Privacy policy

Last Updated: June 28, 2026

1. OUR COMMITMENT TO PRIVACY

Upstte (collectively, "we," "us," or "our") operates this website to provide high-quality retail services. We strictly adhere to the principles of legality, legitimacy, and transparency. We are committed to protecting your personal information and ensuring you understand how your data is handled.

2. DATA COLLECTION SCOPE

We collect only the information necessary to fulfill our service obligations and optimize your shopping experience.

Voluntarily Provided Data: Includes registration details (name, email, phone, password), transactional data (recipient name, shipping address, contact info, and payment verification fragments like card last 4 digits), and communication history (customer support logs, feedback, and complaint details).

Automatically Collected Data: Through cookies and server logs, we collect technical identifiers, including:

Device Information: Device model, operating system, and browser type.

Usage Data: IP address, access timestamps, page interaction history, session duration, and click-through activities.

Third-Party Data: We may collect authorized data from external service partners (e.g., Shopify, payment gateways, logistics providers) to facilitate order synchronization and delivery tracking.

3. PURPOSE OF DATA PROCESSING

Your information is processed exclusively for the following legitimate business purposes:

Service Fulfillment: Processing payments, order confirmation, product dispatch, and post-sales support.

Security & Risk Mitigation: Identity verification, monitoring for fraudulent transactions (e.g., account takeover, payment fraud), and ensuring account/property safety.

Service Optimization: Data-driven analysis to personalize product recommendations, improve website UI/UX, and enhance the shopping workflow.

Legal Compliance: Fulfilling regulatory obligations, responding to judicial/administrative requests, and exercising our legal rights or defending against potential claims.

4. DATA SECURITY & PROTECTION STANDARDS

We have implemented a multi-layered security architecture:

Technical Safeguards: We utilize industry-standard SSL/TLS encryption for all data in transit. At rest, data is protected through firewalls, strict access controls, and database encryption.

Organizational Measures: Personnel management includes mandatory confidentiality agreements, rigorous role-based access control (RBAC), and ongoing information security training.

Data Retention: We store data only for as long as necessary to fulfill the service purpose. Order records are maintained to comply with statutory retention periods. Account information is retained until you initiate a formal account cancellation request. Upon expiration or cancellation, data is either permanently deleted or rendered irreversibly anonymous.

Emergency Response: In the event of a potential security breach, we maintain a dedicated response mechanism to assess, contain, and report incidents in accordance with applicable data protection laws.

5. SHARING AND INTERNATIONAL DISCLOSURE

We maintain strict confidentiality protocols. We do not sell your personal data. Sharing only occurs under these conditions:

Service Partners: Necessary sharing with logistics and payment processors to complete your order. These third parties are contractually bound to maintain equivalent privacy protections.

Legal Compliance: Mandatory disclosures to judicial or regulatory bodies when required by law.

Anonymized Aggregates: We may share non-personally identifiable, aggregated data for market research and data analysis purposes.

6. YOUR PRIVACY RIGHTS

Under relevant data protection laws, you possess the following rights:

Right to Access/Query: You may log in to view your profile and order history.

Right to Rectification: You can correct or update inaccurate information.

Right to Erasure (Right to be Forgotten): You may request the deletion of your data following account/order cancellation.

Right to Withdraw Consent: You may opt-out of cookies or revoke previous authorizations at any time.

Right to Lodge Complaints: If you have concerns, please contact our support team. We commit to a response timeline of 3 working days.

7. COOKIE POLICY & MINORS

Cookies: We use functional and analytical cookies to maintain your login status and enhance browsing efficiency. You may configure your browser to block cookies, though this may limit your ability to complete orders.

Protection of Minors: Our services are designed for adults. We do not knowingly collect information from minors under 18. If a guardian identifies that such information has been provided, please contact us for immediate removal.