Privacy Policy
The related services include, but are not limited to, website browsing, account registration, order placement and payment, customer support, after-sales services, product inquiries, and other services associated with the Products (hereinafter referred to as the “Services”).
This Privacy Policy (hereinafter referred to as the “Policy”) explains how we collect, use, store, protect, and share your personal information, as well as the rights you are entitled to under applicable laws.
By accessing our official website, purchasing Products through authorized online or offline channels, or otherwise using our Products or Services, you acknowledge that you have read, understood, and agreed to all the terms of this Policy.
If you do not agree with any part of this Policy, please discontinue using the Products or Services.
I. Scope of Application
This Privacy Policy (the “Policy”) applies to the processing of your personal information by Shenzhen Kangxin Biotechnology Co., Ltd. (the “Company”) and its affiliated entities (meaning enterprises under the Company’s actual control or common control) in the following circumstances:
-
Information you provide when registering an account, placing orders, or purchasing METASTRIP oral films, functional gum, or other oral wellness products through the Company’s official website or authorized e-commerce platforms;
-
Information you provide when contacting the Company’s customer support channels (including online customer service, email, or authorized offline channels) for product inquiries, usage guidance, after-sales support, or feedback related to the Products;
-
Information related to product usage that may be collected where applicable, including basic usage interactions, product batch verification, quality tracking, or safety-related data, solely for the purpose of improving product quality, safety, and user experience;
-
Information you voluntarily submit when participating in the Company’s marketing, research, or promotional activities, such as product trials, surveys, feedback programs, or promotional campaigns related to METASTRIP products;
-
Information obtained from the Company’s authorized partners (including logistics service providers, payment service providers, or compliance service providers) for purposes such as order fulfillment, payment processing, delivery, customer support, and warranty services.
This Policy does not apply to the privacy practices of third-party platforms (such as authorized e-commerce platforms or third-party payment service providers). The Company encourages you to carefully review the privacy policies of such third parties when using their services.
II. Collection and Use of Personal Information
(I) Types of Information Collected and Purposes
The Company collects only the personal information necessary to provide the Products and Services and does not collect personal information unrelated to such purposes. Details are as follows:
1. Identity and Contact Information
Information Collected:
Name, mobile phone number, email address, and contact address (including shipping address).
Collection Scenarios:
-
Account registration
-
Order placement and purchase (for product delivery)
-
After-sales support or warranty services (for product return, replacement, or inquiry)
-
Participation in marketing or promotional activities (for prize distribution or notifications)
Purpose of Use:
To verify user identity, fulfill orders, provide customer and after-sales support, and communicate activity-related information. Such information will not be used for purposes unrelated to the above.
2. Order and Transaction Information
Information Collected:
Order number, purchased product type and quantity, payment amount, payment method, and order status.
Collection Scenarios:
-
Order placement and payment
-
Order inquiries
-
Returns, exchanges, or after-sales service requests
Purpose of Use:
To process and manage orders, complete transactions, provide return or exchange services, and retain transaction records in compliance with applicable laws and regulations (including e-commerce and tax compliance requirements).
3. Product and Usage-Related Information
Information Collected:
-
Product-related information: product batch number, product model, production or traceability identifiers, used for quality management, safety monitoring, and regulatory compliance;
-
Usage-related information: basic usage feedback or interaction data voluntarily provided by users, or anonymized data collected for evaluating product performance and improving user experience.
Collection Scenarios:
-
Product inquiries or feedback
-
Quality or safety issue investigations
-
Product improvement, research, and internal analysis
Purpose of Use:
To ensure product quality and safety, improve product formulation or user experience, and provide technical or customer support.
The Company does not collect sensitive personal information, such as precise location data, health diagnosis data, or other information unrelated to product and service fulfillment.
4. Information Obtained from Third Parties
Information Collected:
-
Delivery confirmation information provided by logistics service providers (such as delivery or receipt status);
-
Payment confirmation information provided by payment service providers.
Collection Scenarios:
-
Order fulfillment and delivery
-
Transaction completion and verification
Purpose of Use:
To confirm order delivery status and verify transaction authenticity. The Company does not actively obtain personal information from third parties beyond what is necessary to provide the Products and Services.
(II) Legal Basis for Information Collection
The Company collects and processes your personal information based on the following lawful grounds:
-
Your explicit consent, such as when you voluntarily provide your name, contact details, or other information;
-
Performance of contractual obligations, such as collecting shipping address information for product delivery;
-
Compliance with legal and regulatory requirements, including the retention of order and transaction records for a legally required period;
-
Protection of your lawful rights and interests, such as collecting fault descriptions for after-sales service or dispute resolution;
-
Public interest or product improvement purposes, including the use of anonymized and non-identifiable usage data to improve product quality, safety, and user experience. Such anonymized data cannot be used to identify any individual.
III. Storage and Protection of Information
(I) Storage Methods and Retention Periods
Storage Location
Your personal information will be stored on secure cloud servers located within mainland China (including Alibaba Cloud and Tencent Cloud).
The Company will not transfer personal information across borders unless otherwise required by applicable laws and regulations.
Retention Periods
-
Identity and Contact Information
Stored for the duration of your use of the Products and Services.
Upon account cancellation or deletion request, such information will be deleted within 15 business days, except where retention is required by law (e.g., order-related records retained until one year after the expiration of the after-sales or warranty period). -
Order and Transaction Information
Retained for three (3) years from the date of transaction completion in accordance with applicable laws and regulatory requirements.
Upon expiration, such data will be anonymized by removing information that can identify you personally. -
Product and Usage-Related Information
Anonymized, non-personally identifiable data may be retained long-term for product quality control and optimization.
Information associated with specific product batch numbers or traceability identifiers will be deleted within 30 days after product deactivation or upon your deletion request.
(II) Security Protection Measures
The Company adopts both technical and organizational measures to safeguard your personal information:
Technical Measures
-
Personal information is encrypted using AES-256 encryption during storage.
-
Data transmission via the official website and customer service systems is protected by SSL/TLS encryption.
-
Access to personal information and product-related data is strictly controlled and limited to authorized personnel within the scope of their job responsibilities (e.g., quality assurance or customer support teams).
Organizational Measures
-
Establishment of internal information security management policies and procedures.
-
Regular employee training on data protection and privacy compliance.
-
Execution of confidentiality and data protection agreements with partners such as logistics providers and cloud service providers.
Incident Response
In the event of a personal information security incident (such as data leakage, loss, or unauthorized access), the Company will:
-
Notify affected users within 48 hours via email, SMS, or official website announcements;
-
Take immediate remedial measures;
-
Report the incident to relevant regulatory authorities in accordance with applicable laws.
IV. Sharing, Transfer, and Public Disclosure of Information
The Company strictly limits the sharing and transfer of personal information and will only do so under the following circumstances:
-
With Your Explicit Consent
For example, when transferring necessary information to authorized service providers for after-sales support, limited only to fault descriptions and contact details. -
As Necessary for Contract Performance or Service Provision
Such as sharing shipping address information with logistics providers for delivery, or payment-related information with payment institutions for transaction verification.
Partners may only use such information within the scope of service provision and may not use it for any other purpose. -
As Required by Laws and Regulations
Where disclosure is required by judicial authorities or regulatory agencies for lawful investigations or compliance audits, subject to verification of legal documentation. -
In Case of Corporate Transactions
In the event of merger, acquisition, restructuring, or asset transfer, your personal information may be transferred as part of the business assets.
The Company will notify you in advance, and the successor entity will continue to be bound by this Policy.
The Company does not sell personal information to any third party and will not publicly disclose your personal information unless required by law or with your explicit consent.
V. Your Rights
In accordance with applicable personal information protection laws, you have the following rights regarding your personal information:
-
Right to Access and Correction
You may access or correct your personal information through:-
The official website or authorized e-commerce platforms (“Account Center”);
-
Customer support channels for assistance with order records or product-related information.
-
-
Right to Deletion
If you believe the information collected exceeds what is necessary for service provision, or if you no longer use the Products or Services, you may request deletion of your personal information (except where retention is required by law).
The Company will process your request within 15 business days. -
Right to Withdraw Consent
You may withdraw your consent at any time, such as opting out of marketing communications, via:-
“Account Center – Notification Settings” on the official website; or
-
Replying “TD” to unsubscribe from promotional messages.
Withdrawal of consent does not affect prior lawful processing based on your consent.
-
-
Right to Lodge a Complaint
If you have concerns regarding the handling of your personal information, you may contact the Company through customer support channels.
The Company will respond within 5 business days.
VI. Protection of Minors
The Company does not knowingly collect personal information from individuals under the age of 18.
If a minor uses the Products or Services with the consent of a legal guardian, only information strictly necessary for service provision (such as product batch verification) will be collected.
Guardians may contact the Company to access, correct, or delete a minor’s personal information, and the Company will actively cooperate.
VII. Updates to This Policy
The Company may update this Policy in response to changes in laws, regulations, or business operations (such as the introduction of new product features).
Updated versions will be published on the official website under the “Policy Announcements” section and will take effect 7 days after publication.
If updates materially affect your rights, the Company will provide additional notice via email or other appropriate means.
Continued use of the Products or Services constitutes acceptance of the updated Policy.
VIII. Contact Information
If you have any questions regarding this Policy or wish to exercise your personal information rights, please contact us at:
-
Email: info@kxmetastrip.com
-
Address: Room 2206B, Building 2, Vanke Xingcheng, Xinqiao, Shajing, Bao’an District, Shenzhen, China
Effective Date: November 12, 2025