This page is published by Lufeng City Donghai Taoyinhong General Merchandise Store (sole proprietorship), which trades as TYHRETAIL and operates https://tyhretail.shop. Last updated: 9 November 2026.
This policy explains what personal data we collect when you browse or buy from https://tyhretail.shop, why we collect it, who we share it with, and the rights you have over it. It applies to the website, to orders placed through it and to email you send us.
1. Who is responsible for your data
The data controller is Lufeng City Donghai Taoyinhong General Merchandise Store (sole proprietorship), Donghai Subdistrict, Lufeng City, Shanwei, Guangdong, China. For any privacy question, or to exercise a right described below, write to mohe4t5@163.com. We answer data requests within 30 days.
2. What we collect
- Order data – name, delivery and billing address, email address, phone number, the items you bought and the amount paid.
- Account data – if you register, your username, email address and order history.
- Payment data – the payment method, the last four digits of a card and the transaction reference returned by our payment provider. We never see or store your full card number.
- Technical data – IP address, browser and device type, pages viewed, referring URL, and the cookies described in our Cookie Policy.
- Communications – emails, contact-form submissions and any support correspondence.
3. Why we use it
- To process, pack and deliver your order, and to handle returns and warranty claims.
- To send transactional email: order confirmation, dispatch notice with tracking, and refund confirmation.
- To answer your questions and provide support.
- To detect fraudulent orders and abuse of the site.
- To keep accounting and tax records where the law requires it.
- To send marketing email, only where you opted in, and only until you unsubscribe.
Where the GDPR applies, our legal bases are: performance of a contract (orders and delivery), legal obligation (tax and accounting records), legitimate interests (fraud prevention and site security) and consent (marketing email and non-essential cookies).
4. Who we share it with
We share only what each provider needs to do its job, and we do not sell personal data.
- Payment providers – card and wallet payments are processed by our payment gateway, which receives your name, order total and billing details to authorise the transaction.
- Carriers – we pass your name, address and phone number to the courier that delivers your parcel.
- Hosting and email – our website host and transactional email provider process data on our behalf.
- Analytics – aggregate, cookie-based measurement of site traffic, where you have allowed it.
- Authorities – where we are legally required to disclose, for example a valid court order.
5. EU, UK and Swiss customers
Where the GDPR or UK GDPR applies, we act as controller for order data and as processor where a provider handles data on our behalf. We have no establishment in the EU or UK, so a representative can be appointed on request under Article 27 – email us and we will confirm the current contact and the safeguards in place. Our store, host and email providers may process data outside your country, including in the United States and Singapore. Where data leaves the UK, EEA or Switzerland we rely on standard contractual clauses or an equivalent safeguard.
6. How long we keep it
- Order and invoice records: 7 years, to meet tax and accounting rules.
- Account data: for as long as the account is open, then 12 months.
- Support email: 24 months after the conversation closes.
- Marketing consent records: until you withdraw consent, plus 12 months as proof of withdrawal.
- Server logs: 90 days.
7. Your rights
You can ask for a copy of your data, correction of anything wrong, deletion, restriction of processing, portability of data you gave us, or object to processing based on legitimate interests. You can withdraw marketing consent at any time using the unsubscribe link in any email. Write to mohe4t5@163.com and we will action the request. We do not sell or share personal information for cross-context behavioural advertising, and we do not discriminate against anyone who exercises a privacy right. If you are in the EU or UK you also have the right to complain to your local supervisory authority; in California you may request disclosure, deletion or correction under the CCPA/CPRA and we will not discriminate against you for doing so.
8. Children
The store is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a minor has given us personal data, contact us and we will delete it.
9. Security
The site is served over HTTPS. Access to order data is limited to the people who pack and support orders, uses individual accounts and is reviewed periodically. No system is perfectly secure; if a breach affects your rights we will notify you and the relevant authority as required.
10. Changes
If this policy changes materially we will update the date at the top and, for significant changes, email registered customers.
