Privacy Policy
How personal data is collected, used, shared, protected, retained and handled when you use the website or place an order.
Who is responsible for your personal data
The data controller is Guangzhou Zaofeng Trading Co., Ltd., operating the brand PhaQeli.
Information we may process
Depending on how you use the website, we may process information needed to provide products and services, operate the website and meet legal obligations.
- Orders: name, billing and shipping details, order contents, transaction references and order history.
- Payments: payment-related identifiers and transaction status information received through Stripe and payment networks. Sensitive card authentication data is handled through the payment flow.
- Customer service: messages, requests, return or refund information and related correspondence.
- Technical information: device, browser, IP-related, security and website interaction information as necessary to operate, protect and improve the website.
- Cookies and similar technologies: information described in the Cookie Policy, subject to applicable consent requirements.
Why data is processed
| Purpose | Examples | GDPR legal basis |
|---|---|---|
| Contract performance | Order processing, delivery, customer service, returns and refunds | Performance of a contract or steps requested before entering a contract |
| Legal compliance | Accounting, consumer-law, record-keeping and lawful requests | Compliance with legal obligations |
| Fraud prevention & security | Protecting accounts, transactions and website integrity | Legitimate interests and, where required, legal obligations |
| Consent-based activities | Non-essential cookies or optional processing where consent is required | Consent |
Payment processing and service providers
We may use service providers to support hosting, order fulfilment, customer service, security, communications and other website operations. Providers receive only the information necessary for their role and are expected to handle personal data under appropriate contractual and legal safeguards.
Payments are processed through Stripe. Additional payment networks or providers may be involved according to the payment method selected at checkout.
Transfers across borders
Because the website serves international customers and may use providers in different countries, personal data may be transferred outside your country of residence. Where required, appropriate safeguards are used for international transfers under applicable data-protection law.
How long information is kept
Personal data is retained for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer support, legal compliance, dispute handling, fraud prevention and security. Retention periods may differ by data category and applicable law.
Your GDPR rights
Where GDPR applies, you may have rights including access, rectification, erasure, restriction of processing, data portability, objection to certain processing, withdrawal of consent and the right to lodge a complaint with a competent supervisory authority.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Some rights may be subject to lawful exceptions or conditions.
Contact for privacy matters
For privacy, data-protection, consent, cookie or data-subject requests, contact privacy@phaqeli.com.