Privacy & Cookie Policy

Last updated: October 13, 2025

This Policy explains how Shyzi uses your information and provides you with information about the personal data we collect, how we keep it secure, how we ensure your privacy is protected, and your rights regarding the personal information we hold.

Who We Are

Shyzi understands that privacy and the security of your personal information are important to you. We are committed to maintaining the trust and confidence of our website visitors and customers by keeping your personal data secure and respecting your privacy rights.

We will always process your data fairly and lawfully and are committed to being fully transparent about the types of data we collect and how we use it.

Shyzi will never rent or trade your personal information to any third-party organizations or businesses.

Consent

By using Shyzi’s website, you acknowledge that you have read, understood, and agreed to all the terms and conditions of this Privacy Policy.

What Data We Collect About You

Shyzi collects data for the purposes described in this Policy. The data collected may include, but is not limited to, the following categories:

• Contact Information: Name, email address, postal address, country/region, company name, phone number, and other similar contact information.

• Financial Information: Information about payment instruments, transaction records, transaction history, payment preferences, payment methods and patterns, spending habits or trends, and other similar financial data.

• Technical Information: Website usage behavior, device information, mobile application usage, Internet Protocol (IP) addresses, and related information collected through cookies, pixels, and similar automated technologies.

• Transaction Information: Transaction date, total transaction amount, transaction history, transaction preferences, and other transaction-related details.

• Product and Service Information: Your Shyzi account membership number, account registration information, payment history, and specific program-related information you provide when you directly apply for products/services or participate in marketing programs with us.

• Basic Personal Information: Age, gender, date of birth, marital status, nationality, details of government-issued identification documents, fingerprints, occupation, and other personal information you voluntarily provide in product reviews or survey responses.

• Feedback and Comments: Your comments, feedback, and comments on Shyzi products, programs, and services. How We Collect Data

How We Collect Data

1. Information You Actively Provide: We receive and store all information you actively enter, fill out, or provide to us through other means (such as customer service communications or form submissions).

2. Information We Collect Automatically: When you interact with Shyzi (such as browsing websites or using apps), we use cookies, pixels, and similar technologies to receive and store certain types of information to optimize your experience.

3. Information Related to Email Communications: To tailor emails from Shyzi to your needs and interests, we typically receive a confirmation when you open an email or click on a link in an email (if your device supports this functionality).

4. Information Automatically Collected from Third-Party Websites: When you interact with third-party websites that use Shyzi technology or have entered into specific partnership agreements with Shyzi, we receive and store certain information. Please note that the collection, processing, and use of such information is governed by the privacy policy of the operator of the third-party website, not this Shyzi Privacy Policy. You have the right to choose how Shyzi collects and uses your data. For example, you can request access, edit, or delete your data stored on the Shyzi website at any time. When prompted to provide data, you can also choose not to provide it (some features may not function properly without this data).

Data You Share

When you use the Shyzi website and related services, we may collect data you actively share or generate during your interactions in various scenarios, including but not limited to the following:

• When you register for a Shyzi account and purchase products, subscribe to services, or participate in paid programs through the website;

• When you initiate a transaction with Shyzi (such as an order, payment, or refund) or attempt to complete a transaction on the website (such as adding to a shopping cart or filling in shipping information);

• When you participate in user surveys, experience feedback, or other activities initiated directly by Shyzi or conducted by third-party organizations commissioned by Shyzi, and submit relevant information;

• When you actively choose to subscribe to various communications from Shyzi (such as product update notifications, promotional offers, and member-only news);

• When you visit the Shyzi website, information about your browsing behavior, device interactions, and other information collected through automated system tools (such as cookies and access logs).

Our Use of Data

To provide you with better Shyzi-related products and services and continuously optimize your user experience, we may use some or all of the above data, depending on actual needs. Specific uses include, but are not limited to:

1. Providing Core Products and Services: Delivering purchased Shyzi products/services to you and communicating with you about key information such as product instructions, service progress, and order status via email, SMS, and private messaging.

2. Ensuring Service Performance: Ensuring the normal performance of Shyzi products/services, including order processing, logistics coordination, and after-sales support, and maintaining communication with you regarding key milestones in the performance process.

3. Compliant Data Processing and Sharing: Processing, disclosing, or transferring data as necessary, or sharing it with third parties with whom Shyzi has a legitimate business/contractual relationship, in accordance with this Privacy Policy and applicable laws.

4. Personalized Experience Optimization: Based on your usage habits and preferences, we provide you with personalized product recommendations, exclusive offers, and membership benefits to enhance your interactive experience on the Shyzi website.

5. Business and Platform Development: For Shyzi Operational analysis and performance evaluation of the business, as well as optimization and upgrades of website functionality and system performance, such as fixing bugs, improving loading speeds, and improving functional modules.

6. User Behavior Insights: De-identifying collected personal data to generate aggregated data, analyzing customer behavior patterns and consumption trends, etc., to further understand user needs and guide innovation in Shyzi’s products and services.

7. Marketing and Event Outreach: Based on your account information and preferences, we deliver targeted marketing activities and special benefits (such as birthday gifts and tier-level benefits) to you, and continuously optimize marketing content based on your feedback.

8. Customer Service Response: Receive and handle your inquiries, requests, feedback, complaints, or disputes, provide you with precise solutions, and improve Shyzi’s customer service system based on your feedback.

9. Terms and Rules Enforcement: Identify and address violations in accordance with the Shyzi Website User Agreement, Terms of Service, and other rules to ensure the smooth operation of the platform.

10. Risk Management: Prevent and prevent fraud (such as fake orders and account theft), illegal activities (such as information theft and malicious attacks), and other activities that may cause harm to users or Shyzi. Legal or information security risks of harm or financial loss;

11. Other legitimate purposes: Other purposes clearly disclosed to you at the time of data collection, or necessary data use authorized or required by applicable law.

If applicable law explicitly requires the processing of personal information (or sensitive personal information), we will strictly follow the law and include the relevant inferred data in the management of personal information (or sensitive personal information). The aforementioned data use bases may overlap, meaning that the same data use behavior may meet multiple lawful bases simultaneously.

Under applicable law, we will only use your personal information in the following lawful circumstances:

• With your explicit consent;

• Necessary to provide you with Shyzi products/services (e.g., using your shipping address to process an order);

• To fulfill Shyzi’s legal obligations (e.g., cooperating with regulatory investigations, tax reporting);

• Where Shyzi’s legitimate interests are met and your privacy rights are not compromised (e.g., risk management and business optimization).

Data Sharing

To ensure the normal operation of Shyzi’s business and the smooth delivery of its services, we may share your data with the following parties, subject to strict compliance with this Privacy Policy and applicable laws, and contractual obligations to ensure data security:

Partners: If you choose to use joint products/services provided by Shyzi’s partners (such as membership services co-branded with third-party brands, or promotions jointly launched), necessary customer information related to the transaction (such as order information and contact information) may be shared with the partner. We require all partners to strictly abide by this Privacy Policy, implement effective data security measures, and use data only within the scope of providing you with cooperative services.

Service Providers: To implement specific functions (such as data storage, system security, and payment processing), we may share data with third-party providers that provide professional services to Shyzi. These include, but are not limited to:

• Data Storage and Analysis Providers: Responsible for secure data storage and compliance analysis, supporting business optimization;

• Security Technology Providers: Provide network security protection, anti-fraud monitoring, vulnerability remediation, and other services to ensure the security of Shyzi systems and user data;

• Customer Service Providers: Assist with handling user inquiries and after-sales issues, and may share necessary order information and communication records;

• Payment and Credit Providers: Process transaction payments, bill settlement, or provide credit risk assessments (such as for installment plans);

• User Experience Providers: Provide services such as search result optimization, personalized recommendation algorithm support, and user behavior analysis.

All service providers are required to sign a strict service agreement and may only process data as necessary to provide the services as expressly directed by Shyzi. We safeguard the security and confidentiality of your data through technical encryption, access control, and employee confidentiality agreements.

Business Transfer Parties: As Shyzi’s business develops, in the event of a merger, acquisition, asset sale, or spin-off, your data may be transferred to the new business successor as part of the transaction assets. We will require the new successor to continue to comply with this Privacy Policy and will prominently notify you of any subsequent changes to this Privacy Policy.

Other Third Parties: We may also share your data with other third parties in the following specific scenarios, all in compliance with legal and regulatory principles:

• Upon your active request or explicit authorization;

• To comply with applicable laws or to cooperate with valid legal process;

• To ensure the security of the Shyzi platform or to protect the legitimate rights and interests of users, the public, and Shyzi.

For the sharing of sensitive personal information, we will further strengthen controls based on the above. We will require recipients to sign a dedicated sensitive data handling agreement and regularly review their implementation of data security measures to ensure that sensitive data is always protected in compliance with regulations.

How We Protect Your Information

Shyzi prioritizes information security and implements multi-faceted measures to safeguard your account and personal data. However, it should be noted that the complex network environment cannot completely eliminate risks (such as unauthorized access, software and hardware failures, etc.).

To mitigate these risks, Shyzi uses industry-standard technologies to store information (including IP addresses) and establishes a triple layer of protection: administrative + technical + physical:

• Administrative Protection: Data access permissions are clearly defined, and employees must sign confidentiality agreements and receive security training.

• Technical Protection: Data encryption, intrusion detection, and other tools are used to protect data from tampering and leakage in real time.

• Physical Protection: Server rooms are physically isolated, with security and monitoring to ensure hardware security.

If your personal information is potentially compromised (which is extremely unlikely), Shyzi will initiate an emergency response and, if necessary, will notify you promptly via the contact information you provide (email/SMS/privacy message). Furthermore, sensitive data transmitted between the website and you (such as payment and identity information) is protected by SSL encryption and digital signatures to prevent interception during transmission.

Data Retention

Shyzi retains data on a “minimum necessary” basis, retaining it only for the following necessary periods:

• The duration of your use of the Shyzi website/services (e.g., account life, subscription validity);

• To fulfill legal obligations (e.g., tax filings) and resolve disputes (e.g., post-sales disputes);

• A reasonable period to achieve Shyzi’s legitimate interests (e.g., business analysis, risk management) without compromising your rights.

Different data (e.g., contact and transaction information) has different retention periods. Shyzi will adjust these based on specific scenarios and laws, and will promptly delete data once its purpose has been fulfilled. Please note: Even if you exercise your right to delete, data may still be temporarily stored for backup purposes for audits or legal requirements. Upon expiration, it will be completely destroyed and not used for other purposes.

Your Rights and Choices

Shyzi’s lawful bases for processing data include: your consent, business needs, contractual obligations, legal requirements, and security protections. You may exercise the following rights by contacting our Customer Support Team (Shyzi may deny your request and provide reasons where permitted by law):

• Right to Correction: You may request correction of inaccurate/incomplete data;

• Right to Erasure (Right to Be Forgotten): You may request deletion of data (except for legally required backups) where permitted by law and contract;

• Right to Withdraw Consent: You may withdraw your consent at any time (e.g., by objecting to marketing communications), without affecting the legitimate processing prior to your withdrawal.

If your personal information (e.g., phone number, address) changes, please contact Customer Service promptly to update it to ensure service availability. If you need to manage your data (e.g., request details, unsubscribe from promotions), you may also contact Customer Service for instructions.

Where We Store Your Data

All your data collected under this Privacy Policy is hosted on highly secure servers designated by Shyzi. These servers utilize multiple layers of encryption (including encryption during data transmission and storage) to technically protect your data from unauthorized access or theft during storage. Furthermore, the server environment complies with relevant information security management standards, further reducing data storage risks.

Your Data Processing

Shyzi implements a series of compliance measures to ensure that all collected data is processed strictly in accordance with this Privacy Policy and applicable legal requirements. These measures include:

1. Clear Data Processing Process: We establish standardized data processing operating procedures to ensure that the entire process of data collection, storage, use, sharing, and deletion is well-defined and in compliance with regulatory requirements.

2. Third-Party Collaboration Constraints: If we need to share your data with partners or service providers, Shyzi will enter into a written contract with them, clearly defining the scope, purpose, and security responsibilities of data processing, requiring them to process data in accordance with applicable laws and this Policy. We will also regularly review the implementation of their data security measures.

Cookies, Pixels, and Similar Technologies

Shyzi’s websites and related services may place and access cookies on your device (such as computers, mobile phones, and tablets) and use similar technologies such as pixels and web beacons. The following is a detailed description:

1. Definition and Types of Cookies

Cookies are small text files sent by Shyzi to your device that contain a unique identifier to help the system recognize your device and remember your usage preferences. The cookies we use are mainly divided into the following categories:

• Necessary cookies: These cookies are essential for the normal operation of the website. Without them, some core functions (such as account login, order checkout, and page loading) will not be possible. For example, they identify your account status during login to ensure that you can access your personal center normally.

• Functional cookies: These cookies are used to remember your usage preferences and enhance the personalized service experience. For example, they record your last selected language, region, and page display mode so that they can automatically match your preferences the next time you visit.

• Analytical cookies: These cookies are used to count website visits and user browsing behavior (such as click paths, duration of stay, and frequently used functions). They help Shyzi analyze service usage and optimize website performance and functionality. For example, by analyzing frequently visited pages, we can adjust page layouts to improve usability.

• Marketing cookies: These cookies are used to deliver marketing content (such as product offers and event notifications) that is relevant to your needs and avoid irrelevant information. For example, if you have previously browsed a certain product category, these cookies will help you receive the latest updates about that product category.

2. Use of Pixels and Similar Technologies

In addition to cookies, Shyzi also uses technologies such as pixels (also known as “web beacons”). Pixels are tiny image elements embedded in website pages and emails that record relevant behavioral data (such as page load success, email open status, and link clicks) when you visit a page or open an email. These are primarily used to:

• Measure the effectiveness of marketing campaigns (such as email open rates and campaign page conversion rates);

• Analyze user interest in content and optimize subsequent push strategies;

• Ensure proper integration of website functionality with third-party tools (such as payment systems and customer service systems).

3. Your Rights to Manage Cookies

• First Visit Reminder: When you first visit the Shyzi platform, you will see a pop-up window notifying you of the types and purposes of cookies and your options. You can choose to “Accept All,” “Accept Only Essential Cookies,” or “Reject Non-essential Cookies” based on your needs.

• Adjustments on Subsequent Visits: After your initial selection, the pop-up window may not appear again on each visit, but you can still adjust your cookie settings at any time. You can view or disable cookies on your device by going to “Settings – Privacy & Security” in your browser (the steps vary slightly between browsers; please refer to your browser’s help page).

• Note: If you choose to disable all or non-essential cookies, some features may not function properly (e.g., you will not be able to log in to your account, save your shopping cart information, or receive personalized recommendations). Please adjust your settings carefully based on your needs.

Severability

If any court or competent authority finds any provision (or portion thereof) of this Privacy Policy to be invalid, illegal, or unenforceable, such provision (or portion thereof) will be deemed deleted to the minimum extent necessary to render it in compliance, and the validity, legality, and enforceability of the remaining provisions of this Policy will remain unaffected.

Child Information Protection

Shyzi prioritizes child online safety and actively promotes child information protection. We encourage parents or guardians to pay attention to, participate in, and supervise their children’s online activities.

Shyzi does not intentionally collect or store any personally identifiable information (including name, age, contact information, and identification information) from children under the age of 13. If you are a guardian of a child and believe that your child has accidentally provided such information on the Shyzi website, please contact us immediately. Shyzi will verify the circumstances and promptly delete the relevant information from our system records to ensure the security of the child’s information.

Changes to This Policy

This Privacy Policy may be updated from time to time as Shyzi’s business develops or as applicable laws change. After a policy change, Shyzi will not send individual notifications to each user. Instead, the updated policy will be promptly posted prominently on the website, along with the update date.

The updated policy will take effect from the date of posting. Your first use of the Shyzi website or purchase of related products/services after the policy change constitutes your full reading, understanding, and acceptance of the updated policy terms. To protect your right to be informed and your rights, we recommend that you regularly visit the “Privacy Policy” page for the latest updates.

Customer Support Team

If you have any questions or concerns regarding this Privacy Policy, or need to exercise your data rights (such as correction or deletion), please contact Shyzi’s Customer Support Team at the following:

Address: RM C03,9/F KATO FACTORY BLDG
2 CHEUNG YUE ST, LAI CHI KOK
HONG KONG
Email: [email protected]