Privacy Policy

 

Last Updated: [2026-04-20] | Effective Date: [2026-04-20]

1. Overview

Welcome to :https://www.galopma.com  (hereinafter referred to as “the Website,” “we,” “us,” or “our”). We understand that your personal information is important to you, and we take seriously the trust you place in us when you share it. This Privacy Policy is designed to explain in clear and understandable terms: what personal information we collect when you visit our Website or use our shopping services, why we collect it, how we use it, with whom we share it, and what rights you have regarding that information.

This Policy applies to all visitors to the Website and customers who make purchases. It does not apply to information interactions you may have independently with third parties after purchase (such as freight forwarders you designate). Please read this Policy carefully. By accessing or using the Website, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Website.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a prominent notice on the Website or by sending you an email. Changes take effect immediately upon posting, and your continued use of the Website constitutes acceptance of the updated Policy.

2. Personal Information We Collect

“Personal Information” refers to information that can be used to identify you, directly or indirectly. We collect only the information necessary to provide our services and optimize your experience, as detailed below:

2.1 Information You Voluntarily Provide to Us

When you use our website, we collect the following types of information based on different scenarios:

• When registering an account: We collect your name, email address, and login password to create your account, verify your identity, and ensure account security.

• When placing an order and checking out: We collect your name, email address, shipping address, contact phone number, and payment information to process your order, arrange delivery, issue invoices, complete payment settlement, and send you order status notifications.

• When contacting customer service: We collect the specific content of your inquiries and your contact information to answer your questions, handle after-sales service, or resolve related disputes.

• When subscribing to marketing communications: We collect your email address and preference settings, and only send you marketing emails with your explicit consent.

2.2 Additional Non-Essential Information You May Voluntarily Provide to Enhance Your Experience

2.3 Information We Collect Automatically (Via Cookies and Similar Technologies)

When you visit the Website, we automatically collect certain information using cookies, web beacons, and other similar tracking technologies:

• Device and Usage Information: IP address, browser type and version, operating system, device type and unique device identifiers, screen resolution, language preferences.

• Browsing Behavior Information: Time and date of visit, pages viewed, time spent on pages, click paths, bounce rates, exit pages, referring/source websites.

• Shopping Behavior Information: Product views, cart activity, wish-listed items, search queries.

Purpose of Automatic Collection: To ensure core website functionality operates correctly (e.g., keeping you logged in, maintaining cart contents), to analyze website traffic and user behavior to improve service quality, and to prevent fraud and malicious attacks.

2.4 Information We Receive from Third Parties

• Payment Processors: We may receive confirmation of payment status (e.g., success/failure) from our payment service providers to update your order status. We do not directly receive your full credit card number; such sensitive payment information is processed directly by the payment service provider.

• Logistics Providers: We may receive shipment tracking updates from our international logistics partners.

• Analytics Providers: We may receive anonymized, aggregated behavioral data reports from website analytics tools (e.g., Google Analytics).

3. How We Use Your Personal Information

We use the personal information we collect only for the following explicit and legitimate purposes:

• Order Fulfillment: To process, package, and ship the goods you have purchased; to send order confirmations and shipping update notifications.

• Payment Processing: To complete transaction settlement via third-party payment service providers.

• Customer Service: To identify you when responding to inquiries, processing returns and refunds, and handling complaints and disputes.

• Website Operation and Improvement: To maintain website functionality; to analyze traffic and user behavior to optimize website performance, product displays, and the overall shopping experience.

• Security and Fraud Prevention: To detect, investigate, and prevent potential security breaches, fraudulent transactions, and illegal activities.

• Legal Compliance: To fulfill customs declaration obligations, respond to lawful requests from law enforcement agencies, and comply with applicable laws and regulations (including tax record retention requirements).

• Marketing Communications (Only With Your Explicit Consent): To send you product updates, promotions, and relevant news. You may withdraw your consent at any time by clicking the “unsubscribe” link at the bottom of any marketing email or by contacting us.

Please note: If we need to use your information for purposes not outlined in this Policy, we will notify you and obtain your explicit consent before doing so.

4. How We Share and Disclose Your Personal Information

We do not sell, rent, or otherwise trade your personal information. We share your information with third parties only under the following necessary circumstances:

4.1 Service Providers

To provide you with a complete shopping service, we work with trusted third-party service providers who process your personal information on our behalf. We provide these providers only with the minimum information necessary to perform their specific functions and require them to commit to security measures no less protective than those set forth in this Policy.

Types of Service Providers and Information Shared:

Service Type: Payment Processing
Information Shared: Name, order amount, payment method
Purpose: Complete online payment settlement
Provider: PayPal / LianLian Pay

Service Type: International Logistics
Information Shared: Name, shipping address, contact phone number, order item details (agricultural products/food homologous product names and quantities)
Purpose: International shipping, customs clearance declaration
Provider: DHL / FedEx

Service Type: Customs Declaration
Information Shared: Order item names, quantities, value, recipient name and address
Purpose: Compliance with destination country import customs regulations
Provider: Indirectly via logistics providers

Service Type: Website Hosting & Operations
Information Shared: Website interaction data
** Purpose:** Website functionality, data storage
Provider: WooCommerce

Service Type: Website Analytics
Information Shared: IP address, browsing behavior data
Purpose: Traffic analysis, user experience optimization
Provider: Google Analytics

Service Type: Email Marketing
Information Shared: Email address, name
Purpose: Sending marketing emails (subscribed users only)
Provider: (Not specified)

Service Type: Customer Service
Information Shared: Inquiry content, contact information
Purpose: Customer support system
Provider: (Not specified)

Important Notice – Customs Declaration for agricultural products/Food Homologous Products: As our store specializes in agricultural products and food homologous Chinese herbal products, to complete international delivery, your order‘s product names and quantities must be provided to logistics carriers and destination country/region customs authorities as part of the required shipping documentation. This is a necessary component of international shipping. We provide only the minimum information required by applicable regulations.

4.2 Legal Requirements and Compliance

We may disclose your personal information to regulatory bodies, law enforcement agencies, or courts in the following circumstances:

• To comply with applicable laws, regulations, or mandatory legal processes (e.g., court orders, subpoenas, search warrants);

• To detect, prevent, or investigate fraud, security breaches, or illegal activities;

• To protect the rights, property, or safety of us, our customers, or the public.

5. Cross-Border Data Transfers

This Website is operated by a company based in China. When you use the Website, your personal information will be transferred to servers located in China for storage and processing. After you place an order, to complete international delivery and customs clearance, your personal information (including name, address, contact information, and product details) will be transferred to the countries/regions where our logistics providers operate and to your destination country/region. The data protection laws in these countries/regions may differ from those in your country.

Compliance Safeguards:

• Data Export: When transferring personal information outside of China, we strictly adhere to the provisions of China‘s Personal Information Protection Law (PIPL) regarding cross-border data transfers. This includes obtaining your separate consent, conducting personal information protection impact assessments, and where necessary, completing compliance procedures through security assessments, personal information protection certification, or entering into standard contractual clauses for the cross-border transfer of personal information.

• GDPR Applicability: For transfers of personal information from the EU/EEA, UK, and Switzerland, we implement the European Commission’s Standard Contractual Clauses (SCCs) or other recognized transfer mechanisms to ensure an equivalent level of protection for your data.

• Subject to the completion of the above procedures, your agreement to this Policy constitutes explicit authorization for the aforementioned cross-border data transfer activities. For residents of the EU/EEA, this constitutes a transfer necessary for the performance of a contract under Article 49 of the GDPR.

6. Cookie Policy and Tracking Technologies

This Website uses cookies and similar tracking technologies to ensure the Website functions properly, analyze traffic, and enhance your browsing experience.

6.1 What Are Cookies?

A cookie is a small text file that is placed on your device (computer, mobile phone, tablet) by your browser when you visit a website. Cookies themselves do not typically contain information that directly identifies you, but when combined with data we derive from cookies, they may constitute personal information.

6.2 Types of Cookies We Use

Cookie Types and Management

Strictly Necessary Cookies
Description: Ensure core website functionality, such as maintaining login sessions, preserving shopping cart contents, security verification, load balancing.
Legal Basis: Necessary for contract performance.
Can Be Disabled: Cannot be disabled.

Functionality Cookies
Description: Remember your preferences, such as language selection, currency selection, login status.
Legal Basis: Legitimate interests.
Can Be Disabled: Can be disabled (may affect experience).

Analytics/Performance Cookies
Description: Collect anonymized statistics on how visitors use the website, such as page views, time spent, click behavior.
Legal Basis: Your consent.
Can Be Disabled: Can be disabled.

Marketing/Advertising Cookies
Description: Track your browsing behavior to display relevant advertisements and measure ad effectiveness.
Legal Basis: Your consent.
Can Be Disabled: Can be disabled.

6.3 Third-Party Cookies

This Website integrates cookies from third-party service providers, including but not limited to:

• Google Analytics: Provides anonymized traffic analysis reports. See Google Privacy Policy.

• [temporarily none]

6.4 Your Cookie Choices

• Upon First Visit: You will be presented with a clear consent request via a cookie banner, allowing you to accept all cookies or only necessary cookies.

• Change Settings Anytime: You may withdraw consent or adjust preferences at any time by clicking the “Cookie Settings” link on the Website.

• Browser Settings: You can delete or block cookies through your browser settings. Please note that disabling necessary cookies may prevent certain Website features from functioning properly (e.g., inability to log in or add items to cart).

6.5 “Do Not Track” Signals

This Website currently does not respond to “Do Not Track” (DNT) signals sent by browsers. This is because there is currently no uniform industry standard governing the interpretation and implementation of DNT signals. We continue to monitor developments in this area.

7. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, according to the following retention rules:

Data Retention Periods

• Account Information
  Retention Period: Duration of account existence + 2 years after account closure
  Notes: To facilitate account reactivation; deleted or anonymized after period expires

• Order Information
  Retention Period: 7 years after order completion
  Notes: To comply with tax record retention obligations (minimum statutory periods in various countries)

• Customer Service Records
  Retention Period: 3 years after communication ends
  Notes: For service quality tracking and dispute resolution

• Cookie Data
  Retention Period: See individual cookie durations in Cookie Policy
  Notes: Session cookies expire after browser session; persistent cookies up to 2 years

• Marketing Subscription Information
  Retention Period: Until consent is withdrawn
  Notes: Use ceases immediately upon withdrawal; deleted within a reasonable time thereafter

Upon expiration of the above retention periods, we will irreversibly anonymize or securely delete your personal information so that it can no longer be associated with you, unless a longer retention period is required by law.

8. Information Security

We value the security of your personal information and employ reasonable technical and organizational measures to protect it from unauthorized access, use, modification, disclosure, or destruction. These measures include:

• Data Encryption: SSL/TLS encryption across the entire Website protects data in transit; payment pages are processed by PCI DSS certified payment service providers, and we do not store complete credit card numbers.

• Access Controls: Access to personal information is strictly limited to employees who require it to perform their job duties.

• Regular Security Assessments: We periodically review our information collection, storage, and processing practices to guard against security vulnerabilities.

While we strive to protect your personal information, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

9. Your Rights

Depending on the applicable data protection laws in your jurisdiction, you may have one or more of the following rights:

Your Rights and How to Exercise Them

• Right of Access
  Description: Confirm whether we process your personal information and obtain a copy.
  How to Exercise: Contact us; response typically within 30 days.

• Right to Rectification
  Description: Correct inaccurate or incomplete personal information.
  How to Exercise: Contact us or update via account settings.

• Right to Erasure (“Right to be Forgotten”)
  Description: Request deletion of your personal information under certain conditions.
  How to Exercise: Contact us; we will explain if legal retention obligations apply.

• Right to Restrict Processing
  Description: Restrict how we process your information under certain conditions.
  How to Exercise: Contact us.

• Right to Data Portability
  Description: Obtain a copy of your personal information in a structured, machine-readable format.
  How to Exercise: Contact us.

• Right to Object
  Description: Object to processing based on legitimate interests or to direct marketing.
  How to Exercise: Contact us.

• Right to Withdraw Consent
  Description: Withdraw previously given consent at any time (does not affect lawfulness of prior processing).
  How to Exercise: Contact us or adjust cookie settings.

• Right to Lodge a Complaint
  Description: File a complaint with a data protection supervisory authority in your country.
  How to Exercise: e.g., EU residents may file with their Member State DPA.

Region-Specific Supplementary Information:

• California Residents: You have the right to request, free of charge annually, disclosure of the categories of personal information we collect, use, share, or sell, and the right to opt-out of the sale or sharing of your personal information. We do not sell or share personal information with third parties for monetary consideration.

• Chinese Users: Under the PIPL, you have the right to access, copy, correct, delete your personal information, and cancel your account. Before transferring personal information outside of China, we will obtain your separate consent.

• EU Residents: Under the GDPR, you are entitled to all of the above rights and may lodge a complaint with the data protection supervisory authority in your Member State.

To exercise any of your rights, please contact us using the information provided in Section 11 of this Policy. We will respond to your request within the timeframe required by applicable law (typically within 30 days). We may need to verify your identity before responding.

10. Children‘s Privacy

This Website is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16 without verifiable parental or guardian consent, we will take steps to delete that information promptly. If you believe we may hold information from or about a child, please contact us immediately.

11. Contact Information and Data Controller Details

The data controller for this Website (the entity that determines the purposes and means of processing personal information) is:

[galopma]
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at the email address above. We are committed to responding promptly and providing a substantive response within legally required timeframes.

12. Third-Party Links

This Website may contain links to third-party websites, plugins, or applications. Clicking on these links may allow third parties to collect or share data about you. We do not control and are not responsible for the privacy practices of third-party websites. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

13. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we do, we will revise the “Last Updated” date at the top of this page. For material changes (e.g., significant expansion of information collection scope, fundamental change in purposes of use), we will notify you via a prominent pop-up banner on the Website or by sending a notification to your registered email address. We encourage you to review this Policy periodically to stay informed.

14. Acknowledgment of Consent

Checkbox Confirmation: When creating an account or completing checkout, you will be required to check a box confirming “I have read and agree to the Privacy Policy and Terms of Service,” thereby expressly indicating that you have read, understood, and agreed to the full content of this Policy. For scenarios involving cross-border data transfers, we will obtain your separate consent via a distinct pop-up notice.