This Privacy Policy (the “Policy”) explains how WTIGG (“we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal information when you access or use our website (https://wtigg.com/), purchase our jade jewelry products, or interact with our services (collectively, the “Services”). We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), and the Personal Information Protection Law (PIPL) of the People’s Republic of China. By using our Services, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal information as described in this Policy.

1. Definitions

  • Personal Information: Any information that can identify, directly or indirectly, a living individual. This includes but is not limited to your name, email address, phone number, shipping address, payment details, and device information.
  • Sensitive Personal Information: A subset of Personal Information that requires enhanced protection, such as financial account information (e.g., credit card details), government-issued identification numbers (if provided), and information relating to minors under 14 years of age.
  • Anonymous Information: Data that has been de-identified or anonymized such that it can no longer be linked to you, even with additional information. This Policy does not apply to Anonymous Information.

2. Information We Collect

We collect Personal Information only for legitimate, specific, and transparent purposes, following the principles of “legality, necessity, and minimization”. The information we collect falls into two categories: information you provide voluntarily, and information we collect automatically.

2.1 Information You Voluntarily Provide

We collect Personal Information when you actively share it with us, such as:

  • Account Registration & Profile: Name, email address, password (encrypted), and phone number (optional) when you create an account on our website.
  • Purchases & Orders: Shipping address, billing address, payment method details (e.g., credit card number, which is processed by third-party payment providers and not stored by us), and order preferences (e.g., product customization requests for jade jewelry).
  • Customer Support: Information you provide when contacting our team (e.g., via email at service@wtigg.com), such as inquiry details, order numbers, and screenshots (if shared to resolve issues).
  • Marketing Consent: If you opt in to receive promotional communications (e.g., newsletters, new collection alerts), we will store your consent status and contact information (email/phone).

2.2 Information Collected Automatically

When you use our Services, we may collect certain information automatically through technical tools like Cookies and server logs, including:

  • Device & Browser Information: Device model, operating system (OS), browser type, unique device identifiers (e.g., IMEI), and IP address.
  • Usage Data: Pages you visit on our website, time spent on each page, click-through rates, search queries (e.g., “jade bangle” or “custom jade pendant”), and referral sources (how you found our website).
  • Cookies: Small text files stored on your device to improve your browsing experience (e.g., remembering your login status or shopping cart items). You can manage or disable Cookies through your browser settings (see Section 8 for details), but this may affect the functionality of our Services.

3. Purpose of Collecting Personal Information

We use your Personal Information only for the purposes stated at the time of collection, and will not use it for unrelated purposes without your prior consent. The main purposes include:

  • Providing & Improving Services: Fulfilling your orders (e.g., processing payments, arranging shipping), delivering jade jewelry products, and optimizing our website (e.g., fixing bugs or enhancing user experience based on usage data).
  • Customer Support: Responding to your inquiries, resolving issues (e.g., order tracking, returns/exchanges), and providing personalized assistance (e.g., styling advice for jade jewelry).
  • Security & Fraud Prevention: Verifying your identity, detecting and preventing fraudulent activities (e.g., unauthorized account access), and protecting the security of our Services and users.
  • Marketing (With Consent): Sending promotional content (e.g., discounts on jade collections, limited-time offers) only if you have opted in. You can unsubscribe at any time (see Section 7.2).
  • Compliance with Laws: Fulfilling legal obligations, such as retaining order records for tax or regulatory purposes, or responding to lawful requests from government authorities.

4. Sharing & Disclosure of Personal Information

We do not sell, rent, or trade your Personal Information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

4.1 Trusted Third-Party Service Providers

We engage third-party vendors to assist with specific business functions, and these providers may access your Personal Information only to perform their services on our behalf. Examples include:

  • Payment Processors: Companies like PayPal or Stripe, which process your payment details (we do not store full credit card information).
  • Shipping Partners: Courier services (e.g., UPS, FedEx) that deliver your jade jewelry orders, who need your shipping address to fulfill deliveries.
  • Analytics Tools: Providers like Google Analytics, which help us analyze website usage data (this data is often anonymized).

We require all third-party providers to comply with applicable data protection laws, implement adequate security measures, and not use your information for any purpose other than the services they provide to us.

4.2 Legal & Safety Reasons

We may disclose your Personal Information if:

  • Required by law (e.g., responding to a subpoena, court order, or request from a regulatory authority).
  • Necessary to protect our legal rights, safety, or property, or the safety of other users (e.g., investigating fraud or unauthorized access).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your Personal Information may be transferred to the new owner. We will notify you of such a transfer via a prominent notice on our website or direct communication (e.g., email) and ensure the new owner complies with this Policy.

5. Storage of Personal Information

5.1 Storage Location

We store your Personal Information primarily in secure servers located within the United States (consistent with our business address in Flushing, NY). If we need to transfer your information outside the U.S. (e.g., to a third-party provider in another country), we will ensure compliance with cross-border data transfer laws:

  • For EU users: We use Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on the EU-U.S. Data Privacy Framework (DPF) if applicable.
  • For Chinese users: We will obtain your explicit consent before transferring data outside China and ensure the receiving party meets PIPL’s cross-border requirements.

5.2 Storage Period

We retain your Personal Information only for as long as necessary to fulfill the purposes stated in Section 3, or as required by law. For example:

  • Order & Account Information: Retained for 7 years after your last order or account activity (to comply with tax and consumer protection laws).
  • Marketing Consent: Retained until you unsubscribe or request deletion.
  • Automatically Collected Data (e.g., Cookies): Retained for up to 12 months, unless you delete them earlier.

After the retention period, we will either delete your Personal Information permanently or anonymize it so it can no longer identify you.

6. Your Rights Regarding Personal Information

You have legally protected rights over your Personal Information, and we make it easy for you to exercise these rights. Depending on your location (e.g., EU, California, China), your rights may include:

6.1 Key Rights

  • Right to Access: Request a copy of the Personal Information we hold about you.
  • Right to Correct: Request correction of inaccurate or incomplete information (e.g., updating your shipping address).
  • Right to Delete: Request deletion of your Personal Information (also called the “right to be forgotten”), except when we are required by law to retain it.
  • Right to Withdraw Consent: Withdraw consent for non-essential uses (e.g., marketing) at any time—this will not affect the legality of processing based on consent before withdrawal.
  • Right to Data Portability: Request a copy of your Personal Information in a structured, machine-readable format (e.g., CSV file) to transfer to another service provider.
  • Right to Restrict Processing: Request that we limit how we use your information (e.g., if you dispute the accuracy of the data).

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us via:

  • Email: service@wtigg.com (subject line: “Personal Information Request”)
  • Mail: WTIGG, 188TH STREET, Flushing, NY 11355, United States

We will verify your identity (e.g., by asking for your email address or order number) to protect your information from unauthorized access. We aim to respond to your request within 15–30 business days, depending on the complexity of the request. If we cannot fulfill your request (e.g., due to legal obligations), we will explain the reason in writing.

7. Protection of Personal Information

We take the security of your Personal Information seriously and implement a combination of technical and administrative measures to prevent unauthorized access, disclosure, loss, or tampering:

7.1 Security Measures

  • Technical Measures: Encryption of data in transit (via SSL/TLS protocols for website traffic) and at rest (e.g., encrypted databases for account information). Access controls (e.g., unique passwords, multi-factor authentication) for internal systems.
  • Administrative Measures: Regular security training for employees who handle Personal Information; strict access policies (only authorized staff can access sensitive data); and periodic security audits to identify and fix vulnerabilities.

7.2 Data Breach Response

If a personal information breach occurs (e.g., unauthorized access to user data), we will:

  • Investigate the breach promptly and take steps to contain it.
  • Notify affected users via email or a prominent notice on our website within 72 hours of discovering the breach (if required by law).
  • Provide details about the breach (e.g., type of information affected) and steps you can take to protect yourself (e.g., changing your password).

8. Cookies & Similar Technologies

We use Cookies to enhance your experience on our website. Below is a breakdown of the types of Cookies we use and how you can manage them:

8.1 Types of Cookies

  • Necessary Cookies: Essential for the functioning of our Services (e.g., remembering items in your shopping cart). These cannot be disabled without affecting website functionality.
  • Analytics Cookies: Used to analyze how users interact with our website (e.g., which pages are most visited). We use Google Analytics for this purpose—you can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  • Marketing Cookies: Used to deliver personalized promotional content (e.g., showing jade jewelry ads based on your browsing history). These are only used if you have opted in to marketing.

8.2 Managing Cookies

You can control Cookies through your browser settings (e.g., Chrome, Firefox, Safari). Most browsers allow you to:

  • View and delete existing Cookies.
  • Block future Cookies (note: this may disable features like saved login or shopping cart).
  • Receive alerts when a website tries to set a Cookie.

For detailed instructions, refer to your browser’s help documentation.

9. Protection of Minors

Our Services are not intended for individuals under 14 years of age (minors). We do not knowingly collect Personal Information from minors. If we discover that we have collected information from a minor without parental/guardian consent, we will delete it immediately. Parents or guardians who believe their child has provided information to us may contact us at service@wtigg.com to request deletion.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in laws, business practices, or technology. When we make material changes (e.g., changing how we share your information or expanding the purposes of collection), we will:

  • Post the updated Policy on our website with a new “Last Updated” date.
  • Notify you via email (if you have an account) or a prominent pop-up on our website before the changes take effect.

Your continued use of our Services after the updated Policy takes effect constitutes your acceptance of the changes. We encourage you to review this Policy regularly.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our handling of your Personal Information, please contact us:

  • Email: service@wtigg.com
  • Mail: WTIGG, 188TH STREET, Flushing, NY 11355, United States

For EU users: You also have the right to lodge a complaint with your local data protection authority (DPA) if you believe we have violated GDPR.

For California users: You may exercise your CCPA rights (e.g., right to delete, right to opt out of sales) by contacting us at the above channels. We do not sell your Personal Information, so there is no “opt out of sales” request needed—but we will honor any such requests if applicable.

By using WTIGG’s Services, you agree to the terms of this Privacy Policy. We are committed to protecting your privacy and earning your trust as you explore our collection of fine jade jewelry.