Privacy Policy
Effective date: 【待填写：生效日期，例如 1 November 2026】
This policy explains what personal data HealthyWelness collects when you visit healthywelness.com or place an order, why we collect it, who we share it with, how long we keep it and what rights you have.
Who we are
The data controller for this website is 【待填写：公司注册全称】, registered in 【待填写：注册国家/地区】 under company number 【待填写：注册号】, with its registered address at 【待填写：注册地址】. For any privacy question, email 【待填写：隐私联系邮箱，例如 [email protected]】.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone, billing and shipping address | When you place an order or create an account | To process, ship and support your order (performance of a contract) |
| Order details: products, amounts, payment method, order notes | When you place an order | To fulfil the order and keep accounting records (contract; legal obligation) |
| Research-use confirmation, with date, time and IP address | When you tick the research-use statement at checkout | To document that products were sold for laboratory research only (legal obligation; legitimate interest) |
| Account login details | If you create an account | To let you view orders and save addresses (contract) |
| Messages you send us | When you email or message support | To answer your question (legitimate interest) |
| Technical data: IP address, browser, device, pages visited | When you browse the site | To keep the site secure, prevent fraud and fix errors (legitimate interest) |
We do not collect card numbers. Card and cryptocurrency payments are handled by the payment provider you choose at checkout, under its own privacy policy. We do not knowingly collect data from anyone under 21.
Cookies and similar storage
| Name | Purpose | Duration |
|---|---|---|
woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | Remember the contents of your cart | Session up to 2 days |
wordpress_logged_in_*, wordpress_sec_* | Keep you signed in to your account | Session or up to 14 days if you choose “Remember me” |
hw_ruo_ok (browser local storage) | Remember that you dismissed the research-use notice | Until you clear your browser data |
__cf_bm, cf_clearance | Set by Cloudflare to protect the site from bots and attacks | Up to 30 minutes / 1 year |
These are strictly necessary for the site and shop to work. 【待填写：如果以后装了 Google Analytics、广告像素等统计/营销工具，在这里补充，并加装 Cookie 同意插件】
Who we share data with
- Shipping carriers receive your name, address and phone number to deliver your parcel: 【待填写：物流公司名称】.
- Payment providers process your payment: 【待填写：加密支付网关名称 / 收款银行】.
- Hosting and security providers store and protect the website: 【待填写：服务器商名称】 and Cloudflare, Inc.
- Email delivery provider sends order emails: 【待填写：SMTP 发信服务名称】.
- Authorities, when we are legally required to disclose information.
We do not sell your personal data, and we do not share it for advertising.
International transfers
Our servers are located in 【待填写：服务器所在国家】 and our team is based in 【待填写：团队所在国家/地区】, so your data may be processed outside your country. Where data leaves the European Economic Area or the United Kingdom, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep data
- Orders, invoices and research-use confirmations: 【待填写：保存年限，按公司注册地会计法规，常见为 6–10 年】.
- Customer accounts: until you ask us to delete the account, or after 【待填写：例如 3 年】 without activity.
- Support messages: 【待填写：例如 2 年】.
- Server and security logs: up to 30 days.
Your rights
Depending on where you live, including under the EU and UK GDPR and California’s CCPA/CPRA, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- ask us to delete your data, unless we must keep it by law (for example, order records);
- object to or restrict certain processing;
- receive your data in a portable format;
- complain to your local data protection authority.
To exercise any of these rights, email 【待填写：隐私联系邮箱】. We reply within 30 days. We may ask you to confirm your identity first.
Security
The site is served over HTTPS, access to customer data is limited to staff who need it to fulfil orders, and we keep our software up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy when our services or the law change. The effective date at the top shows when it was last revised.
Last updated October 17, 2026