Privacy Policy

In short: we collect what we need to take your order, deliver it, run your subscription and answer your questions — nothing more. We never sell your data. Card numbers never reach our servers. You can export everything we hold about you, or ask us to delete your account, yourself from your privacy page.

1. Who is responsible for your data

The controller is Shenzhen Ponyon Technology Co., Ltd., Room B802, Block B, Zhantao Technology Building, No. 1079 Minzhi Avenue, Xinniu Community, Minzhi Subdistrict, Longhua District, Shenzhen, Guangdong, China. For any privacy question write to [email protected] or call +86 13800138000.

2. What we collect

• Account details — your name, email address, phone number and preferred language.
• Addresses — the shipping and billing addresses you save or enter at checkout.
• Order and subscription history — what you bought, the amounts in USD, delivery status, and the interval, quantity and renewal dates of any subscription.
• Payment metadata — the card brand and last four digits only. Full card numbers are handled by Stripe and never reach our servers. For a cryptocurrency payment we store the transaction hash and the screenshot you upload so our staff can verify it.
• Support messages — what you send through the contact form or by email, and our replies.
• Newsletter subscription — your email address, with double opt-in: you receive a confirmation link and are only added once you click it.
• Consent records — which cookie categories you accepted and when, and whether you agreed to marketing email.
• Visit sampling — a sample of page views recorded on our servers: the path visited, a session identifier, a coarse country and a device type. It carries no name, email or precise location and is used only to see which pages are used.

3. Why we use it, and on what basis

• To take, deliver and invoice your order, and to run a subscription you started — because it is necessary to perform our contract with you.
• To answer support requests and handle returns and refunds — contract and our legitimate interest in good service.
• To keep accounting and tax records, and to meet product-safety obligations — legal obligation.
• To prevent fraud, abusive coupon use and account takeover — legitimate interest.
• To send the newsletter and marketing email — your consent, withdrawable at any time.
• To measure how the store is used through analytics — your consent, given in the cookie banner.

Transactional messages such as an order confirmation, a shipping notice or the reminder sent 3 days before a subscription renewal are part of the service and are not marketing; they are sent even if you have not opted into the newsletter.

4. Cookies and similar technologies

Strictly necessary cookies are always set: they keep you signed in, hold your cart and protect the checkout. Analytics and marketing cookies are set only after you accept them in the cookie banner, and you can change your choice at any time from the same banner link in the footer. If you arrive through an invite or referral link we also store a referral cookie for up to 30 days so the invitation can be credited to the person who referred you.

5. Who we share it with

We do not sell personal data and we do not share it for anyone else's advertising. We do use a small number of processors who act on our instructions:

• Stripe — payment processing, card storage and refunds.
• Cloudflare — content delivery and DNS, which means request data passes through its network.
• Our email provider — transactional mail such as order confirmations, shipping notices and password resets.
• Blockchain explorers — consulted when our staff verify a cryptocurrency payment; we look up the transaction hash you submitted.
• Carriers — the name, address and phone number needed to deliver your parcel and clear customs.

We also disclose data where a law, a court or a regulator requires it.

6. International transfers

We operate from China and ship worldwide, so your data may be processed in a country other than your own, including by the processors named above. Where such a transfer is subject to rules in your country, we rely on the appropriate safeguards those rules require, such as standard contractual clauses with our processors.

7. How long we keep it

Account and profile data are kept while your account exists. Order and payment records are kept for as long as accounting and tax law requires, even after an account is closed — in that case in anonymised form. Support messages are kept while they may still be relevant to a case. Consent records are kept as evidence for as long as we rely on the consent. Visit sampling is aggregated and pruned regularly.

8. Your rights, and how to use them yourself

From your account's privacy page you can:

• Export your data. You confirm the request by email, we prepare a JSON file with your account, addresses, orders, subscriptions and support history, and send you a download link that stays valid for 7 days.
• Request deletion of your account. You confirm by email, then a 7-day cooling-off period starts during which you can cancel the request. After it, your account and personal data are anonymised. Order records themselves are kept in anonymised form, because accounting and tax law requires us to keep them.
• Withdraw marketing consent at any time, from the same page or the unsubscribe link in any newsletter.

You may also ask us to correct data that is wrong, to restrict or object to certain processing, or to receive your data in a portable form — write to [email protected]. If you believe we have handled your data badly, please tell us first; you also have the right to complain to the data-protection authority of your country.

9. Security

Passwords are stored hashed, traffic is encrypted in transit, payment card data is out of scope by design, and admin access to customer data is limited by role and logged. No system is perfect: if a breach affects you we will notify you and the competent authority as the law requires.

10. Children

This store is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, write to us and we will remove it.

11. Changes to this policy

We update this page when our processing changes — a new processor, a new feature, a new retention rule. The version and the last-updated date are shown on the page. If a change is significant we will tell you by email or with a notice in the store.

12. Contact

Shenzhen Ponyon Technology Co., Ltd., Room B802, Block B, Zhantao Technology Building, No. 1079 Minzhi Avenue, Xinniu Community, Minzhi Subdistrict, Longhua District, Shenzhen, Guangdong, China — [email protected], +86 13800138000.