Who we are

Suggested text: Our website address is: https://ningjunbathroom.com.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.

Privacy Policy for Cross-Border E-Commerce Website (Applicable to European and American Markets)

1. Introduction

This Privacy Policy is intended to inform you (“User”) about how we ([NINGJUN Bathroom Products], hereinafter referred to as “we”) collect, use, store, transfer, and disclose your personal information, as well as the rights you hold in relation to your personal information. This Policy strictly complies with the European Union’s General Data Protection Regulation (GDPR), the United States’ California Consumer Privacy Act (CCPA/CPRA), and other relevant privacy laws and regulations in European and American regions. It applies to all your activities conducted through our website ([Website Domain]), mobile application (if applicable), and related services (collectively referred to as “Services” hereinafter).

By using our Services, you confirm that you have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree, please cease using our Services immediately.

2. Personal Information We Collect

2.1 Information Collected Directly

Personal information you proactively provide to us when using the Services, including but not limited to:

Identity Information: Full name, gender, date of birth, nationality, ID card number/passport number (if required for identity verification or cross-border customs clearance);
Contact Information: Email address, phone number, postal address (including delivery address);
Account Information: Username, password (stored in encrypted form), account registration and login records;
Transaction Information: Order number, information about purchased goods/services, payment amount, payment method, transaction time, invoice information (if invoicing is requested);
Preference Information: Your set preferences for goods, delivery, and communication (e.g., whether to receive marketing information).

2.2 Information Collected Automatically

Information collected automatically through technical means when you use the Services, including but not limited to:

Device Information: Device model, operating system version, unique device identifiers (e.g., IMEI, MAC address), browser type and version;
Access Information: IP address, access time, visited pages, browsing history, duration of stay, click records;
Location Information: If you enable device location services, we may collect your approximate location information (used to optimize delivery services and display region-specific products);
Cookie and Similar Technologies Information: We use Cookies, pixel tags, and similar technologies to collect your Service usage habits for enhancing the service experience (see Section 7 “Cookie Policy” of this Policy for details).

2.3 Information Obtained from Third Parties

With compliance with legal and regulatory requirements and your authorization (if required), we may obtain your personal information from the following third parties:

Payment Service Providers: Your payment status and payment account-related information (only used to confirm transactions and ensure payment security);
Logistics Service Providers: Your logistics order status and delivery confirmation information (used to update order progress);
Identity Verification Institutions: Information used to verify the authenticity of your identity (e.g., identity verification for cross-border shopping);
Social Media Platforms: If you log in to our Services via a social media account, we will obtain basic information you authorize the platform to share (e.g., nickname, avatar).

3. Purposes of Collecting Personal Information

We collect your personal information only for legitimate, clear, and specific purposes, including but not limited to:

Providing and optimizing Services: Creating and managing your account, processing your orders (including order placement, payment, delivery, and after-sales service), and providing you with customer support such as product consultation and returns/exchanges;
Ensuring transaction security: Verifying your identity information, detecting and preventing fraud, cyberattacks, account theft, and other risks, and ensuring compliant operation of the Services;
Personalized Services: Recommending products you may be interested in based on your browsing history and purchase records, and customizing service interfaces and content;
Sending notifications: Sending you order status updates, account security alerts, and notifications of changes to service terms; sending you marketing information (e.g., promotional activities, new product recommendations) if you consent;
Compliance with legal requirements: Adhering to relevant laws and regulations in European and American regions (e.g., customs clearance and tax declaration requirements), responding to lawful requests from regulatory authorities and judicial organs, and safeguarding legitimate rights and interests.

4. Restrictions on Use and Disclosure of Personal Information

4.1 Restrictions on Use

We only use your personal information within the scope of the collection purposes specified in this Policy. If we need to use it beyond this scope, we will obtain your explicit consent in advance (unless otherwise stipulated by laws and regulations).

4.2 Information Disclosure

We will not sell or rent your personal information to any irrelevant third parties. We will only disclose it under the following circumstances:

With your explicit consent;
Necessary for service fulfillment: Disclosing your delivery address and contact information to logistics providers, and disclosing necessary transaction information to payment service providers;
Required by laws and regulations: Responding to subpoenas from judicial organs, compliance inspections by regulatory authorities, or abiding by laws, regulations, and administrative orders of the European Union, the United States, and the importing countries of goods;
Safeguarding legitimate rights and interests: Disclosing necessary information to relevant authorities when fraud or suspected illegal activities are detected, to protect the legitimate rights and interests of us and users;
Corporate merger and acquisition scenarios: In the event of mergers, acquisitions, asset transfers, or similar situations, your personal information will be transferred as part of the assets. We will notify you in advance through website announcements, emails, or other means, and ensure that the transferee complies with this Privacy Policy.

5. Cross-Border Data Transfer

Given that our business involves cross-border operations, your personal information may be transferred to countries/regions outside the European Union and the United States (e.g., the location of our headquarters or data storage centers). We will strictly comply with the requirements of GDPR and CCPA regarding cross-border data transfer to ensure the legality and security of data transfer. Specific measures include:

If transferred to countries/regions included in the EU’s “adequacy decision” list, data transfer will be conducted directly;
If transferred to countries/regions not included in the “adequacy decision” list, we will ensure that the data recipient maintains a level of privacy protection equivalent to that of the European Union and the United States by signing EU Standard Contractual Clauses (SCCs), adopting the U.S. Privacy Shield Framework (if applicable), or other methods that comply with legal and regulatory requirements;
You may request relevant documents regarding cross-border data transfer (e.g., a copy of SCCs) from us through the “Contact Information” in Section 11 of this Policy.

6. Storage and Security of Personal Information

6.1 Storage Period

We will store your personal information only for the minimum period necessary to achieve the collection purposes specified in this Policy, or in accordance with the retention period stipulated by laws and regulations (e.g., tax records need to be retained for 7 years). After the expiration of the storage period, we will process your personal information through anonymization (rendering it unidentifiable to individuals) or secure deletion.

6.2 Security Protection Measures

We adopt technical and management measures that meet European and American industry standards to protect your personal information from unauthorized access, use, disclosure, alteration, or damage:

Technical 层面: Encrypting the storage of personal information (e.g., using SSL/TLS encryption for transmitting payment information), using firewalls and intrusion detection systems to prevent cyberattacks, and conducting regular security vulnerability scans;
Management 层面: Restricting employees’ access rights to personal information (only authorizing necessary personnel), providing privacy protection training to employees, and formulating emergency response plans for data security incidents;
Third-party management: Conducting strict screening of cooperative third-party service providers (e.g., payment and logistics providers), requiring them to comply with the same security standards, and restricting their information processing behavior through contracts.

Despite the above measures, please note that internet transmission and data storage cannot completely avoid security risks. We shall not be liable for information security incidents caused by force majeure or factors not attributable to us.

7. Cookie Policy

7.1 Use of Cookies

We use Cookies and similar technologies (e.g., web beacons, local storage) for the following purposes:

Necessary Cookies: Ensuring the basic functions of the Services, such as maintaining account login status and recording shopping cart information. These Cookies cannot be disabled; otherwise, some service functions will not be available;
Analytical Cookies: Collecting service usage data (e.g., traffic volume, page jumps) to optimize website performance and improve user experience;
Marketing Cookies: Delivering personalized marketing content (e.g., promotional advertisements) based on your browsing and purchase records.

7.2 Management of Cookies

You can manage Cookies through the following methods:

Browser settings: Most browsers allow you to view, delete, or disable Cookies (please refer to the browser help documentation for specific operations);
Website Cookie settings: You can independently choose to enable/disable analytical Cookies and marketing Cookies through the “Cookie Preference Settings” page on our website (necessary Cookies cannot be disabled).

Please note that disabling some Cookies may affect your service experience (e.g., inability to save shopping cart information or receive personalized recommendations).

8. Users’ Privacy Rights (Pursuant to GDPR and CCPA)

In accordance with laws and regulations such as GDPR and CCPA, you are entitled to the following privacy rights, and we will provide free support for you to exercise these rights:

Right of Access: You have the right to request us to confirm whether your personal information is stored, and to obtain a copy of such information and relevant processing details (e.g., collection purposes, transferees);
Right to Rectification: If your personal information is incorrect or incomplete, you have the right to request us to correct or supplement it;
Right to Erasure (“Right to Be Forgotten”): You have the right to request us to erase your personal information under the following circumstances: the information is no longer used for the collection purpose, you withdraw your consent, our processing behavior is illegal, or erasure is required by law;
Right to Restriction of Processing: You may request us to suspend the processing of your personal information (e.g., if you have objections to the accuracy of the information or the processing behavior is illegal but you do not request erasure);
Right to Data Portability: You have the right to request us to provide your personal information in a structured, machine-readable format, and to transmit such information to other data controllers (e.g., when you switch shopping platforms);
Right to Withdraw Consent: If you have previously consented to our processing of your personal information (e.g., receiving marketing information), you may withdraw your consent at any time. The withdrawal of consent shall not affect the legality of the processing conducted based on the prior consent;
Right to Object: You have the right to object to our processing of your personal information based on “legitimate interests” (e.g., targeted marketing), and we will stop the relevant processing after verification (unless otherwise stipulated by laws and regulations);
Right to Non-Discrimination: When you exercise the above rights, we will not discriminate against you on this basis (e.g., refusing to provide services to you or increasing service prices).

8.2 Methods of Exercising Rights

You can exercise the above rights through the following methods:

Log in to your account and operate independently through “Account Settings – Privacy Management”;
Send a written request to the contact information specified in Section 11 of this Policy (please provide your name, account information, contact information, and specific request to facilitate our verification of your identity);
If you believe that our processing of personal information violates laws and regulations, you have the right to file a complaint with the EU Data Protection Authority (DPA), the California Attorney General’s Office, or other relevant regulatory authorities.

9. Protection of Children’s Privacy

Our Services are not intended for children under the age of 16 (“Children”). If you are a Child, please do not provide any personal information to us. If we discover that we have collected personal information from a Child by mistake, we will immediately stop processing and delete such information in a secure manner. If you are a guardian of a Child and find that the Child has provided personal information to us, please contact us promptly, and we will assist you in deleting the relevant information.

10. Updates to the Privacy Policy

We may update this Privacy Policy from time to time based on changes in laws and regulations, business adjustments, or technological developments. We will notify you of the updated Policy through the following methods:

Publishing an update announcement in a prominent position on the homepage of our website;
Sending a policy update notice to your registered email address (if you have registered an account);
Displaying a pop-up window for confirming the policy update when you log in to or use the Services next time.

After this Policy is updated, your continued use of our Services will indicate your consent to the updated Policy. We recommend that you review this Policy regularly to stay informed of the latest privacy protection measures.

11. Contact Information

If you have any questions about this Privacy Policy, need to exercise your privacy rights, or wish to file a complaint regarding the processing of personal information, please contact us through the following methods:

Email: [info@ningjunbathroom.com]
Phone: [+86-15551455028]
Mailing Address: [No. 37, Standard Factory Building, Shangtu, Haicheng Street, Longwan District, Wenzhou City, Zhejiang Province]

We will respond to your request within the time limit stipulated by laws and regulations (GDPR requires a response within 1 month, which can be extended to 3 months in complex cases) after receiving it.