At SpiritEve, we attach great importance to the protection of your personal data and privacy. This Privacy Policy explains how we collect, use, store, transfer, and protect your personal data when you visit our website, place an order, or use our services. We are committed to complying with international data protection regulations, including the General Data Protection Regulation (GDPR) of the European Union, to ensure that your personal data is handled legally, fairly, and transparently. By using our website and services, you agree to the collection and processing of your personal data in accordance with this policy.
1. Collection of Personal Data
We only collect personal data that is necessary for providing our services, following the principle of data minimization. The personal data we may collect includes, but is not limited to:
- Contact information: Name, email address, phone number, and delivery address, which are provided by you when placing an order, registering an account, or contacting customer service.
- Order information: Order number, product details, order quantity, payment amount, and payment method, which are generated when you place an order on our website.
- Browsing and usage data: IP address, browser type, device information, browsing history, and page access records, which are automatically collected by our website server to optimize user experience and ensure website security.
- Other data: Information you actively provide when participating in our promotions, surveys, or contacting customer service, such as your preferences for holiday supplies.
2. Processing of Personal Data
We process your personal data for specific, legitimate purposes, and will not process it beyond the scope of the stated purposes. The processing activities include the following aspects:
2.1 Order Processing and Fulfillment: We use your contact information and delivery address to process your order, arrange product delivery, and send order confirmation, shipping notifications, and after-sales service information. This is necessary to fulfill the contract between you and SpiritEve.
2.2 Service Optimization: We analyze your browsing and usage data to understand user preferences, improve our website functionality, optimize product recommendations, and enhance the overall user experience. This processing is based on our legitimate interest in providing better services.
2.3 Customer Service: We use your contact information and order details to respond to your inquiries, handle complaints, and provide after-sales support, ensuring that your problems are resolved in a timely manner.
2.4 Compliance and Security: We process your personal data to comply with relevant laws and regulations, prevent fraud, protect the security of our website and your personal information, and respond to legal requests from regulatory authorities.
2.5 Marketing Activities: With your explicit consent, we may use your contact information to send you promotional information about our holiday supplies (such as Halloween, Christmas products), discounts, and new product launches. You can unsubscribe from these communications at any time.
3. Storage of Personal Data
We store your personal data on secure servers that meet international data security standards. We adopt advanced technical measures, including data encryption, access control, and regular security audits, to protect your personal data from unauthorized access, modification, disclosure, or destruction.
The storage period of your personal data is determined by the purpose of processing: we will store your order and contact information for the duration necessary to fulfill the order and handle after-sales issues, and retain it for a certain period in accordance with relevant tax and legal requirements. After the storage period expires, we will securely delete or anonymize your personal data to ensure it can no longer identify you.
4. Transfer of Personal Data
We will not sell, rent, or transfer your personal data to any third party without your explicit consent, except in the following cases:
- Third-party service providers: We may share your personal data with trusted third-party service providers who assist us in providing services, such as logistics companies (for order delivery), payment processors (for payment processing), and IT service providers (for website maintenance). These third parties are required to comply with this Privacy Policy and relevant data protection laws, and are only allowed to process your personal data for the specified purposes.
- Legal requirements: We may transfer your personal data if required by law, court order, or regulatory authority, or to protect our legitimate rights and interests.
When transferring personal data outside the European Union (EU) and European Economic Area (EEA), we ensure compliance with GDPR requirements by signing standard contractual clauses (SCCs) or using other recognized legal mechanisms to protect the security of your data.
5. Your Rights Regarding Personal Data
In accordance with international data protection regulations, you have the following rights regarding your personal data:
- Right of access: You have the right to request access to the personal data we hold about you, including the purpose of processing, the source of the data, and the third parties with whom the data is shared.
- Right to rectification: If your personal data is incorrect or incomplete, you have the right to request us to rectify it.
- Right to erasure: You have the right to request us to delete your personal data if it is no longer necessary for the processing purpose, or if you withdraw your consent.
- Right to restriction of processing: You have the right to request us to restrict the processing of your personal data in certain circumstances.
- Right to data portability: You have the right to request us to provide your personal data in a structured, commonly used, and machine-readable format, or to transfer it to another data controller.
- Right to object: You have the right to object to the processing of your personal data for marketing purposes or based on our legitimate interests.
To exercise any of these rights, please contact our customer service team with your order number or account information. We will respond to your request within 24 hours and process it in accordance with relevant laws.
6. Security of Personal Data
We take all reasonable technical and organizational measures to protect your personal data. Our security measures include, but are not limited to, data encryption during transmission and storage, regular security training for employees, strict access control to data systems, and regular security vulnerability scans and updates. However, please note that no data transmission or storage method is 100% secure. If a data breach occurs that may affect your personal data, we will promptly notify you and the relevant regulatory authorities in accordance with legal requirements.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to adapt to changes in data protection laws and our business practices. Any changes will be posted on our website, and the updated policy will take effect from the date of publication. We recommend that you review this policy regularly to stay informed of how we protect your personal data.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our customer service team at any time. We are committed to resolving your issues and protecting your privacy rights.
Thank you for trusting SpiritEve. We will continue to take all necessary measures to protect your personal data and provide you with a safe and secure shopping experience.