1. Please read our Privacy Notice carefully. This contains information about how we use your personal data and who we share this information with, security we have in place to protect your data and how to reach us if you have a complaint. This Policy is updated from time to time with the latest version published on this page.
2. We collect, use and is responsible for processing personal data you provide to us or collect from you when you use our website or make an enquiry with us for the purpose of the General Data Protection Regulation and other applicable data protection laws.
3. This website YIFAN GAO JEWELLERY (the “Site”) and mobile applications (the “Apps”) are operated and managed by YIFAN GAO JEWELLERY.  You express your consent to this Privacy Policy by using our Site and the Apps.
4. If you have any questions about this Privacy Policy or the Site, please contact us.
5. We are the registered controller for the purpose of the Data Protection Act and the GDPR. When you provide personal information to us it will only be used in the ways described in this policy. By using this Site, Apps or by contacting and registering with us, you accept the terms of this policy, and in doing so, you expressly consent to our collection, storage, use and disclosure of your personal information as described in this Privacy Policy.

INTRODUCTION
‍
6. When you provide us with personal information, you consent to the transfer and storage of that information to our servers located in the United Kingdom. Where sensitive data is stored, it is held in an encrypted form, only readable by programs that are themselves protected by password and by access point. As a visitor to the Site, we collect information about you, in order to:
· Respond to general enquiries,
· Provide information relating to your account;
· Communicate with you about promotions and events;
· Register your interests;· Keep you updated with changes to regulations;
· Collect information to better understand how visitors use our Site;
· Inviting you to participate in researches and/or activities with your prior consent.

HOW WE USE THE DATA
‍
7. We list below ways we may use your personal information:
· To manage our relationship with you
· To develop new ways to understand our customers’ requirements
· To provide advice or guidance about our products and services
· To fulfil contracts
· To manage how we work with other companies that provide services to us and our customers.
· To deliver our products and services
· To make and manage customer payments
· To manage credit on customer accounts
· To collect and recover money that is owed to us
· To exercise our rights set out in our terms and conditions

REASONS WE COLLECT AND USE YOUR PERSONAL INFORMATION
‍
8. We rely on your requirements as a contract to act for the legal basis for processing your information, in which we have legitimate interests for commercial and business reason, including marketing, carrying out surveys and questionnaire, and inviting you to participate in competitions.  
‍
CONTACT INFORMATION
‍
9. When enter into a sales transaction, we require certain contact information including your Name, Address and Telephone Number.
‍
DELIVERY INFORMATION
‍
10. When Goods are to be delivered, we need delivery details so we will require you to provide us with a Delivery Name, Address and Telephone Number.
11. This information may be shared with any courier company we may use for the delivery.

BANK CARD INFORMATION
‍
12. When paying for Goods and/or services via bank card, we require you to provide your bank card number, expiration date, card type (MasterCard, Visa, Debit, etc.), card holder’s name and card security code. This information is entered directly on to the page of our credit card payment processing provider who store these details in encrypted format and provide us with information for use to refer to the card for transactional purposes. They also provide us with some digits of the card number, the card holder name, and the expiration date which we store to assist in identifying which card you wish to use in the future.
13. When you place an order, we will keep a record of the type(s) of item(s) purchased, the quantity, pricing information and any delivery cost. For analysis purposes, we also store the date the order was placed and the date it was shipped. This information may be made available in summary, non-specific form to any of our business partners by way of analysis or the payment of royalties and/or licenses in the supply of such goods.
14. At the end of placing the order, we may ask you to enter certain simple items of marketing information to help us develop our business. You may elect to not enter this information.

USE
‍
15. Our primary purposes in collecting personal information are to allow for payment by credit or debit card while providing you with a safe, smooth, efficient, and customised experience. You agree that we may use your personal information to:
· Provide the services and customer support you request;
· Resolve disputes, collect fees, and troubleshoot problems;
· Prevent potentially prohibited or illegal activities, and enforce our Terms and Conditions of Sale and policies;
· Customise, measure, and improve our services and the Site's content and layout;
· Tell you about targeted marketing, service updates, and promotional offers based on your communication
preferences; and
· Compare information for accuracy, and verify it with third parties
16. We share your personal information with service providers under contract who help with our business operations, such as fraud investigations, bill collection, order fulfilment, shipping, affiliate and rewards and co-branded credit cards;
17. Other third parties to whom you explicitly ask us to send your information or about whom you are otherwise explicitly notified and consent to when using a specific service;
18. Law enforcement or other governmental officials, in response to a verified request relating to a criminal investigation or alleged illegal activity - in which cases we will disclose name, city, telephone number, email address, User ID history, fraud complaints.
19. We may disclose personal information to respond to legal requirements, enforce our policies, respond to claims that a listing or other content violates the rights of others, or protect anyone's rights, property or safety.

CONTROLLING INFORMATION ABOUT YOU
‍
20. We will never lease, distribute or sell your personal information to third parties unless the law requires us to. Any personal information we hold about you is stored and processed under our data protection policy in line with the Data Protection Legislation.

WHERE DO WE STORE YOUR DATA?
‍
21. We do not transfer your personal information outside of the EEA.
22. If we are ever required to send your personal information outside of the EEA it would be for the following reasons of complying with a legal duty. The UK supervisory authority if the Information Commissioner’s Office who can be contacted at https://ico.org.uk/concerns/.

ACCESS TO YOUR INFORMATION
‍
23. You have the right to request a copy of the information that we hold about you by emailing us at info@XXXX.com. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate; we will take reasonable steps to check its accuracy and correct it.
‍
YOUR RIGHTS TO STOP US USING YOUR PERSONAL INFORMATION
‍
24. We may need to keep your data for legal or official reasons. We can sometimes limit the use of your data. This will mean that your data will only be used for specific things like legal rights and legal reasons.
25. You can object to us using your data or to have it restricted, deleted and removed if you think there is reason.
26. If you want us to stop using your personal data, please contact us.

YOUR RIGHT
‍
27. You have the right to withdraw your consent at any time.
28. From 25 May 2018, you have the right to obtain your personal information from us in a format that can be easily re-used or ask us to pass on your personal information in this format to other organisations.
29. If you want more information about your rights under the GDPR, please refer to the Guidance of the Information Commissioners Office (ICO) on Individual's Rights under the GDPR.
‍
ACCOUNT PROTECTION
‍
30. Your password is the key to your account. If you lose control of your password, you may lose substantial control over your personal information. If your password has been compromised for any reason, you should immediately notify us and change your password.

SECURITY
‍
31. We take the issue of security very seriously. We have established security measures throughout our Site as a way to protect our information and facilities and your information. Our IT is outsourced to Squarespace; we have undergone due diligence to ensure GDPR compliance at their end.
32. Our employees are aware of their responsibility to protect your personal information. While we treat data as an asset that must be protected against unauthorised access and disclosure, there is always a possibility that a third party might unlawfully intercept or access transmissions or private communications.

THIRD PARTIES
‍
33. Except as otherwise expressly included in this Privacy Policy, this document addresses only the use and disclosure of information we collect from you. We will never sell personal information or share any personal information with third parties that are unrelated to us. Data which has been aggregated from information as expressed in a broad non-personal manner may be relayed to third parties from time to time in order to better serve our customers.

CHANGES TO OUR PRIVACY POLICY
‍
We reserve the right to change our Privacy Policy from time to time.Where a revision is made to the policy the revised policy will be posted to our Site. Such changes to our Privacy Policy automatically shall become effective immediately upon posting the changes on our website. This Policy was last updated in Oct. 220.
‍
CONTACT US
‍
If you have any questions about this Privacy Policy or the Site, please email us at: info@xxxxx.com.