Privacy Policy

Last Updated: September 17, 2026

Ningxia Jewelry (“we,” “us,” or “our”) operates the website https://ningxiajewelry.com (the “Site”), an online store selling 18K gold-plated stainless steel jewelry. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, how long we keep it, and the rights you have over your data.

1. Information We Collect

Account and Order Information
When you place an order or create an account, we collect your name, email, billing address, shipping address, phone number, and order details (products, variants, quantities, and prices).

Payment Information
We accept payment through PayPal. When you pay, your payment details — including any card number — are entered on and processed by PayPal’s own secure systems. We never see or store your full card number or your PayPal login. We receive only a transaction reference, the amount paid, and the payer name and email, which we keep for order, refund, and accounting records.

Technical and Browsing Information
Automatically collected data includes IP address, browser type and version, device, operating system, referring URL, pages viewed, items added to cart, and timestamps. We use cookies and similar technologies (see Section 4).

Communications You Send Us
If you contact us by email or through any contact form on the Site, we keep the content of your message and your contact details in order to respond and keep a record of our exchange.

Media You Upload
If a feature allows you to upload images (such as reviews or custom-design requests), please avoid uploading images with embedded location data (EXIF GPS). Other visitors may be able to extract such data from the file.

2. How We Use Your Information

– To process and fulfill your orders, including shipping, delivery confirmation, returns, and refunds.
– To send transactional emails such as order confirmations, shipping updates, and refund receipts.
– To provide customer support and respond to your messages.
– To operate and secure your account.
– To detect and prevent fraud and unauthorized access.
– To improve our products, website, and customer experience through analytics.
– To comply with legal and tax obligations.
– To send marketing emails, only if you have opted in; you may unsubscribe at any time using the link in any marketing email.

3. Legal Bases (GDPR)

For visitors in the European Economic Area, we process personal data on the following legal bases:
– Contract (Art. 6(1)(b)): To process orders and deliver products.
– Legal obligation (Art. 6(1)(c)): To retain invoices and transaction records as required by tax and accounting law.
– Legitimate interests (Art. 6(1)(f)): Site security, fraud prevention, and product improvement, balanced against your privacy.
– Consent (Art. 6(1)(a)): Marketing emails and any non-essential cookies — only when you opt in.

4. Cookies

We use cookies to operate the Site and, with your consent, to measure performance and advertising.
– Essential cookies: Required for cart, checkout, and login. Always active.
– Analytics cookies (such as Google Analytics): Help us understand site usage. Opt-in.
– Marketing cookies (advertising or retargeting pixels, if we enable them): Used for advertising and retargeting. Opt-in; never set unless you agree.

You can change your cookie preferences at any time through the cookie banner on the Site or your browser settings.

5. Sharing Your Information

We do not sell your personal data. We share it only with trusted service providers who help us run the store, under confidentiality and data-protection obligations.

– PayPal — receives your payment details and the transaction amount, to process payments securely
– Shipping carriers (YunExpress, 4PX, USPS, UPS, FedEx) — receive name, address, phone, and order contents, to deliver your order
– Email service providers — receive email and name, to send transactional emails
– Analytics providers (Google Analytics) — receive pseudonymous usage data, to help us understand site performance
– Advertising platforms — only if we start running advertising campaigns, in which case they may receive hashed email and browsing behavior, and only with your consent
– Web hosting (WordPress/WooCommerce host) — processes server logs and order data, to operate the website
– Legal authorities — receive data only as required by law, to respond to lawful requests

6. Data Retention

– Order and transaction records: Retained for the period required by applicable tax and accounting law (typically 5–7 years).
– Account data: Kept while your account is active. You can update your details at any time from your account page. To close your account and have the data linked to it deleted, email us at johnny@ningxiajewelry.cn and we will action it within 30 days.
– Customer-service messages: Retained for a reasonable period after resolution and then deleted or anonymized.
– Cookie data: See Section 4 for retention windows.

When data is no longer needed, we delete it or anonymize it so it can no longer identify you.

7. Your Rights

Depending on your location, you may have the right to:
– Access the personal data we hold about you.
– Correct inaccurate or incomplete data.
– Request deletion of your data.
– Object to or restrict certain processing.
– Withdraw consent (where processing is based on consent).
– Receive your data in a portable format (data portability).
– Lodge a complaint with your local data-protection authority.

To exercise any of these rights, please contact us using the details in Section 11. We respond within 30 days.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

– Right to know: You may request the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
– Right to delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
– Right to correct: You may request that we correct inaccurate personal information.
– Right to opt out of sale or sharing: We do not sell your personal information, and we do not currently share it for cross-context behavioral advertising. We do not run advertising or retargeting pixels. If we ever begin to do so, we will update this Policy and give you a clear way to opt out before any such sharing starts.
– Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To submit a request, email johnny@ningxiajewelry.cn with “California Privacy Request” in the subject line. We will verify your request using the email address associated with your order or account. You may also designate an authorized agent to make a request on your behalf.

9. International Data Transfers

We are based in China. Your data may be transferred to and processed in countries other than your own, including the United States and the European Union. We rely on standard contractual clauses and other lawful mechanisms to ensure your data remains protected during such transfers.

10. Children’s Privacy

The Site is not intended for children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Contact Us

For questions about this Privacy Policy or to exercise your data-protection rights, please contact:

Ningxia Jewelry — Privacy and Data Protection
Email: johnny@ningxiajewelry.cn
Website: https://ningxiajewelry.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page with a revised “Last Updated” date. For significant changes, we will provide a more prominent notice (e.g., by email or a banner on the Site).