Privacy Policy
1. Introduction
At xmomo (“we,” “us,” “our,” or “our company”), we are committed to protecting your privacy and ensuring that your personal information is handled responsibly and transparently. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.
This policy applies to all visitors and customers of xmomoshop.com (the “Site”). Regardless of where you are located. By accessing or using our Site and services, you consent to the practices described in this Privacy Policy.Our products are manufactured in China and shipped directly to customers worldwide. This means your data may be processed both in China and in your country of residence. We have implemented measures to ensure your data is protected regardless of location, as described in this policy.
xmomoshop.com is operated by WELAND INNOVATION INC, a Wyoming corporation
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide when you interact with our Site:
- Account Information: Name, email address, and password when you create an account.
- Order Information: Shipping address, billing address, phone number, and order details when you make a purchase.
- Payment Information: Payment card details are processed securely by our payment providers (e.g., Shopify Payments, PayPal). We do not store full card numbers on our servers.
- Communication Data: Messages, emails, or other communications you send to us (e.g., customer service inquiries, product reviews, embroidery customization requests).
- Marketing Preferences: Your consent to receive newsletters, promotional emails, and your preferences for marketing communications.
- Customization Data: Information you provide when using our custom embroidery service, such as initials, names, or constellation selections.
2.2 Information Collected Automatically
When you visit our Site, we automatically collect certain technical and usage data:
- Device & Browser Information: IP address, browser type and version, operating system, and screen resolution.
- Usage Data: Pages visited, time spent on pages, referring website, pages clicked, and the dates and times of your visits.
- Location Data: Approximate location derived from your IP address. We do not collect precise GPS location.
- Cookies & Pixels: See Section 6 for details on how we use cookies and similar tracking technologies.
2.3 Information from Third Parties
We may receive information about you from third parties, including:
- Social Media Platforms: If you interact with our brand on Instagram, TikTok, Facebook, or Pinterest, or if you use social login features.
- Marketing Partners: If you were referred to us by an influencer or affiliate partner.
- Shipping Carriers: Tracking and delivery status updates to provide you with shipment notifications.
3. How We Collect Information
We collect your information through the following methods:
- Directly from you: When you create an account, place an order, subscribe to our newsletter, or contact our customer service.
- Automatically: Through cookies, web beacons, tracking pixels, and similar technologies when you browse our Site.
- From third parties: From our service providers (e.g., payment processors, shipping carriers) and marketing partners.
4. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Information Used |
|---|---|
| Order Processing & Fulfillment Processing payments, manufacturing your order, arranging shipping from China, and providing tracking updates. | Name, shipping address, billing address, phone, email, payment data, order details, customization data |
| Customer Service Responding to your inquiries, handling returns, exchanges, and warranty claims. | Name, email, phone, order number, communication data |
| Marketing & Communications Sending newsletters, promotional offers, product updates, and personalized recommendations. | Email, name, browsing behavior, purchase history, marketing preferences |
| Site Improvement & Analytics Analyzing how visitors use our Site to improve functionality, performance, and user experience. | IP address, device info, usage data, cookies |
| Fraud Prevention & Security Detecting and preventing fraud, unauthorized transactions, and abuse of our services. | IP address, device info, payment data, order history |
| Legal Compliance Complying with applicable laws, regulations, and legal processes. | All relevant information as required |
| Product Authentication & NFC Verifying product authenticity and providing traceability information when you tap the NFC chip. | Product ID, batch number, tap timestamp (no personal data required) |
5. Information We Share
We do not sell your personal information. We share your information only with the following categories of recipients, and only as necessary to provide our services:
5.1 Service Providers & Vendors
We work with trusted third-party providers who process data on our behalf:
- E-commerce Platform: WordPress woocommerce — for website hosting, order management, and payment processing.
- Payment Processors: PayPal — for processing your payments securely.
- Shipping Carriers: To deliver your order from China to your address. We share your name, shipping address, phone number, and order details.
- Email Marketing: Klaviyo — for sending newsletters and transactional emails.
- Customer Service: Tools we use to manage and respond to your inquiries.
- Analytics: Google Analytics, Meta (Facebook) Pixel, TikTok Pixel, Pinterest Tag — for understanding website traffic and ad performance.
- Manufacturing Partner: Our silk manufacturer in China receives your order details (product, quantity, size, embroidery specifications) to produce your items. They do not receive your payment information.
5.2 Legal & Compliance
We may disclose your information if required by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, safety, or property, or those of our customers or others.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such transfer and your choices regarding your data.
6. Cookies & Tracking Technologies
We use cookies and similar technologies (web beacons, pixels, tags) to operate and improve our Site, remember your preferences, analyze traffic, and serve relevant advertising.
6.1 Types of Cookies We Use
| Type | Purpose | Examples |
|---|---|---|
| Essential Cookies | Required for the Site to function (shopping cart, checkout, security). | Shopify session cookies, cart cookies |
| Analytics Cookies | Understand how visitors use the Site to improve performance. | Google Analytics (_ga, _gid) |
| Marketing Cookies | Track your activity to show you relevant ads on other platforms. | Meta Pixel (_fbp), TikTok Pixel, Pinterest Tag |
| Functional Cookies | Remember your preferences (language, region, recently viewed products). | Shopify locale cookies, recent product cookies |
6.2 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that if you disable essential cookies, parts of our Site (such as the shopping cart and checkout) may not function properly.
For EU and UK users: We will seek your consent before placing non-essential cookies on your device, in accordance with the GDPR and the ePrivacy Directive.
For U.S. users: You may opt out of the “sale” or “sharing” of your personal information for targeted advertising purposes, as described in Section 12 below.
7. Third-Party Services
Our Site integrates with third-party services that may collect information about your visit. We do not control these third parties’ data practices. Below is a summary of the key services we use:
| Service | Purpose | Data Collected | Privacy Policy |
|---|---|---|---|
| WordPress woocommerce | E-commerce platform, payments, order management | Name, email, address, phone, payment data, IP, device info | shop.com/legal/privacy |
| Klaviyo | Email & SMS marketing automation | Email, name, browsing behavior, purchase history | klaviyo.com/legal/privacy |
| Google Analytics | Website traffic analysis | IP (anonymized), device info, usage data, location (approximate) | policies.google.com/privacy |
| Meta (Facebook) | Advertising, retargeting, measurement | Device info, browsing behavior, ad interactions | facebook.com/privacy/policy |
| TikTok | Advertising, retargeting, measurement | Device info, browsing behavior, ad interactions | tiktok.com/legal/privacy-policy |
| Advertising, retargeting | Device info, browsing behavior, ad interactions | policy.pinterest.com/privacy | |
| PayPal | Payment processing (alternative) | Payment data, name, billing address | paypal.com/legal/privacy |
For a complete and current list of third-party services, please contact us at privacy@xmomoshop.com.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:
- Account data: Retained for the duration of your account. You may request deletion at any time.
- Order data: Retained for a minimum of 7 years for tax, accounting, and legal compliance purposes.
- Marketing data: Retained until you unsubscribe or request deletion.
- Communication data: Retained for 2 years after your last interaction.
- Device & usage data: Retained for up to 26 months (per analytics tool defaults).
When data is no longer needed, we will either delete it or anonymize it so it can no longer be used to identify you.
9. International Data Transfers
Because our products are manufactured in China and we serve customers globally, your personal information may be transferred to and processed in countries other than your country of residence, including China and the United States.
We take the following measures to ensure appropriate protection of your data during international transfers:
- We use service providers (WordPress WooCommerce) that implement Standard Contractual Clauses (SCCs) or other approved transfer mechanisms for EU/UK data.
- We limit the data shared with our manufacturing partner in China to only what is necessary for order fulfillment (product specifications, quantity, shipping address). Payment information is never shared with the manufacturer.
- We do not transfer sensitive personal data (e.g., health data) to countries without adequate data protection.
For EU/UK users: We rely on Standard Contractual Clauses as the legal basis for transferring your data outside the EU/UK. You may request a copy of these safeguards by contacting us at privacy@xmomoshop.com.
10. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal information we hold about you. | Email privacy@xmomoshop.com |
| Correction | Request that we correct inaccurate or incomplete information. | Email privacy@xmomoshop.com or update in your account |
| Deletion | Request that we delete your personal information (subject to legal retention requirements). | Email privacy@xmomoshop.com |
| Opt-out of Marketing | Unsubscribe from promotional emails at any time. | Click “Unsubscribe” in any email or email privacy@xmomoshop.com |
| Opt-out of Cookies | Disable non-essential cookies. | Use browser settings or our cookie preference tool |
| Opt-out of Sale/Sharing | Opt out of the “sale” or “sharing” of your personal information for targeted advertising. | Email privacy@xmomo.com or use the “Do Not Sell or Share My Personal Information” link on our Site |
| Data Portability | Receive your personal data in a structured, machine-readable format (EU/UK users). | Email privacy@xmomoshop.com |
| Object to Processing | Object to certain processing of your data (EU/UK users). | Email privacy@xmomoshop.com |
| Withdraw Consent | Withdraw consent given for specific processing (EU/UK users). | Email privacy@xmomoshop.com |
We will respond to your request within 30 days. For identity verification, we may ask you to provide information to confirm your identity before processing your request.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, fraud prevention).
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: We do not “sell” your personal information as defined by the CCPA. However, we may “share” your information with advertising partners for targeted advertising. You have the right to opt out of this sharing at any time by emailing privacy@xmomo.com or using the “Do Not Sell or Share My Personal Information” link on our website.
- Right to Limit Use of Sensitive Information: We do not collect or use sensitive personal information as defined by the CPRA for purposes other than those disclosed in this policy.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
Categories of Personal Information We Collect (per CCPA):
- Identifiers: Name, email address, phone number, IP address, cookie ID.
- Commercial Information: Purchase history, order details.
- Internet Activity: Browsing history, search history, interactions with our Site.
- Geolocation Data: Approximate location derived from IP address.
- Inferences: Preferences and tendencies derived from your browsing and purchase behavior.
To exercise your California privacy rights, please contact us at privacy@xmomoshop.com. Authorized agents may submit requests on your behalf with written authorization.
12. EU & UK Privacy Rights (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the GDPR and UK GDPR:
- Right of Access: Request access to your personal data and a copy of it.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal exceptions.
- Right to Restrict Processing: Request that we limit the processing of your data under certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to Object: Object to processing based on legitimate interests, direct marketing, or profiling.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local Data Protection Authority. However, we encourage you to contact us first so we can address your concerns.
Legal Basis for Processing (per GDPR Article 6):
- Contract Performance (Art. 6(1)(b)): Processing your order data to fulfill our contractual obligations to you (processing payment, manufacturing, shipping, customer service).
- Consent (Art. 6(1)(a)): Sending marketing emails, placing non-essential cookies, and other activities where you have given explicit consent.
- Legal Obligation (Art. 6(1)(c)): Retaining order and financial data for tax and legal compliance.
- Legitimate Interests (Art. 6(1)(f)): Analytics, fraud prevention, website security, and improving our products and services.
Data Protection Contact: If you have questions about how we handle your data under the GDPR, please contact us at privacy@xmomoshop.com.
13. Children’s Privacy
Our Site and services are not directed to children under the age of 16 (13 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at privacy@xmomoshop.com, and we will promptly delete it.
14. Data Security
We implement reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- PCI DSS-compliant payment processing through Shopify Payments and PayPal.
- Access controls limiting internal access to personal data on a need-to-know basis.
- Regular security reviews and updates to our systems.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the “Last Updated” date at the top of this policy.
- Post a notice on our website homepage or send an email notification for significant changes.
- Provide a 30-day notice for changes that materially affect your rights, where required by law.
We encourage you to review this page periodically to stay informed about how we protect your information.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Email: privacy@xmomoshop.com
Customer Service: service@xmomoshop.com
Website: www.xmomoshop.com
For California residents (CCPA requests): privacy@xmomoshop.com
For EU/UK residents (GDPR requests): privacy@xmomoshop.com
We will respond to your inquiry within 30 days of receipt.
Last updated: September 27, 2026.