1. Scope of information collection
We only collect necessary data to provide services and fulfill legal obligations:
1. Information provided directly
Required for purchase: name, delivery address, phone number, payment information (credit card/PayPal account)
Account registration: email, password (encrypted storage)
Customer service communication: consultation records, uploaded pictures/video evidence
2. Information obtained automatically
Device information: IP address, browser type, operating system version
Behavioral data: visited pages, click heat map, shopping cart retention rate (through Cookie technology)
Security log: login time, suspicious operation records
2. Purpose of data use
Data type Use scenario Legal basis
Order information Logistics distribution, invoice issuance, after-sales service Contract performance obligations
Email address Order notification, policy change reminder Legal rights and interests
Browsing behavior Optimize website experience, personalized recommendations User explicit consent (Cookie pop-up window)
Device information Anti-fraud detection, system security protection Legal compliance requirements
3. Data sharing and transmission
1. Necessary sharing parties
Logistics partners: DHL/FedEx (only name, address, and phone number are provided)
Payment institutions: PayPal/Stripe (comply with PCI DSS standards)
Legal authorities: Disclosure in response to court subpoenas or government investigations
2. Cross-border transmission
Chinese servers store basic data, and US cloud services (AWS) process transaction information
Adopt **Standard Contractual Clauses (SCCs)** to ensure transmission security
IV. User Rights Protection
You can exercise the following rights through service@pulse-ship.com (processing after identity verification):
Right to know: Query the list of personal data we hold
Right to correct: Modify incorrect or incomplete personal information
Right to delete: Request deletion of non-essential data (except for those retained by laws and regulations)
Withdrawal of consent: Turn off cookie tracking or unsubscribe from marketing emails (each email contains an unsubscribe link)
V. Security protection measures
1. Technical protection
Transmission encryption: SSL is enabled throughout the site 256-bit encryption (🔒 icon is displayed in the address bar)
Data isolation: payment information and order information are stored separately
Regular audit: penetration testing and vulnerability scanning are performed every quarter
2. Management norms
Authorization classification: only authorized employees can access necessary data
Employee training: all employees sign confidentiality agreements and pass GDPR compliance assessment every year
VI. Protection of minors
Age limit: only users over 16 years old can place orders independently, and minors need the written consent of their guardians
Data cleaning: if it is found that the minor user is not authorized to register, the relevant information will be deleted immediately
VII. Policy updates and disputes
Revision notice: major changes will be announced on the website banner 15 days in advance
Dispute resolution: priority is given to negotiation through email, and if unsuccessful, complaints can be made to the regulatory department where the company is located (Fangshan District, Beijing)
Data protection officer
Liu Yuxiang
Contact number: +86 15538062282
Exclusive email: dpo@pulse-ship.com (only for privacy-related matters)
Huasu Shengshi (Beijing) Paper Co., Ltd.
M2367, 1st Floor, Building 1, No. 73, Changhong West Road, Xilu Street, Fangshan District, Beijing (cluster registration)
