Privacy Policy

Who is responsible

Orient Qi is operated by 南京物与心文化科技有限公司. Privacy and customer-service requests may be submitted through the Contact page or by replying to an Orient Qi order or service email.

Information we collect

• Contact, account, billing, delivery, sizing, personalization, and order details.
• Payment status and transaction identifiers. PayPal or another payment provider processes payment credentials; Orient Qi does not store full card or PayPal login details.
• Messages, approval records, photographs or videos exchanged for order confirmation, and fraud-prevention signals.
• Birth details and consent records only when voluntarily submitted for a requested cultural report. Do not place birth details in public reviews or ordinary WooCommerce order notes.
• Technical data such as IP address, browser, device, essential cookies, and server security logs.

How we use information

• To provide the site, process and deliver orders, collect the one-order-one-confirmation approval, and provide customer support.
• To create and deliver a requested cultural self-reflection report with human review.
• To prevent fraud, secure the service, keep accounting records, comply with law, and resolve disputes.
• To send marketing only where consent or another lawful basis permits it. Orient Qi does not sell personal information.

Sharing and international processing

Information is shared only as needed with service providers such as WooCommerce, hosting and security providers, PayPal, email providers, carriers, customs agents, and professional advisers. These providers may process data in other countries under their own terms and applicable safeguards.

Retention and security

Order, payment, customs, and tax records are retained for the period required by applicable law. Support and approval records are kept only as long as reasonably needed to perform the contract, handle returns, and resolve disputes. Cultural-report inputs are kept only for delivery, correction, and the disclosed support period, then deleted or de-identified unless law or an active dispute requires longer retention. Backups expire on a controlled rotation.

Reasonable administrative and technical safeguards are used, but no online system can guarantee absolute security.

Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or withdrawal of optional consent, and may complain to a competent authority. Some records may be retained where required for tax, fraud, dispute, or legal purposes. Mandatory local privacy rights are not limited by this policy.