Privacy Policy

Last updated: September 26, 2026
This Privacy Policy explains how Kunming Nianchu Trading Co., Ltd., doing business as Heavital, collects, uses, discloses, retains, and protects personal information when you visit or use heavital.com, make a purchase, create an account, communicate with us, or otherwise use our services.
Kunming Nianchu Trading Co., Ltd. is the data controller responsible for the personal information described in this policy, except where another party acts as an independent controller under applicable law.

  1. Personal Information We Collect

Depending on your interaction with us, we may collect the following categories of personal information:
  • Contact information: your name, shipping address, billing address, email address, and phone number.
  • Order and transaction data: order history, purchase records, payment status, return and exchange records, and invoice information.
  • Payment information: payment card details are collected and processed directly by Shopify or the payment provider available at checkout. We do not store complete payment card numbers on our own systems.
  • Account information: if you create an account, your login credentials and profile details.
  • Communications: emails, messages, and other content you send to us.
  • Automatic browsing data: device type, browser type, IP address, cookie identifiers, approximate location, referral source, pages visited, time on site, and website interaction data, collected through cookies and similar technologies.
Do not send complete payment card numbers, security codes, PINs, or banking passwords by email.

  1. Sources of Personal Information

We collect information:
  • Directly from you when you place an order, create an account, or contact us.
  • Automatically through the website, cookies, and similar technologies.
  • From service providers, including Shopify, payment processors, shipping carriers, hosting and security providers, analytics providers, advertising partners, and customer support tools.
  • From advertising or business partners where permitted by law.

  1. How We Use Personal Information

We use personal information to:
  • Process and fulfill orders, including payment, shipping, and delivery.
  • Arrange returns, exchanges, and refunds.
  • Manage your account and provide customer support.
  • Respond to your inquiries and communications.
  • Prevent fraud, detect security incidents, and protect the website.
  • Comply with legal obligations and maintain records.
  • Improve our products, website performance, and user experience.
  • Personalize your shopping experience.
  • Measure marketing effectiveness and send promotional communications where permitted by law.

  1. Legal Bases (EEA / UK Users)

Where European Economic Area or United Kingdom law applies, we process personal information:
  • As necessary to perform a contract (e.g., processing your order).
  • To comply with legal obligations.
  • For our legitimate business interests, where those interests are not overridden by your rights.
  • Based on your consent, which you may withdraw at any time without affecting prior lawful processing.

  1. Cookies and Similar Technologies

We use the following types of cookies:
  • Necessary cookies: required for security, checkout, shopping cart, account sessions, and core website functions. These cannot be disabled.
  • Analytics cookies: help us understand how visitors use our website (e.g., page views, traffic sources).
  • Marketing and advertising cookies: used to deliver relevant advertisements and measure campaign performance.
When you first visit our website, a cookie consent banner will appear with options to Accept All, Reject Non-Essential, or Manage Preferences. Non-essential cookies (analytics and marketing) will not be loaded until you provide consent. You may change your cookie preferences at any time through the "Your Privacy Choices" link in our website footer.
You may also control cookies through your browser settings, though blocking necessary cookies may affect website functionality.

  1. How We Disclose Personal Information

We may share your personal information with the following categories of recipients:
  • Shopify: our e-commerce platform hosting provider, which processes information to power our online store, checkout, and security.
  • Payment processors: such as Shopify Payments and other payment providers available at checkout.
  • Shipping carriers and fulfillment partners: to deliver your orders and provide tracking.
  • Analytics providers: such as Google Analytics, to understand website usage.
  • Advertising partners: such as Facebook/Meta and Google, to deliver and measure ads (only with your consent where required).
  • Hosting, security, IT, and customer support providers: to operate and maintain our services.
  • Professional advisers and authorities: where legally required or permitted.
Some disclosures to advertising and analytics partners may be treated as a "sale," "sharing," or "targeted advertising" under certain U.S. state privacy laws (such as CCPA/CPRA).

  1. Your Privacy Rights

Depending on your location, you may have the following rights:
  • Right to know / access: request a copy of the personal information we hold about you.
  • Right to correct: request correction of inaccurate personal information.
  • Right to delete: request deletion of your personal information, subject to legal exceptions.
  • Right to restrict or object: object to or restrict certain types of processing.
  • Right to withdraw consent: withdraw consent for processing based on consent.
  • Right to data portability: receive your data in a portable format.
  • Right to opt out of sale/sharing/targeted advertising: opt out of the sale or sharing of your personal information.
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, email service@heavitalvip.com with the subject line "Privacy Request." We may need to verify your identity before processing your request. We will respond within the time required by applicable law.
We treat Global Privacy Control (GPC) browser signals as opt-out requests where required by law and technically supported. You may also opt out through the "Your Privacy Choices" link in our website footer.
You may unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in the email.

  1. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including:
  • Order and transaction records are retained for the period required by tax, accounting, and consumer protection laws.
  • Customer support and return records are retained for the duration of the applicable return window and any related dispute resolution period.
  • Marketing data is retained until you unsubscribe or request deletion.
  • Security and fraud-prevention records are retained as necessary to protect the website.
When personal information is no longer needed, we will delete or anonymize it in accordance with applicable law.

  1. Data Security

We use reasonable administrative, technical, and organizational measures to protect personal information, including encrypted payment processing via Shopify. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

  1. International Data Transfers

Your information may be processed and stored in countries outside your country of residence, including China and the United States, where our service providers operate. Where required by law, we use appropriate safeguards, such as standard contractual clauses, to protect your personal information in accordance with applicable data protection laws.

  1. Children's Privacy

Our website is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

  1. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be noticed as required by law.

  1. Privacy Contact

  • Data controller: Kunming Nianchu Trading Co., Ltd.
  • Registered business address: Room 1001, Unit 1, Building 6, Tianxia Donghu Garden, Chunhua Road, Qingyun Sub-district Office, Panlong District, Kunming City, Yunnan Province, China
  • Telephone: +86 13583649264