Privacy Policy

This Privacy Policy explains how Borvan, operated by 元渡贸易（深圳）有限公司 (provisional English translation: Yuandu Trading (Shenzhen) Co., Ltd.) (“Borvan”, “we”, “us” or “our”), collects and processes personal data when you visit yuandusite.com, create an account, place an order, contact us or subscribe to marketing.

1. Data controller

The controller is 元渡贸易（深圳）有限公司, established in China, at Room 702, No. 87 Fanshen Road, Anle Community, Xin'an Subdistrict, Bao'an District, Shenzhen, Guangdong, China.

Email: yuandusz@outlook.com
Telephone: +86 175 0335 7373

2. Personal data we collect

Identity and contact data, including name, billing and delivery address, email address and telephone number.
Account data, including login details, saved preferences and order history.
Order and transaction data, including products, price, currency, payment status, refunds and fraud-prevention information. We do not normally receive your complete payment-card details.
Delivery data, including shipment status, tracking number and delivery communications.
Communications, including customer-support requests, returns, reviews and marketing preferences.
Technical and usage data, including IP address, device and browser information, timestamps, security logs and cookie identifiers.

3. Purposes and legal bases

Purpose	Legal basis under the GDPR
Provide accounts, process orders, accept payments, deliver products, handle returns and provide support	Performance of our contract with you
Accounting, tax, product-safety, consumer-protection and lawful authority requests	Compliance with legal obligations
Prevent fraud, secure the website, enforce our terms and defend legal claims	Our legitimate interests in protecting our customers and business
Send requested promotional emails	Your consent, which you may withdraw at any time
Use optional cookies or similar technologies	Your consent where required

4. When data is required

Information marked as required during checkout is necessary to enter into and perform the purchase contract. If it is not provided, we may be unable to process or deliver an order. Marketing information is optional.

5. Recipients and service providers

We disclose only the information reasonably required to providers acting for us or independently under their own legal duties, including:

PayPal and FuturePay for payment processing, fraud prevention and refunds;
YunExpress and its delivery partners for fulfilment, customs and delivery;
OpenCart hosting, technical, security, email and customer-support providers;
professional advisers, insurers, auditors and public authorities where legally required; and
a purchaser or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.

We do not sell personal data.

6. International transfers

We are located in China and some providers may process data outside the European Economic Area (“EEA”). Where the GDPR requires it, we use an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism, together with supplementary safeguards where appropriate. You may contact us for information about the safeguards relevant to your data.

7. Retention

Order, payment and accounting records: generally 7 years after the transaction, or longer where law or an active dispute requires it.
Customer accounts: while active and generally up to 2 years after closure, except records that must be retained separately.
Customer-support and return records: generally 3 years after the matter is closed.
Marketing data: until consent is withdrawn or after 2 years of inactivity; a minimal suppression record may be retained to honour an opt-out.
Security logs: generally up to 12 months, unless required to investigate an incident.

We may retain data longer when necessary to comply with law, establish or defend claims, prevent fraud or respond to a binding request.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection and portability of your personal data. You may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with the data-protection authority in the EEA country where you live, work or believe an infringement occurred.

To exercise a right, email yuandusz@outlook.com with the subject “Privacy Request”. We may request information reasonably necessary to verify your identity. We normally respond within one month under the GDPR, subject to permitted extensions.

9. Mexico privacy rights

Individuals protected by Mexico's data-protection law may exercise rights of Access, Rectification, Cancellation and Opposition (“ARCO”), revoke consent or limit the use or disclosure of their data by contacting us. Our Spanish-language integral privacy notice is available on the “Aviso de Privacidad (México)” page.

10. Cookies

We use necessary cookies to operate the store. Optional cookies are used only after consent where required. See our Cookie Policy and use “Cookie Settings” to change your choices.

11. Children

Our store is not directed to children, and we do not knowingly collect personal data from children who cannot lawfully consent or contract under applicable law. Please contact us if you believe a child has provided data to us.

12. Security and automated decisions

We use reasonable technical and organisational safeguards designed to protect personal data. No transmission or storage system is completely secure. Payment and fraud providers may use automated risk indicators; we do not make solely automated decisions that produce legal or similarly significant effects unless permitted by law and accompanied by required safeguards.

13. Changes

We may update this policy when our practices or legal duties change. We will post the revised version here and, where required, provide additional notice or obtain consent.