Privacy Policy

Effective Date: November 11, 2026
Last Updated: November 11, 2026

1. The Difference Between a Visit and a Customer Record

Geltora processes information to provide a functioning storefront and respond to the choices users make on our platform. A page view, a saved cart, a paid order, and a customer support email do not serve the same purpose. This notice explains the boundaries between these activities and how information is handled across each scenario. It applies to https://geltora.com/ and all communications associated with the store.

Our goal is to clearly describe the information involved in each activity, without implying that using one service automatically enrolls you in another.

2. Who Decides How Personal Information Is Used?

Data Controller: Wuhan Yankexin Trading Co., Ltd.
Unified Social Credit Code (USCC): 91420114MAKC65N072

For the personal information used to operate Geltora, Wuhan Yankexin Trading Co., Ltd. acts as the Data Controller, as it determines the purposes and core methods of data processing. This includes managing order records, customer correspondence, and legally required business records. Questions about these processing decisions, or requests to exercise applicable privacy rights, may be sent to service@geltora.com.

Service providers that assist with store operations do not share the same decision-making authority. Shopify and other third-party providers may follow our instructions for certain services, while independently determining how to process information for their own legal or operational purposes. For such independent processing activities, please refer to the respective provider’s privacy notice.

3. A Map of the Information We Encounter

We organize the information collected through the store into five practical groups, categorized by content type and collection method:

• Connection details: Includes IP address, browser characteristics, approximate network location, request timestamp, and session identifiers. This information is transmitted automatically by your device when it communicates with our website.
• Shopping selections: Includes product choices, selected quantities, available product variations, and cart or account session data. This information is generated when you interact with our shopping features.
• Transaction details: Includes your name, delivery and billing information, phone number, email address, order value, and transaction reference number. This information is submitted by you during checkout, or reported to us by payment providers when an order-related event occurs.
• Service correspondence: Includes your message content, order reference, supporting photographs you provide, and response history. This information is submitted when you contact customer support or reply to a service inquiry.
• Communication choices: Includes your email address, subscription status, and opt-out preferences. This information is provided when you sign up for updates or adjust your marketing preferences.

Not every visitor will provide information from all categories. The actual data we collect depends on which site features you use.

4. The Purpose Assigned to Each Record

We do not use every data category for every purpose. Technical records support page delivery, active cart functionality, error diagnosis, and detection of unusual traffic. Transaction records allow us to confirm order items and delivery addresses, manage payment status, arrange shipment, and process returns or refunds. Customer service correspondence is used to resolve inquiries and document appropriate resolutions. Financial records may be retained to fulfill tax, accounting, or legal obligations.

Where optional updates or advertising-related activities are offered, their use of information is separate from the processing necessary to complete a purchase. Submitting a support inquiry does not, on its own, constitute a request for promotional messages.

5. Where a Legal Basis Is Required

Privacy regulations vary by jurisdiction. Where a legal basis is required by law:

• Order administration is generally based on the performance of a contract, or steps taken at your request prior to entering a contract.
• Certain recordkeeping activities are carried out to comply with legal obligations.
• Necessary fraud prevention, technical troubleshooting, and proportionate customer support may be based on legitimate interests, where permitted by law and appropriately balanced with individual rights.
• Consent is used for specific optional communications or non-essential technologies when required by applicable regulations.

Withdrawing consent only affects activities that rely on that consent. It will not invalidate an existing purchase, nor override requirements to retain legally necessary records.

6. What Happens at Payment

Checkout pages display the payment methods available for your purchase. The payment service associated with your selected method handles payment authorization credentials under its own terms and policies. We may receive payment confirmations, transaction identifiers, payment amounts or statuses, and relevant dispute or refund information. These records help us reconcile payments and manage orders. We never ask customers to send full payment card numbers, verification codes, or card security codes to our support team.

7. How a Delivery Changes the Record

When an order is prepared for shipment, relevant recipient details may be shared with logistics or fulfillment providers. Delivery carriers may then share tracking updates and other shipment status information with us. We use this information to complete order fulfillment, communicate with customers, and investigate delayed, missing, or incorrectly delivered items. Delivery providers may have independent data obligations for information they process as part of their own services.

8. When Someone Writes to Us

Responding to a customer inquiry typically requires your email address, order identifier, and a description of the issue. Photographs may be requested to help assess damaged or incorrect items. We use the relevant details to investigate and resolve your request. Please avoid including personal documents or sensitive data unrelated to your inquiry. We may retain a record of the conversation to follow up on ongoing issues or meet legal requirements.

9. The Boundary Around Marketing

If the store offers optional news or promotional subscriptions, you may choose whether to provide an email address to receive them. Where required by law, promotional messages are sent only with your consent. You may stop receiving promotional emails at any time by using the unsubscribe link included in each message, or by contacting us at service@geltora.com.

Opting out of marketing communications does not apply to necessary service messages related to your order, refund, or privacy inquiry. We do not treat a delivery address or customer complaint as permission to send unrelated marketing materials.

10. The Technology Behind a Website Session

Cookies and similar technologies are used to preserve cart contents, support core session functionality, recognize technical preferences, and help protect the security of the store. If additional measurement or advertising features are enabled, they may use separate identifiers or interaction data. You can manage these technologies through your browser settings, and any privacy or consent controls available on the site.

Blocking essential cookies may cause core site features to function incorrectly. Optional technologies are governed by applicable notice and consent requirements.

11. Who Else May Receive Information—and for What Task?

Geltora uses Shopify ecommerce infrastructure to operate its store. The service you request determines which third-party categories may receive relevant information: payment providers for transaction processing, carriers for delivery, communications services for customer messages, or hosting and security providers for technical site operation. Service providers only access information relevant to their assigned tasks; not every provider receives your full order history.

We may also disclose relevant information to professional advisers in connection with legitimate claims, to competent authorities when required by law, or to parties involved in a lawful business transaction with appropriate data protections. Third parties may process data under our instructions, or act as independent controllers for their own purposes, depending on the specific circumstances.

12. Advertising-Related Disclosure and Your Choices

Some privacy laws grant individuals the right to opt out of certain online data disclosures that qualify as a sale, sharing, or targeted advertising. Where such activities take place and this right applies, you may use any relevant site privacy controls, or contact the Data Controller at service@geltora.com. Recognized browser preference signals, including Global Privacy Control, are handled in accordance with applicable law for the relevant processing activity.

The description of potential privacy rights herein does not constitute a statement that any specific advertising platform, measurement product, or optional tracking integration is currently in use.

13. Processing That Involves Another Country

Online retail relies on service providers and technical infrastructure across multiple jurisdictions. Personal information may be stored, accessed, or otherwise processed outside of your country of residence. Where applicable law requires safeguards for cross-border data transfers — such as contractual clauses, adequacy decisions, or other protective measures — transfers will comply with those requirements. Our responsibilities as Data Controller remain applicable to all processing decisions we make.

14. Why Records Have Different End Dates

We determine retention periods based on the ongoing purpose each record serves. Order records may be retained to support delivery, refunds, bookkeeping, legal compliance, or dispute resolution. Correspondence records remain relevant while an inquiry is unresolved or a legal claim is foreseeable. Unsubscribe or suppression records may be retained to honor your marketing preferences. Technical logs serve separate purposes, such as troubleshooting and abuse prevention.

Information no longer needed for a legitimate business purpose or legal obligation will be deleted, de-identified, or otherwise handled in accordance with applicable law. There is no single uniform retention period that applies to all data categories.

15. Keeping Access Connected to a Legitimate Need

We implement reasonable organizational and technical security measures appropriate to the nature of the information and systems involved. Access to records is limited to personnel and authorized service providers whose responsibilities require it. No electronic transmission or storage method can be guaranteed to be completely secure. Customers should protect their account credentials and report any suspected misuse of their information to us immediately.

16. How to Ask for Information or a Change

Depending on your location and applicable law, you may have the right to access or receive a copy of your personal information, correct inaccuracies, request deletion, restrict certain uses, object to processing, receive data in a portable format, withdraw consent, or opt out of defined advertising activities. You may also be entitled to appeal a qualifying decision, or file a complaint with a competent privacy regulator. Legal exceptions may apply, including obligations to preserve transaction records.

To exercise these rights, send a request to service@geltora.com specifying the right you wish to exercise or the information you are requesting. We may request reasonable identity verification before disclosing or modifying your records. Requests will be processed within the timeframe required by applicable law, and we will explain any lawful limitations where required.

17. Independent Websites and Children's Information

External websites accessed through links on our site may set their own data processing rules and publish separate privacy notices. Geltora is intended for general online retail use and is not designed to knowingly collect information from children in a manner that violates applicable law. If you believe information from a child has been improperly submitted, please contact us.

18. Revisions and the Privacy Contact

We may update this notice as legal obligations, store features, or information practices change. A revised policy will be posted on the website, with additional notice provided where required by law. The Effective Date and Last Updated fields at the top of this page indicate the effective date of the current version.

For questions about this policy or to exercise applicable privacy rights, contact the Data Controller using the details below.

Data Controller: Wuhan Yankexin Trading Co., Ltd.
Operating Company: Wuhan Yankexin Trading Co., Ltd.
Unified Social Credit Code (USCC): 91420114MAKC65N072
Company Address: Factory Building 6-1351, No. 91 Huayuanwan 2nd Street, Daji Street, Caidian District, Wuhan, Hubei Province
Support Email: service@geltora.com
Contact Phone: +86 13653761948
Business Hours: Monday to Friday: 9:00 AM - 5:00 PM (UTC+8, China Standard Time)