Privacy Policy
1. Scope of This Notice
This Privacy Policy explains how Rixveno collects, uses, discloses, and safeguards your personal information when you visit https://rixveno.com/ (the "Site") and engage with our online retail services, including browsing products, placing orders, contacting customer support, and subscribing to updates.
This policy applies to all interactions with our Site and communications related to our retail activities. It does not govern the practices of third-party services that operate independently, such as payment processors or shipping carriers, which maintain their own privacy policies.
2. Data Controller & Contact Information
Jilin Guiyuan Trading Co., Ltd. is the data controller responsible for the processing of personal information through the Site, as defined by applicable privacy laws.
- Unified Social Credit Code (USCC): 91220104MAKHWRYK7X
- Registered Address: Room 1004, Unit 1, Sheng'an Building, Junction of Xi'an Avenue and Kangping Street, Chaoyang District, Changchun, China
- Support Email: service@rixveno.com
- Contact Phone: +86 18730694257
- Business Hours: Monday to Friday, 9:00 AM – 5:00 PM (UTC+8, China Standard Time)
Certain service providers (e.g., payment processors, Shopify) may act as independent data controllers for specific processing activities, in accordance with their own privacy policies.
3. Information We Collect
The information we collect depends on how you interact with our Site and services, and falls into three categories:
3.1 Information You Provide Directly
- Checkout & orders: Full name, email address, phone number, billing address, shipping address, order details, and purchase amount.
- Customer support: Message content, order reference numbers, attachments you submit, and correspondence history.
- Marketing subscriptions: Email address and communication preferences, when you opt in to promotional updates.
- Account information: Account credentials and profile details, if account features are available.
3.2 Information Collected Automatically
When you access our Site, we automatically collect:
- IP address, browser type, device information, operating system, and referring website
- Page visit history, session duration, click activity, and session/cookie identifiers
- Shopping cart selections and session data to preserve your choices during your visit
3.3 Information from Third Parties
We may receive limited information from service providers involved in your order, including payment confirmations, shipping status updates, and fraud prevention assessments.
4. Purposes & Legal Basis for Processing
4.1 Core Purposes of Processing
We process personal information for the following necessary purposes:
- To deliver Site content, maintain shopping cart functionality, and ensure platform security and stability
- To process and fulfill orders, verify payment status, arrange shipment, and handle returns, refunds, and order-related inquiries
- To comply with legal obligations for accounting, tax reporting, and record-keeping
- To detect and prevent fraud, unauthorized access, and misuse of our services
- To send operational communications related to your order, delivery, or privacy requests (not promotional)
Optional marketing and targeted advertising processing is separate from order fulfillment activities, and only occurs with your consent or as permitted by applicable law.
4.2 Lawful Grounds for Processing (Where Required)
When processing personal data subject to GDPR, UK GDPR, or similar regulations, we rely on one or more of the following legal grounds:
- Performance of a contract: Processing necessary to fulfill your order and deliver purchased goods.
- Compliance with legal obligations: Processing required to meet tax, accounting, and regulatory record-keeping requirements.
- Legitimate interests: Processing for platform security, fraud prevention, customer support improvement, and business operation optimization, where our interests do not override your fundamental privacy rights.
- Consent: Processing for promotional emails, non-essential cookies, and targeted advertising, where consent is required by law. You may withdraw your consent at any time, and withdrawal will not affect the lawfulness of processing conducted prior to withdrawal.
5. Payment Data Processing
Payment transactions are processed through third-party payment providers selected for our checkout process. Full payment card details, security codes, and payment credentials are entered directly into the provider's interface and are handled exclusively under the provider's own privacy policy and security standards.
We only receive limited payment references, transaction status, and basic information required for accounting, dispute resolution, and refund processing. Never share full card numbers, CVV codes, or payment passwords with our customer support team.
6. Information Sharing & Disclosure
We only share your personal information with third parties in the following circumstances, subject to applicable legal safeguards:
6.1 Service Providers
We share information with trusted service providers that perform functions on our behalf, limited to data necessary for their specific role:
- E-commerce platform and hosting providers (including Shopify, which powers our store technology)
- Payment processors, shipping and logistics carriers
- Fraud prevention and security service providers
- Email communication and customer support tools
- Professional advisors (e.g., legal, accounting services)
6.2 Legal Requirements
We may disclose information if required by law, court order, or valid governmental request, or to protect our legal rights, property, or the safety of our users or the public.
6.3 Business Transfers
In the event of a merger, acquisition, asset sale, or business restructuring, personal information may be transferred as part of the transaction, subject to applicable privacy laws and appropriate confidentiality safeguards.
7. Cookies & Similar Technologies
Our Site uses cookies, pixels, and similar tracking technologies to support core functionality and improve your experience. Cookies are small text files stored on your device when you visit a website.
7.1 Types of Cookies We Use
- Essential Cookies: Required for basic Site functionality, such as maintaining shopping sessions, securing user accounts, and enabling checkout. These cannot be disabled if you wish to use core Site features.
- Functional Cookies: Remember your preferences (e.g., language, region) to enhance your browsing experience.
- Analytics Cookies: Collect anonymous information about Site traffic, page performance, and user behavior to help us improve our services.
- Marketing Cookies: Track your browsing activity to deliver relevant advertisements on third-party platforms, where enabled with your consent.
7.2 Managing Cookies
You can manage or disable non-essential cookies through your browser settings or the Site's consent management tool. Disabling essential cookies may cause core Site functions to work incorrectly.
8. Marketing & Advertising Choices
8.1 Promotional Emails
If you opt in to receive promotional emails, you may unsubscribe at any time by following the "unsubscribe" link included in every message, or by contacting us at service@rixveno.com. Unsubscribing will not stop operational communications related to active orders, refunds, or privacy requests.
8.2 Targeted Advertising
Where applicable law defines targeted advertising practices as a "sale" or "sharing" of personal information, you have the right to opt out. You may submit a request to service@rixveno.com, or use any privacy preference tools available on the Site. We recognize signals such as Global Privacy Control where required by applicable law.
9. International Data Transfers
Our operations and service providers may be located in countries outside your country of residence, which means your personal information may be transferred to and processed in jurisdictions with different data protection laws.
When transfers to countries without an adequacy decision are required, we implement appropriate legal safeguards in accordance with applicable law, including standard contractual clauses (SCCs) or other legally recognized transfer mechanisms, to ensure your personal information remains protected.
10. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by legal, tax, or accounting obligations. Retention periods vary by data type:
- Order and transaction records are retained for the duration required by tax, accounting, and consumer protection laws.
- Customer support correspondence is retained until the issue is resolved, and for a reasonable period thereafter for reference and dispute resolution.
- Security and fraud prevention records are retained for the period necessary to protect the Site and comply with legal requirements.
- Marketing contact information is retained until you unsubscribe or request deletion.
When information is no longer needed, we securely delete or de-identify it in accordance with applicable law.
11. Data Security
We implement reasonable technical and organizational security measures appropriate to the sensitivity of the data we process, including access controls, encryption for sensitive data, regular security assessments, and staff training, to protect against unauthorized access, loss, misuse, or disclosure of personal information.
However, no internet-based system or data transmission can be guaranteed to be 100% secure. You are responsible for keeping your account credentials confidential. If you suspect any unauthorized use of your personal information or account, please contact us immediately.
12. Your Privacy Rights
Depending on your location, you may have the following rights under applicable privacy laws, subject to lawful exceptions and verification requirements.
12.1 Rights for EU/EEA & UK Residents
Under the GDPR and UK GDPR, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete personal information
- Request erasure of your personal information, where legally permitted
- Request restriction of processing of your personal information
- Object to processing based on legitimate interests
- Request data portability of information you provided to us
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection authority
12.2 Rights for California Residents
Under the CCPA/CPRA, California residents have the right to:
- Request disclosure of the categories and specific pieces of personal information we collect, use, and disclose
- Request deletion of your personal information, subject to exceptions
- Opt out of the "sale" or "sharing" of your personal information for targeted advertising
- Receive equal service and pricing, without discrimination for exercising your privacy rights
12.3 Exercising Your Rights
To submit a privacy request, email us at service@rixveno.com with a description of your request and the information involved. We may require reasonable identity verification before processing your request to protect your privacy.
We will respond to valid requests within the timeframe required by applicable law, and will provide a clear explanation if we are unable to fulfill a request for legal reasons.
13. Children's Privacy
Our Site is intended for general adult audiences and is not directed at children. We do not knowingly collect personal information from children under the age of 16 (or the relevant age of digital consent in your jurisdiction) in violation of applicable law. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to review and delete the information.
14. Third-Party Links
Our Site may contain links to external websites, services, or platforms that are not operated by us. We have no control over the privacy practices, content, or policies of third-party sites. We encourage you to review the privacy policy of every site you visit after leaving our Site.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operations, services, legal requirements, or industry standards. Updated versions will be posted on this page with a revised "Last Updated" date. For material changes that significantly impact your privacy rights, we will provide additional notice as required by applicable law.
This policy does not replace the independent privacy policies of third-party service providers that act as separate data controllers.