Privacy Policy

Last updated: 2026-09-10

Introduction

This Privacy Policy explains how POOPO handles personal information when you use our website, account, physical-goods ordering, CNY payment, delivery, and after-sales services. We process information only as reasonably necessary to provide the service, operate securely, comply with legal obligations, or act on valid authorization.

Information We Process

Depending on how you use the service, we may process:

1. Account and Security Information — Name, email address, password hash, sessions, two-factor authentication state, login time, IP address, device/browser information, and security events.
2. Delivery Information — Recipient name, delivery address in Korea, postal code, phone number, address label, default-address setting, and the Korean personal customs clearance code you optionally provide.
3. Order and Fulfillment Information — Products and quantities, Chinese yuan (CNY) amounts, order time, procurement status, delivery notes, carrier, tracking number, and after-sales history.
4. Payment Information — ZPAY merchant and provider transaction identifiers, WeChat payment method, CNY amount, payment and refund states, notification and query times, and limited metadata needed to reconcile a transaction. We do not store your WeChat payment password or complete payment-account credentials on our servers.
5. Support and Audit Information — Messages, attachments, order-verification materials, and audit records generated for product, order, procurement, shipment, refund, and permission actions.
6. Cookies and Similar Technologies — Data necessary to maintain login sessions, language, and essential preferences and, where enabled, basic analytics information.

Do not place sensitive personal information unrelated to fulfillment in an order note or support message.

Personal customs clearance codes are used for the recipient's cross-border clearance and necessary fulfillment checks, not for payment or marketing. A supplied code is stored with the address and copied into the order's checkout-time shipping information. Editing the address book does not automatically change historical orders. When clearance requires it, authorized order-processing staff may provide the code for that order to its carrier or customs clearance provider. Only supply information provided by the actual recipient and authorized for this order.

How We Use Information

We use information to:

• Register and authenticate users, manage sessions and two-factor authentication, and protect accounts.
• Create and display carts, addresses, and personal orders while preventing access across users.
• Recalculate server-side product prices and inventory and complete procurement, delivery, returns, and support communication.
• Initiate CNY payments through the ZPAY WeChat payment cashier and verify asynchronous notifications, provider queries, duplicate notifications, and refund results.
• Provide support, investigate failures, preserve audit evidence, and send necessary service or security notices.
• Detect fraud, fake orders, account theft, abusive chargebacks, and other threats to the service.
• Maintain and improve reliability and comply with transaction-record, consumer-protection, tax, or other legal obligations.

Service Providers and Data Sharing

We do not sell personal information. We may provide only the reasonably necessary information to:

• ZPAY and its payment channels for WeChat collection, transaction queries, and refunds.
• Suppliers where necessary to procure or supply the products in a specific order.
• Logistics providers for delivery, tracking, returns, and exception handling.
• Hosting, database, storage, email, monitoring, security, and customer-support providers.
• Professional advisers, authorities, or other parties when required by law or necessary to protect users, the platform, and the rights and safety of others.

Some payment, supply-chain, logistics, or infrastructure providers may process data outside Korea. We apply notices, authorization, contractual controls, access controls, and security measures as required by applicable law.

Retention

We retain information for as long as reasonably necessary to provide account and order services, fulfill procurement and delivery, resolve refunds and disputes, prevent fraud, maintain audit records and backups, and meet legal obligations. Retention differs by record type. We delete or anonymize information when it is no longer needed, subject to legal, tax, consumer-dispute, security, backup, and fraud-prevention requirements.

Closing an account does not automatically delete transaction records that must be retained for an unfinished order, refund, dispute, security event, or legal obligation.

Security

We use encrypted transport, database-backed sessions, access control, role permissions, administrator two-factor authentication, secret isolation, request limits, payment signature verification, least privilege, and audit logging. No Internet service can guarantee absolute security. Protect your credentials and contact us promptly if you detect suspicious activity.

Your Choices and Rights

You can view or update certain account and delivery-address information in the account center. Depending on applicable law, you may also request access, correction, deletion, restriction, objection, or a copy of personal information. We may need to verify your identity before acting on a request. Order, payment, and security records that must legally be retained may not be deleted immediately.

Changes

We may update this Policy. Material changes will be identified by updating the date above and, where appropriate, through an in-product or other reasonable notice.

Contact

For privacy questions or rights requests, contact us through the in-app support channel on the POOPO website. Do not include complete payment credentials or unnecessary sensitive information in a public message.