1. Introduction

Thank you for supporting ShipXanh. To protect your personal data when you shop at ShipXanh.com, we provide this privacy policy, which is essentially a contract governing your use of our services.

2. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data. Personal data does not include data that has been anonymized or aggregated in a way that it can no longer enable us, whether in combination with other information or otherwise, to identify you. Below is a description of the types of personal data we may collect and how we may use it: 2.1 What personal data we collect Depending on the products and services you choose, we collect different types of personal data about you. 2.2.1 Data you provide We collect personal data that you provide when you create an account to use our products and services or interact with us, such as when you fill in account information, contact us, participate in an online survey, use our online help or online chat tool. 2.2.2 Data from your end device (1) Photos / Media / Files Our applications may use files or data stored on your device. If you want to prevent our application from accessing your phone’s data, you can reset the permissions on your phone. With your permission, access to Photos / Media / Files may include the ability to: ① Read the contents of your USB storage (such as an SD card). ② Add contents to your USB storage ③ Format external storage ④ Mount or unmount external storage (2) Local storage We may collect and store information (including personal data) locally on your device using mechanisms such as browser web storage (including HTML 5) and application data caching. (3) Camera You can upload photos when commenting using our online services. Therefore, we may collect images and other information from your device’s camera and photos. For example, you will not be able to upload photos from your photo gallery unless we can access your camera or photos with your permission. (4) Unique application number Some services include a unique application number. This number and information about your installation (e.g., operating system type and application version number) may be sent to the website when you install or uninstall that service or when that service periodically contacts our servers, such as for automatic updates. 2.2.3 Data about purchases If you make a purchase, we will collect personal data related to the purchase. This data includes your purchase data, such as PayPal email, username, shipping address, and other authentication information, as well as contact, delivery, and payment details. 2.2.4 Data about improving our services and products When you visit our websites, we may collect data about the type of device you use, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser you use, usage information, diagnostic information, and location information from or about the computers, phones, or other devices on which you install or access our products or services. Where available, our services may use GPS, your IP address, and other technologies to determine a device’s approximate location to allow us to improve our products and services. 2.3 How we use your personal data In general, we use personal data to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our customers. ShipXanh determines and controls how your personal data is processed as the data controller for the following purposes: 2.3.1 Providing, improving, and developing our products and services We use your personal data to help us provide, improve, and develop our products and services. This may include using personal data for purposes such as completing the shopping process, improving user experience, data analysis, research, and testing. Such processing is based on your prior express consent or our legitimate interest in providing you with products and services. We encourage you to carefully read the privacy policy regulations before participating. If you no longer wish to consent to the services we provide above, please contact us to opt out. 2.3.2 Communicating with you Subject to your prior express consent, we may use personal data to send you marketing information related to our products and services, communicate with you about your account or transactions, and inform you about our policies and terms. If you no longer wish to receive email notifications for direct marketing purposes, please contact us to opt out. We may also use your data to process and respond to your requests when you contact us. If you no longer wish to consent to the services we provide above, please contact us to opt out. 2.3.3 Offering and measuring targeted advertisements and services Subject to your prior express consent, we may use your personal data to personalize your experience with our products and services and on third-party websites and applications and to determine the effectiveness of our promotional campaigns. You are free to choose whether to receive promotional information. If you no longer wish to consent to the services we provide above, please contact us to opt out or select “unsubscribe” to opt out of those emails. 2.3.4 Promoting safety and security Subject to your prior express consent, we may use certain technological measures to protect your personal data to help verify accounts and normal user activities, as well as to promote data safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activities or violations of our terms or policies. Such processing is based on our legitimate interest in helping ensure the safety of our products and services. 2.4 How we store your personal data We may implement technological measures to ensure that your personal data records are complete and accurate, such as cookies and similar technologies. And subject to your prior consent, we may store your personal data processing records for ten years.

3. Cookies and Similar Technologies

We use cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, offering and measuring advertisements, understanding user behavior, and providing a safer experience. You can remove or reject cookies using your browser or device settings, but in some cases, doing so may affect your ability to use our products and services. 3.1 Definition of “Cookies” Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, phones, and other devices. These types of files perform various tasks such as remembering your preferences and selected items, assisting you in improving your website experience, and trying to ensure that the advertisements or offers you see online are more relevant to you. These “cookies” can be divided into 4 types, each outlined below. 3.2 Types of Cookies 3.2.1 Strictly Necessary Cookies To provide you with the basic services of our website, such as accessing our website or making a purchase, these cookies are essential. If you disable these cookies, we will not be able to fulfill your request. 3.2.2 Performance Cookies This type collects anonymous information about how people use the website, and the data is merged with other users to enable us to improve how the website operates. For example, we use Google Analytics cookies to help us understand how customers arrive at our website, browse or use our website, and highlight areas where we can improve, such as navigation, shopping experience, and marketing campaigns. The data stored by these cookies never shows personal details from which your individual identity can be established. If you disable or opt out of these cookies, you may not be able to use certain features of our websites and services, and it may reduce the support or information we can provide you. 3.2.3 Functional Cookies These cookies may remember operations such as your preferences so that we can provide you with better services and improve our operating models. If you reject these cookies, you may not be able to use certain functions of our website. 3.2.4 Targeting or Advertising Cookies These cookies collect information about your browsing habits to help make advertisements more personalized to you. These cookies may remember the websites you have visited and share them with third parties, such as advertisers. If you reject these cookies, you may not be able to access certain functions of our websites and services, and it may affect your experience. 3.2.5 Social Media Cookies These cookies are used to allow you to share pages and content on our websites and services through third-party social media and other websites. These cookies may also be used for advertising purposes. If you reject these cookies, you may not be able to use certain functions of our website, and it may affect your experience. 3.3 Cookies Set by Third Parties You may also encounter cookies on our websites set by third parties. For example, when you purchase our products online, our e-commerce vendor may use cookies and other technologies. We may also allow third parties to set cookies on our website to track information about your online activities and/or across third-party websites or online services, including sending you targeted advertisements based on that information, which may include remarketing our products and services that you have viewed on our websites and on third-party websites. This Cookie Statement does not apply to cookies, applications, technologies, or websites owned and/or operated by third parties, or such third parties’ practices, even if they use or access our technology to store or collect information. To understand how third parties use cookies, please review their privacy policies. 3.4 Controlling and Opting Out of Cookies You can change the settings on your browser to prevent cookies from being stored on your computer or mobile device without your explicit consent. The “help” section of your browser will usually provide details on how to manage cookie settings. If you choose to reject cookies, as noted above, you may not be able to use certain features of our websites and services. 3.5 Other Similar Technologies DPAPI (Data Protection Application Programming Interface) is a simple cryptographic application programming interface available as a built-in component in Windows 2000 and later versions of the Microsoft Windows operating system. In theory, the Data Protection API can enable symmetric encryption of any type of data; in practice, its primary use in the Windows operating system is to perform symmetric encryption of asymmetric private keys, using user or system secrets as a significant contribution of entropy. DPAPI can help record and store users’ personal data. Data Cube is a simple application for recording and analyzing personal data. If you choose to reject cookies, as noted above, you may not be able to use certain features of our websites and services.

4. Your Rights

4.1 We take reasonable steps to ensure that your personal data is accurate, complete, and up-to-date. Based on the protection of your privacy, you have the following rights: (a) You have the right to contact us to know whether your personal data is being processed, and, if so, to access the personal data and information, including but not limited to the purposes of processing and the categories of personal data concerned. (b) You have the right to contact us to correct or delete your inaccurate personal data concerning you. Taking into account the purposes of the processing, you are also free to complete incomplete personal data, including by providing a supplementary statement. (c) You have the right to request us to delete personal data concerning you. (d) You have the right to contact us to set processing restrictions, which limits our processing entities. (e) You have the right to receive the personal data you provided in a structured, commonly used, and machine-readable format and to transmit that data to a third party. (f) You have the right to contact us to object, on grounds relating to your particular situation, at any time to the processing of personal data. (g) You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. When you need to exercise this right, please contact us to request assistance. To protect the privacy and confidentiality of your personal data, we may request data from you to enable us to confirm your identity and your right to access such data, as well as to search for and provide you with the personal data we maintain. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal data we maintain. You may contact us to exercise your rights. We will respond to your request within 30 days. 4.2 Checking Your Details How can I check my personal data? You can check your personal data by entering “My Account.” Deleting Your Information Please contact us when you feel the need to delete your information: (a) Personal data to provide, improve, and develop our products and services. If this type of data is deleted, your account will be closed because your account cannot be used normally without this type of data. (b) Personal data we use to communicate with you. If this type of data is deleted, we will not be able to contact you. Please make your decision carefully. (c) Personal data to provide and measure targeted advertisements and services. If this type of data is deleted, you will not receive the latest marketing news and personalized shopping services. (d) Personal data related to promoting safety and security. If this type of data is deleted, your account will be seriously threatened, and you may not be able to use your account normally. If you delete your data, we have no obligation to retain your data and may delete any or all of your data without liability. However, we may retain data related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, such as analyzing non-personal data, account recovery, auditing our records, and enforcing our rights and obligations under our agreements.

5. Disclosure of Personal Data

We provide certain personal data to strategic partners who work with us to provide our products and services or help us market to customers. Personal data will only be shared by us with these companies to provide or improve our products, services, and advertisements; it will not be shared with third parties for their own marketing purposes without your prior consent. 5.1 Service Providers We share personal data with companies that provide services on our behalf, such as website hosting, email services, marketing, sponsoring sweepstakes, contests, and other promotions, auditing, fulfilling customer orders, data analysis, providing customer service, and conducting customer research and satisfaction surveys. These companies are obligated to protect your data and may be located wherever we operate. 5.2 Corporate Affiliates and Business Transactions We may share personal data with affiliated companies and business partners. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any part of our business, including in connection with bankruptcy or similar proceedings, we may transfer any and all personal data to the relevant third party. 5.3 Legal Compliance and Security It may be necessary—by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence—for us to disclose personal data. We may also disclose personal data if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose personal data if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users. 5.4 Legal Basis for Processing Personal Data of EEA Residents It may be necessary—by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence—for us to disclose personal data. We may also disclose personal data if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. If you reside in the European Economic Area (EEA), our processing of your personal data will be justified if one of the following conditions is met: (a) Whenever we obtain your consent; (b) Whenever the processing of your personal data is necessary for the performance of a contract between you and us or to take any pre-contractual steps at your request; (c) When processing is necessary for us to comply with a legal obligation; (d) When processing is necessary for the purposes of our legitimate interests; (e) Where processing is necessary for legitimate and reasonable reasons (in this case, we will specifically explain the details).

6. Global Data Processing

The definition of Processing is any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. We provide products and services to customers worldwide, and your personal data may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may also be processed outside the EEA by staff working for ShipXanh or one of our suppliers. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. We also fully consider certain legal frameworks relating to data processing. When we provide products and services to customers with the support of affiliates, business partners, and service providers, your personal data may be processed outside the EEA. In such cases, we will engage in standard contractual clauses or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules adopted by our partner or service provider. Appropriate or suitable safeguards, for example, encryption technology, will be provided to ensure the safety of your information. Our customers have the right to obtain a copy of such data transferred to a third country. If you need to exercise your rights, please contact us. For details on the processing of data by third parties that may access your personal data, please read the following introduction to Third Parties.

7. Data Processed by Third Parties

7.1 Prior Authorization by Third Parties to Us 7.1.1 Facebook, Twitter, Google, VK When you log in with your account via Facebook, Google at ShipXanh, we may automatically obtain your login information because these third parties have previously authorized us to collect your information to help you log in conveniently. To better protect your information, we sincerely recommend that you familiarize yourself with the privacy policies provided by these third parties before logging in through accounts registered on their websites. Therefore, please note that you should also take steps to protect yourself, especially online. Do not share your password with anyone else. Also, remember to log out of the website and close your browser window when you have finished your work. If you are genuinely concerned about providing us with your personal data through prior authorization, 7.1.2 PayPal If you choose to pay online via “Pay with PayPal,” please note that once you click the button, you will be linked to PayPal’s website. The personal data you are required to provide, including card number, billing address, and contact information, will be collected and processed by PayPal instead of ShipXanh, although our brand/logo may still be visible in the top left corner of the website. We sincerely recommend that you learn about PayPal’s privacy policy and carefully choose between different payment options. ShipXanh will not be responsible for the processing of your data by PayPal when you click the “Pay with PayPal” button. 7.2 Other Third Parties That May Access Your Information To provide better products and services to customers, we may primarily transfer your data to two types of third parties, 7.2.1 Third Parties Related to Advertising & Marketing —— Google, Facebook, Twitter, Amazon, Pinterest, TradeTracker, etc. Information about your activities on our website, such as the products you prefer to browse, may be transferred to these third parties. You may receive Notification Letters about advertising and marketing in your email sent by us and/or selected third parties. You have the option to opt out of receiving marketing information from us and/or selected third parties. When you register a new account, you may choose “unsubscribe.” When you no longer wish to receive advertisements from us and/or selected third parties, you should opt out by contacting us (via email) or clicking the “unsubscribe” link in any email notifications you receive. 7.2.2 Third Parties Related to Payment & Delivery —— PayPal, Cybersource, Adyen, Dlocal, Stripe, Safecharge, Oceanpayment, etc. If you make a purchase from our store, your payment and delivery information will be necessary for the transaction. Your information may be transferred to the above third parties and processed by them. We commit that appropriate or suitable safeguards, such as encryption technology, will be provided to ensure the safety of your information. This type of personal data is critical to your purchase transaction, so we sincerely recommend that you think carefully when you want to delete or object to the processing of this data. 7.3 Introduction to Third Parties in Third Countries As stated above, standard contractual clauses or alternative legal bases or binding corporate rules will help protect the safety of your information. When we notice a third party violating its obligations and infringing on your privacy, we will immediately notify to rectify the mistake. If you notice a third party violating their obligations and infringing on your privacy due to ShipXanh’s fault, you may contact us to receive remedies. We commit that appropriate or suitable safeguards, such as encryption technology, will be provided to ensure the safety of your information. Our customers have the right to obtain a copy of such data transferred to a third country. If you need to exercise your rights, please contact us. 7.4 Introduction to Third-Party Websites Our website may contain links to and from the websites of our partner networks, advertisers, and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies, and we do not share your information with them unless your permission or another legal basis allows us to do so. Please check these policies before you submit any personal data to these websites. We are not responsible for personal data breaches caused by these third-party websites.

8. Information Security

We use reasonable technical, administrative, and physical security measures designed to protect and help prevent unauthorized access to your data and to correctly use the data we collect. For example, access to your personal data is strictly limited to our data controller, data processor, and data protection officers who need access to that data to perform their assigned job duties. We have built a recovery system to prevent your data from being destroyed, lost, altered, or disclosed without authorization due to automated technology. It is important that you take precautions to protect against unauthorized access to your account credentials and your computer or other devices. “Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed. We will investigate any complaints and notify the individual of the investigation’s outcome within a reasonable timeframe. ShipXanh has established a Data Protection Officer (DPO) to provide professional analysis of personal data processing. Whenever you need direct assistance from our DPO, you are free to inform us of your request. Please note that, despite our best efforts, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the relevant authorities if required by law.

9. California Consumer Privacy

If you are a California resident, you may have certain rights. California law may permit you to request that we:

• Provide you with the categories of personal information we have collected or disclosed about you in the past twelve months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we have shared personal information.
• Provide access to and/or a copy of certain information we hold about you.
• Delete certain information we have about you.
• Cease selling your personal information: In the twelve months prior to the effective date of this Disclosure, we have not sold any personal information of consumers, as those terms are defined under the California Consumer Privacy Act.

You may have the right to receive information about the financial incentives we offer you. You also have the right not to be discriminated against (as provided by applicable law) when exercising certain of your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information to provide Services to you. If you ask us to delete it, you may no longer be able to access or use the Services. For more information on how to access, review, and correct your account information; opt out of marketing, advertising, location collection, and certain cookies; and deactivate your account, please see the other sections of this Privacy Policy. We value the privacy of your personal information and want to ensure that we only provide your personal information to you or your authorized agent. The CCPA also requires us to verify the identity of each person making a request to know what personal information we have about you or to delete the personal information we have about you. Therefore, you will be required to verify your identity before we fulfill your request. To do so, you will typically need to prove control of the relevant account and show residency in California. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You will still need to verify your identity directly with us.

10. Changes to This Privacy Statement

From time to time, we may update our Privacy Policy to reflect new or different privacy practices. We will notify customers when we make material changes to the Privacy Policy. Revising the Privacy Policy is significant to ensuring your rights regarding personal data. Therefore, we sincerely recommend that you periodically check the Privacy Policy online. Additionally, you can always freely check the Privacy Policy through quick links whenever you need to enter your personal data. At the same time, we will notify you of amendments by sending a notice to your account. There will be a special quick link in your account to provide the full content of the Privacy Policy.