Privacy policy
Effective Date: June 19, 2026
1. Introduction
Tacray.com is operated by Tacray ("we", "our", "us"), a business based in Yangjiang City, Guangdong Province, China. We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all users of tacray.com, including visitors and customers worldwide.
If you are located in the European Union, this policy also sets out our obligations under the EU General Data Protection Regulation (GDPR).
2. Data We Collect
2.1 Data You Provide Directly
When you place an order, create an account, contact us, or subscribe to our newsletter, we may collect:
• Name, email address, postal address, and phone number
• Payment information (processed securely by Shopify Payments / PayPal — we do not store your card details)
• Order history and correspondence with our support team
2.2 Data Collected Automatically
When you visit our website, we and our service providers automatically collect:
• Device and browser type, operating system
• IP address, pages viewed, time and date of visit
• Referral source and browsing behaviour on our site
This data is collected via cookies and similar technologies. See Section 5 for details.
3. How We Use Your Data
Order fulfilment: To process and ship your orders, send confirmation and tracking emails, and provide after-sales support.
Customer service: To respond to your enquiries and resolve issues.
Marketing: To send promotional emails about our products and offers. You can unsubscribe at any time via the link in any email.
Website improvement: To analyse site usage and improve our content, navigation, and performance.
Legal compliance: To comply with applicable laws, prevent fraud, and enforce our terms.
4. Legal Basis for Processing (EU / GDPR)
If you are located in the European Union, we process your personal data on the following legal bases:
Contract performance: Processing your order and delivering your goods (Article 6(1)(b) GDPR).
Legitimate interests: Improving our website, preventing fraud, and protecting our business (Article 6(1)(f) GDPR).
Consent: Sending marketing emails — you may withdraw consent at any time (Article 6(1)(a) GDPR).
Legal obligation: Compliance with applicable law (Article 6(1)(c) GDPR).
5. Cookies
We use cookies and similar tracking technologies to enhance your experience, analyse site traffic, and support marketing. Types of cookies used:
Essential cookies: Required for the website and checkout to function. Cannot be disabled.
Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics).
Marketing cookies: Used to show relevant advertisements (e.g. Meta Pixel, Google Ads).
You can manage or disable non-essential cookies through your browser settings or our cookie consent banner. Disabling certain cookies may affect site functionality.
6. Data Sharing
We do not sell your personal data. We may share it with:
Shopify: Our e-commerce platform and data processor. Shopify stores and processes order and customer data on our behalf. See Shopify's Privacy Policy at shopify.com/legal/privacy.
Payment providers: PayPal and other processors handle payment transactions securely.
Logistics partners: Shipping carriers and forwarding agents receive your name and address to fulfil delivery.
Analytics providers: Google Analytics and similar tools receive anonymised or pseudonymised browsing data.
Legal authorities: Where required by law, regulation, or legal process.
7. International Data Transfers
Tacray operates from China. When you place an order, your personal data (including name, address, and order details) is transferred to and processed in China.
If you are located in the European Union, this constitutes a transfer of personal data outside the EEA. We rely on Shopify's Standard Contractual Clauses (SCCs) and other appropriate safeguards to protect your data in accordance with GDPR requirements. For more information, see Shopify's data processing documentation.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
Order data: Retained for 7 years to comply with accounting and tax obligations.
Account data: Retained while your account is active. You may request deletion at any time.
Marketing data: Retained until you unsubscribe or request deletion.
Analytics data: Retained in anonymised or aggregated form.
9. Your Rights
Depending on your location, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request erasure of your personal data, subject to legal retention requirements.
Objection: Object to processing based on legitimate interests, including direct marketing.
Restriction: Request that we limit how we process your data in certain circumstances.
Portability: Request your data in a structured, machine-readable format (EU customers).
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at service@tacray.com. We will respond within 30 days.
EU customers: if you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your national data protection authority (e.g. CNIL in France, BfDI in Germany).
10. Third-Party Links
Our website may contain links to third-party sites (e.g. Amazon, affiliate partners). We are not responsible for the privacy practices of these sites and encourage you to review their policies independently.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption and payment data is handled exclusively by PCI-compliant third-party processors. No method of transmission over the internet is entirely secure; we cannot guarantee absolute security.
12. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly.
14. Contact
For any privacy-related questions or to exercise your rights:
Email: service@tacray.com
Address: 2/F, Building B5, Yaojun Logistics Park, Yudong 3rd Road, Yangdong District, Yangjiang City, Guangdong Province, China