1. Who is responsible
This site is operated by the Yaowang Lab export desk (Shenzhen, Guangdong, China). For anything in this policy, write to hello@yaowanglab.com. Where the EU/UK GDPR applies, we act as the data controller for the data described here.
2. What we collect and why
| Purpose | Data | Needed for |
|---|---|---|
| Order fulfilment | Name, phone, shipping address, email | Shipping, customs paperwork, delivery notices |
| Payment | Order amount, billing country, last 4 digits | Payment, refunds, fraud checks (card data handled by the payment provider) |
| Enquiries | Name, email, message | Answering you, quoting, sample requests |
| Wholesale accounts | Company, contact, tax/VAT number | Invoicing, export documents |
| Site security | IP, browser type, pages visited, referral link | Preventing abuse; knowing which article brought a visitor |
We do not collect: ID numbers, biometric data, precise location, contacts, photos or content of other apps.
3. Legal bases
Contract (fulfilling your order), legitimate interests (site security, basic statistics), consent (newsletter, if you opt in), and legal obligation (tax and customs records).
4. Who we share with
- Payment providers — to take payment and issue refunds;
- Carriers and customs brokers — to deliver and clear your parcel;
- Hosting, email and SMS providers — to run the site and send order notices;
- Authorities — where legally required.
We do not sell personal data. Order data may be processed outside your country (including China and the EU) by the providers above; transfers rely on the providers' standard contractual clauses.
5. How long we keep it
- Orders and invoices: as required by tax and customs law (typically 5–10 years);
- Enquiries: 24 months after the last reply;
- Server logs: 6 months.
6. Your rights
Access, correction, deletion, restriction, portability, objection, and withdrawal of consent where processing is based on it. Write to the address above; we answer within 30 days. You may also complain to your local data protection authority. Exercising these rights never costs you access to our products.
7. Cookies and local storage
We use browser storage for three things only: keeping your cart, remembering which article referred you (attribution code), and keeping you signed in. No third-party advertising cookies, no cross-site tracking. Clearing your browser storage resets these.
8. Security
HTTPS everywhere; passwords stored salted and hashed; staff access limited by role and logged; database backups taken daily. If a breach affects you, we will notify you and the relevant authority as required.
9. Children
Our products and site are intended for adults. We do not knowingly collect data from children under 16; contact us and we will delete it.
10. Changes
We update the effective date at the top when this policy changes. Material changes are announced on this page.
Effective date: 1 November 2026