Privacy Policy

Effective date: September 2, 2026

1. Who We Are

This Privacy Policy explains how Yiwu Zitong Trading Firm (the “Company”, “we”, “us”, or “our”), the sole proprietor of the online store ztong.shop (the “Site” or “Store”), collects, uses, and protects your personal information when you visit our Site or purchase our products (in-ear monitors, DACs, ear tips, cables and related audio accessories, together the “Products”).

Business details:

Field	Details
Company name	Yiwu Zitong Trading Firm
Address	Room 202, Unit 1, Building 27, Zone 1, Xialou Village, Chengxi Subdistrict, Yiwu City, Jinhua City, Zhejiang Province 322000, China
Website	https://ztong.shop
Contact email	18938846771@163.com

We act as the data controller for the personal information described in this policy. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local laws govern how we handle your data. If you are a resident of California, the California Consumer Privacy Act (CCPA/CPRA) provides you with additional rights described below.

2. Information We Collect

We collect only the information needed to run our store and serve you:

a) Information you provide directly

Order information: name, billing and shipping address, email address, phone number.

Account information: if you create an account on the Site, your username, password (stored in encrypted form), order history and saved addresses.

Customer service communications: any messages, photos or documents you send us by email or through our contact forms (e.g. regarding returns, warranty claims or product support).

Reviews: if you post a product review, the content you submit.

b) Payment information We do not store your full card number. Payments are processed by third-party payment providers (such as PayPal, Stripe, or other gateways offered at checkout) under their own privacy policies. We may receive from them limited confirmation data (payment status, last four digits, billing country) needed to complete and reconcile your order.

c) Information collected automatically When you visit the Site we may collect technical data such as your IP address, browser type and version, operating system, device type, referring URLs, pages viewed and the dates/times of your visit, through cookies and similar technologies (see Section 5).

3. How We Use Your Information

We use your information for the following purposes:

To process and deliver your orders — confirming orders, arranging shipping, providing tracking updates, handling returns, refunds and warranty claims.

To provide customer support — answering your questions and resolving issues.

To operate and improve the Site — maintaining security, preventing fraud and abuse, analysing how the Site is used, and improving our products and user experience.

To communicate with you about your order — order confirmations, shipping notifications and service messages (these are transactional and not optional marketing).

To send marketing (only with your consent) — newsletters or promotional offers, if you have opted in. You can unsubscribe at any time using the link in each email or by contacting us.

To comply with legal obligations — such as tax, accounting, customs and consumer-protection record-keeping requirements.

We do not sell, rent or trade your personal information to any third party.

4. Legal Bases for Processing (EEA / UK Visitors)

Where the GDPR applies, our legal bases for processing your personal information are:

Purpose	Legal basis
Processing and delivering your orders	Performance of a contract with you (Art. 6(1)(b) GDPR)
Fraud prevention, security, improving the Site	Our legitimate interests in running a secure and efficient store (Art. 6(1)(f) GDPR)
Marketing emails	Your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time
Tax, customs and legal record-keeping	Compliance with a legal obligation (Art. 6(1)(c) GDPR)

5. Cookies and Similar Technologies

We use cookies and similar technologies to make the Site work and to understand how it is used:

Type	Purpose	Examples
Strictly necessary	Required for the Site and shopping cart to function; cannot be disabled	Session cookies, WooCommerce cart cookies, security/anti-fraud cookies
Preference	Remember choices such as language or currency	Locale cookies
Analytics	Understand aggregate visitor behaviour to improve the Site (e.g. Google Analytics, if installed)	`_ga`, `_gid`
Marketing (optional)	Track effectiveness of advertising campaigns, only where enabled	Pixel/beacon cookies from ad platforms

You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site — including checkout — from working correctly. For more information on managing cookies, visit www.allaboutcookies.org.

6. How We Share Your Information

We share personal information only with the service providers needed to operate the Store:

Payment providers (e.g. PayPal, Stripe, card processors) — to process your payment. Your card data goes directly to them under their privacy policies.

Shipping and logistics partners — to deliver your order (e.g. courier and last-mile carriers, freight forwarders). They receive your name, address and phone number for delivery purposes only.

IT and hosting providers — who host the Site and its infrastructure.

Email and communication tools — to send transactional emails and (with your consent) newsletters.

Professional advisers and authorities — accountants, customs brokers, and government bodies where we are legally required to disclose information.

Where we share data with service providers, we require them to keep it confidential and use it only for the purposes we specify. We do not permit them to sell your data.

7. International Data Transfers

Our business is based in China, and your personal information may be transferred to, and processed in, China and other countries where our service providers operate. Data protection laws in these countries may differ from those in your country of residence.

Where we transfer personal data from the EEA, the UK or Switzerland to a country outside those regions, we rely on appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner’s Office, where required; and/or

other lawful transfer mechanisms recognised under applicable law.

By submitting your information to us, you understand that it will be processed in accordance with this policy and applicable safeguards.

8. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy, plus any period required by law:

Order records (name, address, purchase details, transaction references): retained for our accounting and tax obligations and for warranty and consumer-protection purposes — typically 5 years after the order, and longer only where required by law.

Customer-service correspondence: retained for as long as needed to resolve your request, then deleted.

Account data: retained while your account is active, and deleted upon account closure or after reasonable inactivity, subject to legal record-keeping requirements.

Analytics data: retained in aggregate or pseudonymised form for the period set by the analytics tool.

Marketing data: retained until you unsubscribe or withdraw consent.

When data is no longer needed, it is deleted or anonymised.

9. Your Privacy Rights

a) EEA / UK / Switzerland residents (GDPR): You have the right to:

Access a copy of the personal information we hold about you;

Rectify inaccurate or incomplete information;

Erase your personal information (“right to be forgotten”), subject to legal obligations;

Restrict or object to certain processing;

Data portability — receive your information in a structured, machine-readable format where processing is based on consent or contract;

Withdraw consent at any time where processing is based on consent.

b) California residents (CCPA/CPRA): You have the right to:

Know what personal information we collect, use and share about you;

Request deletion of your personal information, subject to legal exceptions;

Correct inaccurate personal information;

Opt out of the “sale” or “sharing” of personal information (we do not sell or share your personal information);

Non-discrimination — we will not treat you differently for exercising your rights.

c) How to exercise your rights To exercise any of the above rights, contact us at 18938846771@163.com with the subject line “Privacy Request”. For your protection, we may need to verify your identity (for example, by matching the email address and order details you provide against our records) before processing your request. We will respond within the time frame required by applicable law (typically 30 days for GDPR requests; 45 days for CCPA requests, extendable where permitted). You also have the right to lodge a complaint with your local data protection authority (EEA/UK) or the California Attorney General / California Privacy Protection Agency (California).

10. Children’s Privacy

The Site and our Products are intended for adults. We do not knowingly collect personal information from children under 16 (or the applicable minimum age in your country). If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Security

We take reasonable technical and organisational measures to protect your personal information, including SSL/TLS encryption on our Site, restricted access to personal data within our business, and secure handling of payment data by certified payment providers. No method of transmission over the internet or electronic storage is 100% secure — we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any suspected breach in line with legal requirements.

12. Third-Party Links

The Site may contain links to third-party websites (e.g. payment providers, couriers, social media). This Privacy Policy applies only to ztong.shop. We are not responsible for the privacy practices of third-party websites — please review their policies before providing them with your information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The updated version will be posted on this page with a new “Effective date” at the top. For material changes, we will take reasonable steps to notify you, such as a notice on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns or requests about this Privacy Policy or how we handle your personal information, please contact us:

Yiwu Zitong Trading Firm

Email: 18938846771@163.com

Address: Room 202, Unit 1, Building 27, Zone 1, Xialou Village, Chengxi Subdistrict, Yiwu City, Jinhua City, Zhejiang Province 322000, China

We aim to respond to all enquiries within 2 business days.