Privacy Policy

Privacy Policy

This Privacy Policy explains how Cherrycom Worldwide SL (“we”, “us”, “our”) collects, uses, stores, processes and protects the personal data of users accessing and purchasing products through our official website. This policy is formulated in full compliance with the General Data Protection Regulation (GDPR), applicable European Economic Area (EEA) data protection rules, and Spanish national data protection laws.

This Privacy Policy applies to all visitors, registered users, and customers located within the European Economic Area. By browsing our website, registering an account, placing an order, or using any of our services, you fully acknowledge, understand and agree to the data processing practices described in this policy.

1. Data Controller Information

For all users located in the European Economic Area (EEA), the sole and exclusive Data Controller responsible for the collection, storage, processing, management and protection of your personal data is:

Cherrycom Worldwide SL
VAT Identification Number: B01965813
Registered Business Address: 3 Resurrection Street, Getafe 28, Madrid, 28091, Spain

Important Notice:
The above registered address is exclusively used for official data compliance communication, legal inquiry, regulatory supervision and GDPR rights application. This address does not accept product returns, exchange parcels or logistics deliveries.

Our official website is jointly operated by Cherrycom Worldwide SL and our Hong Kong strategic cooperative enterprise. For all user data generated by European Economic Area customers, all data collection, transmission, storage, analysis and processing behaviors are independently controlled and supervised by Cherrycom Worldwide SL, strictly abiding by EU GDPR regulations and Spanish data protection legal requirements. All EEA user data will never be transferred to non-EU affiliated companies without legal compliance procedures and user explicit consent.

2. Personal Data We Collect

We only collect necessary and legitimate personal data required to provide standardized e-commerce services, complete order transactions, deliver goods, and provide after-sales support. We strictly adhere to the data minimization principle and will never collect irrelevant or excessive user information.

The personal information we may collect includes but is not limited to:

• Full name, nickname and recipient information for order delivery

• Detailed shipping address, street information, city, postal code and country information

• Valid email address for order confirmation, logistics notification, after-sales reply and service update

• Mobile phone and contact numbers for delivery arrangement and emergency communication

• Order records, purchase history, transaction records and shopping preferences generated on our website

• Necessary payment information processed by authorized third-party payment institutions to complete order settlement

We solemnly promise that we will never sell, rent, trade or commercially transfer your personal data to any third-party commercial institutions for marketing purposes without your explicit written authorization.

3. Legal Basis for Data Processing

We process your personal data based on the following legal foundations stipulated by GDPR:

• Contract Performance: Data processing is necessary to perform the sales contract, complete order delivery, payment verification and after-sales service.

• Legitimate Interest: Optimizing website operation, improving user shopping experience, preventing transaction risks and ensuring platform security.

• Legal Compliance: Retaining transaction data to comply with local tax laws, commercial laws and EU regulatory requirements.

• User Consent: Where applicable, processing data based on your voluntary confirmation and authorization.

4. How We Use Your Personal Data

All collected personal data will only be used for the following legitimate service purposes:

• Process, confirm, verify and complete your online orders and product transactions

• Arrange logistics delivery, update shipping information, and complete parcel distribution

• Provide after-sales consultation, order inquiry, return and exchange support services

• Verify user identity, prevent fraudulent transactions and ensure account and transaction security

• Send necessary order notifications, logistics updates and official service reminders

• Optimize website functions, product display and overall user shopping experience

• Comply with legal tax filing, commercial record retention and regulatory compliance obligations

We will not use your personal data for unrelated commercial promotion, spam marketing or illegal data analysis without your separate consent.

5. Data Sharing and Disclosure

We will only share your personal information in the following limited and compliant scenarios:

• Authorized third-party payment service providers required for order payment settlement

• Formal logistics and freight companies responsible for product transportation and delivery

• Authorized technical service providers who assist in website operation, data storage and system maintenance

• Law enforcement agencies, regulatory authorities or judicial institutions in accordance with legal procedures and mandatory legal requirements

All third-party service providers we cooperate with have signed data confidentiality agreements and comply with GDPR data protection standards. They are only authorized to process user data for designated service purposes and are prohibited from secondary data leakage or unauthorized use.

6. Your GDPR Legal Rights

In accordance with the General Data Protection Regulation (GDPR) and Spanish data protection laws, you have the complete and legitimate personal data rights as an EEA user:

1. Right of Access: You have the right to inquire and obtain a copy of all your personal data stored by us.

2. Right of Rectification: You have the right to correct inaccurate, incomplete or outdated personal information.

3. Right to Erasure (Right to be Forgotten): You have the right to apply for the deletion of your personal data when the data is no longer needed for service purposes.

4. Right to Restriction of Processing: You have the right to restrict our data processing behavior under legal applicable conditions.

5. Right of Data Portability: You have the right to obtain your personal data in a readable, structured and machine-readable format for transmission to other data controllers.

6. Right to Withdraw Consent: You may withdraw your previous data authorization consent at any time without affecting the legality of processing before withdrawal.

7. Right to Lodge a Complaint: You have the right to submit complaints to local data protection supervisory authorities if you believe our data processing behavior violates GDPR regulations.

You may submit all rights applications through the Contact Us page on our official website. We will verify your identity and respond to your legitimate application within the time limit required by GDPR.

7. Data Storage and Retention Period

We strictly follow the principle of limited storage duration and will only retain your personal data within the legally required and service necessary cycle.

• Transaction and order data will be retained during the full cycle of order performance, after-sales guarantee and service follow-up.

• Relevant financial and transaction data will be retained in accordance with Spanish local tax laws and commercial legal retention requirements.

• After the expiration of the statutory retention period and service cycle, we will permanently delete, destroy or anonymize your personal data in a secure manner, and no longer retain or use your information.

We will not store your personal data indefinitely for commercial purposes.

8. Data Security Protection

We adopt industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, tampering, loss, leakage and illegal destruction.

We implement encrypted transmission for website data, secure server storage, regular system security detection and internal data access permission management to ensure the maximum security of user personal information.

9. Cookie Policy

Our website may use standard browser Cookies and similar tracking technologies to optimize browsing experience, record user browsing preferences and analyze website traffic. You can freely manage, disable or clear Cookie permissions through your browser settings at any time. Disabling Cookies will not affect your basic browsing and order functions of the website.

10. Policy Update and Revision

We reserve the right to update and revise this Privacy Policy irregularly in response to business adjustment, website function upgrade and legal policy changes. All revised clauses will take effect immediately after being published on the official website. Continued use of our website and services after policy update constitutes your acceptance of the latest privacy clauses.

11. Contact Information

If you have any questions, inquiries, disputes or rights applications regarding this Privacy Policy and your personal data protection, please contact us through the official Contact Us channel on our website.