Controller · Data · Cookies · Your rights
This policy explains what happens to your data when you visit ladyww.com, send an enquiry or place an order. It is written to be read: plain statements of what we collect, why, who else sees it, and how long we keep it. If something here is unclear, ask us and we will answer in writing.
LadyWW Beauty Tech, Shenzhen, Guangdong, China, is the controller of the personal data described here. For any question about this policy, or to exercise a right set out below, write to chao.open@gmail.com or message +8613761391833 on WhatsApp. We answer within 30 days, and usually within three working days.
We do not collect payment card numbers on this site. Card payments, where offered, are processed by Stripe or PayPal on their own infrastructure and we see only the transaction result.
| Situation | Data | Why |
|---|---|---|
| You send an enquiry or quote request | Name, email, company, country, device interest, quantity, the text of your message | To answer the enquiry and prepare a quotation |
| You message us on WhatsApp | Phone number, display name, message content | To answer the enquiry in the channel you chose |
| You place an order | Billing and delivery address, contact details, order history, payment status | To perform the contract, invoice, and ship |
| You browse the site | Pages viewed, approximate location from IP, device and browser type, referring page | Only if you allow analytics — see the cookie section |
| You email us | Email address, name, message, attachments | To answer and to keep a record of the correspondence |
Under the GDPR, and equivalent laws elsewhere, we need a legal basis for each thing we do with your data. These are ours:
| Purpose | Lawful basis |
|---|---|
| Answering an enquiry, preparing a quotation | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Fulfilling an order, shipping, invoicing, warranty | Performance of a contract (Art. 6(1)(b)) |
| Keeping business records for tax and accounting | Legal obligation (Art. 6(1)(c)) |
| Analytics cookies | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Fraud prevention, enforcing our terms | Legitimate interests (Art. 6(1)(f)) |
On your first visit the site shows a consent dialog and sets nothing beyond what is strictly necessary until you answer. Refusing takes one click, the same as accepting. Your choice is stored in the first-party cookie lw_consent for twelve months, so you are not asked again on every page.
If you allow analytics, Google Analytics 4 sets the _ga cookies and records page views in aggregate. We use it to see which product and guide pages buyers actually read. We have not enabled advertising features, we do not run remarketing, and we do not sell data.
The map on the contact page is loaded from OpenStreetMap only after you allow embedded content, because loading it transfers your IP address to that provider.
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
| lw_consent | ladyww.com | Your cookie choice and its version | 12 months |
| wordpress_test_cookie | ladyww.com | Checks that your browser accepts cookies | Session |
| woocommerce_cart_hash | ladyww.com | Remembers what is in your cart | Session |
| _ga | Distinguishes browsers so visits can be counted | 13 months |
We do not sell personal data, and we do not share it for anyone else's marketing. The processors below see only what they need for the task named.
| Processor | Role | What they see |
|---|---|---|
| Google Analytics 4 | Site analytics | Aggregated page views, approximate location, device type — only with consent |
| Our email provider | Receiving and storing enquiries | Name, email, message content |
| Stripe / PayPal | Card and wallet payments | Payment details, handled entirely on their systems |
| DHL / FedEx / freight forwarder | Delivery | Name, address, phone, contents description for customs |
| OpenStreetMap | Map embed on the contact page | IP address — only if you allow embedded content |
The website is hosted on a server in Hong Kong and cached through Cloudflare, which means a request from Europe may be served from a Cloudflare node in Europe while the data record itself sits in Hong Kong. Enquiries are stored in the site database and mirrored to our mailbox.
Where data leaves the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses or on the necessity of the transfer for the performance of your contract (Art. 49). You can ask for a copy of the safeguards we rely on.
| Data | Retention |
|---|---|
| Enquiries that did not become orders | 24 months, then deleted |
| Orders, invoices and shipping documents | 7 years, as required by accounting law |
| Warranty and service records | For the warranty term plus 24 months |
| Analytics data | 14 months, then aggregated or deleted |
| Email correspondence | 36 months from the last message |
You can ask us to do any of the following, and we will not charge you or treat you differently for asking:
The site runs over HTTPS. Access to the enquiry database is limited to staff who answer enquiries, protected by individual accounts and two-factor authentication. Form submissions are validated and stored server-side; we do not pass enquiry data through third-party form services.
If a breach occurs that is likely to affect your rights, we will notify the competent supervisory authority within 72 hours and tell you directly if the risk to you is high.
This is a business-to-business site selling professional equipment. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us data, tell us and we will delete it.
If you think we have handled your data badly, tell us first — most issues are settled in one exchange. You also have the right to complain to your national data protection authority, or to the supervisory authority where you live or work.
When the data we collect or the processors we use change, this page changes with them, and the version date below moves. Raising the consent version re-asks every visitor, so a material change cannot slip past you.
No. We do not sell, rent or trade personal data, and we do not share it with anyone for their own marketing. The processors listed above act on our instruction only.
Only strictly necessary ones — the cookie that records your choice, the WordPress test cookie and the cart cookie if you add something. Analytics and the map embed wait for your permission.
Email chao.open@gmail.com with the address you used and we will remove the record and the email thread, unless it belongs to an order we are legally required to keep.
Yes. The catalogue, the quote form and the WhatsApp links all work without analytics. The only thing you lose is the embedded map, which is replaced by a link.
The site database is on a server in Hong Kong; email is stored by our mail provider; analytics data is in Google's EU or US infrastructure depending on the property setting.
24 months from the last contact, then deleted. If you ask us to delete it sooner, we will.
LadyWW Beauty Tech · aesthetic equipment wholesale
We use cookies to keep the site and the shopping cart working and, with your permission, to measure how the catalogue is used. Nothing that identifies you is set until you choose, and refusing takes the same single click as accepting.
Your cookie choice, security checks, cart and page caching. No tracking.
Google Analytics 4, in aggregate. Tells us which product pages buyers actually read.
Full detail, including every cookie by name and how long it lives, is in the cookie section of our privacy policy. You can change or withdraw your choice at any time using the cookie settings link in the footer.
Switch a category on or off, then save. Nothing is pre-selected.
Keeps the site working: your cookie choice, security checks, the shopping cart and page caching. These cannot be switched off, and they do not track you across other sites.
Google Analytics 4 in aggregate: which product pages are read, which countries enquiries come from, which pages fail. Sets the _ga cookies.
Allows third-party embeds such as the map on the contact page, and remembers your language and layout choices. Without it, embeds are shown as a link instead of loading.
Advertising and retargeting cookies. LadyWW does not run advertising campaigns today, so nothing is set in this category. The switch exists so a future campaign cannot start tracking you without a fresh choice.
Read the privacy policy for what we do with enquiry data, who processes it and how long we keep it.