Privacy Policy of Barong Yekhna

Last Updated: December 8, 2025

At Barong Yekhna, we believe precision in recovery should be matched by precision in protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our products, including the Barong Yekhna Cold Therapy Machine, or otherwise interact with us.

We are committed to complying with applicable data protection laws across the jurisdictions we operate in, including but not limited to the General Data Protection Regulation (GDPR) in the European Union, various comprehensive state privacy laws in the United States, and the Personal Information Protection Law (PIPL) in China. We urge you to read this policy carefully.

1. Information We Collect
We collect information that identifies, relates to, or could reasonably be linked with you. This includes:
Information You Provide: Name, shipping/billing address, email address, phone number, payment details, and customer service communications.
Automatically Collected Data: When you visit our website, we may collect device identifiers, IP address, browser type, and browsing activity through cookies and similar technologies. This helps us understand user behavior for security, site functionality, and improving our services.
Product Usage Data: We may collect non-personal, anonymized operational data (e.g., usage frequency, settings). We do not collect health or biometric data unless you explicitly provide it for support purposes. Please note that laws in some jurisdictions, like Illinois or Texas, have specific rules regarding biometric data.
Information from Third Parties: We may receive limited information from partners, such as logistics providers for delivery updates.

2. How We Use Your Information
We use your personal information for clear and legitimate purposes, adhering to principles of lawfulness, fairness, and purpose limitation. These purposes include:
To process and fulfill your orders, manage your account, and provide customer support.
To communicate with you about your order, our services, and (with your consent) marketing.
To improve, test, and optimize our website, products, and services.
To prevent fraud, ensure security, and comply with our legal obligations.
We practice data minimization, collecting only what is adequate and necessary for these stated purposes. For example, Maryland’s privacy law requires data collection to be “reasonably necessary and proportionate” to the service requested.

3. Legal Basis for Processing (For EEA/UK Users)
Under the GDPR, we process your personal data on one or more of the following legal bases:
Performance of a Contract: To fulfill your order and provide our products.
Consent: For sending marketing communications. You may withdraw consent at any time.
Legitimate Interests: For website security, fraud prevention, and product improvement, where our interests do not override your fundamental rights.
Legal Obligation: To comply with applicable laws.

4. Sharing and Disclosure of Information
We do not sell your personal information. We only share it in the following circumstances:
With Service Providers (payment processors, shipping carriers, IT support) who process data on our instructions under strict contracts.
To comply with a valid legal request, such as a court order or law.
In connection with a business transaction, like a merger or sale of assets, with notice to you.
With your consent or at your direction.

5. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States and China. When we transfer data from the European Economic Area (EEA) or China to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or China’s standard contract for outbound transfers. For transfers out of China involving certain volumes of personal or important data, we comply with the required security assessment mechanisms.

6. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal data. These may include:
Right to Know/Access: Request details about the personal data we have about you.
Right to Delete: Request erasure of your personal data.
Right to Correct/Rectify: Update inaccurate personal data.
Right to Opt-Out: Opt-out of the sale of personal data (we do not sell data) or targeted advertising.
Right to Data Portability: Receive a copy of your data in a portable format.
Right to Object/Restrict Processing: Object to certain processing activities based on legitimate interests.
To exercise these rights, please contact us at service@barongyekhna.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. Some US state laws, like Iowa’s, do not grant a right to correction.

7. Children’s Privacy
Our products and services are not directed at children under the age of 16 (or the higher age specified in certain jurisdictions, such as 13 under COPPA in the U.S.). We do not knowingly collect personal information from children. If we learn we have collected such data, we will delete it promptly. Multiple U.S. state laws classify children’s data as “sensitive” and impose additional restrictions.

8. Data Security and Retention
We implement appropriate technical and organizational measures to protect your information. We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. We will post the updated policy on this page and change the “Last Updated” date. Significant changes will be communicated more prominently.

10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: service@barongyekhna.com

If you are in the European Union, you have the right to lodge a complaint with your local data protection authority.