Effective Date: September 01, 2026
1. SCOPE OF THIS PRIVACY POLICY
Sunnybloomy Operated by NANYUAN TECHNOLOGY INC
This Privacy Policy clearly defines how SUNNYBLOOMY (referred to as “we”, “us”, or “our”) collects, processes, stores, utilizes, and shares user personal information when you access and use our services. “You” or “user” refers to all visitors, browsers, registered members, and purchasing customers of our platform.
Our services cover the official website https://sunnybloomy.com, all online product sales services, customer support channels, and official social media accounts including Instagram, Facebook, and Twitter. This policy applies to all user interactions, browsing behaviors, transaction operations, and service consultations on our platform.
We fully recognize the importance of user data security and personal privacy. This document systematically explains our management rules for “Personal Information” — data that can directly or indirectly identify individual users, including your name, contact details, account data, and website usage records. We strictly abide by global data protection regulations and fully protect your legitimate privacy rights.
2. APPLICABILITY & EXCLUSIONS
2.1 Policy Applicability
This Privacy Policy is an integral part of our Website Terms and Conditions, binding on all users who access and use our platform services. All behaviors including website browsing, account registration, product purchase, after-sales application, and marketing subscription are governed by this policy.
This policy applies to personal information collected through official service channels, covering all terminal access methods such as web browsers and mobile adaptive pages. It also applies to targeted advertising content and product recommendations displayed on third-party platforms based on your browsing behavior.
2.2 Policy Exclusions
This Privacy Policy does not apply to data collection behaviors of authorized third-party service providers cooperating with us, including Shopline (e-commerce system operator), PayPal (payment processing provider), and major social media platforms. The data processing rules of third-party institutions are subject to their independent privacy policies, and we do not bear joint responsibility for their data compliance.
Our website may contain external links to third-party platforms for user convenience. We have not verified the privacy protection rules and data security capabilities of linked websites. Your access to third-party platforms through our links shall be subject to their local policies, and we are not responsible for their content, security, and data processing behaviors.
3. ACCEPTANCE OF PRIVACY TERMS
By browsing our website, registering an account, purchasing products, and using any official services, you confirm that you have fully read, understood, and voluntarily accepted all clauses of this Privacy Policy. If you disagree with any content of this policy, you must stop accessing our website and using all related services.
We reserve the right to update and revise this policy in real time according to business adjustments and regulatory requirements. The revised version will be published on this page. Your continued use of our platform services after the update takes effect will be deemed as automatic acceptance of the new policy clauses.
4. AGE OF CONSENT
When using our services, you guarantee that you have reached the legal age of majority in your residential region. You may authorize your minor dependents to use our platform under your supervision and bear corresponding responsibility.
Our website products and services are oriented to adult users, and we do not actively collect personal information from minors under the age of majority. If we accidentally obtain minor user data, we will immediately delete and clear relevant information in accordance with regulatory requirements.
5. CATEGORIES OF INFORMATION WE COLLECT
We collect user data through three standardized channels: information actively submitted by users, automatic system collection data, and legal third-party channel data. All collected information is only used for service operation and business optimization purposes specified in this policy.
5.1 Information You Voluntarily Provide
You may actively submit personal information when registering an account, placing orders, applying for after-sales services, subscribing to newsletters, participating in platform activities, and consulting customer service. Providing relevant information is voluntary, but missing key information may cause us to fail to complete order processing and service delivery.
The main collected content includes: real name, shipping/billing address, postal code, mobile phone number, email address, birthday, payment card information, product preference labels, demographic information, and other personalized content you actively share.
If you fill in third-party information such as gift recipient information during ordering, we will only use the data to complete order delivery and will not actively send marketing messages to third parties without their independent consent.
5.2 Automatically Collected Technical Data
To optimize user experience, maintain platform operation stability, and verify transaction security, our system and authorized cooperative institutions will automatically collect behavioral data when you browse the website, click links, open emails, and complete transactions.
Log Data: Including browser type, access time, browsed page records, device IP address, and website jump source. All IP data will be anonymized and desensitized for statistical analysis, which cannot locate individual user identity.
Cookies & Tracking Technologies: We use first-party and third-party Cookies, pixel tags, and tracking tools to record browsing habits and operation behaviors. These data help us retain shopping cart information, personalize recommendation content, count marketing effects, and strengthen platform security. You can adjust browser settings to refuse Cookie storage, but partial website functions may be abnormal after disabling. For detailed rules, please refer to our independent Cookie Policy.
Transaction & Device Data: Including order product information, transaction time, after-sales records, and mobile device identification information. If you authorize location permission, we will obtain regional location data to optimize logistics distribution and regional product display.
For Google Analytics data statistics, we will fully anonymize user IP addresses before data storage and processing. Users can refuse Google tracking services through the official opt-out tool: https://tools.google.com/dlpage/gaoptout
5.3 Data from Authorized Third-Party Channels
We may legally obtain your public basic information from official cooperative platforms such as Shopline e-commerce system, PayPal payment platform, Google statistics system, and official social media accounts, and associate it with your platform account to optimize service experience.
5.4 Non-Collection Statement
We do not actively collect or store user sensitive private information, identity attribute data, and unauthorized third-party private data. We strictly abide by minor data protection regulations and never actively solicit minor user information.
6. SMS & TEXT MESSAGE SERVICE RULES
We only send automated SMS messages in two compliant scenarios, and all message sending follows user authorization principles.
6.1 Logistics Shipping Notification SMS
If you submit a valid mobile phone number during order placement, you authorize our cooperative logistics provider to send automated shipping status updates, delivery reminders, and logistics exception notifications. Message service fees are subject to your local carrier charging standards. You can unsubscribe at any time according to the unsubscribe instructions in the SMS.
6.2 Marketing Promotion SMS
We will only send product updates, preferential activities, and brand promotion SMS after you actively subscribe and authorize. Subscription authorization is independent and does not affect normal order transaction and after-sales services. You can cancel marketing SMS subscription at any time through the unsubscribe channel in the message.
6.3 Supplementary Provisions
We only share your mobile phone number with service providers who undertake SMS sending business, and prohibit third parties from using your number for independent marketing. We are not responsible for message delay, loss, and delivery exceptions caused by carrier system failures.
7. DATA TRANSMISSION & SECURITY PROTECTION
No network data transmission can achieve 100% absolute security. We adopt industry-standard encryption technology and security management mechanisms to protect your personal information during transmission and storage. All payment data and sensitive personal information are encrypted via SSL secure protocol during network transmission.
After receiving your data, we adopt physical isolation, password protection, access permission restriction, and encrypted server storage to prevent unauthorized access, disclosure, tampering, and loss of user data. Please note that ordinary email transmission is not completely encrypted and secure, and you should avoid sending sensitive private information via email.
8. LEGAL PURPOSES OF DATA USAGE
We only use your personal information within the scope authorized by regulations and user consent, with all usage purposes compliant, transparent, and legitimate.
8.1 Platform Operation & Service Delivery
Complete order confirmation, product delivery, return and exchange processing, and after-sales service docking; respond to user consultation and feedback; maintain normal website operation, conduct data analysis and technical fault diagnosis; synchronize account dynamics, order status, and security reminders; realize personalized product recommendation and preference saving; develop new products and optimize user experience; support platform activities, social sharing and other interactive functions.
8.2 Security Risk Prevention & Compliance Execution
Identify and block fraudulent transactions, account anomalies, and illegal behaviors; conduct security risk assessment and user identity verification; protect the legitimate rights and interests of our platform, users, and cooperative institutions; respond to legal inquiries and official supervision requirements; use system automatic identification tools to intercept abnormal orders and fraudulent behaviors.
8.3 Marketing Operation & Precision Promotion
Push brand updates, new product releases, and preferential activity information via email, SMS, and social media; optimize marketing campaign effects and conduct data statistics; manage user subscription activities, questionnaire surveys, and referral programs; carry out user portrait analysis based on behavioral data to deliver accurate and compliant marketing content. You can independently close marketing authorization at any time.
8.4 Other Legal Usage Scenarios
Process data based on your explicit authorization; protect personal vital interests of users and third parties; complete public interest service tasks; and carry out legitimate business analysis, risk prevention and internal management work without violating user privacy rights.
9. LEGAL SCENARIOS OF DATA SHARING
We will never sell your personal information to irrelevant third parties. We only share user data in the following compliant scenarios and sign confidential agreements with cooperative institutions to restrict secondary dissemination.
User Public Disclosure: The content you actively published in product reviews, social sharing, and public comments will be publicly displayed and is not protected by this privacy policy.
Authorized Service Providers: Share necessary data with third-party service providers such as e-commerce system operators, payment institutions, logistics providers, and email service providers to complete platform operation and order services.
Business Cooperation Needs: Share non-sensitive user data with cooperative brands when carrying out joint activities and preferential promotions to ensure the normal launch of activities.
Social Media Authorization: If you log in or bind your social media account, you authorize us to synchronize corresponding public data, which shall be governed by the social platform’s privacy rules.
Legal Mandatory Requirements: Disclose user data in response to court orders, government supervision inquiries, and legal proceedings to protect legitimate legal rights and interests.
Business Restructuring Transfer: In case of brand merger, acquisition, asset transfer and other business changes, user data will be transferred as business assets, and we will continue to assume privacy protection obligations.
Professional Institution Consulting: Provide necessary data to legal, audit and regulatory consulting institutions for standardized business operation.
10. DATA STORAGE CYCLE & CLEARING RULES
We only store your personal information within the time required to achieve service purposes and legal obligations. After the data usage purpose is completed and the legal retention period expires, we will permanently delete or irreversible anonymize user data.
We may retain fully anonymized statistical data for long-term platform operation analysis and market research, which cannot identify individual user identity and does not involve privacy risks. Individual archived data retained for legal compliance will not be used for commercial marketing and user identification.
11. PERSONAL DATA SECURITY PROTECTION MEASURES
We adopt a three-dimensional protection system of technology, management and authority to fully protect user data security: restrict data access authority to only authorized employees and cooperative institutions; adopt SSL full encryption for online transactions; store sensitive transaction data in isolated offline servers; establish data security monitoring and risk early warning mechanisms to prevent data leakage, tampering and loss.
12. CROSS-BORDER DATA TRANSMISSION & CONSENT
SUNNYBLOOMY is operated in the United States, and user data will be stored and processed on American servers. Cooperative service providers may involve cross-border data transmission behavior. By using our platform services, you agree to the cross-border transmission, processing and storage of your personal data within the scope permitted by regulations.
We adopt standardized legal guarantee measures for cross-border data transmission, including adopting EU standard data protection contracts and cooperating with qualified overseas data protection institutions to ensure that cross-border data processing complies with local regulatory requirements.
In case of platform data security incidents that need to be notified, we will issue official announcements on the website or send email notifications to users in accordance with legal requirements, and you recognize that this notification method meets legal standards.
13. TARGETED ADVERTISING OPT-OUT MECHANISM
We cooperate with third-party advertising platforms such as Google and Facebook to deliver personalized targeted advertisements based on user browsing behaviors. You can learn about online advertising rules through the Network Advertising Initiative official channel.
Users in different regions can close personalized advertising tracking through browser settings, official platform opt-out channels and regional dedicated opt-out entrances to stop receiving targeted recommendation content.
14. PERSONAL INFORMATION MANAGEMENT METHODS
Account Information Update: You can log in to your personal account settings page to modify, correct and sort out your personal basic information and order data at any time.
Marketing Preference Management: You can adjust subscription preferences through the preference link in marketing emails to customize the content and frequency of received messages.
Unsubscribe Channel: All marketing emails are equipped with an independent unsubscribe entrance. After unsubscribing, you will no longer receive promotional content, but we can still send mandatory service messages such as order receipts and logistics notifications to guarantee normal service delivery.
15. USER DATA PRIVACY RIGHTS
15.1 GDPR Rights for EU Residents
Users residing in the European Economic Area enjoy the right to inquire, access, correct and delete personal data, the right to restrict processing, the right to object to data processing, and the right to data portability.
To exercise relevant rights, please contact our official customer service email: support@sunnybloomy.com. We will complete identity verification and reply to user applications within 1 month (up to 3 months for complex applications). We do not charge fees for normal data rights applications, and only charge reasonable handling fees for excessive repeated applications.
EU users have the right to file complaints with local data protection authorities. For relevant official rights introduction, please refer to: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en
15.2 CCPA Rights for California Residents
California users enjoy the right to know data collection details and the right to delete personal information in accordance with CCPA regulations. We will confirm the receipt of user applications within 10 working days and complete feedback and processing within 45 days.
We adopt two-step identity verification for user data applications to protect information security. We will not disclose user sensitive confidential information and high-risk privacy data. Our platform does not respond to browser "Do Not Track" temporary signals. For relevant details, please refer to professional industry official documents.
16. COMPLAINT & FEEDBACK CHANNELS
If you have questions, objections or complaints about our data processing behavior and privacy protection work, please contact us via the official email: support@sunnybloomy.com. We will verify and reply to your feedback as soon as possible.
EU and UK users can file complaints with local data supervision authorities to safeguard their legitimate rights and interests.
17. POLICY UPDATE & FINAL INTERPRETATION
We reserve the right to update this Privacy Policy according to business development and regulatory updates. The updated clauses will be published on the official website page and take effect automatically. Users shall check the latest content regularly, and continuous use of services will be deemed as recognition of the updated policy.
Sunnybloomy Operated by NANYUAN TECHNOLOGY INC
Official Contact Information
Brand Website: https://sunnybloomy.com
Support Email: support@sunnybloomy.com
Operating Entity: NANYUAN TECHNOLOGY INC
25 FIRST AVE SW STE A, WATERTOWN, SD 57201
EIN: 39-3807213