Privacy Policy

**Privacy Policy**

**Last Updated: [Insert Date]**

**1. Introduction**
Welcome to our website. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with us. Please read this policy carefully.

**2. Data Controller**
The entity responsible for your personal data is:

**Company Name:** [Insert Company Name]
**Registered Address:** No. 258, Xizang Road, Huangpu District, Shanghai
**Company Email:** tuna@chromeheartsonlineearring.com
**Company Phone:** +86 18494730855

**3. Information We Collect**
We may collect the following types of information:

- **Personal Identification Information:** Name, email address, phone number, shipping address, and billing address.
- **Payment Information:** Credit card details, PayPal account information, or other payment method data (processed securely by third-party payment processors; we do not store full payment details).
- **Technical Data:** IP address, browser type, operating system, device information, and browsing behavior (via cookies and similar technologies).
- **Communication Data:** Any messages, inquiries, or feedback you send to us via email or contact forms.

**4. How We Use Your Information**
We use your personal data for the following purposes:

- To process and fulfill orders, including shipping and delivery.
- To communicate with you regarding your orders, account, or inquiries.
- To provide customer support and respond to your requests.
- To improve our website, products, and services.
- To send marketing communications (only with your explicit consent, where required by law).
- To comply with legal obligations and prevent fraud.

**5. Legal Basis for Processing**
We process your personal data based on one or more of the following legal grounds:

- **Contractual Necessity:** To fulfill our obligations under any contract with you (e.g., order processing).
- **Consent:** Where you have given clear consent (e.g., for marketing emails).
- **Legitimate Interests:** For improving our services, security, and fraud prevention, provided these interests do not override your rights.
- **Legal Obligation:** To comply with applicable laws and regulations.

**6. Data Sharing and Disclosure**
We may share your personal data with:

- **Service Providers:** Third-party companies that assist us with payment processing, shipping, hosting, analytics, and customer support.
- **Legal Authorities:** When required by law, court order, or to protect our legal rights.
- **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

We do not sell your personal data to third parties.

**7. Data Retention**
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically:

- Order data: Retained for [e.g., 5 years] after the last transaction.
- Marketing data: Retained until you withdraw consent or unsubscribe.
- Technical logs: Retained for [e.g., 12 months].

**8. Data Security**
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, firewalls, secure servers, and access controls. However, no method of transmission over the Internet is 100% secure.

**9. Your Rights**
Depending on your jurisdiction, you may have the following rights regarding your personal data:

- **Access:** Request a copy of the data we hold about you.
- **Rectification:** Correct any inaccurate or incomplete data.
- **Erasure:** Request deletion of your data (subject to legal obligations).
- **Restriction:** Limit how we process your data.
- **Data Portability:** Receive your data in a structured, commonly used format.
- **Objection:** Object to processing based on legitimate interests or direct marketing.
- **Withdraw Consent:** Withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, please contact us using the details below.

**10. Cookies and Tracking Technologies**
Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and for marketing. You can manage cookie preferences through your browser settings. For more details, please see our [Cookie Policy].

**11. Third-Party Links**
Our website may contain links to third-party sites. We are not responsible for the privacy practices of such sites. We encourage you to read their privacy policies before providing any personal data.

**12. International Data Transfers**
If you are located outside of China, please note that your data may be transferred to, stored, and processed in China or other jurisdictions where our service providers operate. We will ensure appropriate safeguards are in place (e.g., Standard Contract