Document No.: Heyan Future (Shenzhen) Technology Co., Ltd.-SEC-PP-2026-001
Version: V1.0 · Effective Date: February 26, 2026 · Classification: Internal Public
Heyan Future (Shenzhen) Technology Co., Ltd. (hereinafter referred to as "we", "us" or "the Company") fully recognizes the importance of personal information to you and will make every effort to keep your personal information safe and secure. We are committed to maintaining your trust in us and to protecting your personal information in accordance with the principles of alignment of rights and responsibilities, clear purpose, informed consent, data minimization, security assurance, individual participation, and openness and transparency.
This Privacy Policy is intended to explain to you in a clear and transparent manner how, when you use the services we provide as a TikTok Shop service provider, we collect, use, share, store and protect your personal information, as well as the rights you are entitled to. Please read this Policy carefully and make sure you fully understand all of its contents before using our services.
1. Information We Collect
In order to provide you with compliant and efficient e-commerce services, we may collect the following types of information:
Information you provide directly
Identity and Contact Information: including your name, mobile phone number, email address and delivery address, used for order processing and communication.
Transaction and Order Information: including details of the products you purchase, order numbers, transaction amounts and payment status, used to perform the service contract.
Customer Service Records: when you contact us, we may keep call recordings, chat messages or email content in order to resolve after-sales issues.
Information we collect automatically
Device Information: including device model, operating system version, unique device identifiers and IP addresses.
Log Data: including access dates and times, page browsing records, click behavior and service failure information.
Cookie and Similar Technology Data: used to record your preference settings and session status.
Information obtained from third parties
TikTok Shop Platform Data: as an authorized TikTok Shop service provider, we obtain from the platform interface the order details, logistics tracking and basic store information necessary to help you operate your store and fulfill orders.
2. How We Use Your Information
The information we collect about you is mainly used for the following lawful purposes:
Performing the service contract: processing your orders, arranging product delivery and assisting with returns, exchanges and after-sales processes.
Customer service and support: responding to your inquiries, resolving disputes and providing technical support.
Security assurance and risk control: identifying abnormal transactions and preventing fraud, malicious fake orders and other security risks, in order to protect the rights and interests of the platform and its users.
Product and service improvement: analyzing service usage trends, optimizing system performance and enhancing the user experience.
Legal and compliance obligations: complying with applicable laws and regulations, regulatory requirements or orders of judicial and administrative authorities.
3. Information Sharing and Disclosure
We do not sell your personal information to unrelated third parties. We may share or disclose your information only in the following circumstances:
Necessary business partners
TikTok Shop Platform: returning the fulfillment data required under the service agreement.
Logistics service providers: sharing the recipient's name, telephone number and address in order to complete product delivery.
Payment processors: sharing the transaction verification information necessary to complete payment settlement.
Statutory disclosure scenarios
As required by laws and regulations, as necessary for the resolution of litigation or disputes, or in response to requests lawfully made by administrative or judicial authorities.
In the event of a merger, acquisition, asset transfer or similar transaction, where a transfer of personal information is involved, we will require the new holder to continue to be bound by this Policy.
4. Data Security Measures
We take industry-standard security measures to protect your personal information and to prevent data from unauthorized access, public disclosure, use, alteration, damage or loss:
Technical measures: using SSL/TLS encryption to safeguard data in transit; encrypting the storage of sensitive personal information; implementing strict access control and identity authentication mechanisms; and conducting regular security audits and vulnerability scans.
Administrative measures: establishing a data security management system, strictly limiting information access privileges in accordance with the principle of "least privilege"; providing regular employee training on privacy protection; and signing confidentiality agreements with employees and suppliers who have access to personal information.
Physical measures: our servers and data centers are deployed in facilities with comprehensive physical security protection, with 24/7 monitoring and access control management.
5. Data Retention
Retention period: we retain your personal information only for the shortest period necessary to achieve the purpose of the services. For TikTok Shop business data, we strictly follow the retention periods required by platform rules and by applicable local laws and regulations (for example, the time limits prescribed by tax or consumer protection laws).
Handling upon expiry: after the retention period expires, we will delete or anonymize your personal information. Where laws and regulations provide otherwise, we will continue to retain it in accordance with the law.
6. Your Rights
Under applicable data protection laws, you have the following rights with respect to your personal information:
Right of Access and Rectification: you may enquire about the information we hold about you and request correction of data that is inaccurate or incomplete.
Right to Erasure: in certain circumstances (for example, where the purpose of processing has been achieved or you withdraw your consent), you may ask us to delete your personal information.
Right to Restrict Processing: under certain conditions, you may ask us to restrict the processing of your personal information.
Right to Data Portability: you are entitled to obtain a copy of your personal information and, where technically feasible, to have it transmitted to a third party.
Right to Withdraw Consent: you may withdraw authorization previously granted by turning off device permissions or by contacting us.
Right to Lodge a Complaint: if you believe that our processing activities are unlawful, you have the right to file a complaint with a supervisory authority.
How to exercise your rights: please submit your request through the contact details provided in Section 10 of this Policy, or through the relevant features within the TikTok Shop platform. We will respond within 15 working days after verifying your identity.
7. Cookies and Similar Technologies
Purpose of use: we use cookies and similar technologies to ensure the normal operation of our website/systems, remember your login status, analyze traffic and optimize our services.
How to manage them: you may refuse or manage cookies through your browser settings.
Consequences of refusal: if you disable cookies, some service functions may become unavailable or your experience may be degraded.
8. Protection of Minors
Our services are intended primarily for adults. We do not knowingly collect personal information from minors.
If you are the guardian of a minor and become aware that a minor has used our services or provided personal information without your consent, please contact us using the contact details provided in this Policy, and we will promptly take measures to delete the relevant data.
9. Policy Updates
We may revise this Privacy Policy from time to time. Where the terms undergo material changes, we will notify you by means such as website announcements, in-app messages or TikTok Shop platform notifications.
If you continue to use our services after the Policy has been updated, you will be deemed to have agreed to accept the revised Policy.
10. Contact Us
If you have any questions, comments or suggestions regarding this Privacy Policy or the processing of personal information, please contact us through the following channels: