Privacy Policy
Last updated: October 1, 2025
1. Who we are
IXIU (“we”, “us”, “our”) is an individually operated online store.
Address: Garden Asoke-Rama 9, Phetchaburi Road, Bang Kapi, Huai Khwang, Bangkok
Email: all@ixiu-online.com
Website: https://ixiu-online.com/
We currently serve customers in: Thailand, Japan, United States, Singapore, Korea, Taiwan, China, Malaysia, Indonesia, Vietnam. If we expand to additional regions, we will update this Policy.
2. What data we collect
-
Identity & contact: name, email address, phone number, shipping/billing address.
-
Order & delivery: items purchased, order value/currency, payment status (tokenized by providers), carrier, tracking number, delivery status.
-
Device & usage: IP address, browser/device info, cookies and similar technologies, referrer/UTM parameters, on-site events.
-
Preferences & consent: language/country, marketing email preferences, consent records (timestamp, IP, form name).
3. How we use your data (purposes)
-
To operate our store, process payments, fulfill and deliver your orders, and provide customer support.
-
To prevent fraud, ensure security, and comply with legal obligations (tax/audit).
-
With your consent, to send marketing emails about new products, offers and updates.
-
To measure and improve site performance and advertising in accordance with your consent settings.
(Where required, legal bases include: performance of a contract, consent (e.g., marketing emails/certain cookies), legitimate interests (e.g., fraud prevention), and legal obligation.)
4. Sharing & processors
We share data with service providers only as necessary to run our business. We do not sell personal information.
Key processors include:
-
Shopify (e-commerce platform & hosting)
-
Payments: Shopify Payments, PayPal, PromptPay (gateway/processor will tokenize payment info)
-
Email & forms: Klaviyo (signup forms, campaign delivery, analytics)
-
Shipment tracking: AfterShip (courier, tracking, status updates)
-
Advertising/analytics: Meta (Ads Manager / Pixel, if enabled)
We may add or change processors as our services evolve; material changes will be reflected in this Policy.
5. International transfers
Your data may be processed outside your country (e.g., in Thailand or other countries where our providers operate). When required, we apply appropriate safeguards such as standard contractual clauses and technical/organizational measures.
6. Retention
-
Order & accounting records: 7 years
-
Customer support records: 24 months
-
Marketing profiles (no activity): deleted or anonymized after 24 months
-
Consent logs: retained as required by law
7. Marketing emails
We send promotional emails only if you opt in (Single opt-in). You can unsubscribe at any time using the Unsubscribe link in any email or by contacting us. Transactional notifications (order/dispatch/returns) are not affected by unsubscribing.
8. Cookies & similar technologies
We use essential cookies to operate the site and, based on your consent, additional analytics/advertising cookies (e.g., Meta Pixel). You can manage or withdraw consent at any time via our cookie banner (Shopify Privacy & Compliance app). Your browser settings and Global Privacy Control (GPC) signals may also be honored where applicable.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object, request portability, and withdraw consent. To exercise your rights, email all@ixiu-online.com. We aim to respond within 30 days.
10. Security
We implement appropriate technical and organizational measures, including TLS encryption, access controls, password policies, and reliance on Shopify’s PCI DSS compliance for payment handling.
11. Children
Our services are not directed to children under 13 (and under 16 where applicable). We do not knowingly collect data from children.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date will be revised accordingly, and we will provide additional notice where appropriate.
13. Contact
IXIU
Email: all@ixiu-online.com
US Privacy Addendum (CPRA and state laws)
-
We do not “sell” personal information. We may “share” limited identifiers (e.g., cookies/online IDs) with advertising partners for cross-context behavioral advertising if you have consented.
-
You can opt out of “sale”/“sharing” via the “Do Not Sell or Share My Personal Information” link in our site footer. We honor Global Privacy Control (GPC) signals where applicable.
-
Your rights include: to know/access, delete, correct, opt out of sale/share, and non-discrimination for exercising rights.
China Privacy Addendum (PIPL)
-
We collect only what is necessary to provide our services (e.g., name, contact details, shipping address, order and delivery information).
-
Your personal information may be transferred and stored outside Mainland China (e.g., with Shopify, Klaviyo, AfterShip). We will obtain your separate, explicit consent for such cross-border transfers where required.
-
Marketing emails are sent only with explicit consent.
-
You may request access, copies, correction, deletion, restriction, or withdrawal of consent by contacting all@ixiu-online.com.
-
As our China business grows, we will implement any additional required measures (e.g., standard contractual arrangements) and update this Policy.
Cookie Policy (summary)
-
Types: essential, functional, analytics, advertising.
-
Purposes: operate the site, remember preferences, measure performance, personalize ads with consent.
-
Controls: manage preferences via the cookie banner; withdraw at any time; see browser settings; GPC respected where applicable.
-
Third parties: Shopify, Meta (if enabled). Cookies will only load according to your choices.
How to publish (quick)
-
Shopify Admin → Online Store → Pages → Add page → Title “Privacy Policy” → paste the above → Save → Visible.
-
Online Store → Navigation → Footer menu → add Privacy Policy link.
-
In your popup/forms/emails, link “Privacy Policy” to this page.
-
In Shopify Privacy & Compliance app, keep opt-in (consent) mode ON globally; enable “Do Not Sell/Share” link for US.
