Privacy Policy

1.Introduction & Data Controller

This Privacy Policy applies to the website cnchome-beyond.com (the “Site”) operated by Super Industrial Trading Co., Ltd (“CNCHome-Beyond”, “we”, “us”, or “our”), a company registered in the People’s Republic of China, with its principal place of business at Xixing Street, Binjiang District, Hangzhou, Zhejiang, China.

We are the data controller for the personal data we collect through this Site. This means we determine the purposes and means of processing your personal data, except where stated otherwise.

For the purposes of EU GDPR, our representative in the EU can be contacted at chao@cnchome-beyond.com with “EU Representative” in the subject line.

2.Information We Collect

We collect the following categories of personal data:

2.1 Data You Provide Directly

• Account data — name, email, password (hashed), phone number
• Order data — shipping address, billing address, items ordered, order notes
• Payment data — card type, last 4 digits, billing name (full card data is tokenized by our payment processors; we never see or store your full card number)
• Communications — emails, chat messages, and customer service inquiries you send us
• Marketing preferences — newsletter subscription, email open/click events

2.2 Data Collected Automatically

• Device data — IP address, browser type and version, operating system, screen resolution
• Usage data — pages visited, time on page, referring URL, click patterns
• Cookies and similar tracking — see Section 5

2.3 Data from Third Parties

• Payment status confirmations from payment processors (Stripe, PayPal, Shopify Payments)
• Shipping status from carriers (DHL, UPS, FedEx)
• Marketing platform events from Klaviyo, Google Analytics 4, Meta Pixel (with your consent)

3.How We Use Your Data

We use your personal data for the following purposes:

• Order fulfillment — process orders, arrange shipping, send order updates, handle returns and refunds
• Customer service — respond to inquiries, provide technical support, resolve disputes
• Account management — create and maintain your account, remember your preferences
• Payment processing — take payment, prevent fraud, manage chargebacks
• Tax and legal compliance — issue invoices, declare goods to customs, comply with accounting law (7-year retention in China)
• Marketing — send newsletters, promotions, and product updates (only with your consent, where required)
• Site improvement — analyze traffic patterns, A/B test pages, fix bugs
• Security — detect fraud, prevent abuse, protect accounts and transactions

We do not sell your personal data to third parties. We do not share your data with data brokers or advertising networks beyond what is necessary to deliver our own marketing (with consent).

4.Legal Basis (GDPR Article 6)

For EU/EEA residents, we process your personal data under the following legal bases:

5.Cookies & Tracking

We use cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit a website.

5.1 Categories of Cookies We Use

• Essential cookies — required for the Site to function (cart, login, checkout, language). Cannot be disabled.
• Analytics cookies — Google Analytics 4 to understand how visitors use the Site. Disabled until you consent.
• Marketing cookies — Klaviyo (email), Meta Pixel, Shopify Audiences for advertising and remarketing. Disabled until you consent.
• Preference cookies — remember your settings (currency, language, recently viewed products).

5.2 Managing Cookies

You can manage cookie preferences at any time via the cookie consent banner (click the cookie icon in the footer) or through your browser settings. Blocking essential cookies will prevent the Site from functioning.

6.Data Sharing & Processors

We share your personal data with the following categories of third parties, only as needed to deliver our services:

All third-party processors are bound by data processing agreements that require them to protect your data and use it only for the specified purpose.

7.International Data Transfers

Your personal data is primarily processed in China (where our company is located) and the United States (where Shopify, Stripe, and other processors are based). When we transfer your data outside the European Economic Area (EEA), we rely on the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA to third countries
• Adequacy decisions where applicable (e.g., EU-U.S. Data Privacy Framework for participating U.S. companies)
• Data Processing Agreements (DPAs) with all processors that include GDPR-compliant terms

You can request a copy of the SCCs and the list of transfer safeguards by emailing chao@cnchome-beyond.com.

8.Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, plus the periods required by law:

• Order and tax data — 7 years from order date (Chinese accounting law and VAT regulations)
• Warranty records — 2 years after warranty expiration
• Marketing data — until you unsubscribe, or 24 months of inactivity, whichever comes first
• Account data — until you close your account, plus 30 days for restoration requests
• Analytics data — 14 months in Google Analytics 4 (default retention)
• Customer service records — 3 years from last interaction

9.Your Rights & Choices

If you are in the EU/EEA, UK, or other jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right of rectification — correct inaccurate or incomplete data
• Right of erasure (right to be forgotten) — request deletion of your personal data, subject to legal retention requirements
• Right to restriction of processing — ask us to limit how we process your data
• Right to data portability — receive your data in a structured, machine-readable format (JSON or CSV)
• Right to object — object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — at any time, where processing is based on consent (e.g., marketing emails)
• Right to lodge a complaint — with your local data protection authority

To exercise any of these rights, email chao@cnchome-beyond.com with “Privacy Request” in the subject. We respond within 30 days, free of charge. We may need to verify your identity before fulfilling the request.

10.Security Measures

We implement industry-standard technical and organizational measures to protect your personal data, including:

• 256-bit SSL/TLS encryption on all data transmission
• Tokenized payment processing (we never store full card numbers)
• Two-factor authentication for internal admin access
• Regular security audits and penetration testing
• Role-based access control (employees only access data needed for their role)
• Encrypted backups with 30-day retention
• Incident response plan with 72-hour breach notification commitment

No system is 100% secure. If you believe your account has been compromised, contact us immediately at chao@cnchome-beyond.com.

11.Children’s Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please email chao@cnchome-beyond.com and we will delete the data within 7 days.

12.Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. For material changes, we will email registered customers at least 30 days before the effective date and display a notice on the Site.

Your continued use of the Site after the effective date constitutes acceptance of the updated Policy. If you do not agree, you may stop using the Site and request deletion of your data.

13.Contact Us

For all privacy inquiries, data requests, or complaints:

For EU residents: you also have the right to lodge a complaint with your local data protection authority. A list of EU DPAs is available at edpb.europa.eu.

Frequently Asked Questions

Eight quick answers about how we handle your data. Click any question to expand.

Related Policies

These policies work together to protect your data and define our service terms.