Data we use

We may use account and contact details, order and payment references, shipping information, support conversations, preferences, and security records. When needed for security, bot protection, language, or regional service availability, we may process IP address, device/browser details, and approximate region. With analytics consent, we record how each visit uses the website, to run and improve it: pages viewed, buttons and links clicked, checkout steps reached, error messages shown, add-to-cart, wishlist and chat actions, time on page and scroll depth, the referring site and campaign tags of the link you arrived from, device type (mobile or desktop), and approximate region derived from your time zone. A first-party cookie (kd_vid) links your visits for up to 13 months, visits are linked to your account when you are signed in, browser identifiers such as the Google Analytics client ID may be used, and an order is linked to the visit it came from. Without analytics consent none of this is recorded. Advertising click identifiers are used only with marketing consent. We never record what you type into forms or the search box, or your payment details. We do not need optional tracking consent to browse or place an order.

用户内容：我们会收集您通过我们的服务提供的个人数据（“内容”），包括消息或提示词，以及您根据所用功能上传的文件、图片和视频等内容。当我们的服务允许您通过发布、评论或发送消息等方式与其他用户互动时，我们也会将这些互动视为内容。

通信信息：如果您通过电子邮件或我们的社交媒体页面等方式与我们联系，我们可能会收集您的姓名、联系方式以及您所发送消息的内容等个人数据（“通信信息”）。

Why we use it

We use data to provide requested services, process and deliver orders, provide support, prevent abuse, secure the website, comply with legal obligations, and maintain business records. With analytics consent, we use our own visit measurement to find pages, buttons, and checkout steps that fail or make people leave, and to measure which campaigns bring visitors. Analytics, marketing, and personalization are separate optional purposes. Internal agent tools may use a customer's records only when the customer has explicitly enabled the internal-use choice in the privacy center.

Sharing and international processing

We share the minimum necessary information with service providers that support hosting, payments, delivery, customer support, email, bot protection, regional lookup, analytics, marketing, or internal operations. Providers may process data outside your country under the safeguards and contractual terms we are required to use. We do not sell personal information as a business practice.

数据安全

我们实施适当的安全措施，以防止未经授权的访问、篡改、披露或销毁您的信息。我们使用行业标准的加密技术来保护在传输过程中的敏感数据。然而，请注意，互联网上的数据传输或电子存储方法并非百分之百安全，因此我们不能保证绝对的安全性。

• 您提供的其他信息：当您参加我们的活动或调查，或向我们或代表我们运营的供应商提供用于确认身份或年龄的信息时，我们可能会收集这些信息。
• 日志数据：您使用服务时，我们的系统可能会接收浏览器或设备发送的信息，包括 IP 地址、浏览器类型和设置、请求日期和时间以及您与服务的互动方式。
• 使用数据：在您的隐私选择允许时，我们可能会收集您查看的页面或内容、使用的功能、执行的操作、时区、国家、访问日期和时间、用户代理及版本、设备类型和连接信息。
• 位置信息：我们可能根据 IP 地址确定设备访问服务的大致区域，用于安全、防欺诈、语言和地区服务可用性。我们不会将其用作精确 GPS 位置。
• Cookie 和类似技术：我们使用必要的技术来运营服务、保存偏好、验证用户身份和提供客户支持。可选的分析、营销和个性化技术仅根据您的隐私选择使用。
• 从其他来源获得的信息：我们可能从可信的安全、支付、配送和防欺诈合作伙伴处获得信息。仅在您的隐私选择和适用法律允许时，我们才会从营销服务商处获得信息。

Retention

We retain transaction, account, security, and support records for as long as needed for the stated purpose, legal obligations, dispute handling, and accounting. Website visit records are deleted after 13 months; only daily totals without identifiers are kept longer. The kd_vid cookie expires 13 months after your last visit and is removed when you withdraw analytics consent. We are adding deletion and retention procedures to the operational data schedule; contact us if you need a record-specific retention answer.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, or information about processing, and withdraw consent for optional purposes. California residents may also use applicable know, delete, correct, opt-out, and non-discrimination rights. We will verify requests and respond within the period required by applicable law.

美国各州的补充披露

美国部分州的隐私法律要求作出特定披露。下表概述了我们收集的个人数据类别，以及我们如何使用和披露这些信息。

我们不会出售个人数据，也不会为跨情境行为广告而共享个人数据。我们也不会处理敏感个人数据来推断消费者的特征。

Internal agent tools

Internal support and agent tools are a separate purpose. The MCP customer views use a default-deny filter: a customer is excluded unless an explicit internal-use grant is recorded. Withdrawing that choice stops future MCP view access; it does not erase order, tax, fraud, or other records that we must retain.

Contact and requests

Send privacy, access, deletion, correction, or objection requests to [email protected] .

We consider relevant obligations that may apply to our activities, including the GDPR and ePrivacy rules, California privacy rights under the CCPA/CPRA, Indonesia's Consumer Protection Law (UU No. 8 Tahun 1999), Personal Data Protection Law (UU No. 27 Tahun 2022), Electronic Information and Transactions Law (UU ITE No. 1 Tahun 2024), PP 71/2019, PP 80/2019, and the EU AI Act where its scope reaches our processing. We will update this notice when applicable requirements or our processing change.