At YCY Handcrafted Bracelets & Ornaments Store, we fully respect your privacy rights and strictly comply with the EU GDPR and Spanish data protection regulations. This policy clearly defines how we collect, use, store and protect your personal information when you browse, register and place bracelet, hand ornament and decorative accessory orders on our website.

1.1 Information you actively submit When you register an account, complete checkout or contact customer service, we collect personal data you provide voluntarily: full name, delivery address, contact phone number, email address, tax ID, payment billing information, order notes for customized carving and sizing requests for hand ornaments. 1.2 Automatically collected technical data Our website automatically records non-sensitive browsing data to optimize shopping experience: IP address, device model, browser type, page access records, stay duration, clicked product information of bangles, bracelets and wearable ornaments. 1.3 Marketing consent records We will save your opt-in/opt-out records for new accessory newsletters, discount promotions and limited collection activity emails.

2.1 Order fulfillment: Process payment, arrange international logistics, deliver bracelets & wearable ornaments, send tracking number and delivery reminders. 2.2 Customer service support: Respond to your inquiries about material texture, size customization, after-sales repair and return applications. 2.3 Legal compliance: Retain transaction records for Spanish tax, customs clearance and dispute resolution within the legal retention period. 2.4 Marketing communication: Only send accessory promotion emails if you explicitly tick to agree to receive marketing messages; you may cancel subscription at any time. 2.5 Data analysis: Use anonymized aggregated data to adjust accessory inventory, optimize website page layout and improve shopping experience, without identifying any individual user.

3.1 We will never sell, rent, trade or auction your personal information to irrelevant third parties for commercial profit. 3.2 Authorized trusted service providers (limited to necessary cooperation scope only):

4.1 All personal data is stored on encrypted secure servers, with multi-layer encryption to prevent unauthorized access, modification, leakage or deletion of your information. 4.2 We adopt industry-standard security technologies, but please note that no online transmission or electronic storage can guarantee 100% absolute security against cyber risks. 4.3 Data retention rule: We reserve your complete order information for 5 years as required by Spanish commercial law. After the statutory retention period, your data will be automatically anonymized or permanently deleted.

You enjoy the following rights over your personal data at any time by contacting our customer service via email: 5.1 Right of access: Request a full copy of all your personal data stored on our website. 5.2 Right of rectification: Modify wrong shipping address, contact information or order personal data. 5.3 Right to erasure (Right to be forgotten): Apply to delete your account and all associated personal information (excluding data we must retain by law). 5.4 Right to withdraw marketing consent: Unsubscribe accessory promotion emails with immediate effect. 5.5 Right to data portability: Obtain your order information in readable electronic format.

6.1 We reserve the right to revise this Privacy Policy to adapt to updated Spanish data protection laws and website operation adjustments. All revisions will be published on this policy page and take effect immediately. 6.2 If you have any privacy-related questions, please reach out to our data protection team through the Contact Us page on our website.