Privacy policy

1. Who we are

This website is operated by Hengyue E-Commerce Shop ("we", "us"), a wholesale supplier of peptides and aesthetic injectable ingredients based in Guangzhou, China. For the purposes of the EU General Data Protection Regulation (GDPR) and comparable laws, we act as the data controller for personal data described below.

Contact for any privacy matter: [email protected]

2. What this website does not do

We want to be explicit, because most commercial websites do the opposite:

• No cookies. This site sets no cookies of any kind, including analytics or advertising cookies.
• No analytics. We do not use Google Analytics or any other visitor-tracking service.
• No third-party scripts. All scripts and styles are served from our own domain. No external fonts, pixels or embeds.
• No advertising trackers. No remarketing, no social pixels.
• No account or checkout. There is no login, no cart and no online payment on this site.

3. What we do collect

We only receive personal data that you actively send us:

• Enquiry details. If you contact us by email, WhatsApp or Telegram, we receive your name, contact details and whatever you include in your message — for example your company, country and the products you are interested in.
• Order details. If you place an order, we process the information needed to fulfil it: company name, billing and delivery address, contact person, and order contents.
• Server logs. Our hosting provider records standard technical request data (IP address, timestamp, requested URL, user agent) for security and abuse prevention. These logs are generated by the infrastructure, not by scripts on this site.

We do not knowingly collect data from anyone under 18, and we do not collect special-category data.

4. Why we use it, and our legal basis

• To answer your enquiry and quote — on the basis of your request and our legitimate interest in responding to business enquiries.
• To perform a contract — processing orders, arranging payment and shipping, and providing after-sales support.
• To meet legal obligations — for example tax, accounting and customs record-keeping.
• To protect the site — security and fraud prevention, on the basis of our legitimate interest.

We do not sell, rent or trade personal data, and we do not use it for advertising.

5. Who we share it with

Only where necessary to run the business:

• Hosting. This site is hosted by Cloudflare Pages, which processes technical request data on our behalf.
• Email. Enquiries sent to our domain address are routed to our email provider.
• Messaging. If you contact us on WhatsApp or Telegram, that conversation is processed by those platforms under their own privacy policies.
• Shipping and payment. For orders, we share the minimum necessary details with carriers, freight forwarders and banks.

We may disclose data if required by law or to establish or defend legal claims.

6. International transfers

We are based in China, so enquiries and order data are processed there. Where personal data originates in the EEA or the UK and is transferred to us, we rely on appropriate safeguards such as standard contractual clauses, or on the necessity of the transfer to perform a contract with you.

7. How long we keep it

• Enquiries that do not lead to an order — kept while the conversation is active, then deleted within 24 months.
• Order and transaction records — kept as long as required for accounting, tax and customs purposes.
• Server logs — retained by our hosting provider for a short period for security purposes.

8. Your rights

Subject to applicable law, you may:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• object to or request restriction of processing;
• request portability of data you provided to us;
• withdraw consent at any time, where consent is the basis;
• lodge a complaint with your local data protection authority.

To exercise any of these, email [email protected]. We will respond within the period required by applicable law.

9. Security

This site is served over HTTPS. Access to enquiry and order data is limited to those who need it to respond to you. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the nature of the data.

10. Changes to this policy

We may update this policy from time to time. The version published on this page is the current one.

11. Contact

Email: [email protected]
WhatsApp: +852 4447 6465
Telegram: +44 7746 653062