Privacy Policy
How Shanghai Yingchi Network Technology Co., Ltd. handles information in connection with Ostestuny. Effective October 8, 2026.
1. Controller and scope
Shanghai Yingchi Network Technology Co., Ltd. operates Ostestuny and is responsible for the personal information handled for our store operations described here. Our address is Floors 1-2, No. 148, Lane 999, Xin'er Road, Baoshan District, Shanghai, China. Contact service@ostestuny.com for privacy questions or requests. Jiang Zhikun is the designated Owner contact for this storefront.
This policy covers browsing our store, making or discussing a purchase, contacting support, and choosing to receive marketing. Shopify provides the commerce platform and may handle some information for its own platform purposes under its own notices. An external payment provider or carrier may also have separate responsibilities. This policy distinguishes our store activities from those separate services; it does not claim that every recipient acts only on our instructions.
2. Information you provide
You may provide your name, email, delivery and billing address, telephone number where needed, order details, and the contents of a support message. If you create or use a customer account, account-related identifiers and preferences may be associated with your interaction. A return request may include photographs of the product or packaging, a purchase reference, and information about the issue.
We do not need your account password, one-time verification code, or complete payment-card credentials by email or contact form. Payment details entered at checkout are handled through the applicable payment processing service. We may receive transaction status and limited payment-related information needed to manage the order, but this does not mean that all financial credentials are visible to our support team.
3. Browsing and device information
When you visit, the platform and associated infrastructure may process an IP address, browser and device information, language, referring page, page interactions, and technical identifiers. Cookies or similar technologies may keep a cart working, support security, remember a choice, or support measurement where enabled and permitted. Exact collection depends on the actual platform configuration, your location, and available privacy controls.
We do not claim that a particular advertising pixel, analytics provider, or social-media tracker is installed without checking the configuration. A general description of possible technology is not confirmation that every category operates on this store. Use available privacy controls and contact us if you need clarification about a particular service or identifier.
4. Where information comes from
Information can come directly from you, from your browser when the site loads, from Shopify's commerce services, and from parties involved in processing an order. Examples include payment confirmation from a payment service and tracking events from a carrier. If someone orders a gift for another person, delivery information about the recipient may be supplied by that customer.
We use information in the context in which it is received and do not assume that a person whose address appears on a gift order has subscribed to marketing. Publicly posting an order number or address is unnecessary; contact support privately. If a third party has provided inaccurate information about you, you can ask us to review the relevant record.
5. Why we use it
We use relevant information to operate the storefront, respond to questions, process and deliver orders, manage returns and refunds, maintain records, prevent misuse, and resolve disputes. Technical information can help diagnose errors and secure the service. Where lawful and enabled, measurement can help us understand whether pages and purchase flows work as intended.
Optional marketing uses your subscription choice or another lawful basis where applicable. We do not treat a support question as automatic consent to every future promotion. We may send necessary transaction and service messages even after marketing is declined, because these communications relate to an order or request rather than an optional campaign.
6. Legal grounds and proportionality
Where a law requires a legal basis, relevant grounds may include steps needed to enter or perform a purchase contract, compliance with legal obligations, legitimate operational interests such as security or responding to support, and consent for activities that require it. The applicable basis depends on the activity and jurisdiction; this list is not a claim that consent is unnecessary wherever the law requires it.
We aim to use information proportionately to the task. For example, an order number and checkout email may be enough to locate an order; a privacy request involving disclosure may require additional verification. If you withdraw consent, processing based on consent before withdrawal remains subject to applicable law, and another lawful basis may still apply to necessary records.
7. Shopify and service providers
Shopify hosts and supports the commerce platform used for this store. Relevant information may be handled through hosting, checkout, payment, order management, account, fraud-prevention, and privacy-control features. Other recipients may include the payment provider used for the transaction, the carrier handling delivery, and providers needed for store communications or technical support, where those services are actually used.
We share what is relevant to the service rather than describing every provider as receiving all information. A carrier generally needs delivery details; a payment provider needs information to process payment. For Shopify's own handling, see Shopify's Privacy Policy. Separate service notices may apply to their independent activities.
8. Other sharing and business events
Information may be disclosed where necessary to comply with a lawful request, meet a legal obligation, establish or defend a claim, protect rights or security, or address suspected fraud. We consider the request and applicable requirements rather than treating every informal request as authority to disclose. If a lawful business transfer affects the store, relevant records may be transferred subject to required protections and notices.
We do not describe a sale of customer information, an installed advertising integration, or a data-sharing arrangement as active without a factual basis. Where an activity is legally classified as a sale, sharing, or targeted advertising and applies to your information, applicable opt-out rights and platform controls should be respected.
9. Cookies and privacy controls
Essential functions may use cookies or similar technologies to maintain a cart, support checkout, provide security, or remember a privacy preference. Optional measurement or marketing technology, if enabled, may be subject to consent or opt-out rules. A browser can block or clear cookies, but this can affect the cart, sign-in, saved preferences, or other functions.
Use the store's privacy controls where available and the Shopify privacy-choice page for supported sharing choices. Our Privacy Choices page collects these routes in one place. We do not present a decorative button as a working privacy control. Availability can depend on the platform configuration and the jurisdiction in which you browse.
10. Marketing preferences
If you choose to subscribe, we use the provided email and relevant subscription preference to send the communications described at sign-up. You may unsubscribe through the link in a marketing message or ask service@ostestuny.com to stop optional marketing. We may retain a minimal suppression record to respect that choice.
Unsubscribing does not cancel an order, erase necessary transaction records, or stop essential messages about a purchase, return, or privacy request. Please use the relevant request channel for those actions. We do not claim that an address is verified as deliverable merely because it has been entered into a form.
11. Retention
We retain information for as long as reasonably needed for the purpose for which it is handled, including order fulfillment, returns, support, legal recordkeeping, fraud prevention, and dispute resolution. Different records can have different retention needs. We do not invent a single deletion period for all platform and transaction information.
When retention is no longer required, information should be deleted, anonymized, or otherwise handled as applicable law and service capabilities permit. A deletion request may be subject to recordkeeping or legal-claim exceptions. If an exception applies, we should explain the relevant limitation rather than promise immediate removal from every backup or independent provider system.
12. Security
We use the store platform and available operational measures to handle information responsibly. No internet service, email channel, or storage method can be described as absolutely secure. Avoid sending unnecessary sensitive information, use appropriate account credentials, and be cautious about messages that ask for payment details or verification codes outside the normal checkout.
If you suspect misuse involving this store, contact us with a description and relevant non-sensitive evidence. We may review technical and transaction records as appropriate. This policy does not claim a security certification, audit, encryption arrangement, or breach-free history that has not been established.
13. International handling
Our operator is in Shanghai, China, while Shopify and service providers may process information in other locations as part of hosting, payment, support, or delivery operations. Information may therefore cross borders. The United States sales market does not establish that every record is stored in the United States.
Where applicable law requires safeguards, transfer restrictions, or particular notices, the relevant handling must comply with those requirements. We do not promise a specific data-center location or transfer mechanism without confirmation. You can contact us to ask about a transfer relevant to your interaction, and we will distinguish known facts from information that must be obtained from the relevant provider.
14. Children's information
The storefront is intended for shopping by adults or other people legally able to make the relevant purchase. Offering beach toys does not mean that we invite children to submit personal information. A parent or responsible adult should make inquiries and orders rather than provide unnecessary details about a child.
If you believe a child has submitted personal information inappropriately, contact service@ostestuny.com with enough information to locate the record, without sending additional sensitive details about the child. We will review and take an appropriate action under applicable law and platform capabilities. We do not claim verified age-screening of every visitor.
15. Access, correction, deletion, and other rights
Depending on your location and the applicable law, you may be entitled to access information, obtain a copy, correct inaccurate details, request deletion, restrict or object to certain processing, withdraw consent, or receive information in a portable form. Some jurisdictions also provide choices concerning targeted advertising or legally defined sale or sharing.
Rights may be subject to lawful conditions and exceptions. For example, a completed-order record may be retained for a required purpose even if optional marketing is stopped. You will not be required to waive an applicable right as a condition of making a request. We do not promise that every right applies identically in every jurisdiction.
16. Making and verifying a request
Email service@ostestuny.com with the subject “Privacy request,” describe the action requested, and use the email associated with your interaction where possible. We may need proportionate information to confirm that we are responding to the correct person, especially before disclosing records. Do not send passwords, one-time codes, full card details, or identity documents unless a specific lawful and appropriate process has been explained.
We will respond within the period required by applicable law and explain any lawful extension or limitation. Where an authorized representative may act for you, relevant authority may need to be established. We do not charge a routine request fee unless applicable law permits it in the actual circumstances.
17. Complaints, external links, and updates
If you disagree with our response or have a concern, reply to support with the relevant details so the matter can be reviewed. You may also have a right to complain to the competent privacy or consumer authority in your jurisdiction. This contact route does not replace or restrict an available legal complaint.
External links, including platform privacy pages, lead to services with their own notices. We may update this policy to reflect changes in operations or requirements; the effective date identifies this version. Material changes will be communicated as required. For current questions about our handling, use the contact details below rather than assuming that a past configuration remains unchanged.