Privacy Policy

Last Updated: September 2026

This Privacy Policy applies to all personal data collected through the official retail website operated by GENGYUN LIMITED (hereinafter referred to as “we”, “us”, or “our”). This policy explains how we collect, use, store, disclose, and protect the personal information of visitors and customers who purchase apparel products through our website, mainly serving users located in Europe and the United States.

Our company is registered and maintains warehouse operations in Hong Kong. By accessing our website, registering an account, placing an order, or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies, please do not use our website or services.

1. Company Information & Contact Details

Company Name: GENGYUN LIMITED

Warehouse Location: Hong Kong

Contact Email: fieetimeway@gmail.com

For all privacy-related inquiries, data subject rights requests, or compliance consultations, please contact us via the above email address. We will respond to valid requests within legally required timeframes (generally 30 calendar days for GDPR and CCPA compliant requests).

2. Applicable Legal Frameworks

Our business targets customers in the European Economic Area (EEA), United Kingdom, and the United States. We strictly comply with the following data protection regulations:

• GDPR (General Data Protection Regulation): For all users residing in the European Economic Area and the United Kingdom
• CCPA/CPRA (California Consumer Privacy Act): For all users residing in California, USA
• CalOPPA (California Online Privacy Protection Act): Mandatory transparency requirements for our commercial website serving California users
• Other applicable local data protection laws in Europe and the United States

3. Personal Data We Collect

We only collect necessary personal data for apparel retail service provision. The information we collect falls into the following categories:

3.1 Data You Voluntarily Provide

• Account & Profile Data: Name, username, email address, password, and personal preferences for apparel styles
• Order & Shipping Data: Recipient name, shipping address, postal code, contact phone number, billing address, and order records of clothing products
• Payment Data: We do not store complete credit card or payment card information. All payment processing is completed through secure third-party payment service providers, and we only retain payment confirmation records and transaction IDs
• Communication Data: Content of your emails, consultation messages, feedback, and after-sales service requests sent to us

3.2 Automatically Collected Technical Data

When you browse our website, we automatically collect non-sensitive technical information to optimize user experience and website security, including: IP address, browser type, device model, access time, page browsing records, click behavior, and cookie data. This data helps us analyze website traffic, optimize apparel product display, and prevent malicious access.

4. Legal Bases for Data Processing (GDPR Compliance)

We process your personal data based on the following legal grounds as required by GDPR:

• Contract Performance: Processing order, shipping, and customer information to fulfill our apparel sales and delivery contractual obligations
• Legitimate Interest: Optimizing website functions, improving product service quality, preventing transaction fraud, and ensuring website operational security
• User Consent: Sending marketing emails, promotional activity notifications, and new apparel product recommendations (you may withdraw consent at any time)
• Legal Compliance: Retaining transaction records to comply with applicable tax and commercial laws

5. How We Use Your Personal Data

We only use your personal data for the purposes disclosed below and will not use it for unauthorized commercial purposes:

• Process, confirm, fulfill, and track your apparel product orders, including logistics arrangement and after-sales support
• Maintain and manage your user account, verify user identity, and ensure normal account usage
• Respond to your customer inquiries, feedback, and after-sales service requests in a timely manner
• Send order updates, logistics notifications, and service reminder messages
• With your explicit consent, send promotional information, new clothing arrivals, and discount activity notifications
• Optimize website page design, product display, and user shopping experience based on browsing data
• Prevent fraud, malicious attacks, and illegal transactions to protect the legitimate rights and interests of both users and our company
• Comply with legal obligations, judicial investigations, or official regulatory requirements

6. Data Sharing & Disclosure

We will never sell, rent, or trade your personal data to third parties for commercial profit. We only share your data with trusted third-party service providers necessary for business operation, and all third parties have signed data protection agreements to ensure data security:

• Logistics & Shipping Providers: Share recipient and address information to complete cross-border delivery of apparel products to Europe and the United States
• Payment Service Providers: Process online payment transactions and verify payment legitimacy
• Website & Technical Service Providers: Provide website operation, data storage, and security maintenance services
• Legal & Regulatory Authorities: Disclose data when required by laws, regulations, or official legal procedures

All third-party processors are required to comply with GDPR, CCPA and other relevant data protection laws, and we conduct regular supervision of their data processing behaviors.

7. International Data Transfers

Our company and warehouse are located in Hong Kong. User data from Europe and the United States may be transferred to and stored in Hong Kong or other secure global data centers. We ensure all cross-border data transfers comply with applicable data protection laws.

For data transfers from the EEA/UK and the United States, we adoptStandard Contractual Clauses (SCCs) and other authorized security measures to ensure your personal data receives equivalent protection as required by local privacy laws. We will not transfer your data to regions without adequate data protection mechanisms.

8. Data Retention

We retain your personal data only for the shortest time necessary to complete the corresponding service and legal requirements:

• Order and transaction data: Retained for 7 years to comply with international commercial tax and accounting regulations
• User account data: Retained during your account activation period; you may apply for account cancellation and data deletion at any time
• Communication and after-sales records: Retained for 3 years after completing service processing
• Technical browsing data: Automatically cleared within 12 months

After the retention period expires, we will completely delete or anonymize your personal data in a secure manner.

9. User Rights (GDPR & CCPA)

Users from Europe and the United States enjoy the following legal data subject rights. You may submit a request via our official contact email fieetimeway@gmail.com:

9.1 Rights for EEA/UK Users (GDPR)

• Right of Access: Request a copy of all your personal data we store and details of data processing
• Right of Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your personal data under applicable legal conditions
• Right to Restrict Processing: Request us to suspend data processing under specific circumstances
• Right to Data Portability: Obtain your personal data in a machine-readable format for transmission to other data controllers
• Right to Object: Object to data processing for legitimate interest or marketing purposes
• Right to Withdraw Consent: Withdraw your previously granted consent at any time without affecting the legality of prior processing
• Right to Lodge a Complaint: File a complaint with local data protection supervisory authorities if you believe our processing violates GDPR

9.2 Rights for California Users (CCPA/CPRA)

• Right to know what personal information we collect, use, share, and disclose
• Right to delete your personal information stored by us
• Right to opt out of any sale of personal data (we do not sell user data)
• Right to non-discrimination for exercising CCPA privacy rights

We will verify your identity before processing any privacy rights requests to protect your data security. We complete valid requests within 30 days, with a maximum 30-day extension for complex requests.

10. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve browsing experience, remember user preferences, analyze website traffic, and optimize apparel product display.

You may adjust your browser settings to accept, reject, or clear cookies at any time. Rejecting cookies may affect partial website functions and shopping experience but will not prevent you from accessing basic website services. We do not use cookies for unauthorized data tracking or commercial profiling without user consent.

11. Data Security Measures

We adopt industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, tampering, loss, or theft:

• Encrypt website data transmission via SSL/TLS protocol
• Implement access permission management for internal data processing
• Regularly update security systems and conduct data security audits
• Sign strict confidentiality agreements with all internal staff and third-party service providers

However, no internet data transmission or electronic storage system is 100% secure. We will try our best to protect your personal data and promptly notify you and relevant authorities in case of data leakage in accordance with legal requirements.

12. Minors’ Privacy

Our apparel retail website is intended for use by adults aged 18 and above. We do not intentionally collect personal data from minors under 18 years old. If you are a parent or guardian and find that your minor child has provided personal information to us, please contact us immediately. We will delete the relevant data as soon as possible.

13. Third-Party Websites

Our website may contain links to third-party platforms (such as payment platforms, social media pages). This Privacy Policy only applies to our official website. We are not responsible for the data processing rules and privacy policies of third-party websites. Please carefully check the privacy policy of third-party platforms before using their services.

14. Policy Updates

We reserve the right to update and revise this Privacy Policy irregularly to adapt to business adjustments and legal updates. Any revised policy will be posted on our website with an updated effective date. The updated policy will take effect immediately upon publication. Your continued use of our website after the update constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions, suggestions, or privacy rights requests regarding this Privacy Policy or our data processing practices, please contact us via email:

Email: fieetimeway@gmail.com

Company: GENGYUN LIMITED