Legal notice
# Privacy Policy
**Last updated:** 2026.08.09
## 1. Introduction
This Privacy Policy explains how Shenzhen Sanhaikun E-Commerce Co., Ltd., trading as BARISTANEST ("BARISTANEST," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information when you visit or use our website, purchase products, contact us, interact with our marketing, or otherwise use our services (collectively, the "Services").
Please read this Privacy Policy carefully. If you do not agree with it, please do not use the Services. Depending on where you live, you may have specific privacy rights described below.
For purposes of applicable data-protection law, Shenzhen Sanhaikun E-Commerce Co., Ltd. is the controller of personal information processed for its own business purposes, unless stated otherwise.
## 2. Contact Details
**Trading name:** BARISTANEST
**Legal business name:** Shenzhen Sanhaikun E-Commerce Co., Ltd.
**Email:** support@baristanest.com
**Physical address:** Tianji Building, Building CD, 7th Floor, F4.87DB7, Shenzhen, Guangdong 518042, China
**Telephone:** +86 15217063101
## 3. Scope
This Privacy Policy applies to personal information processed through the Services, including our Shopify storefront, checkout, customer support, order fulfillment, marketing communications, and connected applications.
It does not govern third-party websites, platforms, or services that have their own privacy notices, even when they are linked from or integrated with our Services.
## 4. Personal Information We Collect
The information we collect depends on how you interact with us.
### A. Information You Provide Directly
We may collect:
- **Identity information**, such as your name and account username.
- **Contact information**, such as your email address, telephone number, billing address, and shipping address.
- **Order and transaction information**, such as products viewed or purchased, order number, discounts, purchase amount, currency, delivery method, returns, refunds, and transaction history.
- **Payment-related information**, such as payment method, payment status, billing details, and limited payment-card information. Complete card details are generally collected and processed directly by Shopify Payments or another authorized payment provider rather than stored by us.
- **Account information**, such as login details, saved addresses, preferences, and account activity.
- **Customer-support information**, such as messages, questions, complaints, warranty requests, photographs, and other information you provide when contacting us.
- **Reviews and user content**, such as product reviews, ratings, photographs, videos, comments, and social-media content you submit or authorize us to use.
- **Marketing preferences**, such as whether you wish to receive promotional email or SMS messages.
- **Survey, promotion, or competition information**, if you choose to participate.
Please do not send us sensitive personal information unless it is necessary for a specific request and we have asked you to provide it.
### B. Information Collected Automatically
When you use the Services, we and our service providers may automatically collect:
- IP address and approximate location derived from it;
- browser type, operating system, device type, language, and device identifiers;
- cookie identifiers, advertising identifiers, and similar online identifiers;
- pages viewed, links clicked, searches, referring pages, session duration, and navigation activity;
- shopping-cart activity, checkout activity, purchases, and interactions with products or advertisements;
- timestamps, logs, error reports, security events, and fraud indicators; and
- consent choices and privacy preferences.
We collect this information through cookies, pixels, local storage, software development kits, server logs, and similar technologies, subject to consent requirements that apply in your location.
### C. Information From Other Sources
We may receive personal information from:
- Shopify and its affiliated services;
- payment processors and fraud-prevention providers;
- shipping carriers, logistics providers, and fulfillment partners;
- analytics, advertising, and marketing providers;
- social-media platforms when you interact with our pages or permitted integrations;
- customer-support, review, and communication platforms;
- business partners, affiliates, and service providers; and
- publicly available sources, where permitted by law.
If another person places an order for you or sends a product to you, we may receive your name, address, contact information, and gift-message details from that person.
## 5. How We Use Personal Information
We may use personal information for the following purposes:
| Purpose | Examples | EEA/UK legal basis, where applicable |
|---|---|---|
| Provide and fulfill the Services | Process orders and payments; create accounts; arrange shipping; provide confirmations; handle returns, refunds, and warranties | Performance of a contract; steps requested before entering a contract |
| Customer service | Respond to questions, complaints, and requests; provide product or delivery support | Performance of a contract; legitimate interests in supporting customers |
| Operate and improve our store | Maintain the website; troubleshoot errors; understand usage; improve products, navigation, and customer experience | Legitimate interests in operating and improving our business; consent where required for non-essential cookies |
| Personalization | Remember preferences; recommend relevant content or products; customize the storefront | Consent where required; otherwise legitimate interests, subject to your rights |
| Marketing and advertising | Send promotional messages; measure campaigns; build or use advertising audiences; display relevant advertising | Consent where required; otherwise legitimate interests, subject to opt-out rights |
| Security and fraud prevention | Authenticate users; detect fraud, abuse, chargebacks, malicious activity, or policy violations; protect accounts and systems | Legitimate interests; compliance with legal obligations |
| Legal and compliance | Maintain tax and accounting records; respond to lawful requests; enforce terms; establish or defend legal claims; conduct recalls | Compliance with legal obligations; legitimate interests; legal claims |
| Business administration | Audit operations; manage vendors; conduct corporate transactions such as financing, restructuring, merger, or sale | Legitimate interests in administering and developing the business |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already conducted lawfully before withdrawal. Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations.
We will not use personal information for a materially different, incompatible purpose without providing any notice or obtaining any consent required by law.
## 6. Shopify
Our store is hosted by Shopify. Shopify processes personal information about visitors and customers to provide storefront, checkout, payment, security, analytics, personalization, and related ecommerce services to us.
Information submitted through the Services may be transmitted to Shopify and Shopify's service providers in countries other than your own. Shopify may act as our processor for some activities and may process information for its own purposes as described in its notices and applicable service terms.
You can learn more in the [Shopify Consumer Privacy Policy](https://privacy.shopify.com/en) and Shopify's other privacy documentation.
If Shopify Network Intelligence or related enhanced services are enabled for our store, Shopify may use customer interaction data to help provide analytics, personalization, advertising, fraud prevention, and merchant services, subject to our store settings, your consent choices, and applicable law. Configure your choices through our cookie banner or the privacy-choice mechanism described below.
## 7. Cookies and Similar Technologies
Cookies and similar technologies help operate the Services and understand how they are used. They may be set by us, Shopify, or other providers.
We may use the following categories:
- **Strictly necessary cookies:** Required for core functions such as security, network management, shopping-cart operation, checkout, payment, account login, fraud prevention, and saving privacy choices. These generally cannot be disabled through our cookie preference tool.
- **Functional cookies:** Remember choices such as language, region, or display preferences and provide enhanced features.
- **Analytics cookies:** Help measure visits, traffic sources, navigation, performance, and errors so we can improve the Services.
- **Advertising and social-media cookies:** Help measure campaigns, limit repeated ads, build audiences, show more relevant advertising, or support social-media functions.
Where required, non-essential cookies and pixels are not activated until you provide consent. You can accept, reject, or adjust non-essential cookies through **Cookie Preferences** in the website footer. You may also adjust browser settings, although blocking necessary cookies can prevent parts of the Services from functioning.
If we install a third-party pixel or advertising service, it must be accurately disclosed in this policy and configured to respect applicable consent signals. Before publishing this policy, confirm which of the following are actually enabled and list only those in the live version: [GOOGLE ANALYTICS], [GOOGLE ADS], [META PIXEL], [PINTEREST TAG], [TIKTOK PIXEL], [EMAIL/SMS PLATFORM], and [OTHER SHOPIFY APPS THAT COLLECT CUSTOMER DATA].
## 8. Marketing Communications
With your consent where required, we may send promotional email or SMS messages about products, offers, and news.
You can unsubscribe from email marketing through the unsubscribe link in each message. You can opt out of SMS marketing by following the instructions in the message, such as replying STOP where supported, or by contacting us. Opting out of marketing does not stop service communications concerning an order, account, security issue, or legal notice.
We do not require consent to marketing as a condition of purchasing a product unless expressly permitted by law.
## 9. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients when reasonably necessary:
- Shopify and its affiliates;
- payment processors, banks, and fraud-prevention providers;
- shipping carriers, customs agents, warehouses, and fulfillment providers;
- website hosting, cloud, security, IT, and technical-support providers;
- customer-support, email, SMS, review, and communication providers;
- analytics, advertising, and social-media providers, subject to consent and opt-out requirements;
- professional advisers, such as lawyers, accountants, auditors, and insurers;
- government bodies, regulators, courts, and law-enforcement authorities when required or permitted by law;
- parties involved in an actual or proposed merger, acquisition, financing, restructuring, insolvency, or sale of all or part of our business; and
- other parties at your direction or with your consent.
Service providers may process information only for contracted purposes and under appropriate obligations, except where a provider acts as an independent controller under its own privacy notice.
We do not publicly disclose complete payment-card details, account passwords, or government identification numbers.
## 10. Sale, Sharing, and Targeted Advertising
We do not sell personal information for money. However, depending on the advertising, analytics, and Shopify services enabled on our store, disclosure of online identifiers and browsing activity to advertising partners may be considered a "sale," "sharing," or use for "targeted advertising" under certain U.S. state privacy laws.
Where these laws apply, you may opt out by using our **Your Privacy Choices** or **Do Not Sell or Share My Personal Information** page. We also process legally recognized browser-based opt-out preference signals, such as Global Privacy Control, where required and technically supported.
We do not knowingly sell or share for targeted advertising the personal information of individuals under the age threshold established by applicable law.
**Implementation note—remove before publishing:** Confirm in Shopify Admin under **Settings > Customer privacy** whether Shopify Network Intelligence, targeted advertising pixels, or data-sharing features are enabled. Revise this section if your actual practices differ.
## 11. International Data Transfers
We are based in China and use service providers that operate internationally. Your personal information may therefore be processed in China, the United States, Canada, the European Economic Area, the United Kingdom, Singapore, or other countries where we or our providers operate. Privacy laws in those countries may differ from the laws where you live.
Where required, we use recognized safeguards for restricted international transfers, which may include adequacy decisions, approved contractual clauses, data-processing agreements, supplementary measures, or another lawful transfer mechanism. You may contact us for information about applicable safeguards, subject to legal and confidentiality limitations.
## 12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- fulfill orders and provide customer service;
- maintain account and transaction records;
- comply with tax, accounting, customs, product-safety, and other legal obligations;
- prevent fraud and resolve chargebacks;
- enforce agreements and establish or defend legal claims; and
- maintain records of consent and privacy requests.
Retention periods vary by data type, transaction, location, and legal requirement. Order, tax, and accounting records are typically retained for up to seven years after the relevant transaction, unless a longer or shorter period is required by applicable law. Marketing information is retained until you opt out or it is no longer needed, subject to retaining a minimal suppression record so that we can honor your request. Security logs are generally retained for a shorter period unless needed to investigate an incident.
When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it. Shopify and other providers may maintain separate retention schedules under their agreements and legal obligations.
## 13. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encrypted transmission, service-provider reviews, fraud monitoring, account-security measures, backups, and staff or contractor confidentiality obligations.
No internet transmission or storage system is completely secure. We cannot guarantee absolute security. You are responsible for using a strong, unique password and protecting your account credentials. If you believe your information or account has been compromised, contact us promptly.
## 14. Your Privacy Rights
Depending on your location and subject to legal exceptions, you may have the right to:
- know whether and how we process your personal information;
- request access to or a copy of your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of personal information;
- restrict or object to certain processing;
- withdraw consent;
- receive certain information in a portable format;
- opt out of direct marketing;
- opt out of sale, sharing, targeted advertising, or certain profiling;
- appeal our refusal of a request, where applicable;
- lodge a complaint with a relevant privacy or data-protection authority; and
- receive equal service and pricing without unlawful discrimination for exercising a privacy right.
To submit a request, email support@baristanest.com. Please describe the right you wish to exercise and the country or state where you live.
We may need to verify your identity before completing a request. Verification information will be used only to process and document the request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity verification. We will respond within the period required by applicable law.
We may deny or limit a request where permitted by law, including when we cannot verify identity, must retain information to fulfill a legal obligation, or an exception applies. If applicable law provides an appeal right, our response will explain how to appeal.
### EEA, UK, and Switzerland
Individuals in these regions may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also complain to your local supervisory authority. If we rely on legitimate interests, you may object based on your particular circumstances. You have an absolute right to object to direct marketing.
### United States
Residents of certain U.S. states may have rights to know, access, correct, delete, and obtain a portable copy of personal information, and to opt out of sale, sharing, targeted advertising, or certain profiling. We do not discriminate unlawfully because you exercise a privacy right.
California residents may also request information about categories of personal information collected, sources, purposes, categories of recipients, and specific pieces of information, subject to applicable thresholds and exceptions. The categories described in Sections 4, 5, and 9 are intended to provide this notice.
### Canada, Australia, and Other Regions
You may have rights to access or correct personal information and complain to the applicable regulator, together with other rights provided by local law. Contact us and identify your location so we can respond under the appropriate legal framework.
## 15. Automated Processing and Fraud Screening
Shopify, payment processors, and fraud-prevention providers may use automated systems to evaluate transactions and identify fraud, abuse, or security risks. These systems may consider device information, transaction patterns, location, payment status, and similar signals. A transaction may be flagged, delayed, or declined as a result.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects where applicable law prohibits doing so without safeguards. If you believe an automated decision affected you, contact us and request review where that right applies.
## 16. Children's Privacy
The Services are intended for a general adult audience and are not directed to children under 16. We do not knowingly collect personal information directly from children in violation of applicable law. If you believe a child has provided personal information without valid authorization, contact us so we can investigate and take appropriate action.
## 17. Third-Party Websites and Services
The Services may link to or integrate with third-party websites, social networks, payment services, or applications. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing personal information. We are not responsible for the privacy, security, or content of independent third parties.
## 18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our Services, technology, vendors, legal obligations, or business practices. We will post the revised policy with an updated date. Where required by law, we will provide additional notice or request consent before a material change takes effect.
We encourage you to review this page periodically. Prior versions may be requested by contacting us, subject to applicable record-retention requirements.
## 19. Complaints
If you have a privacy concern, please contact us first at support@baristanest.com so we can try to resolve it. Depending on where you live, you may also have the right to complain to a data-protection or privacy authority in your country or region.
## 20. Contact Us
For privacy questions, requests, or complaints:
**Shenzhen Sanhaikun E-Commerce Co., Ltd. (BARISTANEST)**
Tianji Building, Building CD, 7th Floor, F4.87DB7
Shenzhen, Guangdong 518042
China
Email: support@baristanest.com
Telephone: +86 15217063101