Privacy Policy

1. Introduction

Welcome to ShinneMuse.

This Privacy Policy explains how Ningbo Wandefu International Trade Co., Ltd.
(宁波万德福国际贸易有限公司), operating under the ShinneMuse brand, collects,
uses, discloses, stores, and protects personal information when you visit our
website, submit an inquiry, or communicate with us regarding our products,
wholesale opportunities, customization services, or business cooperation.

In this Privacy Policy, “ShinneMuse,” “we,” “us,” and “our” refer to
Ningbo Wandefu International Trade Co., Ltd. “Website” refers to
shinnemuse.com and the pages,
forms, and functions available through it.

By using the Website or submitting information to us, you acknowledge that
you have read this Privacy Policy.

2. Who We Are

ShinneMuse is a brand operated by Ningbo Wandefu International Trade Co., Ltd.

Where applicable under data protection law, Ningbo Wandefu International
Trade Co., Ltd. is the data controller responsible for determining how and
why personal information collected through the Website is processed.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through the
Website and through business communications initiated through the Website.

This includes information connected with contact forms, product inquiries,
wholesale inquiries, quotation requests, sample discussions, customization
requirements, brand cooperation, licensing inquiries, and related
correspondence.

This Privacy Policy does not apply to websites, applications, social media
platforms, or services operated independently by third parties, even when
they are linked to or embedded within the Website.

4. Information You Provide to Us

When you submit a contact or business inquiry form, we may collect information
such as:

• Your full name
• Business email address
• Company or store name
• Country or region
• Phone or WhatsApp number
• Inquiry type
• Business type
• Product category of interest
• ShinneMuse character of interest
• Estimated order quantity
• Customization interests
• The contents of your message
• Your privacy acknowledgement or consent record
• The date, time, and source page of your submission

Some fields are optional. Required fields are identified on the relevant form.

Please provide only information that is reasonably necessary for your inquiry.

5. Business and Commercial Information

If your inquiry develops into a quotation, sample request, customization
project, wholesale transaction, or other business relationship, we may collect
additional information through subsequent communications.

This information may include:

• Company registration or business information
• Billing and shipping addresses
• Contact persons and job titles
• Tax or customs-related information
• Product specifications
• Artwork, logos, packaging files, or design requirements
• Requested quantities
• Delivery requirements
• Quotation and order information
• Payment and transaction records
• Communications relating to quality control, production, shipping, or
  after-sales matters

The Website does not currently provide public user registration or direct
online payment.

If account registration, online checkout, or direct payment functions are
introduced, this Privacy Policy will be updated before additional categories
of personal information are collected.

6. Information Collected Automatically

When you visit the Website, certain technical information may be collected
automatically by our hosting systems, security tools, server logs, cookies,
or similar technologies.

This information may include:

• Internet Protocol address
• Browser type and browser version
• Device type
• Operating system
• Language settings
• Referring website or page
• Pages viewed
• Date and time of access
• Time spent on pages
• Website navigation and interaction data
• Error, diagnostic, and security logs
• Approximate location derived from an Internet Protocol address
• Cookie preferences and consent records

We use this information to operate the Website, maintain security, diagnose
technical problems, prevent misuse, and understand how visitors interact
with the Website.

7. Sensitive Personal Information

We do not intentionally request sensitive personal information through the
Website.

Please do not submit government identification numbers, financial account
credentials, health information, biometric information, political opinions,
religious beliefs, or other sensitive information unless we have specifically
requested it for a legitimate and lawful business purpose.

If sensitive personal information is submitted without being requested and
is not necessary for the relevant purpose, we may delete or restrict access
to it.

8. How We Use Personal Information

We may use personal information for the following purposes:

• To receive, review, and respond to inquiries
• To identify the products, characters, quantities, or customization services
  you are interested in
• To assess wholesale, distribution, retail, licensing, or cooperation
  opportunities
• To prepare quotations, samples, product information, and proposals
• To communicate about potential or existing business relationships
• To process customization and private-label requirements
• To operate, maintain, and improve the Website
• To diagnose technical problems
• To protect the Website and our systems against spam, fraud, misuse,
  unauthorized access, and security incidents
• To maintain internal business and communication records
• To comply with legal, regulatory, accounting, tax, customs, and contractual
  requirements
• To establish, exercise, or defend legal claims
• To analyze Website performance when analytics tools have been enabled with
  the required permissions
• To protect our rights, property, employees, users, customers, and business
  partners

We will not automatically add you to a marketing email list solely because
you submitted a contact or business inquiry.

9. Legal Bases for Processing

Where the General Data Protection Regulation, UK General Data Protection
Regulation, or similar legislation applies, we process personal information
only when we have an appropriate legal basis.

Steps Before Entering Into a Contract

We may process information when it is necessary to respond to a quotation
request, product inquiry, sample request, customization request, or another
request made before entering into a commercial agreement.

Performance of a Contract

We may process information when it is necessary to perform or administer an
agreement with you or the company you represent.

Legitimate Interests

We may process information when necessary for our legitimate business
interests, provided those interests are not overridden by your rights and
freedoms.

These interests may include responding to business communications, managing
customer and supplier relationships, securing the Website, preventing fraud,
maintaining business records, improving our services, and protecting our
legal rights.

Consent

We may rely on your consent for optional cookies, analytics technologies,
advertising technologies, marketing communications, or other processing
activities where consent is required.

You may withdraw consent at any time. Withdrawal does not affect the
lawfulness of processing carried out before consent was withdrawn.

Legal Obligations

We may process or retain information when necessary to comply with applicable
legal, regulatory, accounting, tax, customs, court, or governmental
requirements.

10. Cookies and Similar Technologies

The Website may use cookies, local storage, tags, pixels, scripts, and similar
technologies.

Strictly necessary technologies may be used to provide essential Website
functions, maintain security, remember cookie preferences, operate forms,
and ensure that pages work correctly.

Analytics, advertising, personalization, and other non-essential technologies
will be used only in accordance with applicable consent requirements.

Where consent is required, these technologies will not be activated until
you have made the relevant choice through our cookie consent interface.

You may accept, reject, or customize non-essential cookies using the cookie
banner or the Cookie Settings link available on the Website.

Further information about individual cookies, providers, purposes, and
retention periods will be provided in our
Cookie Policy.

11. Analytics and Tag Management

We may use Google Tag Manager and Google Analytics 4 to manage website tags
and understand how visitors use the Website.

These tools are not currently active while the Website is under development.
If they are enabled, we will configure them in accordance with applicable
privacy and cookie requirements.

Where required, non-essential analytics technologies will not be activated
before the visitor has provided consent.

Analytics information may include pages viewed, approximate location, device
and browser information, referral sources, interaction events, and Website
performance information.

We will update this Privacy Policy and the Cookie Policy if our use of
analytics tools materially changes.

12. Advertising Technologies

We do not currently use Meta Pixel, Google Ads conversion tracking,
personalized advertising cookies, or similar advertising technologies on
the Website.

If advertising measurement, remarketing, profiling, or targeted advertising
tools are introduced, we will update this Privacy Policy and the Cookie Policy
before or when those tools are enabled.

Where required by law, advertising technologies will not be activated before
the visitor has provided valid consent.

13. Embedded Content and Social Media

The Website may include embedded videos, images, buttons, or other content
provided by third-party platforms.

We may, for example, embed YouTube videos in future Website pages.

When third-party content is loaded, the relevant provider may receive
information such as your Internet Protocol address, browser information,
device information, the page you visited, and your interaction with the
embedded content.

Third-party providers may also place cookies or use similar technologies in
accordance with their own privacy practices.

Where required, we will request consent before loading non-essential
third-party embedded content.

Your interaction with third-party platforms is governed by the privacy
policies and terms of those providers.

14. How We Share Personal Information

We may share personal information only when reasonably necessary for the
purposes described in this Privacy Policy.

Categories of recipients may include:

• Website hosting and infrastructure providers
• Email hosting and email delivery providers
• Form processing and Website functionality providers
• Cookie consent management providers
• Analytics and tag management providers, when enabled
• Website developers, information technology providers, and security providers
• Logistics, inspection, production, or fulfillment partners where necessary
  for a requested service
• Professional advisers, including lawyers, accountants, auditors, and
  consultants
• Government authorities, regulators, courts, or law enforcement bodies where
  disclosure is legally required
• Parties involved in a merger, acquisition, restructuring, financing, sale,
  or transfer of all or part of our business

We use Hostinger to host the Website and related infrastructure.

We may use an external email delivery provider to transmit Website inquiry
messages and business emails. Amazon Web Services, including Amazon Simple
Email Service, may be used in the future if that service is enabled.

Google services may process limited information if Google Analytics,
Google Tag Manager, YouTube, or other Google services are enabled.

We require service providers acting on our behalf to process personal
information only for authorized purposes and to apply appropriate
confidentiality and security measures, subject to applicable contractual
and legal requirements.

15. Sale of Personal Information

We do not currently sell personal information in exchange for money.

We also do not currently use personal information collected through the
contact form for cross-context behavioral advertising.

If our practices change in a way that constitutes a sale or sharing of
personal information under applicable law, we will update this Privacy Policy
and provide any notices, consent mechanisms, or opt-out rights required by law.

16. International Data Transfers

We are located in China, and information submitted through the Website may
be processed in China.

Our hosting providers, email providers, analytics providers, embedded-content
providers, and other service providers may process information in countries
other than the country in which you live.

These countries may have privacy laws that differ from those in your
jurisdiction.

Where applicable law requires safeguards for international transfers, we
will use appropriate contractual, organizational, or legal mechanisms
designed to protect personal information.

These mechanisms may include contractual data protection obligations,
standard contractual clauses, adequacy mechanisms, or other legally
recognized safeguards where applicable.

17. Data Retention

We retain personal information only for as long as reasonably necessary for
the purposes described in this Privacy Policy, unless a longer period is
required or permitted by law.

Contact and business inquiry records that do not result in an ongoing
commercial relationship will generally be retained for up to 24 months after
the last substantive communication.

Information relating to an active quotation, sample request, customization
project, order, contract, customer relationship, supplier relationship,
dispute, or legal claim may be retained for the duration of that matter and
for any additional period required by applicable accounting, tax, customs,
contractual, or legal obligations.

Server, security, and diagnostic logs may generally be retained for up to
12 months, unless a longer period is needed to investigate abuse, fraud,
technical problems, or security incidents.

Cookie consent records may be retained for as long as reasonably necessary
to record and demonstrate visitor preferences and compliance.

Analytics information, if analytics tools are enabled, will be retained
according to the retention settings configured within the relevant analytics
service.

When personal information is no longer required, we will take reasonable
steps to delete, anonymize, or securely dispose of it.

18. Data Security

We use reasonable technical and organizational measures designed to protect
personal information against unauthorized access, loss, misuse, disclosure,
alteration, and destruction.

These measures may include encrypted connections, restricted administrative
access, account security controls, software updates, monitoring, backups,
and access limitations based on business necessity.

Access to personal information is limited to personnel and service providers
who reasonably require it for authorized business purposes.

No method of transmission over the Internet and no electronic storage system
is completely secure. We therefore cannot guarantee absolute security.

If we become aware of a personal information breach, we will investigate
and take appropriate action in accordance with applicable legal requirements.

19. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request confirmation of whether we process your personal information
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing based on legitimate interests
• Request data portability where applicable
• Withdraw consent at any time where processing is based on consent
• Object to or opt out of direct marketing
• Lodge a complaint with an applicable data protection or supervisory
  authority
• Exercise additional rights provided by the privacy laws of your jurisdiction

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, contact us at
sales@shinnemuse.com
and clearly describe your request.

We may request information reasonably necessary to verify your identity and
protect personal information against unauthorized disclosure.

We will respond within the period required by applicable law.

20. Children’s Privacy

The Website is intended for business users and a general audience. It is not
directed to children under 13 years of age or to children below the minimum
age established by applicable local law.

We do not knowingly collect personal information directly from children
under 13 through the Website.

Children should not submit contact forms, business inquiries, phone numbers,
email addresses, or other personal information without the involvement and
permission of a parent or legal guardian.

If you believe that a child has submitted personal information to us without
appropriate authorization, contact us at
sales@shinnemuse.com.

If we confirm that personal information was collected from a child in
circumstances prohibited by applicable law, we will take reasonable steps
to delete it.

21. Third-Party Links

The Website may contain links to websites, social media platforms,
marketplaces, video platforms, or services operated by third parties.

We do not control the privacy, security, content, or data-handling practices
of third parties.

The inclusion of a link does not mean that we endorse or accept responsibility
for the third party’s privacy practices.

We recommend reviewing the privacy policy and terms of each third-party
service before providing information or interacting with that service.

22. Legal Disclosures

We may disclose personal information when we reasonably believe disclosure
is necessary to:

• Comply with applicable laws or regulations
• Respond to a valid court order, subpoena, governmental request, or legal
  process
• Cooperate with regulators or law enforcement authorities
• Investigate fraud, misuse, security incidents, or violations of our terms
• Protect the rights, property, safety, and security of the Company, our
  users, our customers, our employees, or other persons
• Establish, exercise, or defend legal claims
• Enforce agreements or protect legitimate business interests

We will assess disclosure requests and disclose only information reasonably
necessary under the circumstances, subject to applicable law.

23. Business Transfers

If we are involved in a merger, acquisition, reorganization, financing,
insolvency, sale of assets, or transfer of all or part of our business,
personal information may be reviewed, transferred, or disclosed as part of
that transaction.

Any recipient of personal information in such a transaction will be required
to process it in accordance with applicable law and the privacy commitments
that apply at the time of transfer.

24. Automated Decision-Making

We do not currently use personal information collected through the Website
to make decisions based solely on automated processing that produce legal
effects or similarly significant effects on individuals.

If we introduce such processing in the future, we will provide any additional
notice and rights required by applicable law.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the
Website, our services, our technology providers, our business practices, or
applicable legal requirements.

When we update the Privacy Policy, we will revise the “Last Updated” date at
the top of the page.

Where changes are material, we may provide an additional notice through the
Website, cookie consent interface, email, or another appropriate method.

We encourage visitors to review this Privacy Policy periodically.

26. Contact Us

For questions about this Privacy Policy, our privacy practices, or a request
concerning your personal information, contact us using the following details: