Privacy policy
PRIVACY POLICY
Last updated: June 2026
This Privacy Policy describes how OSTMORAD (operated by FOSHAN YUHONG TRADING CO LTD, hereinafter referred to as "we", "us", or "our") collects, uses, and discloses your Personal Information when you visit or make a purchase from our website.
1. Personal Information We Collect
When you visit our website, we collect certain information about your device, your interaction with the site, and the information necessary to process your purchases.
Device Information:
Examples of Personal Information collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the site.
Purpose of collection: To load the site accurately for you, and to perform analytics on site usage to optimize our store.
Source of collection: Collected automatically when you access our site using cookies, log files, web beacons, tags, or pixels.
Order Information:
Examples of Personal Information collected: Name, billing address, shipping address, payment information (including PayPal details), email address, and phone number.
Purpose of collection: To fulfill our contract with you, process payment information, arrange shipping, provide invoices/order confirmations, communicate with you, screen orders for potential risk or fraud, and send you product updates or marketing communications in line with your preferences.
Source of collection: Collected directly from you when you place an order.
2. Sharing Personal Information
We share your Personal Information with reliable third-party service providers to help us deliver our services and fulfill our contracts with you, as described above.
Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
Payment Gateways: All payments are processed securely through third-party processors like PayPal. We do not store or retain your raw credit card data on our servers.
Logistics & Fulfillment Partners: To ship and deliver your orders efficiently, your shipping details (name, address, phone number) are shared with our logistics networks. This explicitly includes our primary Asian logistics network and our European Fulfillment Center operated by our partner in Poland:
Aurora Logistics (HiPark) > Kilińskiego 74A (Gate 19), 69-110 Rzepin, Województwo lubuskie, Poland.
Compliance with Laws: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
3. Using Personal Information & Legal Basis
We use your personal information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you informed about new products, services, and offers.
Legal Basis (Pursuant to GDPR Art. 6): If you are a resident of the European Economic Area (EEA), we process your personal information under the following legal bases:
Your explicit consent;
The performance of the purchase contract between you and our website;
Compliance with our legal and financial statutory obligations;
For our legitimate business interests, which do not override your fundamental rights and freedoms.
4. Your Rights under GDPR (Art. 13)
If you are a resident of the European Union/EEA, you possess comprehensive rights regarding your personal data under the General Data Protection Regulation (GDPR). You may exercise any of the following rights at any time by contacting us:
Right of Access (Art. 15 GDPR): The right to obtain confirmation as to whether or not your personal data is being processed, and to receive a copy of your stored data.
Right to Rectification (Art. 16 GDPR): The right to demand the immediate correction of inaccurate or incomplete personal data.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request the deletion of your personal data, provided no statutory retention obligations prevent it.
Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format to transmit it to another controller.
Right to Object (Art. 21 GDPR): The right to object at any time to the processing of your personal data based on legitimate interests or direct marketing.
5. Cookies & Consent Management
Our website uses cookies to enhance and personalize your browsing experience. We categorize cookies as follows:
Essential Cookies: Strictly necessary for core website functionality, secure login, and maintaining items in your shopping cart. These cannot be disabled.
Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how users move around our website. This helps us improve site optimization.
Marketing/Advertising Cookies: Used to track visitors across websites to deliver targeted, relevant advertisements based on your interests.
Withdrawing Consent: When you first visit our store, a Cookie Banner allows you to manage your preferences. You can update, restrict, or withdraw your consent for analytical and marketing cookies at any time through your web browser settings or by clearing your browser cache.
6. Data Retention Periods
Transaction & Financial Data: When you place an order through our website, we are legally required to retain your Order Information, commercial invoices, and transactional data for a statutory period of 10 years. This retention fulfills strict tax preservation and accounting obligations under European and German commercial laws (such as HGB and AO).
General Account & Analytics Data: General website browsing and analytics data will be retained for a maximum period of 26 months. Personal data associated with a customer account not tied to physical financial transactions will be retained for up to 3 years after your last active interaction with our store, or until you formally request its prior erasure.
7. Right to Lodge a Complaint with a Supervisory Authority
If you are an EU resident and believe that our processing of your personal data violates the GDPR, you have the statutory right to lodge a complaint with a competent data protection regulatory authority in your country or state of residence.
For example, residents of Germany may contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI - Bundesbeauftragte für den Datenschutz und die Informationsfreiheit) or their respective state-level data protection officer.
Official Website: www.bfdi.bund.de
8. International Data Transfers
Please note that your information may be transferred and processed outside of Europe, including to our corporate operations in the United States and our primary logistics hub in China. We ensure that all international data transfers outside the EEA are protected under standard contractual clauses (SCCs) approved by the European Commission, ensuring an equivalent level of data protection.
9. Changes to this Policy
We may update this Privacy Policy from time to time in order to reflect changes to our data handling practices or for other operational, legal, or regulatory reasons.
10. Contact Us
For more information about our privacy practices, if you have questions, or if you would like to exercise any of your GDPR rights, please contact our Data Protection Representative:
Brand Name: OSTMORAD
Operator: FOSHAN YUHONG TRADING CO LTD
Data Representative: Weijun Zhong
Email: info@ostmorad.com
Corporate Address: 1942 Broadway, Suite 314C, Boulder, CO 80302-5233, USA
Response Timeframe: We take your privacy seriously. Upon receiving a valid request to exercise your data rights, we will review and respond to your inquiry within a strict statutory timeframe of 30 days.