Privacy Policy
Genzsh (hereinafter referred to as "we" or "our brand") fully understands the importance of personal privacy to every user. When you visit our official website www.genzsh.com, browse products, place orders, or engage in any form of email communication with us, we may collect, store, and use certain personal information related to you. This Privacy Policy is designed to explain, in a transparent, clear, and easy-to-understand manner, how we handle your personal data, what rights you have, and how we protect the security of this information.
This policy applies to all users who interact with us through the www.genzsh.com website, whether you are merely browsing content, registering an account, placing an order, or contacting us via email for inquiries or feedback. Please read the entire content of this policy carefully before using our website or services. Once you begin using our website or services, you indicate that you have fully understood and agreed to the data processing practices described in this policy.
I. Data Controller and Processor
This website and all related data processing activities are operated and managed by Genzsh as the sole data controller and processor. Genzsh simultaneously assumes the dual roles of data controller (determining the purposes and means of data processing) and data processor (actually executing data processing operations). This means that we not only decide what information to collect and for what purposes, but also directly take responsibility for the storage, maintenance, use, and protection of that information.
All personal information you provide through this website is collected and processed directly by Genzsh. We do not outsource your personal data to any third party as an independent processor, nor do we share your information with any unrelated third parties for their own purposes. When necessary (such as for logistics delivery or payment gateway services), we only share the minimum amount of information essential to fulfill the service with carefully selected partners, and these partners act solely as our data processors, strictly following our instructions and not using your data for any other purposes.
Genzsh, as both data controller and processor, assumes full responsibility for your personal information. If you have any questions or concerns regarding data processing, or wish to exercise any of your rights listed in this policy, you may contact us directly through the contact information provided at the end of this policy.
II. Categories of Personal Information We Collect
In order to provide you with a smooth shopping experience, complete order delivery, handle after-sales needs, and continuously improve our products and services, we may collect the following categories of personal information:
1. Information You Voluntarily Provide
-
Identity and contact information: name, email address, shipping address (including country, state/province, city, street, house number, postal code), phone number;
-
Account information: when you register a website account, your chosen login username and securely encrypted password (we only store hashed values, not plain-text passwords);
-
Order information: product names, quantities, prices, order numbers, payment status, and transaction history;
-
Communication content: any inquiries, feedback, complaints, or suggestions you send to us via email, as well as our correspondence records with you.
2. Information Automatically Collected
When you browse our website, certain information may be collected automatically through technical means:
-
Device and browser information: IP address, browser type and version, operating system, device model, screen resolution;
-
Behavioral data: pages you visit, links you click, time spent, referral URLs, access dates and times;
-
Cookies and similar tracking technologies: we use essential functional cookies to maintain the stable operation of the website (such as shopping cart status and login sessions). We currently do not use analytical or marketing cookies, nor do we track your cross-site behavior through cookies.
3. Payment Information
All payment transactions are completed through third-party secure payment gateways. We do not collect, store, or access your bank card number, expiration date, security code, or any account passwords. The payment service provider transmits the payment result to us in encrypted form; we only receive notification of whether the payment was successful and a transaction reference number, without access to your complete payment credentials.
III. Purposes for Which We Use Personal Information
We use your personal information for the following legitimate purposes:
-
Order Fulfillment: processing your orders, confirming payments, arranging logistics dispatch, providing tracking information, and completing return or exchange operations;
-
Customer Service: responding to inquiries, technical support requests, complaint handling, and after-sales follow-up submitted via email;
-
Account Management: maintaining your registered account, enabling you to view order history, save preferences, or quickly fill in shipping information;
-
Website Optimization: analyzing user access data (in aggregated anonymous form) to improve website structure, product presentation, and navigation experience;
-
Legal Compliance: carrying out necessary data processing to comply with international trade regulations, customs declaration requirements, tax obligations, or legitimate requests from judicial authorities;
-
Security Protection: monitoring abnormal access behavior, preventing fraudulent transactions, and protecting the website and user data from cyberattacks.
We will not use your personal information for any other purpose not stated in this policy without obtaining your explicit prior consent. We also do not link membership benefits, discount offers, or loyalty points to your data, as our brand does not offer such value-added services.
IV. How We Store and Protect Your Information
Data Storage Location: Your personal information is stored on encrypted servers located in secure regions, protected by strict physical access controls and network firewalls. All data is accessible only to authorized personnel of Genzsh for business purposes, and each authorized individual has signed a confidentiality agreement.
Data Security Measures: We adopt industry-standard security technologies, including but not limited to:
-
Transport Layer Security (TLS/SSL) to ensure that data transmitted between you and our website is not intercepted or tampered with;
-
Database field-level encryption for additional protection of sensitive information (such as password hashes and email addresses);
-
Regular backup mechanisms to prevent accidental data loss;
-
Internal access log auditing to track any anomalous queries to personal data.
Despite these measures, no data transmitted over the internet can be guaranteed to be 100% secure. Therefore, we remind you to keep your account password safe, avoid using the same password as on other websites, and change your password regularly to reduce risks.
V. Data Retention Periods
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, with specific retention periods varying by data type:
-
Order Data: retained for 5 years from the date of order completion, to meet financial reconciliation, tax auditing, and potential after-sales dispute documentation needs;
-
Account Information: retained for 3 years from your last login or order date. If there is no activity during this period, we will send a reminder email; if there is no response, the data will be anonymized or deleted;
-
Communication Records: your email inquiries and our responses are retained for 2 years from the date of last communication, to handle continuous after-sales issues;
-
Browsing Behavior Logs: stored in aggregated anonymous form, without personally identifiable information, retained for no more than 12 months.
When your data is no longer needed for the original purposes or no longer required by law to be retained, we will securely delete or irreversibly anonymize it through safe methods (such as physical destruction or logical overwriting).
VI. What We Do Not Do With Your Data
For clarity, we hereby solemnly declare that Genzsh does not:
-
Sell, rent, trade, or transfer your personal information to any third party for their own marketing or commercial purposes;
-
Use your data for automated decision-making or user profiling (such as behavioral scoring or predictive recommendations);
-
Send you any commercial promotional emails that you have not actively requested (we do not offer newsletters, discount notifications, or promotional email subscriptions);
-
Collect your personal information through live chat, instant messaging tools, or social media plug-ins;
-
Integrate WeChat, Alipay, or other regional payment tools—all transactions are processed through internationally accepted payment channels;
-
Store your data on any server or cloud platform that has not passed security certification;
-
Use your data for any new purpose not listed in this policy without obtaining your explicit consent.
VII. Your Rights
In accordance with applicable data protection laws, you have the following rights regarding your personal information. All rights may be exercised free of charge by sending an email to our official email address (unless the law permits the charging of reasonable fees):
-
Right of Access: you may request a copy of your personal information, including what data we have collected, for what purposes, and with which third parties it has been shared (if any);
-
Right to Rectification: if your personal information (such as address or email) changes or is found to be inaccurate, you may request that we correct it promptly;
-
Right to Erasure: under certain circumstances (such as when data is no longer needed, you withdraw consent, or processing is unlawful), you may request that we delete your personal information;
-
Right to Restrict Processing: while you dispute the accuracy of data or the legality of processing, you may request that we suspend processing of the relevant data;
-
Right to Data Portability: you have the right to request that the structured data you provided be supplied to you in a commonly used electronic format for transfer to another service provider;
-
Right to Object: you have the right to object at any time to data processing carried out based on our legitimate interests (such as statistical analysis);
-
Right to Withdraw Consent: if data processing is based on your explicit consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of the above rights, please send an email to customer@genzsh.com, clearly stating your request and the type of right involved. We will complete identity verification and substantive response within 30 calendar days of receiving your request. If the request is complex or involves a large volume of data, the processing period may be extended to 60 days, and we will notify you in advance of the reason for the extension.
VIII. Third-Party Links and External Services
Our website may contain hyperlinks to external websites (such as payment gateways or logistics carrier tracking pages). These external websites have their own independent privacy policies and data processing rules, and Genzsh assumes no responsibility for their content or data practices. When you click on these links and leave our website, we recommend that you read the privacy statements of those third-party websites. We only share information with third parties to the minimum extent necessary to complete your order (such as providing shipping addresses to carriers) and require them to adhere to data protection standards equivalent to ours.
IX. Cross-Border Data Transfers
As we serve users worldwide, the personal information you provide may be processed outside the country or region where you are located. We commit that wherever data is stored or processed, we will apply the security measures described in this Privacy Policy and comply with applicable data protection laws. For data transferred from the European Economic Area (EEA) or other regions with cross-border data transfer restrictions, we ensure that the transfer mechanisms comply with relevant legal requirements (such as Standard Contractual Clauses or adequacy decisions).
X. Children's Privacy Protection
Our website, products, and services are intended for users aged 14 and above. We do not knowingly collect personal information from children under 14 years of age. If we discover that we have inadvertently collected data from a child under 14, we will delete the relevant records immediately. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us promptly via the email address below so that we may take appropriate action.
XI. Updates to This Privacy Policy
We reserve the right to revise this Privacy Policy from time to time in response to business developments, legal or regulatory changes, or user feedback. Any updates will be posted on www.genzsh.com with the date of the latest revision noted. For material changes that affect your core rights (such as changes in data processing purposes, addition of new data categories, or sharing data with third parties), we will send a separate notification via email. We recommend that you review this page periodically to stay informed about how we protect your personal information.
XII. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, report a data security incident, or file any complaint related to personal information, please contact us through the following means:
-
Send an email to our official email:customer@genzsh.com (the sole contact channel)
-
Please include "Privacy Matter" or "Data Request" in the subject line to help us quickly identify and prioritize your inquiry
We will take every message seriously and provide a written response within a reasonable timeframe after receipt (typically no more than 30 calendar days). We are unable to handle privacy or data-related matters through instant messaging tools, but every email will receive the same level of rigor and respect as if we were communicating face to face. Your trust is our most valuable asset, and we are committed to protecting your privacy rights to the highest standard.