Privacy Policy
How personal data is collected, used, shared, retained and protected, and how applicable data-protection rights can be exercised.
Data Controller
The data controller is Wenchang Zhuo Feiqin Trading Co., Ltd., operating the brand KitRoxi, with registered address at Room 2-912, Linhua Residential Area, Qinglan Development Zone, Wencheng Town Wenchang City Hainan Province 571339 China, China. Privacy enquiries may be sent to privacy@kitroxi.com.
Personal Data Categories
Order and account information
We may process identifying and contact details, billing and delivery information, order history, communications, and information needed to administer purchases and customer service.
Payment information
Payments are processed through Stripe. Payment processing may involve transaction identifiers, payment status, limited card-related information made available by the processor, and fraud-prevention signals.
Technical information
We may process IP address, device and browser information, website interactions, logs, security data, and cookie-related information where used.
Customer service information
When you contact us, we may process your messages, order references, return or refund information, and other details needed to respond.
Processing Purposes and GDPR Legal Bases
Personal data may be processed to perform a contract, fulfil orders, provide customer service, administer payments and refunds, operate the website, prevent fraud, maintain security, meet legal obligations, and manage cookies or consent where applicable.
Depending on the activity, GDPR legal bases may include performance of a contract, compliance with legal obligations, legitimate interests, and consent. Where processing is based on consent, consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.
Service Providers and Payment Processing
We may use service providers for hosting, order fulfilment, delivery, customer support, security and related business operations. Payment transactions are processed through Stripe. Service providers should receive only the information reasonably necessary for the services they perform and are subject to applicable data-protection requirements.
International Transfers
Where personal data is transferred internationally, we apply appropriate safeguards as required by applicable law. These may include recognized transfer mechanisms or other lawful protections depending on the countries and service providers involved.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including order administration, customer service, accounting, dispute handling, security, fraud prevention and legal compliance. Retention periods may vary according to the type of information and applicable legal requirements.
Data Subject Rights
Privacy Contact
For privacy, personal-data, cookie, consent or data-subject requests, contact privacy@kitroxi.com. Website domain: kitroxi.com.
