Privacy policy

Privacy Policy

Last updated: September 2, 2026

1. Introduction

XIAOZHE operates this online store and website, including the related information, content, features, tools, products, and services offered through the website (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, store, and otherwise process your personal information when you visit our website, create an account, place an order, request customer support, or otherwise interact with the Services.

If there is a conflict between this Privacy Policy and our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

2. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with the Services and where you are located, we may collect or process the following categories of personal information:

Contact information, including your name, email address, telephone number, billing address, and shipping address;
Account information, including your account username, password, preferences, saved addresses, and account settings;
Order and transaction information, including products viewed, added to your cart, purchased, returned, cancelled, or replaced, as well as your order history;
Payment information, including your selected payment method, payment status, billing information, transaction details, and payment confirmation;
Customer support information, including information contained in emails, return requests, warranty requests, photographs, videos, reviews, and other communications you send to us;
Device and technical information, including your IP address, browser type, device type, operating system, network connection, and other device identifiers;
Website usage information, including how you access, browse, search, and interact with our website, products, advertisements, and communications;
Marketing preferences, including whether you have agreed to receive promotional emails or other marketing communications;
Fraud prevention information, including information used to identify potentially fraudulent, unauthorized, illegal, or unsafe transactions.

Complete payment card details are generally processed by Shopify and authorized payment providers. XIAOZHE does not normally directly store your complete payment card number or security code.

3. How We Collect Personal Information

We may collect personal information from the following sources:

Directly from you, such as when you visit the website, create an account, place an order, contact us, submit a return request, or request customer support;
Automatically through the Services, including through cookies, pixels, log files, and similar technologies;
From Shopify and our service providers, including payment processors, website analytics providers, fraud prevention providers, fulfillment providers, and shipping carriers;
From advertising, marketing, and business partners, where permitted by applicable law;
From social media platforms or login integrations, when you choose to interact with those services;
From other third parties, where permitted or required by law.

4. How We Use Personal Information

We may use your personal information for the following purposes:

Providing and Improving the Services

We use personal information to:

Operate and maintain our website;
Process payments and complete transactions;
Confirm, process, fulfill, and deliver orders;
Provide order updates and tracking information;
Manage customer accounts;
Process returns, refunds, cancellations, replacements, and warranty requests;
Provide product information and customer support;
Remember your preferences and shopping activity;
Recommend products that may be relevant to you;
Improve our website, products, and customer experience.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to:

Send promotional emails and marketing communications;
Measure the effectiveness of advertising;
Present advertisements that may be relevant to your interests;
Understand how customers interact with our products and marketing campaigns.

Where consent is required, we will use personal information for these purposes only after receiving the required consent. You may unsubscribe from promotional emails at any time by using the unsubscribe link in the email.

Security and Fraud Prevention

We may use personal information to:

Authenticate customer accounts;
Protect payment and checkout processes;
Detect, investigate, and prevent fraud;
Identify unauthorized, illegal, unsafe, or malicious activities;
Protect our customers, business, website, and legal rights.

You are responsible for keeping your account credentials secure. Please do not share your password or account access information with other people.

Customer Communications

We use personal information to:

Respond to questions and customer service inquiries;
Communicate about orders, payments, shipping, returns, warranties, or account activity;
Provide important operational or policy notices;
Maintain our customer relationship with you.

Legal and Compliance Purposes

We may use personal information to:

Comply with applicable laws and regulations;
Respond to valid legal processes or government requests;
Establish, exercise, or defend legal claims;
Investigate potential violations of our policies;
Enforce our Terms of Service and other agreements;
Maintain business, tax, payment, and transaction records as required by law.

5. Legal Bases for Processing

If you reside in the European Economic Area (“EEA”) or the United Kingdom, we process your personal information under one or more of the following legal bases:

Performance of a contract, including processing your payment, fulfilling your order, arranging delivery, and providing customer support;
Compliance with legal obligations, including tax, accounting, consumer protection, and regulatory requirements;
Legitimate interests, including preventing fraud, protecting our Services, improving our business, and providing relevant customer support, provided those interests do not override your rights;
Consent, including where consent is required for promotional communications, personalized advertising, or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing performed before your consent was withdrawn.

6. How We Disclose Personal Information

We may disclose personal information to third parties for legitimate business purposes, including:

Shopify, which hosts and supports our online store;
Payment processors, banks, and payment service providers;
Fulfillment partners, warehouses, shipping carriers, and customs service providers;
Website hosting, cloud storage, information technology, and security providers;
Customer service and communication providers;
Analytics, advertising, and marketing partners, where permitted by applicable law;
Professional advisers, including accountants, auditors, insurers, and legal advisers;
Government agencies, regulators, courts, or law enforcement authorities, where disclosure is required or legally permitted;
A buyer, successor, or other relevant party in connection with a merger, acquisition, financing, restructuring, sale of assets, insolvency, or similar business transaction.

We may also disclose information when you direct us to do so, request a third-party service, use a social media feature, or otherwise provide your consent.

Third parties process personal information according to their own privacy notices and applicable contractual and legal obligations.

7. Relationship with Shopify

Our Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to operate, protect, and improve the Shopify platform and related services.

Information submitted through our store may be transmitted to Shopify and other service providers located in countries outside the country where you live.

We may use Shopify features that process information obtained from your interactions with our store and, where applicable, your interactions with Shopify or other Shopify merchants. In these circumstances, Shopify may be independently responsible for certain processing activities.

You can learn more by reviewing the:

8. Cookies and Similar Technologies

We and our service providers, including Shopify, use cookies, pixels, tags, local storage, and similar technologies to operate and improve the Services.

These technologies may be used to:

Keep the website and checkout functioning;
Remember your shopping cart and preferences;
Maintain account and session security;
Prevent fraud and unauthorized activity;
Understand how visitors use our website;
Measure website and advertising performance;
Provide personalized content or advertising, where permitted.

Some cookies are necessary for the website to function. Other cookies, including certain analytics or advertising cookies, may be optional.

Where required by applicable law, we will request consent before using non-essential cookies. You can manage available cookie preferences through our cookie banner or your browser settings.

Disabling certain cookies may affect the operation or availability of some website features.

For more information, please review Shopify’s Cookie Policy.

9. Targeted Advertising and Data Sharing Choices

Depending on where you live, applicable privacy law may give you the right to opt out of the sale or sharing of personal information or the use of personal information for targeted advertising.

You may submit an opt-out request through our:

Data Sharing Opt-Out Page

If you visit our website with a recognized Global Privacy Control signal enabled, we may treat the signal as an opt-out request for the browser and device used, as required by applicable law.

If Shopify can associate the device with your Shopify account, the request may also be applied to that account.

You can learn more about Global Privacy Control at:

https://globalprivacycontrol.org/

Except where required by law, we may not respond to other browser-based “Do Not Track” signals.

10. Third-Party Websites and Services

The Services may contain links to websites, social media platforms, payment services, or other online services operated by third parties.

We do not control and are not responsible for the privacy, security, accuracy, or content of third-party websites or services. Before providing personal information to a third party, you should review that party’s privacy policy and terms.

The inclusion of a third-party link does not necessarily mean that XIAOZHE endorses the third party or its products and services.

Information you post in public or semi-public areas, including social media platforms or product reviews, may be visible and used by other people.

11. International Transfers

We may transfer, store, and process personal information in countries other than the country where you live, including countries where Shopify and our service providers operate.

Privacy and data protection laws in those countries may differ from the laws in your jurisdiction.

When personal information is transferred outside the EEA or the United Kingdom, we will rely on legally recognized transfer mechanisms where required, such as:

An adequacy decision;
The European Commission’s Standard Contractual Clauses;
The United Kingdom’s applicable international data transfer mechanisms;
Other lawful safeguards recognized by the relevant authority.

12. Security of Your Information

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction.

However, no security system or method of electronic transmission is completely secure. We cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

If you create an account, you are responsible for maintaining the confidentiality of your login details and promptly notifying us if you believe your account has been accessed without authorization.

13. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Maintain and administer your customer account;
Process and document orders, payments, returns, and warranties;
Provide customer support;
Meet tax, accounting, legal, and regulatory requirements;
Prevent fraud and protect our legal rights;
Resolve disputes and enforce agreements.

Retention periods depend on the type of information, the nature of our relationship with you, legal obligations, and whether the information is required for ongoing or potential legal claims.

When personal information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable law.

14. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have some or all of the following rights:

Right to access or know: Request access to personal information we hold about you;
Right to correction: Request correction of inaccurate personal information;
Right to deletion: Request deletion of personal information;
Right to portability: Request a portable copy of certain personal information;
Right to restriction: Request restriction of certain processing activities;
Right to object: Object to certain processing based on legitimate interests or direct marketing;
Right to withdraw consent: Withdraw consent where processing is based on consent;
Right to opt out: Opt out of the sale or sharing of personal information or targeted advertising where applicable;
Right to appeal: Appeal a decision we make regarding a privacy request where applicable;
Right to complain: Lodge a complaint with an appropriate data protection or regulatory authority.

These rights are not absolute and may apply only in certain circumstances. We may decline or limit a request where permitted by law.

To exercise a privacy right, contact us at info@xiaozhetech.com or use the privacy tools available through our website.

We may need to verify your identity before completing a request. We will use information provided for verification only to verify and process the request.

Where permitted by law, you may authorize another person to submit a request on your behalf. We may require evidence of that authorization and may ask you to verify your identity directly.

We will not discriminate against you for exercising an applicable privacy right.

15. EEA and United Kingdom Residents

If you reside in the EEA or the United Kingdom, you may have the right to:

Access your personal information;
Correct inaccurate or incomplete personal information;
Request deletion of personal information;
Restrict certain processing;
Object to processing based on legitimate interests;
Object to direct marketing;
Receive certain information in a portable format;
Withdraw consent at any time;
Submit a complaint to your local data protection authority.

For information about EEA supervisory authorities, visit the European Data Protection Board.

United Kingdom residents may contact the Information Commissioner’s Office.

16. United States Residents

Depending on your state of residence and whether the applicable legal requirements are met, you may have rights concerning your personal information, including the right to:

Know or access certain personal information;
Correct inaccurate personal information;
Delete certain personal information;
Receive a portable copy of certain personal information;
Opt out of certain sales, sharing, or targeted advertising;
Limit certain uses of sensitive personal information;
Appeal a decision concerning your request.

You may exercise applicable opt-out rights through our Data Sharing Opt-Out Page or by contacting us.

We do not discriminate against customers for exercising rights available under applicable privacy law.

17. Marketing Communications

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the email.

After unsubscribing, you may continue to receive non-promotional communications relating to your orders, account, payments, shipping, returns, warranties, security, or other transactions.

If we send marketing text messages, you may follow the opt-out instructions contained in the message.

18. Children’s Privacy

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are a parent or legal guardian and believe that a child has provided personal information to us, contact us so that we can review and, where appropriate, delete the information.

As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable privacy laws, the personal information of individuals under 16 years of age.

19. Complaints

If you have a complaint about how we collect, use, or disclose personal information, please contact us using the information below.

We will review and respond to your complaint within the time required by applicable law.

Depending on where you live, you may also have the right to appeal our decision or lodge a complaint with your local data protection authority.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, legal requirements, or other operational reasons.

When we update this Privacy Policy, we will publish the revised version on this website and update the “Last updated” date. Where required by law, we will provide additional notice of material changes.