Thank you for supporting Brighpetal. To protect your personal data when you shop on https://brighpetal.com/, we have formulated this Privacy Policy. This policy serves as an agreement governing your use of our services, detailing how we collect, use, store, and protect your personal information, as well as your rights and related obligations. We strictly comply with the privacy protection laws and regulations of the European Economic Area (EEA), the United States, and other target markets to ensure your personal data is properly protected at all times. If you have any questions about this policy, please contact our customer support team at support@brighpetal.com.

1. Cookies and Similar Technologies

We use cookies and similar technologies to provide, protect, and improve our products and services, such as personalizing content, offering and measuring advertisements, understanding user behavior, and providing a safer shopping experience. You can remove or reject cookies through your browser or device settings, but in some cases, this may affect your ability to use our products and services normally.

1.1 Definition of "Cookies"

Cookies are small text fragments used to store information on web browsers. They are widely used to store and receive identifiers and other information on computers, mobile phones, and other devices. These files have multiple functions, such as remembering your preferences and selected products, helping improve your website experience, and ensuring that the advertisements or offers you see online are more relevant to your needs. We categorize cookies into 3 types, as detailed below.

1.2 Types of Cookies We Use

• Necessary Cookies: These cookies are essential for providing you with basic website services (such as browsing the website and completing purchases). If you disable these cookies, we will not be able to fulfill your requests (e.g., processing orders, accessing your account).
• Performance Cookies: These cookies collect anonymous information about how users use our website, and the relevant data is aggregated with other users' data to help us improve website operations. For example, we use Google Analytics cookies to understand how customers access our website, browse or use our services, and identify areas for improvement (such as navigation experience, shopping experience, and marketing campaigns). The data stored by these cookies never includes personal details that can identify you individually. Disabling these cookies may limit your use of certain website functions and reduce the quality of support we can provide.
• Functionality Cookies: These cookies remember your preferences and operations (such as language settings and saved shopping cart items) to provide you with better services and optimize our operation models. Rejecting these cookies may prevent you from using certain functional features of our website.

1.3 Control and Opt-Out of Cookies

You can adjust your browser settings to prevent cookies from being stored on your computer or mobile device without your explicit consent. The "Help" section of your browser usually provides detailed instructions on managing cookie settings. Please note that if you choose to reject cookies, you may not be able to use certain functions of our website and services normally.

1.4 Other Similar Technologies

We may use technologies similar to cookies (such as browser web storage (including HTML 5) and application data caching) to collect and store information (including personal data) locally on your device. These technologies help improve our service efficiency and your user experience, and their use requires your consent. If you reject these technologies, some website functions may be affected.

2. Age Restriction

By using our website and services, you confirm that you are at least 16 years old or have obtained authorization from a legal guardian. If you become aware that a minor under 16 has provided us with personal data without the guardian's authorization, please contact us immediately at support@brighpetal.com. We will promptly delete the relevant personal data and take appropriate measures to protect the minor's privacy.

3. Global Data Processing

Definition of Data Processing: Data processing refers to any operation or series of operations performed on personal data (whether automated or not), including collection, recording, organization, structuring, storage, adjustment, retrieval, consultation, use, disclosure, dissemination, collation, combination, restriction, erasure, or destruction.

We provide products and services to customers worldwide, so your personal data may be transferred to and stored in regions outside the European Economic Area (EEA), and may also be processed outside the EEA by our employees, affiliated companies, business partners, or service providers. Data protection laws vary from country to country, but regardless of where your information is processed, we will follow the same privacy protection standards described in this policy to ensure the security of your personal data.

When we cooperate with affiliated companies, business partners, or service providers to provide products and services, your personal data may be processed outside the EEA. In such cases, we will sign standard contractual clauses, rely on legal frameworks such as the Privacy Shield (if applicable), or require partners to adopt binding corporate rules. At the same time, we will also take appropriate security measures (such as encryption technology) to protect your personal data from unauthorized access or disclosure.

4. Information Security

We take reasonable technical, administrative, and physical security measures to protect your personal data from unauthorized access, use, disclosure, modification, erasure, or destruction, and ensure that the data we collect is used correctly. Specific measures include:

• Strictly restricting access to personal data to authorized personnel (such as data controllers, data processors, and data protection officers), only allowing them to obtain relevant data to perform their job responsibilities;
• Using SSL encryption technology to transmit sensitive personal information (such as payment details) on the website to ensure security during data transmission;
• Establishing a data recovery system to prevent data destruction, loss, modification, or unauthorized disclosure caused by technical failures;
• Regularly updating security technologies and conducting security audits to improve our privacy protection capabilities.

Please also take precautions to protect your account credentials, computer, and other devices. A "personal data breach" refers to a security incident that leads to the accidental or illegal destruction, loss, modification, unauthorized disclosure, or access of personal data. If you discover any personal data breach, please contact us immediately at support@brighpetal.com. We will promptly investigate the incident and notify you of the investigation result within a reasonable period. Please note that despite our best efforts, no security system is absolutely impenetrable. In the event of a security breach, we will promptly notify you and the relevant authorities in accordance with the law.

5. Collection, Use and Storage of Personal Data

5.1 Definition of Personal Data

Personal data refers to any information related to an identified or identifiable natural person. An identifiable natural person refers to an individual who can be identified directly or indirectly, especially through identifiers such as name, ID number, and location data. Personal data does not include data that has undergone irreversible anonymization or aggregation—such data cannot identify you individually, either alone or in combination with other information.

5.2 Types of Personal Data We Collect

The type of personal data we collect depends on the products and services you choose. We only collect personal data necessary for providing services and will never take collecting user personal information as our main purpose.

• Data You Voluntarily Provide: When you create an account, make a purchase, contact us, participate in online surveys, or use our online help/chat tools, we will collect the personal data you provide, including your name, email address, shipping address, billing address, contact phone number, and other relevant information.
• Locally Stored Data: We may collect and store information (including personal data) locally on your device through mechanisms such as browser web storage and application data caching to improve service efficiency.
• Purchase-Related Data: If you make a purchase, we will collect transaction-related data (such as your email, username, shipping address, billing details, and other verification information) to process your order and arrange delivery.
• Automatically Collected Technical Data: When you browse our website, we will automatically receive certain technical data, such as your IP address, browser type, operating system, and browsing behavior. Such data will be used anonymously to understand how visitors use our website and improve the shopping experience, and will not be used to identify your personal identity.

5.3 How We Use Your Personal Data

We will only use your personal data for the purposes stated in this policy, and will never use your personal information or images for advertising purposes without your explicit consent. Under no circumstances will we sell your personal information to any third party. The specific usage scenarios of your personal data are as follows:

• Provide, Improve and Develop Products and Services: We use your personal data to complete the shopping process, arrange delivery, provide customer service, improve user experience, conduct data analysis, research, and audits. Such processing is based on your prior explicit consent or our legitimate interest in providing you with high-quality services. If you no longer agree to such usage methods, please contact us to opt out.
• Communicate with You: With your prior explicit consent, we may use your personal data to send you order-related notifications, marketing information about our products and services, and updates on our policies and terms. You can unsubscribe from marketing emails at any time through the unsubscribe link in the email or by contacting support@brighpetal.com. When you contact us, we will also use your data to process and respond to your inquiries.
• Offer and Measure Targeted Advertising Effectiveness: With your prior explicit consent, we may use your personal data to personalize your experience on our website and third-party platforms, and measure the effectiveness of promotional activities. You have the right to choose whether to receive promotional information; if you no longer agree, you can contact us or unsubscribe through the unsubscribe link in marketing emails.
• Enhance Security: With your consent, we will use your personal data to verify accounts, monitor user activities, prevent fraud, and investigate suspicious or illegal activities and violations of our terms or policies. This is based on our legitimate interest in ensuring the security of our products and services.

5.4 How We Store Your Personal Data

We take technical measures (such as encryption and access control) to ensure the completeness and accuracy of your personal data records. With your prior explicit consent, we may store your personal data processing records for up to 10 years; after the storage period expires, we will securely delete or anonymize your personal data to prevent unauthorized access.

6. Third-Party Services and Links

6.1 Third-Party Service Providers

We cooperate with trusted third-party service providers, including payment processors, shipping carriers, and analytics services (such as Google Analytics). These providers will only receive the information necessary to perform their services and are not allowed to use the information for other purposes. We require all third-party service providers to comply with this Privacy Policy and relevant privacy protection laws and regulations, and take appropriate security measures to protect your personal data.

Please note that these third-party providers may operate in different jurisdictions, and your personal data may be processed in accordance with the laws applicable to those jurisdictions.

6.2 Website Links

Our website may contain links to external websites. We are not responsible for the privacy practices of these external websites, and we recommend that you review their privacy policies before providing any personal data. Once you leave our website or are redirected to a third-party website, this Privacy Policy will no longer apply.

6.3 Website Hosting (Shopline)

Our store is hosted on the Shopline platform, which provides e-commerce services to support us in selling products and services. Your personal data is securely stored in Shopline's systems, protected by firewalls and other security measures. Shopline follows international privacy protection standards to ensure the security of your data.

7. Consent and Withdrawal of Consent

7.1 Consent

By providing your personal information to complete a purchase, verify payment, arrange delivery, or return/exchange goods, you agree that we may collect and use your personal information for that specific purpose. If we request your information for secondary purposes (such as marketing), we will either seek your explicit consent or provide an option to refuse.

7.2 Withdrawal of Consent

If you change your mind after giving consent, you can withdraw your consent at any time by contacting our customer support team (support@brighpetal.com). Withdrawal of consent will not affect the legality of data processing conducted before the withdrawal.

8. Free Gifts and Incentives

We only provide free gifts or incentives in the following circumstances, and our main purpose will never be to collect user personal information:

• Provided when the user makes a purchase;
• Part of a marketing campaign;
• Other scenarios where the main purpose is to improve user experience rather than collect personal data.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in accordance with changes in privacy protection laws and regulations and our business needs. Any changes will take effect immediately upon being posted on this page. If significant updates occur (such as changes in the way we collect or use personal data), we will notify users through our website. We recommend that you review this policy regularly to understand how we protect your personal data.

If our business is transferred, merged, or acquired, your personal data may be transferred to the new operator to ensure the continuity of services. The new operator will be bound by this Privacy Policy and will continue to protect your personal data in accordance with the standards stated in this policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data (such as accessing, correcting, or deleting your personal data), please contact our customer support team:

Brighpetal Support Team

📧 Email: support@brighpetal.com

Our team will respond to your inquiry within 24-48 business days and assist you in resolving relevant issues in a timely manner. The contact information provided in this policy is true and valid, consistent with the contact information in our other website policies (Shipping Policy, Return & Refund Policy).