Privacy Policy

Effective date: 8 August 2026

This Privacy Policy explains how Yiwu Mingchang Fashion Co., Ltd. (trading as “YWHOLA”, “we”, “us” or “our”) collects and processes personal data through ywhola.com and when responding to business enquiries.

1. Data controller

Yiwu Mingchang Fashion Co., Ltd.
2nd Floor, Building 3/27, Beizhan Siqu, Houzhai Subdistrict, Yiwu, Zhejiang, China
Email: market@ywhola.com

We are a controller established outside the European Union. Before activating ongoing analytics or direct-marketing features directed at people in the EU, we will appoint and publish the details of an EU representative where required by Article 27 GDPR. Until then, EU privacy enquiries may be sent directly to the email above.

2. Personal data we collect

• Contact and business details you provide, such as your name, email address, company information and country.
• Your enquiry, product requirements, quantities, destination, attachments and related correspondence.
• Basic technical and security data, such as IP address, date and time of submission, browser information and server logs.
• Consent records if you separately choose to subscribe to marketing communications in the future.

Please do not submit sensitive personal data, payment-card details or confidential information unless we specifically request it through an appropriate secure channel.

3. Why we use personal data

• To respond to sourcing, quotation, quality-control, logistics and other business enquiries.
• To take steps requested by you before entering into a contract and to perform contracts.
• To operate, secure, troubleshoot and prevent abuse of our website.
• To meet legal, accounting, compliance and dispute-resolution obligations.
• To send marketing communications only after a separate, valid opt-in and, where used, double confirmation.

4. Legal bases

Depending on the context, we rely on steps taken at your request before a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting a B2B service, or your consent. You may withdraw consent at any time without affecting earlier lawful processing.

5. Cookies and analytics

Essential technologies may be used for security and core website functions. Non-essential analytics or marketing technologies, including Google Analytics 4, will not be activated for a visitor unless and until the required consent controls are implemented and that visitor has made a valid choice. A separate Cookie Policy and consent panel will provide further details before such technologies are enabled.

6. Recipients and service providers

Access is limited to personnel and providers who need the data for the purposes above, such as website hosting, business email, IT security, logistics or professional advisers. We do not sell personal data. If a newsletter platform is introduced, this Policy will be updated before personal data is transferred to that provider.

7. International processing

Because the controller is located in China, information submitted through the website may be processed in China. Where EU/EEA personal data is transferred internationally, we will use an applicable legal mechanism and appropriate safeguards where required, and provide further information on request.

8. Retention

General enquiries are retained for up to 24 months after the last meaningful contact, unless a longer period is required for a contract, accounting, legal compliance, security or dispute purposes. Marketing consent records are retained for as long as necessary to demonstrate the consent and honour withdrawals or objections.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or a copy of your personal data, and you may object to certain processing. You may withdraw consent at any time. Direct-marketing objections will be honoured without charge.

Send requests to market@ywhola.com. We may need to verify your identity. You may also lodge a complaint with the data-protection authority in the EU/EEA country where you live, work or believe an infringement occurred.

10. Security and external services

We use reasonable organisational and technical safeguards, but no internet transmission is completely secure. Links to WhatsApp, Microsoft Teams, YouTube or other external services are governed by those providers’ own privacy terms once you leave our website.

11. Children

Our services are intended for business users and are not directed to children. We do not knowingly request personal data from children.

12. Changes

We may update this Policy when our practices or legal requirements change. The effective date above will be revised, and material changes will be highlighted where appropriate.