Privacy Policy

1. Introduction
   [hopecho] (hereinafter referred to as “we”) is committed to protecting the security of your personal information. This Privacy Policy explains how we collect, use, store and share your personal information when you visit [https://hopecho.com/] (hereinafter referred to as the “Website”) or purchase our products, and how you can exercise related rights.
2. Types of Information We Collect
   2.1 Information You Actively Provide

• Purchase and Account Information: Name, Billing Address, Shipping Address, Email, Phone Number, Payment Information (Credit Card Number is encrypted, we do not store the full card number).
• Communication Content: Customer Service Inquiry, Product Reviews, Email Subscription Content.
  2.2 Information Collected Automatically
• Device and Log Data: IP address, browser type, operating system, access time, page browsing history, clickstream data.
• Cookies and Tracking Technology: used to analyze traffic, save shopping cart content, and optimize advertising.

1. Data Sharing and Disclosure
   3.1 Third-Party Service Providers

• Must be shared: payment processors (such as Stripe, PayPal), logistics companies (such as DHL, FedEx), website hosting service providers.
• Contractual constraints: Third parties may only use data to the extent necessary to perform services and must comply with the requirements of this policy.
  3.2 Legal requirements
  We may disclose data in the following circumstances:
• In response to legal proceedings such as court subpoenas and government investigations.
• To protect us or the public from personal or property damage.

1. Cookies and tracking technologies

• Necessary cookies: Maintain shopping carts and user login status (cannot be turned off).
• Analysis cookies: Google Analytics statistics traffic sources (can be rejected through browser settings).
• Advertising cookies: Facebook Pixel is used for remarketing ads (click to agree on the first visit).

1. Data security measures

• Technical protection: SSL encrypted transmission, regular security audits, database anonymization.
• Management measures: employee privacy training, minimizing data access rights.

1. International data transfer
   Our servers are located in [fill in the country, such as the United States], and your data may be transferred to other countries. We will ensure adequate protection through standard contractual clauses (SCCs) or other legal mechanisms.
2. Children’s Privacy
   We do not intentionally collect information from children under the age of 13. If you believe that we have mistakenly collected such data, please contact us immediately to delete it.
3. Policy Updates
   This policy may be updated as business or legal changes occur. Major changes will be announced on the homepage of the website for 7 days or notified to registered users by email.