Effective 2026-08-19. Updated 2026-09-16. This notice explains how Hangzhou Xinmaoda E-commerce Co., Ltd. uses personal information for the Aura & Qi store.
It covers orders, payments, delivery, support, security, cookies, analytics, advertising, and the service providers that help operate the store.
Who is responsible for your information
Hangzhou Xinmaoda E-commerce Co., Ltd., trading as Aura & Qi, is responsible for the personal information described in this notice. The company is registered in Mainland China at Room 310-A182, Building 2, Zanhong Xingzuo, Chongxian Subdistrict, Linping District, Hangzhou, Zhejiang, Mainland China.
You can contact the store about privacy at info@auraandqi.com.
Information we collect
When a customer places an order, we may receive a name, billing and delivery addresses, email address, telephone number, selected products, bracelet size, order value, currency, payment status, shipping details, and messages about the order.
When someone contacts us, we receive the information included in the message and the details needed to reply. If an account is created, we may keep account login details, saved addresses, and order history. The store does not ask for information that is not needed for the stated purpose.
The website and its service providers may also process technical information. This can include an IP address, browser and device type, cookie identifiers, pages viewed, referral information, security events, and checkout errors.
Why we use information
We use order information to provide the purchase, take payment, prepare and deliver the parcel, send service messages, handle returns, prevent fraud, keep business records, and respond to support requests.
We may use limited technical information to keep the website secure, diagnose faults, understand whether pages work as intended, and measure store performance. Marketing email or non-essential advertising technology will require the appropriate choice or consent where the law requires it.
Legal reasons for processing
Depending on the customer and location, the legal reason may be that processing is needed for a contract, needed to meet a legal obligation, supported by a legitimate business interest, or based on consent. We will not use consent where a customer has no genuine choice.
Payment information
The payment provider processes the payment details needed to authorize or refund a transaction. Aura & Qi should receive payment status and transaction references rather than a complete card number.
PayPal Payments (Beijing) Co., Ltd. and, where applicable, PayPal Pte. Ltd. process the information needed to authorize, capture, review, or refund a PayPal transaction. PayPal may also use information for fraud prevention, legal compliance, and account security under its own terms.
PayPal publishes its legal agreements and privacy statement online.
Who receives information
Information may be shared with providers that host and secure the website, process payments, send transactional email, deliver parcels, manage customer support, prevent fraud, or provide professional advice. We may also disclose information when required by law or to protect customers, the store, or other people.
Each provider should receive only the information needed for its task. We do not sell personal information for money.
We use service providers for WordPress hosting, business email, PayPal payment processing, tracked delivery and fulfillment, website security, analytics, and advertising measurement. They receive only the information needed for their task. Delivery and fulfillment providers receive the recipient and order details needed to prepare, deliver, and support the parcel.
Cookies, analytics, and advertising
Essential cookies may be used for the shopping cart, checkout, security, language, and session settings. Analytics or advertising cookies must not be described as essential. Where consent is required, those tools should remain inactive until the visitor makes a choice.
The cookie notice and consent controls identify any analytics or advertising tools used on the site. Non-essential tools remain inactive until the visitor makes the choice required by applicable law.
Website visit statistics
We use WP Statistics on our website to understand which pages people visit and how they find the store. These reports include page addresses, referring sites or campaign information, browser and device types, and approximate location derived from an IP address. The statistics are stored in our WordPress database.
For these statistics, IP addresses are masked and hashed rather than stored in full. We do not record WordPress user IDs or full browser User-Agent strings in the statistics. These settings apply to WP Statistics, not to separate payment records or security logs.
We load this optional visit tracker only when you allow Analytics in Privacy choices. You can withdraw that choice to stop future visit tracking, and we respect your browser’s Do Not Track setting for this tracker. Withdrawing consent does not itself erase previously stored records. See our Cookie Policy for the controls.
How long we keep information
Information should be kept only for as long as it is needed for the order, customer support, fraud prevention, accounting, tax, legal, or dispute purposes. Different records may require different periods.
Completed, cancelled, failed and refunded order records, including related product, payment-status, delivery and return records, are retained for 3 years after the transaction is completed or closed. Records that form part of legally required accounting vouchers or accounting archives are retained for 30 years. Customer-service and return correspondence is retained for 3 years after the matter closes. Abandoned-checkout personal information is deleted after 30 days unless it is needed for security, a customer account, an active request or a legal obligation. Customer-account information is kept while the account remains open and is deleted or anonymized within 30 days after a valid deletion request, except for records that must be isolated and retained by law. Consent and opt-out records are retained for 3 years after the last choice. Security logs are retained for at least 6 months and longer only when needed to investigate an incident or meet a legal obligation. Personal information is deleted or anonymized when the applicable period ends unless a longer legal hold applies.
WP Statistics is configured to keep detailed visit records for 180 days. Its scheduled cleanup then removes older detailed rows while retaining summary visitor and page-view totals. This period is separate from the cookie lifetimes and order-record periods described in our policies.
International transfers
Some providers may process information outside the customer’s country. We assess international transfers and apply the measures required by applicable law for the provider and transfer involved.
Your choices and rights
Depending on location, a person may have rights to ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent. A person may also complain to the relevant data-protection authority.
Send a privacy request to info@auraandqi.com. We may need enough information to verify the request, but we will not ask for unrelated identity documents.
Security
We use administrative and technical measures intended to protect personal information. No website or transmission method is completely secure, so we also limit access and review the services connected to the store.
Children
The store is not directed to children. We do not knowingly ask a child to create an account or submit an order without the involvement required by applicable law.
Changes to this notice
We may update this notice when the store, its providers, or the law changes. The published version will show its effective date and material changes will be explained where appropriate.
