Privacy Policy

How Shuidu collects, uses, shares and protects your personal data, including cookies, retention periods and your privacy rights.

Privacy Policy

Last updated: 29 September 2026

Shuidu is a small, independent store. We collect as little information as we can, we use it only to fulfil your order and answer your questions, and we never sell it. This page explains exactly what we hold and what you can ask us to do with it.

Information we collect

Information you give us

  • Order details — your name, email address, delivery address and
    phone number, and the items you bought.
  • Account details — if you create an account, your email address
    and a password we store only in hashed form.
  • Messages — anything you send us by email or through our contact
    form, including the email address you write from.
  • Reviews and photos — if you leave a product review, the text
    and any images you upload.

Information collected automatically

  • Device and usage data — IP address, browser type, the pages you
    view and how long you spend on them.
  • Cookies — small files that keep your cart and session working
    and let us measure which pages are useful.

How we use your information

  • To process, pack, ship and invoice your order.
  • To send order confirmations, dispatch notices and, if you ask, our newsletter.
  • To answer your questions and handle returns or exchanges.
  • To prevent fraud and keep the store secure.
  • To understand which products and pages are working, so we can improve them.

Our lawful bases for processing personal data are the performance of a contract
(your order), our legitimate interests (running and securing the store), your consent
(marketing emails, cookies that are not strictly necessary) and legal obligation
(tax and accounting records).

Cookies

Strictly necessary cookies keep your cart and session working and cannot be switched
off. Analytics and marketing cookies are set only with your consent, which you can give
or refuse in the cookie banner and change at any time by clearing your browser storage.
You can also block or delete cookies in your browser settings; the store will still work,
but your cart may not be remembered.

Who we share your information with

We never sell your data. We share it only with the service providers we need to run
the store, and only the minimum each one requires:

  • Payment processors — to take payment securely. We never see or
    store your full card number.
  • Shipping carriers — your name, address and phone number, so your
    parcel can be delivered and tracked.
  • Email and hosting providers — to send your order emails and to
    run the website.
  • Analytics providers — aggregated, non-identifying usage data.
  • Authorities — where we are legally required to disclose.

International transfers

Some of our providers are based outside your country, including in the United States.
Where that happens we rely on standard contractual clauses or an equivalent safeguard
approved under applicable data protection law.

How long we keep it

  • Order and invoice records: seven years, because tax law requires it.
  • Account data: until you delete your account, then 30 days.
  • Support emails: two years from the last message.
  • Analytics data: fourteen months, in aggregated form.

Your rights

Depending on where you live, you may have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete your data, where we are not required to keep it.
  • Object to or restrict how we use your data.
  • Withdraw consent for marketing at any time.
  • Receive your data in a portable format.
  • Complain to your local data protection authority.

To exercise any of these, email niutie632@gmail.com. We will respond
within 30 days. We may ask you to confirm your identity first, so that we never hand
your data to someone else.

Children

This store is not intended for children under 16, and we do not knowingly collect
their personal data. If you believe a child has given us information, contact us and we
will delete it.

Security

The site is served over HTTPS, payment details are handled entirely by our payment
processor, and access to customer data is limited to the people who need it to fulfil
your order.

Changes to this policy

If we change how we handle your data, we will update this page and revise the date at
the top. Material changes will also be announced on the home page.

Other policies

Contact us

Questions about this policy? Write to
niutie632@gmail.com and we will answer within one business day.

Shuidu — handbags and footwear, made in small runs. Last updated 29 September 2026.