Privacy Policy
PRIVACY POLICY — ANCIENT DZI SHOP
Last updated: May 2026
Ancient Dzi Shop ("we," "us," or "our") is operated by Eddy and Kittery, based in Taipei, Taiwan. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a purchase from www.ancientdzishop.com.
SECTION 1 — WHAT INFORMATION WE COLLECT
When you place an order, we collect the personal information you provide: your name, email address, shipping address, and payment details. Payment information is processed securely by PayPal and Shopify Payments — we do not store your full credit card details on our servers.
When you browse our store, we automatically receive your IP address and browser information. We also use Google Tag Manager and Google Analytics to understand how visitors use our site.
If you subscribe to our newsletter, we collect your email address for that purpose only.
SECTION 2 — HOW WE USE YOUR INFORMATION
We use your personal information to:
- Process and fulfill your orders, including arranging shipping and sending order confirmations
- Communicate with you about your purchase or any questions you contact us about
- Send marketing emails, only if you have opted in — you can unsubscribe at any time
- Improve our website and understand how our customers shop
SECTION 3 — LEGAL BASIS FOR PROCESSING (EU/GDPR CUSTOMERS)
If you are located in the European Union or European Economic Area, we process your personal data on the following legal bases:
- Contract fulfillment — to process your order and arrange delivery
- Consent — to send you marketing emails if you have opted in
- Legitimate interest — to prevent fraud, improve our website, and keep our records accurate
SECTION 4 — YOUR RIGHTS (EU/EEA CUSTOMERS)
If you are located in the EU or EEA, you have the following rights regarding your personal data:
- Right of access — you may request a copy of the personal data we hold about you
- Right to rectification — you may ask us to correct inaccurate data
- Right to erasure — you may ask us to delete your personal data ("right to be forgotten")
- Right to data portability — you may request your data in a machine-readable format
- Right to withdraw consent — you may withdraw marketing consent at any time
- Right to object — you may object to processing based on legitimate interest
To exercise any of these rights, contact us at service@ancientdzishop.com or use our contact form at www.ancientdzishop.com/pages/contact-us. We will respond within 30 days.
SECTION 5 — CONSENT
When you provide personal information to complete a transaction or place an order, you consent to our collecting and using it for that purpose. For secondary uses such as marketing emails, we ask for your explicit consent separately. You may withdraw consent at any time by contacting us at service@ancientdzishop.com.
SECTION 6 — THIRD-PARTY SERVICE PROVIDERS
We share your data only with trusted third-party processors who help us operate our store:
- Shopify Inc. — our e-commerce platform (servers and data storage)
- PayPal — payment processing
- Google — website analytics (Google Analytics) and tag management (Google Tag Manager)
Each of these providers has its own privacy policy and handles your data only to the extent necessary to provide their services. Shopify and PayPal are compliant with GDPR and PCI-DSS standards. Google Analytics data is anonymized where required by EU law.
These providers may be located in jurisdictions outside of Taiwan or your country of residence, including the United States. By using our store, you acknowledge that your data may be processed in these jurisdictions.
SECTION 7 — COOKIES
We use cookies to support your shopping experience and to analyze site traffic. The following cookies are in use:
- _session_id — stores session information (referrer, landing page) for the duration of your visit
- _shopify_visit — records site visits for internal analytics; persists for 30 minutes
- _shopify_uniq — counts visits per customer; expires at midnight of the next day
- cart — stores your shopping cart contents; persists for 2 weeks
- _secure_session_id — a secure session identifier
- storefront_digest — used if the store has a password-protected area
- Google Analytics cookies (_ga, _gid) — used to track website usage anonymously; expire within 2 years
EU visitors have the right to refuse non-essential cookies. You may manage your cookie preferences through your browser settings at any time.
SECTION 8 — SECURITY
We follow industry best practices to protect your personal information. Credit card data is encrypted using SSL (Secure Socket Layer) technology and stored with AES-256 encryption. We comply with PCI-DSS requirements. While no method of internet transmission is 100% secure, we take every reasonable precaution to protect your data.
SECTION 9 — DATA RETENTION
We retain your order information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve any disputes. If you request deletion of your data, we will erase it unless we are required by law to retain it.
SECTION 10 — AGE OF CONSENT
By using this site, you confirm that you are at least 18 years of age, or that you have the consent of a parent or legal guardian.
SECTION 11 — CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes take effect immediately upon posting to this page. We encourage you to review this policy periodically. If material changes are made, we will notify you by updating the date at the top of this page.
SECTION 12 — CONTACT US
For any privacy-related questions, requests, or complaints:
Ancient Dzi Shop New Taipei City, Taiwan
Email: service@ancientdzishop.com
Contact form: www.ancientdzishop.com/pages/contact-us