Last updated: October 10, 2026
This Privacy Policy explains how Sinoscrolls (“Sinoscrolls”, “we”, “us” or “our”) collects, uses and protects your personal information when you visit sinoscrolls.com (the “Site”) or buy from us. We aim to collect only what we need to run our store and fulfil your orders. Your use of the Site is also governed by our Terms of Service.
If you have any questions, email us at [email protected].
Who We Are
Sinoscrolls is an online store selling hand-mounted Chinese scroll painting reproductions to customers outside China. For the purposes of data protection laws such as the EU and UK General Data Protection Regulation (GDPR), Sinoscrolls is the controller of the personal information described in this policy. You can reach us at [email protected].
Information We Collect
Information you give us
- Order information: your name, email address, shipping and billing address, phone number, and the items you order.
- Account information: if you create an account, your username, email address and password (stored in encrypted form), and your order history.
- Messages: anything you send us by email, for example questions, return requests or photos of a damaged item.
Payment information
Payments are processed by PayPal. When you pay, you enter your payment details on PayPal’s secure systems. We do not see or store your full card number or PayPal login details. PayPal shares with us only what is needed to confirm your payment, such as your name, email address, shipping address, transaction ID and payment status.
Information collected automatically
When you browse the Site, we and our service providers may automatically collect technical information such as your IP address, browser type, device type, pages viewed and the date and time of your visit. Some of this is collected through cookies (see below).
How We Use Your Information
We use your information to:
- Process, pack and ship your order, and send you order and shipping updates
- Process payments and refunds, and prevent fraud
- Arrange customs clearance for international shipments
- Answer your questions and handle returns or claims
- Maintain your account, if you have one
- Keep the Site secure and working properly, and understand how it is used so we can improve it
- Meet our legal, tax and accounting obligations
We will only send you marketing emails if you have agreed to receive them, and you can unsubscribe at any time.
Legal Bases for Processing (EU/UK visitors)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Contract: to process and deliver your order and provide customer service.
- Legal obligation: to keep records required by tax and accounting laws.
- Legitimate interests: to keep the Site secure, prevent fraud and improve our store, where these interests are not overridden by your rights.
- Consent: for non-essential cookies and marketing emails. You can withdraw consent at any time.
Who We Share Your Information With
We do not sell your personal information. We share it only with service providers who help us run our store, and only as needed:
- PayPal: to process payments and refunds. PayPal handles your data under its own privacy statement.
- SF Express: our shipping carrier receives your name, shipping address, phone number and parcel details so it can deliver your order and clear customs. Customs authorities in transit and destination countries may also receive this information.
- Website hosting, security and technology providers: the companies that host our Site, protect it (for example, content delivery and security services) and provide our store software (WordPress and WooCommerce).
- Email and analytics providers: if we use them, to send order emails and to understand how visitors use the Site.
- Authorities: where required by law, or to protect our rights, our customers or others.
Cookies
Cookies are small files stored on your device. We use:
- Essential cookies: needed for the Site to work, for example to remember the items in your cart, keep you logged in and process checkout securely. These are set by WooCommerce and WordPress.
- Payment cookies: PayPal may set cookies when you use PayPal checkout, to process your payment and prevent fraud.
- Analytics cookies: we may use analytics tools to understand how visitors use the Site (for example, which pages are visited). Where required by law, we will ask for your consent before setting these cookies.
You can block or delete cookies in your browser settings. If you block essential cookies, parts of the Site, such as the cart and checkout, may not work.
International Data Transfers
Sinoscrolls is based in China, and our service providers may process data in other countries, including the United States. This means your information may be transferred to and processed in countries other than your own, which may have different data protection laws. Where required, we take steps to make sure your information receives an appropriate level of protection, for example by using providers that offer recognised safeguards such as standard contractual clauses.
How Long We Keep Your Information
We keep order records for as long as needed to fulfil your order, handle returns and disputes, and meet our legal, tax and accounting obligations. Account information is kept until you delete your account or ask us to delete it. Emails are kept for as long as needed to deal with your request. When information is no longer needed, we delete it or make it anonymous.
How We Protect Your Information
Our Site uses HTTPS encryption, and payments are handled by PayPal. We limit access to personal information to people who need it to run the store. No method of transmission or storage is completely secure, but we work to protect your information.
Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy of it
- Correct inaccurate information
- Delete your information
- Restrict or object to certain processing
- Receive your information in a portable format
- Withdraw your consent at any time, where we rely on consent
EU/UK residents also have the right to lodge a complaint with their local data protection authority.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to request deletion or correction of your personal information; and to not be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The categories of information we collect are those listed in “Information We Collect” above (identifiers, contact details, commercial information such as orders, and internet activity on our Site), used for the purposes described in this policy. Residents of other U.S. states with similar privacy laws have similar rights.
To make a request, email [email protected]. We may need to verify your identity before responding. We will respond within the time required by applicable law.
Children
Our Site is not intended for children under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes will be posted on this page.
Contact Us
For any privacy questions or requests, email [email protected].