Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to the website, product display and sales pages, customer service, after-sales, and the "AI Assistant" features provided by Lafeitu Foods (hereinafter referred to as "we" or "the Platform") (collectively referred to as "the Services"). This policy is intended to explain how we collect, use, share, and protect your personal information, as well as the rights you have regarding your personal information.

2. Information We Collect and Sources

We collect the following information based on the principle of minimal necessity (depending on the features you actually use):

• Account Information (when setting up an account): Nickname, avatar, phone number/email.
• Recipient Information (when placing an order): Recipient name, shipping address, contact phone, order details.
• Payment Records: We record your payment status (whether successful), payment method (Alipay/WeChat Pay), and the system-generated order number. We do not collect, process, or store any sensitive financial information such as bank card numbers, payment passwords, or verification codes.
• Customer Service and After-sales: Your conversations with customer service or the "AI Assistant", and records of after-sales applications and processing.
• Device and Log Information: Device model, operating system, browser, IP address, access time, page browsing history, Cookie/local storage data.
• Marketing and Activity Information: Activity participation, coupons, subscription preferences.

Information sources include: what you actively provide when using the Services, what we automatically collect based on product operation, and what is provided by authorized third parties (such as payment/logistics/account login providers).

3. Purposes and Legal Basis for Information Use

• Fulfilling Contracts: Order fulfillment, payment and delivery, after-sales and customer service.
• Account and Security: Account management, identity verification, risk control, and fraud prevention.
• Product Optimization: Statistical analysis, service improvement, and performance optimization.
• Compliance Management: Cooperating with regulations according to the law, tax and audit retention, etc.
• Marketing Notifications (subject to your consent): Activity information, discount reminders, with the option to unsubscribe at any time.

The legal basis for processing personal information includes: necessity for the performance of a contract, fulfillment of legal obligations, your consent, and other circumstances permitted by laws and regulations.

4. Cookies and Similar Technologies

We may use Cookies/local storage to maintain sessions, store preferences, and conduct statistical analysis. You can clear or reject Cookies in your browser, but this may affect the experience of some features.

If we integrate third-party statistics/customer service/advertising SDKs, we will state their names, data types, and purposes as required, and provide opt-out methods.

5. Information Sharing, Transfer, and Entrusted Processing

We do not sell your personal information for trading purposes. To achieve necessary features, we may share within a minimal scope with the following types of partners:

• Logistics/Courier Service Providers: For order delivery (sharing shipping information and contact details).
• Third-party Payment Platforms (Alipay / WeChat Pay): For completing order payments. When you choose to pay, we will invoke the corresponding payment interface for you, and the payment platform will directly process your financial data.
• Cloud and Technical Service Providers: For data storage and computation (using encryption and access control).
• Customer Service and Call Centers: For consulting and after-sales (sharing necessary contact and order information).
• Risk Control/Security Service Providers: For risk assessment and fraud prevention.

In the event of a transfer due to mergers and acquisitions, restructuring, or bankruptcy liquidation, we will require the transferee to continue to abide by this policy, otherwise we will seek your consent again.

6. Cross-Border Provision of Personal Information

Unless otherwise stated, we do not currently provide personal information across borders. If involved in the future, we will conduct assessments according to the law and inform you of the recipient, purpose, method, and protective measures.

7. Information Storage Location and Retention Period

Personal information is generally stored on servers located within the People's Republic of China. The retention period is limited to the shortest time necessary to achieve the processing purposes or required by laws and regulations; after expiration, it will be deleted or anonymized.

8. Information Security

We use transmission and storage encryption, access control, least privilege, log auditing, backup and recovery, and other measures, and establish security management systems and employee confidentiality obligations to reduce the risks of information leakage, damage, or misuse.

Account Password Security: Your account password is stored using industry-standard one-way hashing encryption. We never store your password in plaintext, and no staff member can view your original password. For your account security, we recommend that you do not use the same password as your banking, payment apps, or other frequently used platforms.

If a security incident occurs that may affect you, we will fulfill our notification obligations according to laws and regulations and provide feasible remedial suggestions.

9. Protection of Minors

If you are a minor, it is recommended to use the Services under the guidance of a guardian. The processing of information of minors under the age of 14 will be conducted after obtaining the guardian's consent according to the law.

10. Your Rights and How to Exercise Them

You have the right to exercise the following rights according to the law: access and copy, correct and supplement, delete, withdraw consent, cancel the account, limit or decline specific processing, obtain explanations and appeal, etc.

You can submit requests through the "Contact Us" page, and we will process them within a reasonable timeframe (generally not exceeding 15 working days, unless otherwise stipulated by laws and regulations).

11. Automated Decision-Making and Profiling (if applicable)

If the Services involve personalized recommendations or risk assessment functions based on algorithms, we will follow the principles of transparency, explainability, and opt-out capability, and provide you with options to appeal or turn off personalized recommendations.

12. External Links and Third-Party Websites

This website may contain links to third-party websites or services. Such websites or services are operated by third parties and are subject to their independent privacy policies. Please read carefully before using them. We are not responsible for the privacy practices of third parties.

13. Updates to this Policy

When material changes are made to this policy, we will notify you through site announcements or prominent positions on the page. The modified policy takes effect from the date of publication; if sensitive permissions or significant impacts on rights and interests are involved, we will seek your consent again.