Privacy Policy

Update Date: January 1, 2026        Expiry Date: December 31, 2030

• Information you provide voluntarily when registering an account, placing orders or contacting customer service, such as full name, email address, phone number, shipping address (including street name, city, postal code, country/region), billing address, and identification documents (e.g., passport number, ID card number) if required for customs clearance.

• Payment-related information (e.g., credit card number, debit card details) processed through third-party payment gateways (we do not store full payment card information; see Section 5 for details on payment partners).

• When you enable location services on your device and use location-based features (e.g., checking local shipping options, calculating tax/duty estimates), we may collect your approximate location information through GPS, IP address geolocation, or WiFi data to provide accurate shipping quotes, tax calculations, and regionalized service recommendations.

• You may disable location services at any time through your device settings to stop the collection of such information, though this may affect the accuracy of location-dependent services.

• Device and Technical Information: Including device model, operating system (iOS, Android, Windows, etc.), browser type, IP address, language preference, time zone, and unique device identifiers (e.g., IMEI, MAC address) to ensure website compatibility and service security.

• Browsing and Transaction Logs: Information about your activities on flishrc.com, such as products viewed, search queries, order history (including product details, order amount, payment status, shipping tracking number), click-through rates, and page visit duration. This data is collected via cookies, web beacons, and similar tracking technologies (see Section 1.4 for cookie management).

• Interaction Data: Records of your communications with our customer service team (e.g., chat logs, email correspondence) to process inquiries and improve service quality.

• Your information is stored securely through encrypted databases, cloud storage services (compliant with international security standards such as ISO 27001), and secure server logs. We implement technical measures (e.g., AES encryption, access control) to protect data from unauthorized access.

• We retain your personal information only for the period necessary to fulfill the purposes stated in this Privacy Policy (e.g., until your order is delivered and after-sales warranty expires) or as required by applicable laws (e.g., tax record retention requirements). After the retention period, we will anonymize or securely delete your information unless continued storage is necessary for legal or legitimate business purposes.

• Data Storage Locations: We primarily store personal information collected from cross-border users in secure data centers located in China and/or trusted third-party cloud service providers (e.g., AWS, Alibaba Cloud) with global compliance certifications.

• Legitimate Cross-Border Transfers: When transferring your personal information across borders (e.g., to process international payments, coordinate global shipping, or share with overseas service providers), we ensure compliance with applicable data protection laws by:

1. 1. Obtaining your explicit consent prior to the transfer (where required);

1. 2. Using legally recognized data transfer mechanisms (e.g., standard contractual clauses approved by relevant authorities, binding corporate rules);

1. 3. Requiring overseas recipients to implement equivalent data protection measures as specified in this Privacy Policy.

• We will notify you of the specific purpose of the transfer, the recipient’s identity, the destination country/region, and the security safeguards implemented, and obtain your consent if required by law.

• Encryption of data in transit (via SSL/TLS protocols) and at rest (via AES-256 encryption);

• Regular security audits, vulnerability assessments, and penetration testing;

• Restricted access to personal information (only authorized personnel with a legitimate business need may access such data);

• Employee training on data protection and privacy compliance.

• Process and fulfill your orders (e.g., verify your identity, arrange production, coordinate international shipping, issue invoices);

• Facilitate payment processing and prevent fraudulent transactions (e.g., verify payment information, detect unusual activity);

• Provide customer support (e.g., respond to inquiries, resolve order issues, process returns/refunds);

• Personalize your shopping experience (e.g., recommend products based on browsing history, display content in your preferred language, customize shipping options);

• Send you transaction-related notifications (e.g., order confirmation, shipping updates, delivery alerts) and important service announcements;

• Conduct market research and analyze user behavior to improve website functionality, product selection, and service quality;

• Deliver targeted marketing communications (e.g., promotional offers, new product launches) with your consent (you may opt out at any time via the “unsubscribe” link in emails or by contacting customer service);

• Comply with legal obligations (e.g., customs clearance requirements, tax reporting, responding to legal requests from authorities).

• Payment Processors: E.g., PayPal, Stripe, Alipay Global (to process international payments; these providers are bound by strict data protection agreements and do not use your information for other purposes);

• Shipping and Logistics Partners: E.g., DHL, FedEx, UPS, local postal services (to deliver your orders, track shipments, and handle customs clearance; we only share information necessary for delivery, such as name, address, and order details);

• IT and Security Providers: E.g., cloud service providers, anti-fraud tools (to maintain website operation and protect against security risks);

• Marketing Partners: E.g., email marketing platforms, social media advertising tools (only with your consent, and we require them to comply with privacy regulations).

• Process your information only as instructed by us;

• Implement adequate security measures;

• Not disclose or transfer your information to other parties without our permission;

• Comply with applicable data protection laws.

• Right to Access: Request a copy of the personal information we hold about you;

• Right to Correction: Request correction of inaccurate or incomplete personal information;

• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal information, provided that we are not required by law to retain it;

• Right to Restriction of Processing: Request that we restrict the processing of your information (e.g., if you dispute the accuracy of the data);

• Right to Data Portability: Request a copy of your information in a structured, machine-readable format (where technically feasible);

• Right to Withdraw Consent: Withdraw your consent to certain data processing activities (e.g., marketing communications) at any time (this will not affect the legality of processing based on consent before withdrawal);

• Right to Lodge a Complaint: If you believe we have violated data protection laws, you may lodge a complaint with a supervisory authority in your country/region.

• We will stop processing your personal information for most purposes;

• We will delete or anonymize your information within 30 days, except as required by law to retain certain data (e.g., tax records, order history for warranty claims);

• You will no longer be able to access your account, order history, or other services associated with the account.

• Post the revised Privacy Policy on flishrc.com with a new “Last Updated” date;

• Notify you via email (sent to your registered email address) or website pop-up notification at least 7 days before the changes take effect.