Privacy & cookies
We collect the minimum needed to send you a parcel and answer your email. We do not sell personal data.
Last updated: 1 October 2026
Who is responsible for your data
Henan Jiayi Import & Export Co., Ltd., Room 131, 22nd Floor, Unit 1, Building 2, No. 79 Yulan Street, Zhengzhou High-Tech Industrial Development Zone, Zhengzhou, Henan, China, is the data controller for jiayiglobal.com. Privacy questions: privacy@jiayiglobal.com.
What we collect
| Category | Examples | Why |
|---|---|---|
| Order details | Name, delivery and billing address, email, phone, items purchased | To process, ship and support your order |
| Payment data | Card brand, last four digits, authorisation result | To take payment and handle refunds — full card numbers never reach our servers |
| Contact records | Emails, chat transcripts, return requests | To answer you and keep a record of the resolution |
| Technical data | IP address, device and browser type, pages viewed | Security, fraud prevention and basic traffic analytics |
| Marketing preferences | Newsletter status, discount code usage | To send the emails you asked for |
Legal bases (EU/UK visitors)
- Contract — to fulfil an order you placed.
- Legitimate interests — fraud prevention, site security, and improving our products.
- Consent — marketing emails and non-essential cookies. You can withdraw at any time.
- Legal obligation — tax, accounting and consumer-protection records.
Payments
Card payments are processed by a PCI-DSS Level 1 payment provider. Card numbers are entered directly into their hosted payment fields and are tokenised; we store only an order reference, the card brand, the last four digits and the result of the transaction. This site in its current demo form does not transmit or store any card data.
Who we share data with
- Carriers and fulfilment partners (UPS, USPS, DHL eCommerce) — name, address, phone and parcel contents.
- Our payment provider and fraud-screening service — order value and billing details.
- Email and support platforms used to send order confirmations and reply to you.
- Analytics providers, only where you have accepted analytics cookies.
- Professional advisers, or authorities where we are legally required to disclose.
We never sell personal data, and we do not share it for cross-context behavioural advertising.
Cookies
We use four kinds of cookie:
- Essential — cart contents, checkout session, security. These cannot be switched off.
- Preferences — remembered currency and region.
- Analytics — aggregated page and funnel statistics.
- Marketing — measuring whether an ad led to a purchase.
Only essential cookies are set before you choose. You can change your choice at any time in the cookie banner, and block or delete cookies in your browser settings.
Retention
- Order and tax records: 7 years, as required by US tax law.
- Support emails: 3 years from the last message.
- Analytics data: 14 months, aggregated after that.
- Marketing list: until you unsubscribe, plus 30 days to honour the request.
Your rights
Depending on where you live, you may request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. California residents may request disclosure of categories collected and opt out of "sharing" as defined by the CCPA/CPRA — we do not sell personal information. Email privacy@jiayiglobal.com; we respond within 30 days and will not charge you or treat you differently for exercising a right.
International transfers
We are based in the United States and use suppliers in the US and EU. Where personal data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
Children
Our store is intended for adults. We do not knowingly collect personal data from children under 13 (or under 16 in the EEA/UK). If you believe a child has given us data, email us and we will delete it.
Security
The site is served over TLS. Access to order data is limited to staff who need it, protected by multi-factor authentication, and reviewed quarterly. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant regulator without undue delay.
Changes and complaints
We will post any material change to this policy on this page and update the date above. If you are unhappy with how we handled your data, contact us first — EU and UK residents may also complain to their local supervisory authority.