COMPANY NAME: Zhoukou Gaoli Trading Co., Ltd.

COMPANY ADDRESS: No. 139, Middle Section of Kunshan Road, Xihua County, Zhoukou City, Henan Province

Contact Phone Number: +1(475)666-3107

Privacy Policy

Last Updated: September 10, 2026

1. Who We Are

Hevetta is owned and operated by Zhoukou Gaoli Trading Co., Ltd. (“Hevetta,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit hevetta.com, purchase our products, contact us, or otherwise interact with our services.

Zhoukou Gaoli Trading Co., Ltd. is the data controller responsible for the personal information we process for the purposes described in this policy, except where another provider independently determines how it processes information.

Reading this policy, browsing our website, or placing an order does not by itself constitute consent to marketing communications or other processing for which separate consent is required.

2. Personal Information We Collect

Depending on your interactions with us, we collect the following categories of information.

Contact and Account Information

Your name, email address, telephone number, billing address, shipping address, and account information if you create an account.

Order and Transaction Information

Products purchased, order numbers, order amounts, discounts, payment status, transaction references, delivery information, and records relating to cancellations, returns, refunds, or disputes.

Payments are handled by third-party payment providers. We do not directly store your complete payment card number or card security code.

Customer Service Information

Messages you send us, information about your request, and any photographs or other materials you provide to help us address a product or order issue.

Please do not send passwords, complete payment card details, or unrelated sensitive information in customer service messages.

Device and Website Activity Information

IP address, browser and device information, cookie or similar identifiers, referring pages, pages and products viewed, shopping cart activity, and interactions with our website.

An IP address may also indicate your approximate location.

Marketing and Privacy Preferences

Subscription status, communication preferences, consent records where applicable, unsubscribe requests, and records of privacy requests and our responses.

3. Where Information Comes From

We obtain personal information:

• Directly from you, when you place an order, contact us, create an account, or subscribe to communications.

• Automatically through our website, including through cookies, pixels, and similar technologies.

• From providers supporting our services, such as our commerce platform, payment providers, delivery partners, and providers of analytics or advertising services, depending on the services used.

4. How We Use Personal Information

We use personal information to:

• Process payments, confirm orders, and arrange delivery.

• Provide order updates and resolve delivery issues.

• Handle cancellations, returns, refunds, and customer service requests.

• Operate, maintain, and improve our website.

• Understand product interest and website performance.

• Detect fraud, investigate misuse, and protect our customers and services.

• Send marketing communications where permitted by applicable law.

• Measure advertising performance and support relevant advertising, subject to applicable privacy requirements.

• Maintain accounting and business records.

• Comply with legal obligations and establish, exercise, or defend legal claims.

• Record and respond to privacy choices and requests.

Where European Economic Area, United Kingdom, or similar laws require a legal basis, the basis depends on the purpose:

• Contract: to take steps at your request before a purchase and fulfill your order.

• Legal obligation: to meet applicable tax, accounting, consumer protection, and other legal requirements.

• Legitimate interests: to provide customer support, protect our services, prevent fraud, and improve our business, where those interests are not overridden by your rights.

• Consent: for activities requiring consent, such as certain marketing communications and non-essential tracking.

Legitimate interests do not replace consent where consent is legally required. You may contact us for further information about the basis for a particular use of your information.

5. Cookies, Pixels, and Similar Technologies

Our website uses cookies and similar technologies. A cookie is a small file stored on your device. Pixels and tags can record website interactions or communicate information to a service provider.

These technologies can serve different purposes:

Category	Purpose
Essential	Support functions such as shopping carts, checkout, authentication, security, and fraud prevention.
Preferences	Remember choices such as language or region. Whether a particular technology requires consent depends on its function and applicable law.
Analytics	Help measure visits, product interest, navigation, and website performance.
Advertising	Help measure campaigns, attribute purchases to advertisements, and support relevant advertising.

Information processed through these technologies may include device identifiers, IP addresses, page views, product interactions, cart activity, and purchase events.

Where applicable law requires prior consent for a technology or purpose, that consent must be obtained before it is used. Accepting this policy or placing an order does not provide that consent.

Your Cookie Choices

You can use your browser settings to block or delete cookies. Blocking essential cookies may prevent parts of the shopping or checkout process from working.

Browser settings do not necessarily control all pixels, server-side data transfers, or other advertising technologies. Deleting a cookie also does not automatically delete information already received by us or another provider.

To submit a privacy request concerning advertising, sharing, or tracking, email service@hevetta.com and describe the processing you wish to opt out of or the consent you wish to withdraw.

An email request is a way to contact us about your rights; it does not itself operate as an immediate browser-level tracking control.

6. How We Disclose Personal Information

We disclose information as relevant to the following recipients and purposes.

Recipient category	Information and purpose
Commerce platform and technical providers	Contact, order, device, and activity information needed to host and operate the store, support checkout, and maintain security.
Payment providers	Payment, billing, transaction, and relevant fraud-prevention information needed to authorize payments, process refunds, and address disputes.
Fulfillment and delivery partners	Recipient name, delivery address, contact details where needed, and order information necessary to prepare and deliver purchases.
Customer service providers	Contact, order, and correspondence information needed to address inquiries or resolve issues.
Analytics providers	Device identifiers and website activity used to understand performance and customer interactions.
Advertising and measurement partners	Online identifiers, browsing activity, and cart or purchase events used for attribution, campaign measurement, and relevant advertising, subject to applicable requirements.
Professional advisers and authorities	Information necessary for accounting, advice, legal compliance, investigations, or the protection of legal rights.

Not every recipient receives every category of information listed in this policy.

Providers acting on our behalf process information for the services they provide. Some providers, including certain payment and advertising providers, may also act as independent controllers for particular activities, which are governed by their own privacy notices.

We may also disclose information in connection with a proposed or completed merger, acquisition, reorganization, or sale of business assets, subject to applicable confidentiality and privacy requirements.

Shopify

Our store is hosted on Shopify, which provides the commerce infrastructure supporting our website and transactions. Depending on the service involved, Shopify may process information on our behalf or for purposes described in its own privacy policy.

For details, see the Shopify Consumer Privacy Policy. Shopify’s privacy portal provides information about choices concerning Shopify’s own processing. Those choices do not necessarily replace requests directed to Hevetta.

7. Sale, Sharing, and Targeted Advertising

We do not sell personal information for monetary compensation.

However, disclosing information to advertising or technology partners may constitute a “sale,” “sharing,” or processing for “targeted advertising” under certain privacy laws, even when no money is exchanged.

Such activities may involve online identifiers, device information, browsing activity, and cart or purchase events used for advertising and measurement.

Where applicable, you may request that we stop selling or sharing your information or processing it for targeted advertising by emailing service@hevetta.com. Please use a subject such as “Privacy Request — Advertising Opt-Out.”

Privacy rights depend on applicable law and the processing involved. We will not require identity verification for an opt-out request where the law prohibits it. We may ask for limited information needed to understand or apply your request.

Opting out of targeted advertising does not necessarily stop all advertisements. You may still see advertisements that are not selected using information about your activity across different businesses.

8. Marketing Communications

Where permitted by applicable law, we may send product updates, offers, or other marketing communications.

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us.

Providing a telephone number at checkout does not, by itself, authorize marketing text messages. If we offer SMS marketing, any consent required for that program must be obtained separately.

Order confirmations, delivery updates, refund notices, and other necessary service messages are separate from marketing. Unsubscribing from marketing does not stop communications necessary to fulfill an order or address a request.

9. How Long We Retain Information

Retention depends on the category of information, the purpose for which it was collected, and applicable obligations. We use the following criteria:

Information category	Retention criteria
Orders, payments, invoices, and tax records	Retained to complete transactions and meet applicable accounting, tax, audit, and legal recordkeeping periods. Relevant records may be retained longer for unresolved disputes or legal holds.
Customer service, returns, and refund records	Retained while a request is active and for the period reasonably necessary to address follow-up issues, applicable warranty obligations, disputes, and legal claims.
Account information	Retained while the account remains active or is needed to provide requested services. After closure or deletion, information is removed unless a separate lawful retention reason applies.
Marketing subscriptions	Used for marketing until you unsubscribe, withdraw consent, or the applicable permission otherwise expires.
Consent and suppression records	Limited records may be retained to document consent and ensure that unsubscribe or opt-out choices continue to be respected.
Analytics and advertising data	Retention depends on the measurement purpose, relevant campaign period, technology lifespan, and provider settings. Data should not remain identifiable beyond what is necessary for those purposes.
Security and fraud-prevention records	Retained for a period proportionate to security risks, investigations, and relevant legal obligations.
Privacy requests	Retained as necessary to fulfill the request, document our response, respect ongoing preferences, and meet applicable recordkeeping requirements.

When information is no longer needed and no lawful retention reason remains, it is deleted or anonymized. Secure storage alone is not a reason to retain information indefinitely.

Copies in backups may remain until overwritten through the applicable backup cycle. Any information retained for a legal hold or other specific obligation is limited to that purpose.

You may contact us for information about the retention criteria applicable to your records.

10. International Processing and Transfers

We are based in China. Information submitted to us may therefore be accessed or processed in China to operate our business and assist customers.

Our commerce platform and other providers may also process information outside your country of residence. The locations involved depend on the provider and service used. Different countries may offer different levels of legal protection.

Where applicable law restricts an international transfer, an appropriate legal transfer mechanism is required. Depending on the circumstances, this may include an adequacy decision, applicable standard contractual clauses with required supplementary measures, or another legally permitted mechanism.

This policy is not a request for blanket consent to international transfers. Contact us if you would like information about the destinations and safeguards applicable to a particular processing activity, including how to obtain relevant safeguard information where you have that right.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Obtain information about our collection, use, and disclosure of personal information.

• Access your personal information.

• Correct inaccurate or incomplete information.

• Request deletion, subject to applicable exceptions.

• Receive certain information in a portable format.

• Restrict or object to certain processing.

• Withdraw consent without affecting the lawfulness of processing before withdrawal.

• Opt out of sale, sharing, or targeted advertising.

• Limit certain uses of sensitive personal information, where applicable.

• Appeal a decision concerning a privacy request.

• Complain to a competent data protection authority.

We will not unlawfully discriminate against you for exercising your rights.

Submitting a Request

Email service@hevetta.com with the subject “Privacy Request.”

Describe the right you wish to exercise and provide enough information for us to locate the relevant records. For access, correction, or deletion requests, we may need proportionate verification to protect your information.

We will respond within the period required by applicable law and explain any permitted extension or refusal.

Where authorized agents are permitted, an agent may submit a request on your behalf. We may request evidence of authorization where allowed.

To appeal a decision, reply to our response with the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered.

12. Security

We use reasonable measures intended to protect personal information against unauthorized access, loss, misuse, or disclosure.

No website, transmission method, or storage system can guarantee complete security. Please protect your account credentials and avoid sending sensitive payment information through ordinary email.

13. Children’s Privacy

Our store is intended for adult purchasers and is not directed at children.

We do not knowingly collect personal information from children below the age at which applicable law requires parental consent without the required authorization. If you believe a child has provided information inappropriately, contact us so that we can investigate and take appropriate action.

14. Other Websites and Services

Our website may link to services operated by other businesses. Their processing of information is governed by their own privacy policies.

Please review those notices when using a third-party service, including payment, delivery tracking, or other services linked from our website.

15. Changes to This Policy

We may update this policy to reflect changes in our services, practices, or legal obligations. The revised version will show an updated date.

Where required, we will provide additional notice of material changes and obtain fresh consent for processing that requires it. Continued use of the website does not replace such consent.

16. Contact Us

For privacy questions or requests, contact:

Data Controller: Zhoukou Gaoli Trading Co., Ltd.

Brand: Hevetta

Address: No. 139, Middle Section of Kunshan Road, Xihua County, Zhoukou City, Henan Province, China

Postal Code: 466600

Email: service@hevetta.com

Phone: +1 (475) 666-3107

Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM Pacific Time (PT), observing daylight saving time where applicable.