Last updated: January 26, 2026

Company Name: Zhijiang Botui Trading Co., Ltd.

Address: Room 1105, Building 1, E-commerce Industry Park, No. 28-1 Donghu Avenue, Majia Town, Zhijiang City, Yichang, Hubei Province, China

Authorized Director: Bao Junliang

Social Credit Code: 91420583MAK4M80B9E

Email: service@mail.sykenixor.com

Phone: 19202533461

Thank you for choosing our department store products in the United States, which include home decor (ceramic vases, Chinese-style screen desktop ornaments, handwoven tapestries), stationery gifts (wooden stamps, vintage feather pens), lifestyle essentials (creative fruit forks, silicone cup holders), and aromatherapy and personal care products (handcrafted scented candles, scalp massagers, body scrubs). We take your personal data security and privacy protection seriously, strictly adhering to relevant laws and regulations such as the California Consumer Privacy Act (CCPA) and the Gramm-Leach-Bliley Act (GLBA). This policy outlines the collection, use, storage, and protection measures for your data to safeguard your legal rights.

1. Data Collection Scope and Purpose

We follow the principles of "legality, fairness, and necessity" and collect only personal data related to shopping services, avoiding irrelevant information. The specific scope and purposes of data collection are as follows:

• Basic Identity and Contact Information: Includes your name, email address, phone number, shipping address, etc., used for order confirmation, logistics delivery, customer service communication, and after-sales service (e.g., handling returns for damaged items like ceramic vases).
• Order and Payment Data: Includes order number, product category, payment method, payment amount, etc., used for order fulfillment, transaction reconciliation, invoice issuance, and refund processing. This also enables us to provide order tracking services.
• Non-Identifiable Data: Includes browsing history, product preferences, etc., which are anonymized and used to optimize product recommendations and enhance service experience. These data are de-identified and cannot be used to identify individuals.

We do not proactively collect sensitive personal information (such as ID numbers, full bank card details, biometric data, etc.). If payment involves financial information, it is handled directly by third-party payment providers (such as PayPal or Klarna BNPL), and we do not store such sensitive data.

2. Data Use and Sharing Rules

1. Data Use Limitations: The collected data will only be used for the purposes outlined in this policy. We will not use your data for any unrelated purposes or change its usage scope without your explicit consent.
2. Third-Party Sharing Guidelines: We share data with compliant third parties only when necessary to provide services and strictly limit their use:Sharing basic information (name, shipping address, phone number) with logistics service providers for product delivery (e.g., providing tracking information after shipping).Sharing order amount and payment details with payment institutions for transaction settlement.Third-party service providers are prohibited from using the shared data for any other purposes and must have appropriate data protection capabilities. We review and supervise their compliance.

We will not sell or rent your personal data to unrelated third parties unless required by law.

3. Data Security Protection Measures

We have established a comprehensive technical and management system to protect user data security and prevent risks such as data leakage, tampering, and destruction:

• Technical Protection: We use encryption, firewalls, access control, and other technologies to protect the storage and transmission of user data. We conduct regular network security checks and patch vulnerabilities to prevent cyberattacks.
• Management Guidelines: We limit data processing access to necessary staff only and maintain an operation log tracking mechanism. We also provide employee training on data security to raise awareness of privacy protection.
• Emergency Response: We have developed a data breach emergency response plan. In case of a breach, we will immediately take remedial measures, notify affected users promptly, and report to regulatory authorities as required by U.S. laws.

4. User Data Rights and How to Exercise Them

Under relevant U.S. privacy laws, you have the right to query, correct, delete, or cancel your personal data. Specific methods for exercising these rights are as follows:

• Query and Correction: You can view your personal data through your account settings. If you find any errors, you can contact customer service to request corrections.
• Deletion and Cancellation: You can request the deletion of your personal data or account cancellation. After verifying your identity, we will process the request promptly (except where retention is required by law or for necessary services).
• Rights Consultation: If you wish to exercise any of the above rights or have related inquiries, you can email us at service@mail.sykenixor.com. We will verify and respond to your request during our customer service hours (Monday to Friday, 9:00 AM to 6:00 PM UTC+8:00).

We will not discriminate against you for exercising your data privacy rights, nor will we refuse to provide services or increase product prices.

5. Data Storage and Retention Period

1. Storage Location: User data is stored on secure servers, primarily within the U.S. to comply with local data regulations.
2. Retention Period: We will retain data only as long as necessary to fulfill the service purpose and comply with legal requirements. Once the retention period expires, we will either anonymize the data or securely delete it and cease using your personal data for any purpose.

6. Disclaimer and Miscellaneous

1. If data security risks arise due to force majeure, third-party attacks, or user error (e.g., password leakage), we will take reasonable precautions and remedial measures, but we are not responsible for additional liability.
2. This policy may be updated in accordance with U.S. data protection regulations and business developments. Any updates will be publicly announced through official channels and will take effect immediately after the announcement. We recommend that you regularly review this policy.
3. If you have any questions, complaints, or suggestions regarding data security, please contact us via our official email. We will assist you in protecting your privacy rights.

Thank you for trusting and supporting our data security efforts. We will continue to improve our data protection system to provide you with a safer shopping experience.