shipping, and returns.
1 Who we are and how to contact us
Business: 无锡丰翰企业管理合伙企业（有限合伙）. Postal address: Room 1201, Longshang Building, No. 555 Liangqing Road, Wuxi, Jiangsu 214000, China. Privacy contact email: yinglocrystal@163.com. Please contact us at this address or email with privacy questions or requests.
2 Information we collect
| Category | Examples and sources |
|---|---|
| Information you provide | Name, email address, phone number, shipping and billing addresses, order notes, account details, and messages you send to customer support. |
| Transaction and delivery data | Items ordered, quantity, amount, payment status, refunds, tracking number, and delivery status, received through orders and service providers. |
| Payment-related data | Payment method, status, and transaction identifiers. Your chosen payment provider generally handles full card details. Do not send a card number or security code to us by email. |
| Device and usage data | IP address, device and browser information, visit times, page activity, and cookie identifiers collected through Shopify and any analytics tools we actually enable. |
3 How we use information
We use information needed to process payments and orders, deliver products, manage returns, provide support, maintain accounts, prevent fraud and security incidents, and comply with tax or other legal obligations. We send promotional messages when you choose to receive them or when applicable law otherwise permits; you can unsubscribe using the link in an email. If we enable analytics or personalized advertising, we will provide notices and choices required by applicable law. Depending on the activity and jurisdiction, our grounds for processing may include performance of a contract, legal obligations, your consent or choices, and legitimate interests in protecting and improving the store where permitted.
4 Cookies and advertising technologies
The store uses cookies necessary for cart, checkout, and security functions. Whether analytics, advertising, or other non-essential technologies are active depends on the apps and pixels actually enabled on the store. Where required, we will describe these technologies and manage choices through cookie settings or other controls. You can also change your browser settings, although blocking necessary cookies may affect shopping functions.
5 Sharing personal information
For the purposes above, we may share necessary information with Shopify, enabled payment providers, warehouses and cross-border carriers, customer support and email providers, cloud and security vendors, and analytics or advertising providers actually enabled on the store. Carriers typically need the recipient’s name, address, phone number, product description, and customs information. We may also disclose information when legally required or necessary to protect users and the store. We do not make customer account information available merely because a third party requests it.
If we enable targeted advertising that applicable law treats as a “sale” or “sharing” of personal information, we will provide applicable opt-out choices and update this policy and store privacy settings.
6 International processing and retention
Because we operate from China and use Shopify, payment, and shipping services across borders, your information may be processed in China and in countries where our service providers operate. We will use contractual and security safeguards required by applicable law. Specific providers and data locations may change with our store configuration.
We keep information only as long as reasonably needed for the purposes described here, taking account of order fulfillment, returns and disputes, tax and accounting records, security, and legal requirements. We then delete, de-identify, or restrict further use of the information. Copies in backups may be removed on a scheduled cycle.
7 Data security
We have implemented role-based limits on admin access and use security measures appropriate to the risks, including secure sign-in, protecting data in transit, managing vendor access, restricting order and customer data to personnel who need it for their duties, and investigating suspected incidents. We notify affected people and regulators when required by applicable law. No website or transmission method is completely secure. Contact us promptly if you suspect unauthorized use of your account or order information.
8 Your choices and rights
Depending on applicable law, you may request access to, correction or deletion of your personal information; withdraw consent; object to or restrict certain processing; or request a portable copy. You may unsubscribe from marketing emails at any time and use the store’s cookie or data-sharing controls where available. We may need to verify your identity and will respond within the period required by applicable law. Some order records cannot be deleted immediately because of legal obligations or disputes. Send requests to the email in Section 1.
9 Children and third-party sites
The store is intended for adults. We do not target children or knowingly collect information from children below the age permitted by applicable law. Please contact us if you believe a child has provided personal information. Links to third-party sites are governed by those sites’ own privacy policies.
10 Changes to this policy
We may update this policy as our services, laws, or technology change. We will post the revised date here and provide additional notice or seek consent for material changes when required by applicable law.
11 Additional rights by region
European Economic Area and United Kingdom. If the EU GDPR or UK GDPR applies to our processing, you may exercise applicable rights of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, objection to direct marketing, and withdrawal of consent. You may complain to a competent supervisory authority. We generally rely on a contract for orders, legal obligations for required records, legitimate interests where permitted for security and fraud prevention, and consent where required for non-essential marketing or tracking. For restricted transfers, we use an adequacy decision, standard contractual clauses, or another valid mechanism when applicable. If our activities require an EU or UK representative, we will publish the representative’s details here.
Singapore. Where the Personal Data Protection Act applies, you may request access and correction and withdraw consent in accordance with that Act. We follow applicable notification, protection, retention, and overseas-transfer requirements.
Malaysia. Where the Personal Data Protection Act applies, you may request access and correction and withdraw consent in accordance with that Act. We will provide Malay and English notices where required and follow applicable cross-border transfer rules.
United States. Where state privacy laws give you rights, you may request to know, access, correct, or delete information, and opt out of a sale, sharing, or targeted advertising as defined by applicable law. We will not discriminate against you in a manner prohibited by law for exercising these rights. If we activate advertising or Shopify data-sharing features that trigger an opt-out duty, we will provide the required controls and update our disclosures.
Canada. Where federal or provincial privacy law applies, you may request access or correction, withdraw consent where permitted, and challenge our handling of your information. All regional rights are subject to legal conditions, identity verification, and exceptions. Send requests to the email in Section 1.
12 Reasonable safeguards and responsibility
Please provide accurate delivery and contact details and protect your account credentials. Notify us promptly of suspected misuse. Where permitted by law, we may verify the identity of a privacy requester; decline requests that cannot be verified, are manifestly unfounded or repetitive, or need not be fulfilled under law; and retain records needed for legal duties, disputes, fraud investigations, and security. Payment providers, carriers, and external sites may independently process information under their own policies. We select and manage service providers with care, but cannot guarantee that internet transmission or a third-party system is risk-free. Nothing in this policy removes non-waivable rights or limits liability that cannot lawfully be limited.