Privacy Policy

Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how shangcheng.mom (the “Store”, “we”, “us”) collects, uses, stores and shares personal data when you browse the Store, create an account, place or pay for an order, use a gift payment link, or contact Customer Service.

1. Personal data we collect

• Identity and contact data: name, email address, telephone number, billing and delivery address;
• Account data: login details, preferences, saved addresses and account activity;
• Order data: products, quantities, gift messages, delivery instructions, returns and support history;
• Payment data: payment status, transaction reference, currency and limited payment-method details supplied by our payment provider. We do not intend to store full card numbers or card security codes;
• Device and usage data: IP address, browser, device identifiers, pages viewed, referring pages, cookies, security logs and approximate location derived from IP;
• Communications: messages, chat records, call notes, reviews, photos or documents you send to us.

2. Gift payment links and recipient data

A person creating a gift link may provide another person’s name, delivery address, telephone number and a gift message. The creator must have a lawful reason and appropriate authority to provide that information. The intended payer may see limited order and delivery confirmation information when opening the link. Gift links are unique and should be shared only with trusted recipients; anyone who receives a valid link may be able to access the linked checkout until it expires or is disabled.

3. How we use personal data

We use personal data to operate the Store; create and manage accounts; process payments, orders, gifts, shipping, returns and refunds; provide customer support; prevent fraud and abuse; secure and improve the Store; comply with legal, tax and accounting obligations; resolve disputes; and, where permitted, send service or marketing communications.

4. Legal grounds

Depending on the applicable law, we process data because it is necessary to perform a contract or take requested pre-contract steps, comply with a legal obligation, protect legitimate interests such as fraud prevention and service improvement, protect vital interests, or because you have given consent. You may withdraw consent for future processing where consent is the basis, without affecting earlier lawful processing.

5. Cookies and similar technologies

We use essential cookies for login, cart, checkout, language, currency, security and session continuity. We may also use analytics or advertising technologies where permitted. Browser controls can block some cookies, but essential Store functions may then stop working. Where required, we will request consent before using non-essential cookies.

6. When we share data

We may share necessary data with payment processors, fraud-prevention providers, warehouses, sellers, suppliers, couriers, customs agents, hosting and IT providers, analytics and customer-support providers, professional advisers, insurers, regulators, courts or law-enforcement authorities. We may also disclose data in a merger, financing, restructuring or sale, subject to appropriate safeguards. We do not sell personal data for money.

7. International transfers

Orders and service providers may involve countries outside your location. Personal data may therefore be processed in other jurisdictions with different privacy laws. Where required, we use contractual, organizational or other lawful safeguards for international transfers.

8. Data retention

We keep data only as long as reasonably necessary for the purposes above, including order fulfilment, warranty, fraud prevention, dispute handling and legal, tax or accounting requirements. Gift links normally expire after the period shown on the link, but related order and security records may be retained longer. When data is no longer needed, we delete, anonymize or securely isolate it.

9. Security

We use reasonable administrative, technical and physical safeguards, including access controls, encrypted connections, backups and security monitoring. No online system is completely secure. Keep account credentials and gift links confidential, and contact us promptly if you suspect unauthorized access.

10. Your choices and rights

Depending on your location, you may have rights to request access to or correction of personal data, object to or restrict certain processing, request deletion or portability, withdraw consent, opt out of direct marketing, and complain to a privacy regulator. Rights may be limited by identity verification, legal exceptions and record-retention duties. We will not charge a fee unless permitted by law and reasonable in the circumstances.

11. Direct marketing

We send promotional messages only where permitted. You can unsubscribe through the message or contact Customer Service. We may still send non-marketing communications about orders, security, policy changes and service notices.

12. Children

The Store is not directed to children who cannot legally consent or enter into a purchase in their jurisdiction. If you believe a child supplied personal data without appropriate permission, contact us so we can review and, where appropriate, delete it.

13. Changes and contact

We may update this Policy to reflect legal, technical or business changes. The current version and effective date will be posted here. To exercise a privacy right or ask a question, use the Store’s “Contact Customer Service” channel and mark the request “Privacy”. We may ask for information reasonably necessary to verify your identity.