Privacy Policy
Last updated: 13 October 2026. This policy explains how information is handled when you browse shuomuatelier.com, contact us or place an order.
1. Operator and privacy contact
The operator responsible for this store’s handling of personal information is 烁木 (Shuo Mu), trading as ShuoMu Atelier / 烁木手作.
Contact address: Room 301, Unit 2, Building 6, Meidi Yunchao Fu, Yiwu, Zhejiang, China. Chinese address: 中国浙江省义乌市美的云潮府6栋2单元301.
Email: liming4981@126.com. Telephone and WhatsApp: +63 965 401 5278. Enquiries can be submitted 24 hours a day, China Standard Time (UTC+8); an immediate personal response is not guaranteed.
2. Information we receive
- Order information: name, email, telephone, billing and delivery addresses, selected products and options, quantity, order totals, notes, transaction references and payment status.
- Enquiries: name, email, country, adult confirmation and your message. Custom requests may include materials, measurements, finish, budget, timing, reference links and uploaded reference images. These requests are saved in the website administration system and sent by email.
- Technical and usage information: IP address and connection information processed when services receive a request, browser/device information, pages and referral sources, approximate country, session identifiers and shopping interactions used by site statistics and analytics.
- Subscription information: email and subscription choice when you choose the optional newsletter service.
Required checkout and enquiry fields are needed to process that order or request. Optional details and marketing subscriptions are not required to buy. Do not send intimate images, another person’s private information without permission, passwords or card security codes in messages. Uploaded reference material should contain only information needed for your request; an unlisted image link should not be treated as a confidential document vault.
3. Purposes and applicable legal bases
We use order and enquiry information to take steps you request before a purchase, process and deliver orders, communicate about them, and handle cancellations, returns and disputes. Where applicable, this processing is necessary to perform a contract or take pre-contractual steps.
Records may also be processed to meet applicable accounting and legal obligations. Security and troubleshooting support our legitimate interest in operating a reliable store, subject to applicable law and your rights. Optional marketing and non-essential tracking require consent where applicable; a purchase or agreement to trading terms is not itself consent to marketing or non-essential tracking.
4. Services and recipients
- Hostinger provides website infrastructure; WordPress and WooCommerce manage site and order records. Hostinger Reach is installed for newsletter functionality. Relevant hosting, email and technical support services may process information needed to operate these functions.
- PayPal provides the PayPal and hosted card-payment interfaces currently shown at checkout. Payment information entered into those interfaces is processed by PayPal; we use transaction references and results to manage your order. PayPal also processes information for its own security and regulatory purposes under its Privacy Statement.
- Google Analytics collection through Site Kit has been disabled pending review of transfer and retention arrangements. Historical information already sent to Google is not deleted by this change. See Google’s Privacy Policy. External visitor IP geolocation requests to ipapi.co have also been disabled.
- If you contact us through WhatsApp, your contact details and messages are handled through WhatsApp/Meta as well as by us. Email correspondence is handled through our email service, including the 126.com mailbox.
- Delivery carriers receive the recipient, address, contact and shipment information needed to deliver a parcel. The carrier depends on the shipment; contact us for the carrier for your order. The tracking page loads 17TRACK, which receives the tracking number you submit and technical information needed to provide its service.
- Information may be disclosed where necessary to comply with law, address a dispute or protect lawful rights. We do not publish customer enquiries as testimonials.
5. Cookies and browser storage
The order-tracking page connects to 17TRACK only after you submit a tracking number. The form explains this sharing before submission. Opening the tracking page alone does not load that tracking service.
WooCommerce uses cookies or session storage to maintain the shopping cart and checkout session. The website also stores adult-entry confirmation and language preferences in the browser. Clearing or blocking this storage can reset preferences or interrupt the cart.
Optional first-party visit statistics require your choice to allow them. They use smba_session for the browser session and smba_visit_ cookies lasting one day. Server-side statistics sessions expire after 30 minutes of inactivity. Statistics measure page visits, referral sources and cart or checkout activity. The old automatic article-view counter is disabled.
Use Privacy choices in the footer to allow or reject optional first-party statistics, or withdraw a previous choice. The necessary preference cookie shuomu_privacy_v1 records your choice for up to 180 days. Rejecting statistics does not disable the cart or payment services. Payment services may use their own security identifiers. Clearing browser storage does not delete order records or provider records.
6. Retention and deletion
WooCommerce application logs currently have an effective retention setting of 30 days. This setting is separate from orders, hosting access logs, email, provider records and backups; it does not mean all personal information is deleted after 30 days.
Retention is assessed by the purpose: completing an order or enquiry, dealing with returns or disputes, applicable accounting requirements, and security needs. The current store configuration does not set an automatic deletion or anonymisation deadline for completed orders or inactive accounts. Records may therefore remain until manually reviewed and deleted; we do not promise deletion after a fixed number of days.
Enquiries and their email copies, reference files, logs, analytics and backups may have different retention arrangements. Contact us for information about your records or to request deletion. A deletion request is assessed against any obligation to keep particular records. Deleting browser cookies does not delete order records, email copies or third-party records.
Ordinary enquiries older than 12 months enter the manual retention-review list. Before removal, we check that the enquiry is closed, has no order or dispute association, and is not subject to a legal preservation requirement. Age alone does not trigger deletion. Associated email copies and reference files require separate review. Orders, refunds and tax records are excluded from this automatic age-based candidate list.
7. International processing
The operator is located in China. Using an international hosting, payment, email, analytics, messaging or tracking provider may involve processing outside your country, including access from China. Provider locations and arrangements vary by service. Contact us for information about recipients and any applicable safeguards for your information. This notice does not assert that a particular transfer agreement or certification is in place where it has not been verified.
8. Your choices and requests
Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your information, object to certain processing, or withdraw consent without affecting the lawfulness of earlier consent-based processing. You may also complain to the relevant data-protection authority.
Send requests to liming4981@126.com. Provide only enough information to identify the relevant order or correspondence. We may ask for proportionate verification and will handle the request under applicable deadlines and exceptions. Do not email identity documents unless a necessary, appropriate verification method has been agreed.
To stop optional marketing, use the unsubscribe option in a marketing message or email us. Essential order and service messages are separate from marketing.
9. Security, discretion and adult use
The website uses HTTPS and administrator access controls. No internet transmission or storage system is completely secure. Discreet packaging does not make a transaction anonymous or remove carrier and customs disclosure requirements. Keep order references and reference-image links private.
This store is intended for adults aged 18 or over and any higher local minimum age. If you believe a minor has supplied personal information, contact us so we can investigate and address the information concerned.
10. Updates and related information
We will update this policy when our practices change and show the revised date. Additional notice or consent will be provided where required. See our Terms and Conditions, contact page and shipping information.