Privacy policy

Privacy Policy

Effective Date: September 6, 2026

Data Controller: Beijing Fuxiang Culture Art Limited

Beijing Fuxiang Culture Art Limited ("we," "us," or "our") deeply respects your personal data. This Privacy Policy applies to your use of our online store and related services. We process and protect your personal data in strict compliance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

I. Personal Data Collection & Legal Basis

You are not required to provide the personal data we request; however, if you choose not to do so, we may be unable to provide our products, services, or respond to your inquiries. We only collect and process your personal data when a clear legal basis exists under GDPR Art. 6:

Contractual Necessity:
- Account & Order Management: When you register an account, purchase products, pay for orders, use gift cards, or download updates, we need to collect your name, mailing address, phone number, email address, contact preferences, and transaction records to fulfill product delivery and after-sales service.
- Logistics & Customer Support: Used to handle returns, logistics fulfillment, and provide dedicated one-on-one customer support.
Compliance with Legal Obligations:
- In specific jurisdictions, for customs clearance or tax compliance purposes, we may require government-issued identification documents within the scope permitted by law.
Legitimate Interests:
- System Security & Risk Control: Used to verify user identity, prevent fraudulent activities, and maintain system security and stability.
- Business Optimization & Internal Audit: Used for data analysis, improving online store product performance, and optimizing user experience and communication quality.
- System Push Notifications: To ensure delivery of essential service updates, we integrate SDK providers (such as JPush, Huawei HMS, Alipay real-name authentication/payment, and Tencent Bugly) to send necessary system and operational messages.
Your Explicit Consent:
- Marketing & Event Notifications: With your explicit consent, we may send you updates on new releases, promotions, or commercial information via email or SMS. You may unsubscribe or update your preferences at any time.

II. Collection and Use of Non-Personal Data

We also collect data that cannot be directly or indirectly associated with any specific individual. We may collect, use, transfer, and disclose such aggregated non-personal data for any purpose:

Device & Usage Data: Such as occupation, language, postal code, area code, unique device identifier, referrer URL, location, time zone, crash logs, and search queries within the store. This data helps us better understand user behavior and optimize interface layout and service relevance.
If non-personal data is combined with personal data, the combined information will be treated as personal data for as long as it remains combined under this policy.

III. Cookies & Other Tracking Technologies

We and our third-party service providers may use cookies, pixel tags, and web beacons:

Strictly Necessary Cookies: Essential for the core functionality of the website and store (such as shopping cart retention and secure login).
Analytics & Optimization Cookies: Help us measure visitor traffic, analyze browsing habits, and evaluate advertising effectiveness.
Consent & Management: Pursuant to the ePrivacy Directive, non-essential analytics or marketing cookies are enabled only after obtaining your explicit consent. You can manage or decline cookies via your browser settings.

IV. Data Storage, Security & Cross-Border Transfers

Data Security Protection:
- We use industry-standard Transport Layer Security (TLS/SSL) encryption protocols to protect your personal data during transmission.
- Your account password and core data are stored in encrypted format. Servers are deployed in secure facilities protected by physical security controls and restricted access.
Cross-Border Data Transfers:
- As a company headquartered in Beijing, China (Beijing Fuxiang Culture Art Limited), your personal data may be transferred to and stored on servers in China or outside the EU/EEA.
- We ensure all cross-border data transfers comply with Chapter V of the GDPR (for example, by adopting Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards).

V. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as mandated by statutory retention periods (such as tax, accounting, or customs laws). Upon expiration, your data will be securely destroyed or anonymized.

VI. Your Rights under GDPR

Under the EU GDPR, you hold the following statutory rights regarding your personal data:

Right of Access: The right to request copies of your personal data held by us.
Right to Rectification: The right to request correction of inaccurate or incomplete data.
Right to Erasure / "Right to be Forgotten": The right to request deletion of your personal data under certain conditions.
Right to Restriction of Processing: The right to request restriction of data processing under specific circumstances.
Right to Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format or request its transfer to a third party.
Right to Object: The right to object to processing based on legitimate interests or direct marketing at any time.
Withdraw Consent: The right to withdraw consent at any time where processing was based on prior consent.

To exercise any of these rights, please contact us using the details in Section VIII.

VII. Device Permissions

When using our mobile application, we may request the following permissions only after obtaining your explicit authorization:

Storage Permission (WRITE_EXTERNAL_STORAGE): Used to update profile avatars or send product inquiry images to customer service.
Camera Permission (CAMERA): Used for updating avatars, photo inquiries, and scanning QR codes for promotions.
Microphone Permission (RECORD_AUDIO): Used to send voice messages to customer support regarding product inquiries.

You may revoke these permissions at any time in system settings. Revoking permissions will only affect the corresponding specific features.

VIII. Contact Us & Regulatory Complaints

If you have any questions, suggestions, or wish to exercise your GDPR rights regarding this Privacy Policy, please contact us via:

Data Controller Name: Beijing Fuxiang Culture Art Limited
Email: [fx@icfcf.com]
Phone Number: [+34 663108699]
Mailing Address: [B21b, Tower A, Yayuan International, Chaoyang District, Beijing, China]
Spain Contact Address: Calle del Codo 3, 28005, Madrid

Right to Lodge a Complaint with a Supervisory Authority:

If you believe our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a Data Protection Authority (DPA) in your EU member state of residence or work.

IX. Policy Updates

We may update this Privacy Policy periodically to reflect legal or operational changes. For material changes, we will post a prominent notice on our website or app along with the updated effective date.