Privacy Policy

Thank you for visiting the official website of 【中國畫家謝遠新】 (hereafter referred to as "this website"). This privacy policy aims to clarify how this website collects, uses, stores, protects, and discloses your personal data, while safeguarding your data rights under applicable laws and regulations. By using this website, you agree to all terms of this policy.

1. Scope of Application

This policy applies to all user data collected through this website (built on Strikingly), including but not limited to information provided by visitors, registered users, purchasers, and partners. This policy also complies with relevant legal requirements, such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and China's Personal Information Protection Law (PIPL).

2. Types of Personal Data Collected and Their Uses

1. Basic Identity Information: This includes name, email address, phone number, etc., collected through registration forms, contact forms (e.g., Contact Form 7), or order submissions. Used for account management, order processing, customer support, and necessary service notifications.

2. User Behavioral Data: This includes IP addresses, browsing history, click records, device information, etc., collected through Strikingly logs, Google Analytics, and other tools. Used to optimize website functionality, improve user experience, and analyze traffic trends.

3. Cookie and Similar Technology Data: This website uses necessary cookies to maintain basic functions (e.g., login status) and optional cookies for market analysis (e.g., Facebook Pixel). You can refuse non-essential cookies through your browser settings.

4. Sensitive Data: Such as payment information (credit card numbers), health data, etc., will only be collected with your explicit consent and only used for the specified purposes (e.g., payment processing), with transmission secured via SSL encryption. All payment transactions are processed through secure gateways (e.g., Stripe/PayPal) and comply with PCI-DSS standards. We do not store your credit card information on our servers.

3. Data Use and Storage

1. Data will be used strictly in accordance with the "principle of minimal necessity," solely for the purposes specified in this policy, and will not be used for other purposes without your permission.

2. Data will be stored in encrypted form (HTTPS/SSL), with the storage duration limited to the shortest period necessary to achieve the specified purposes. After this period, data will be automatically deleted or anonymized.

3. If cross-border data transfer is necessary (e.g., using overseas servers), we will ensure compliance with the data protection regulations of the target region and implement compliance measures such as encrypted transmission and Data Processing Agreements (DPA).

4. Third-Party Data Sharing

This website will only share your data under the following circumstances and ensure that third parties adhere to equivalent privacy protection standards:

1. Necessity of Services: For example, processing payments via Stripe/PayPal or sending marketing emails through Strikingly.

2. Legal Requirements: Disclosure of data as required by law (e.g., court subpoenas or regulatory orders).

3. Security Protection: To protect this website, users, or the public interest, and to respond to emergencies such as data breaches or fraud.

5. User Data Rights

Under relevant laws and regulations, you have the following rights, which you can exercise by submitting requests through the contact information provided in this policy:

1. Right of Access: To inquire about your collected personal data and its processing status;

2. Right to Rectification: To request correction of inaccurate or incomplete data;

3. Right to Deletion ("Right to be Forgotten"): To request deletion of your personal data (except where subject to legal retention obligations);

4. Right to Data Portability: To obtain a copy of your data (in commonly used format);

5. Right to Withdraw Consent: You may withdraw your consent for non-essential data processing at any time, but withdrawing consent does not affect the lawfulness of processing conducted before the withdrawal.

6. Data Security Measures

1. Technical Protection: Enabling SSL certificates for encrypted transmission, regularly backing up data, restricting backend access, and requiring strong passwords and two-factor authentication;

2. Process Control: Only authorized personnel can access sensitive data, with regular data security audits;

3. Emergency Response: In the event of a data breach, affected users and regulatory authorities (if applicable) will be notified within 72 hours.

7. Policy Updates and Notifications

1. This policy will be regularly updated in accordance with changes in laws and regulations or adjustments to website functionality. After updates, the new version will be published prominently on the website, with the effective date indicated;

2. Significant changes will be communicated to you via email or website pop-up notifications. Your continued use of this website indicates your acceptance of the updated policy.

8. Contact Information

If you have any questions regarding this privacy policy, need to exercise your data rights, or wish to make complaints or reports, please contact us through the following means:

Email: angel@xieyuanxin.com

Phone: +86 13537383677

Address: Room 09, 3rd Floor, Block C, Guangxin Building, Dongcheng Avenue, Gangbei Community, Dongguan City, Guangdong Province