Privacy Policy

1. Who is responsible

The data controller for this website is Hunan Qiongfei E-Commerce Co., Ltd., No. 23, Huawutang Group, Shanlin Village, Huamen Town, Shuangfeng County, Loudi City, Hunan Province 417700, China. You can reach us at qiongflyowo@126.com. We have not appointed a Data Protection Officer; privacy questions go to the same address.

2. What we collect and why

Enquiries (contact form and email)

When you write to us we collect your name, email address, subject, message and any order or product reference you include. We use this only to answer you and to keep a record of the correspondence. Legal basis: our legitimate interest in responding, and where the enquiry concerns a purchase, the performance of a contract.

Orders and payments

When you buy from us we collect your name, email address, delivery address and the items you order, so we can process, ship and support the order and keep proper records. Card payments are handled entirely by our payment processor on their own systems: your card number, expiry and security code go to them, not to us. We receive an order reference and the payment status, and we never store card details on our systems. Legal basis: performance of a contract, and our legal obligation to keep accounting records.

Newsletter

If you sign up we store your email address and the date of consent so we can send product news, on the basis of your consent. You can withdraw it at any time through the unsubscribe link or by emailing us.

Your cart on this device

Your cart is held in your own browser's local storage so it survives a page refresh. It contains only product codes and quantities. Nothing is transmitted to us until you check out, and clearing your browser data removes it.

Server logs

Our hosting provider processes standard technical request data (IP address, timestamp, user agent) to deliver the site and defend it against abuse. These logs are kept briefly.

3. Cookies

This site sets no advertising or tracking cookies, loads no analytics service, and no cookie is required for the cart or checkout. The only things saved in your browser are a small flag that remembers you dismissed the notice at the bottom of the page, and your cart. If we later add a tool that needs cookies, we will ask for consent first.

4. Who else processes it

We keep the number of processors to a minimum. Each is bound by a written agreement covering security, permitted purposes and deletion:

• Cloudflare — hosting, content delivery and network security for this website.
• Our payment processor — card and wallet payments. They act as an independent controller for the payment data collected on their own pages and publish their own privacy terms.
• Our fulfilment and carrier partners — to pick, pack and deliver your order. They receive your name, delivery address, phone number for delivery contact and the parcel contents.
• Our email provider — to send and receive enquiry, order and newsletter messages.

5. Disclosure to authorities

We may disclose personal data where we are legally required or permitted to, for example to respond to a valid request from a public authority or to prevent fraud.

6. International transfers

We are based in China, and our hosting, payment and email providers may process data in countries outside your own, including the United States and the European Union. Where personal data of EU or UK residents is transferred, we rely on the providers' standard contractual clauses and equivalent safeguards.

7. How long we keep it

Enquiry correspondence is kept for up to 24 months. Order and payment records are kept for as long as tax and commercial law requires, typically five to seven years from the end of the financial year. Newsletter consent records are kept until you unsubscribe. You may ask us to delete any of it sooner.

8. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. If you are in the United Kingdom or the European Union these rights arise under the UK GDPR and the EU GDPR. We do not sell or share personal data for advertising.

To exercise any of these rights, email qiongflyowo@126.com. We respond within 30 days. If you are in the EU or UK and are not satisfied with our response, you may complain to your local supervisory authority.

9. Security

The site is served over HTTPS with HSTS enabled, and every interface that touches personal data runs over an encrypted connection. Accounts that can reach your data are protected with two-factor authentication. No method of transmission or storage is perfectly secure — which is why we hold no card data and no government identifiers at all.

10. Children

This site is aimed at adults. We do not knowingly collect personal data from children.

11. Changes

If we change how we handle personal data we will update this page and change the date at the top. Material changes will be highlighted on the site.

Questions about this policy? Contact us — the same inbox handles data requests.