Privacy Policy
Last updated: July 18, 2026
At Orizenglow (“we,” “us,” “our,” or “our store”), we are committed to protecting your privacy and ensuring that your personal information is handled safely and responsibly. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your data.
By visiting our website orizenglow.com (the “Site”) and purchasing our products, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect:
- Personal identification: Name, email address, phone number, shipping/billing address
- Order details: Purchase history, product preferences, order number
- Payment information: Payment is processed through secure third-party providers (such as PayPal and Airwallex). We do not store your full credit card or payment details on our servers
- Communications: Messages you send us via email, contact forms, or our chat widget
- Device and browser information: IP address, browser type and version, operating system, device type
- Usage data: Pages visited, time spent on pages, referring URLs, click patterns
- Cookies and similar technologies: Session cookies, preference cookies, analytics cookies (see Section 5 below)
- Payment processors (PayPal, Airwallex)
- Shipping carriers
- Analytics providers (Google Analytics, if enabled)
- Social media platforms (when you interact with our social content)
- Process and deliver your orders
- Provide customer support and respond to inquiries
- Send order confirmations, shipping updates, and delivery notifications
- Send promotional emails and newsletters (only if you have opted in)
- Improve our website, products, and services
- Prevent fraud and ensure transaction security
- Comply with legal obligations
- Analyze website traffic and user behavior to optimize your shopping experience
- Contract performance: Processing your order, delivering products, and providing customer support (Article 6(1)(b))
- Legal obligation: Compliance with tax, accounting, and customs requirements (Article 6(1)(c))
- Legitimate interests: Fraud prevention, website security, and business analytics (Article 6(1)(f))
- Consent: Sending marketing emails, setting non-essential cookies, and other optional activities (Article 6(1)(a))
- Our cookie consent banner (displayed on first visit for EU/EEA users)
- Your browser settings (you can disable cookies at any time)
- Opting out of analytics by visiting Google Analytics Opt-out
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”): Request deletion of your personal data
- Right to restriction: Request that we limit processing of your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time for consent-based processing
- Right to lodge a complaint: File a complaint with your local data protection authority
- Know: Request disclosure of the categories and specific pieces of personal information we collect
- Delete: Request deletion of your personal information
- Opt-out of sale: Request that we do not sell your personal information (we do not sell personal information)
- Non-discrimination: Receive equal service and pricing regardless of exercising your privacy rights
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Binding corporate rules where applicable
- SSL/TLS encryption for all data in transit
- Secure payment processing through PCI-DSS compliant providers
- Regular security reviews and vulnerability assessments
- Restricted access to personal data (only authorized personnel)
- Regular backups and disaster recovery procedures
- EU/EEA/UK: Your local Data Protection Authority. A list of EU DPAs is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
- California: The California Attorney General’s Office at oag.ca.gov
- China: Cyberspace Administration of China (CAC) at cac.gov.cn
- Clicking the “unsubscribe” link in any marketing email
- Contacting us at hello@orizenglow.com
- Access and update your personal information at any time through your account dashboard
- View your order history and order status
- Request account deletion by contacting us at hello@orizenglow.com
- Update the “Last updated” date at the top of this policy
- Post a notice on our website homepage for at least 30 days
- Send an email notification to registered users (for significant changes)
- Email: hello@orizenglow.com
- Address: Room 1529, Yihua Lingfeng Building, No. 38 South Yuelai Road, Shiqi Subdistrict, Zhongshan City, Guangdong Province, P.R.China
- Website: orizenglow.com/contact/
1.2 Information Collected Automatically
When you browse our Site, we may automatically collect:
1.3 Information from Third Parties
We may receive information from third-party services such as:
2. How We Use Your Information
We use the information we collect to:
We will never sell or rent your personal information to third parties.
3. Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA), we process your personal data under the following legal bases:
You may withdraw your consent at any time by contacting us at hello@orizenglow.com or using the unsubscribe link in our emails.
4. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy:
| Data Type | Retention Period |
|---|---|
|
|
|
| Order and transaction records | 7 years (or as required by law) |
| Account information | Until account deletion is requested |
| Marketing consent records | Until consent is withdrawn |
| Customer service communications | 2 years after last interaction |
| Website analytics data | 26 months |
| IP and device data | 12 months |
After the retention period expires, your data will be deleted or anonymized.
5. Cookies and Tracking Technologies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device when you visit a website.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
|
|
|
|
|
| Essential cookies | Shopping cart, checkout, login session | Session | No |
| Preference cookies | Language, currency selection | 30 days | No |
| Analytics cookies | Website traffic analysis, user behavior | 26 months | Yes |
| Marketing cookies | Ad tracking, retargeting | 180 days | Yes |
| Social media cookies | Social sharing buttons | Session | Yes |
5.2 Managing Cookies
You can control and manage cookies through:
Note: Disabling essential cookies may affect website functionality (e.g., shopping cart, checkout).
6. Your Privacy Rights
6.1 GDPR Rights (EEA/UK Residents)
If you are a resident of the European Economic Area or the United Kingdom, you have the following rights:
6.2 CCPA Rights (California Residents)
If you are a California resident, under the California Consumer Privacy Act (CCPA), you have the right to:
To exercise any of these rights, please contact us at hello@orizenglow.com with the subject line “Privacy Rights Request.”
6.3 Other Jurisdictions
If you are located outside the EEA, UK, or California, you may still have privacy rights under your local laws. Please contact us to inquire about your rights.
7. Data Sharing
We may share your information with the following categories of recipients:
| Recipient | Purpose | Data Shared |
|---|---|---|
|
|
|
|
| Payment processors (PayPal, Airwallex) | Process payments | Name, email, billing address, order amount |
| Shipping carriers | Deliver orders | Name, shipping address, order details |
| Analytics providers | Website analytics | IP address (anonymized), usage data |
| Email service providers | Send newsletters and order updates | Name, email address |
| Hosting provider | Website hosting | Server logs, IP addresses |
| Legal authorities | Compliance with legal obligations | As required by law |
We do not share your data with data brokers or sell it for advertising purposes.
8. International Data Transfers
As an international e-commerce business, your personal information may be transferred to and processed in countries other than your country of residence, including China (where our headquarters are located) and the United States.
For transfers of personal data from the EEA/UK, we rely on:
For transfers from the United States, we comply with applicable state and federal privacy laws.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
10. Children’s Privacy
Our website is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at hello@orizenglow.com, and we will take steps to delete such information.
11. Third-Party Links
Our website may contain links to third-party websites (such as social media platforms, payment providers, or shipping carriers). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.
12. Your Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable law, you have the right to lodge a complaint with:
We encourage you to contact us first, as we are committed to resolving any concerns promptly.
13. Newsletter and Marketing
If you subscribe to our newsletter, we will collect your email address and may collect your name to personalize communications. You can unsubscribe at any time by:
We will process your unsubscribe request within 48 hours.
14. Account Information
If you create an account on our website, you can:
When you request account deletion, we will remove your personal information within 30 days, except where we are legally required to retain certain data (e.g., transaction records).
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy-related inquiries within 72 hours.
This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the ePrivacy Directive, and the Personal Information Protection Law (PIPL) of the Hong Kong.
