PRIVACY POLICY

MakeMuse Privacy Policy

Effective Date: July 1, 2026

Thank you for visiting www.makeandmuse.com (the “Website”). The Website is operated by Xie’ou Zhonggou (Shanghai) Trading Co., Ltd. (“we”, “us”, or “MakeMuse”). We are committed to protecting your personal information in accordance with the Personal Information Protection Law of the People’s Republic of China, the Cybersecurity Law, other applicable Chinese regulations, and internationally recognised privacy principles.

This Privacy Policy explains how we collect, use, store, share, transfer internationally, and protect your personal information, as well as your rights and how to exercise them. Please read this policy carefully before using our Website and services. If you do not agree with this policy, please discontinue use immediately.

1. Information We Collect

Depending on how you interact with our Website, we may collect the following categories of personal information:

Category	Details
Identity and Contact Information	Name, shipping address, billing address, email address, phone number
Order and Transaction Information	Products purchased, selected options, order value, shipping method, payment status, order history
Payment Information	We do not store full card numbers or payment credentials. Payment processing is handled by accredited third‑party payment processors; we receive only the payment result and limited masked data (e.g., last four digits, payment channel)
Account Information	Username, encrypted password, preferences, wishlist, saved settings
User‑Generated Content and Communications	Enquiries, customer support records, product reviews, photos/videos you upload, survey responses
Device and Technical Data	IP address, browser type and version, operating system, device model, language preference, screen resolution, time zone, approximate location (city‑level)
Website Activity	Pages viewed, links clicked, search terms, cart additions, referring URLs, visit duration and frequency
Cookies and Similar Technologies	Identifiers and preferences collected via cookies, pixel tags, local storage, etc. (see Section 3)

2. How We Use Your Information

We process your personal information only for lawful, explicit, and legitimate purposes, and limit processing to what is necessary to achieve those purposes. The table below sets out our purposes and the corresponding legal bases under Chinese law:

Purpose	Legal Basis (PIPL)
Process and fulfil orders (including delivery, after‑sales, refunds)	Performance of a contract or steps at your request prior to contracting
Confirm payments, prevent fraud, and manage transaction risks	Performance of a contract, or legitimate interests (securing transactions)
Send order confirmations, shipping updates, and service‑related notifications	Performance of a contract
Respond to your enquiries, complaints, and technical support requests	Performance of a contract
Operate, maintain, secure, and improve the Website	Legitimate interests (service improvement and system security)
Detect and prevent fraud, cyberattacks, abuse, and technical vulnerabilities	Legal obligations or legitimate interests
Comply with legal, accounting, tax, and regulatory requirements	Legal obligations
Send you promotional materials, product news, and craft activity updates (only with your consent; you may unsubscribe at any time)	Your consent

We will not use your information for any other purpose not described in this Policy without obtaining your separate consent, unless otherwise required by law.

3. Cookies and Similar Technologies

We and our service providers use cookies, pixel tags, local storage, SDKs, and similar technologies to:

Ensure basic functionality of the Website (e.g., login, shopping cart);
Remember your preferences (e.g., language, region);
Analyse site usage to improve content and layout;
Assist with security and fraud prevention.

You can manage or delete cookies through the “Cookie Settings” link at the footer of our Website or via your browser settings. Please note that disabling certain cookies may affect some features.

4. How We Share, Entrust Processing, and Disclose Your Information

We only share or entrust your personal information to third parties in the following necessary and lawful circumstances:

4.1 Sharing with Service Providers

We share necessary information with the following types of service providers to complete the purposes described in Section 2:

Website hosting, e‑commerce platform, and technology support;
Payment processing and fraud prevention services;
Logistics and shipping partners;
Customer service and communication tools;
Marketing platforms (only based on your consent).

All such providers are contractually bound to maintain the same level of confidentiality and security and to process data only on our instructions.

4.2 Disclosure to Professional Advisors or Authorities

To comply with laws, regulations, court orders, or administrative decisions;
To protect national security, public safety, or criminal investigations;
To protect our legitimate rights and interests or those of our users (e.g., litigation).

4.3 Business Transfers

In the event of a merger, acquisition, asset transfer, or bankruptcy, we will notify you in advance and require the new holder to continue to comply with this Policy or obtain your fresh consent.

4.4 Anonymised Information

We may freely use anonymised data that can no longer identify a specific individual, without restriction under this Policy.

5. Data Storage and Retention

Storage Location: Your personal information is primarily stored within the People’s Republic of China. If international transfers are necessary, we comply with the safeguards described in Section 7.
Retention Period: We retain your personal information only for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, dispute resolution, contract performance). After the retention period expires, we will delete or anonymise your information.

6. Data Security Measures

We implement reasonable administrative, technical, and physical safeguards, including but not limited to:

Transport Layer Security (TLS/SSL) encryption;
Encrypted storage of sensitive data;
Access control and audit logging;
Regular vulnerability assessments and incident response drills;
Employee confidentiality training.

Nevertheless, please understand that no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your account password safe and notifying us immediately of any suspected unauthorised activity. If we fail to protect your information due to our security lapse, we will assume liability as provided by law.

7. International Data Transfers

Because our service providers, suppliers, and fulfilment partners may be located in different countries or regions, your personal information may be transferred to or stored in jurisdictions outside your own (including but not limited to the United States and Europe). In such cases, we will:

Ensure that the recipient country provides an adequate level of protection equivalent to that required under Chinese law, or
Adopt standard contractual clauses, certification mechanisms, or other legally prescribed safeguards, and inform you of the transfer purposes, types of recipients, and possible risks;
Complete a personal information protection impact assessment where required by law.

You may contact us using the details in Section 12 to request further information about these safeguard measures.

8. Your Rights and Choices

Under the Personal Information Protection Law and other applicable laws, you have the following rights:

Right	Description
Right to Know	You have the right to be informed about how we collect and use your personal information (as provided in this Policy).
Right of Access	You may access your personal information through your account or by contacting us to obtain a copy.
Right to Rectification	You may request correction of inaccurate or incomplete information.
Right to Erasure	Under certain circumstances (e.g., withdrawal of consent, purpose achieved, no longer necessary), you may request deletion of your personal information.
Right to Withdraw Consent	For processing based on consent (e.g., marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Restriction	In certain cases, you may request that we restrict processing of your information (e.g., while we verify a dispute).
Right to Portability	You have the right to receive your personal information in a structured, commonly used, and machine‑readable format.
Right to Object	You may object to processing based on our legitimate interests, on grounds relating to your particular situation.
Right to Appeal	If you disagree with our decision regarding your request, you may appeal (see Section 12).

How to Exercise Your Rights

Log in to your account to update certain information directly;
Send a request to service@makeandmuse.com;
We will respond within 15 working days after verifying your identity. We will strive to accommodate your request unless restricted by law or if the request is manifestly unfounded or excessive.

Marketing opt‑out: You may unsubscribe from promotional emails via the “unsubscribe” link in the email or by contacting us. Transactional messages (orders, shipping, after‑sales) will continue regardless of marketing preferences.

9. Children’s Privacy

Our Website is not intended for children under the age of 14 (as defined by Chinese law). We do not knowingly collect personal information from children without verifiable parental consent. If you believe that we have collected information from a child without proper consent, please contact us immediately, and we will delete such data promptly.

10. Third‑Party Links

The Website may contain links to third‑party websites or services. Those parties have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review their policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal obligations. The revised version will be posted on this page with an updated effective date. For material changes (e.g., changes in processing purposes, expanded rights impacts, or cross‑border transfers), we will provide additional notice via website announcement, pop‑up, or email.

Your continued use of the Website after the revised policy takes effect constitutes your acceptance of the changes. If you do not agree, please stop using the Website and contact us to delete your data.

12. Contact Us and Dispute Resolution

12.1 Contact Details

Brand: MakeMuse
Website: www.makeandmuse.com
Customer Service Email: service@makeandmuse.com
Operator: Xie’ou Zhonggou (Shanghai) Trading Co., Ltd.
Business Registration Number: 91310000084110273B
Registered Address: Room 208, 2nd Floor, Building 1, No. 757 Jiaozhou Road, Jing’an District, Shanghai, China (this address is for legal correspondence only and is not a return address; please contact us for return authorisation and correct address)
Data Protection Officer / Compliance Officer: You may reach our designated officer via the email above with subject line “Privacy Matter”.

12.2 Complaints and Appeals

If you have any concern about our handling of your personal information, you may first file a complaint via the above email. We will respond in writing within 15 working days.

12.3 External Remedies

If you are not satisfied with our response, you may lodge a complaint with the Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Consumer Association, or other competent authorities, or initiate legal proceedings in a court of competent jurisdiction under Chinese law.

Thank you for trusting MakeMuse. We are committed to protecting your privacy responsibly.