Company Name:Guangzhou Fengxi Technology Co., Ltd.

Address:Room 301, No. 8, Lane 2, Xinmin Xincun, Shiling Town, Huadu District, Guangzhou City

Authorized Director:Yu Shuangke

Social Credit Code:91440114MAK1F2GE8D

Email:service@mail.cjyxrtuw.com

Phone:+86 19212537068

Dear valued customers, thank you for choosing TNAH Mall (hereinafter referred to as "we," "our," or "this platform"). We are an online retail platform focused on operating department store products in the UK. We strictly comply with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) and regard the protection of your personal data and privacy as a core responsibility and obligation. This policy aims to clearly inform you about how we collect, use, store, and protect your personal data, as well as the rights you have, ensuring that you can use our services with confidence and clarity regarding your privacy rights while shopping.

1. Data Controller Information

The data controller for personal data on this platform is TNAH Mall. Please find the relevant contact details below for any inquiries:

• Scope of Business: Department store products in the UK
• Official Contact Email: service@mail.cjyxrtuw.com
• Customer Service Hours: Monday to Friday, 9:00 AM to 6:00 PM (UTC+8:00)

2. Personal Data We Collect

We adhere to the principle of "data minimization" and only collect personal data necessary for providing our department store shopping services. We do not collect any unrelated information. The specific data we collect and its purposes are as follows, all of which comply with the principles of "adequate, relevant, and not excessive" as per the UK GDPR and the UK Data Protection Act 2018:

• Personal Identification and Contact Information: Name, phone number/email address, for order confirmation, customer service communication, and after-sales issue handling, ensuring timely responses within customer service hours.
• Delivery Address Information: For product delivery, in line with our commitment to dispatch orders within 1-3 business days and deliver them within 7-10 business days, ensuring accurate delivery to your designated address.
• Payment Information: We collect only the payment verification data required (without storing full payment passwords, bank card numbers, or sensitive payment information), used for order payment confirmation and transaction security.
• Order-related Information: Order number, product details, order time, payment amount, etc., for order tracking, logistics monitoring, after-sales support, and compliance record-keeping.

3. Purpose and Legal Basis for Data Use

We process your personal data only on lawful, fair, and transparent grounds, with the legal bases being "performance of a contract" and "legitimate interests." The specific purposes for which we use your data are strictly limited to the following:

• Order Fulfillment: To process your orders, complete product sorting, quality checks, and dispatch, track logistics, and ensure the product is delivered to your designated address within the promised timeframe, fulfilling our shopping contract with you.
• Customer Service: To respond to your inquiries, complaints, after-sales requests, and privacy-related concerns within customer service hours (Monday to Friday, 9:00 AM to 6:00 PM UTC+8:00), addressing your feedback and improving service quality.
• Compliance Requirements: To retain necessary order data and personal information records as required by UK laws and regulatory authorities, and cooperate with the Information Commissioner’s Office (ICO) and other regulatory bodies for compliance checks and investigations.
• Service Optimization: To perform anonymous statistical analysis on order data and shopping behavior data to optimize product selection, logistics efficiency, and customer service processes, enhancing your shopping experience (this process does not identify any specific individual).

Without your explicit written consent, we will never sell, rent, or share your personal data with any third party. Only when necessary for fulfilling our order delivery obligations will we provide your name, delivery address, phone number, and other essential information to our logistics partners, with strict requirements to comply with the UK GDPR and this platform's data protection standards, ensuring that the information is used only for the delivery purpose.

4. Measures to Protect Personal Data

We have implemented a multi-layer, comprehensive security system to ensure that your personal data is secure, intact, and confidential throughout its collection, storage, usage, and transmission. We also aim to prevent data breaches, tampering, misuse, and unauthorized access:

• Technical Protection: We use AES-256 encryption for personal data storage and transmission, deploy firewalls, intrusion detection systems (IDS/IPS) to intercept unauthorized access, network attacks, and malicious intrusions in real-time. We conduct regular system vulnerability scans and penetration tests, promptly patching any security risks to ensure system stability.
• Management Regulations: We implement a role-based access control system, strictly limiting employee access to personal data, and only authorized employees can process necessary personal data within their work scope. We conduct regular data security, privacy protection, and compliance training to raise employee awareness. We also maintain comprehensive data access logs, ensuring full traceability and verifiability of all data processing actions.
• Emergency Response: We have established an emergency plan for data security incidents. In the event of a data breach, leak, or security anomaly, we will initiate the emergency response plan immediately, taking measures to mitigate damage, investigate, and trace the issue. As per the UK GDPR, we will notify affected users promptly and, if necessary, report the incident to the ICO.

5. Data Retention Period

We adhere to the "data retention minimization" principle and retain your personal data only for the shortest period necessary to fulfill the purpose for which it was collected. After the retention period, we will securely delete or anonymize your personal data to ensure it cannot identify any specific individual. The data retention rules are as follows, in compliance with industry requirements for retaining e-commerce transaction information:

• Order-related Data (including delivery address, payment verification, order details, etc.): Retained for 3 years after order completion (product delivered and no after-sales disputes) for after-sales support, dispute resolution, and compliance record-keeping.
• Customer Service Communication Records: Retained for 6 months after communication ends for follow-up inquiries and dispute resolution.
• If you request deletion of personal data or withdraw consent for data usage, and the data is no longer necessary for contract fulfillment or compliance purposes, we will delete or anonymize the data promptly upon receiving your request.

6. Your Personal Data Rights

Under the UK GDPR and the UK Data Protection Act 2018, you have the following rights concerning your personal data. We will fully cooperate with you in exercising these rights without imposing any unreasonable barriers:

• Right to Information: You have the right to know the purposes, methods, scope, and retention period of the personal data we collect and use.
• Right of Access: You have the right to request access to your personal data that we store and use and request a copy of the data.
• Right to Rectification: If you find any inaccuracies or incompleteness in the personal data we store, you have the right to request us to correct it.
• Right to Deletion (Right to be Forgotten): If your personal data is no longer required for shopping services, you withdraw consent, or our processing is not in compliance with legal requirements, you have the right to request us to delete your personal data.
• Right to Restrict Processing: You have the right to request us to suspend processing your personal data (e.g., if there are disputes over the accuracy of data or the issue is unresolved).
• Right to Data Portability: You have the right to request your personal data in a machine-readable format and transfer it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests (e.g., for non-essential data analysis or marketing).

7. Exercising Your Rights

If you wish to exercise any of the above rights or have any questions or requests, please contact us through the official channels below:

• Contact Email: service@mail.cjyxrtuw.com
• Email Requirements: Please indicate "Personal Data Rights Request + Your Name + Order Number (if applicable)" in the subject of the email. In the body of the email, clearly state your request (e.g., data query, correction, deletion) and your contact details for verification purposes.
• Processing Time: We will respond to and process your request within one month of receiving it. In complex cases, the response time may be extended by an additional month, and we will notify you of the extension and the expected time of completion.

8. Privacy Policy Updates

We may update and improve this privacy policy in response to changes in UK laws, business adjustments, service optimizations, or data protection requirements. After each update, we will publicly announce the updated policy and its effective date on the platform, and you can review it at any time. Continuing to use our services will be considered as your acceptance of the updated privacy policy. If you do not agree with the updated policy, you may stop using our services, and we will handle your personal data in accordance with this policy.

9. Contact Us

If you have any questions or suggestions regarding this privacy policy, or if you need to exercise your personal data rights or file privacy-related complaints, please contact us through the following channels:

• Official Contact Email: service@mail.cjyxrtuw.com
• Customer Service Hours: Monday to Friday, 9:00 AM to 6:00 PM (UTC+8:00)

TNAH Mall always prioritizes your privacy and data security, strictly adhering to UK laws and regulations to protect your personal data rights. We appreciate your trust and support and will continue to enhance our data protection measures to provide you with a safe and secure shopping experience.