MYBYTODO Privacy Polic

Last updated: September 12, 2026

MYBYTODO is the online store operated by 杭州十玥科技有限公司 (English translation: Hangzhou Shiyue Technology Co., Ltd.). References to "MYBYTODO," "we," "us," and "our" in this Privacy Policy mean that company.

This policy describes how personal information is collected, used, shared, retained, and protected when you browse mybytodo.com, make a purchase, contact our support team, or use our related online services. Together, these activities and features are referred to as the "Services."

Please read this policy to understand our information practices and the choices available to you. Where a particular use of information requires your consent, we will request that consent separately as required by applicable law.

1. Information We Receive

The personal information involved depends on which Services you use and how you interact with MYBYTODO.

Details You Share With Us

You may provide information when placing an order, opening an account, requesting support, posting a review, completing a survey, subscribing to updates, or participating in a promotion. Depending on the activity, this can include:

  • Your name, email address, telephone number, and billing or delivery address.
  • Account information, including login credentials and saved preferences.
  • Purchase and transaction records, including orders, returns, refunds, and support correspondence.
  • Reviews, survey answers, messages, and other material you choose to submit.
  • Your marketing preferences and communication choices.

Payments and Transaction Records

Shopify and the payment providers available at checkout process payments. We may receive information needed to manage the transaction, such as its status, payment method, billing details, and transaction reference. We do not generally receive or retain full payment card numbers.

Information From Your Device and Use of the Site

Our website and the providers supporting it may collect technical and usage information automatically, including:

  • Your IP address, browser, operating system, device type, and device identifiers.
  • Pages and products viewed, links followed, searches performed, and time spent on the Site.
  • The website that referred you, your approximate location, language, and time zone.
  • Activity in the shopping cart and checkout, along with interactions with emails or advertisements.
  • Cookie identifiers and related technical records.

Cookies, pixels, tags, software development kits, server logs, and similar tools may be used to collect this information.

Information Supplied by Other Organizations

We may receive information from payment processors, delivery companies, fraud-prevention services, analytics providers, advertising partners, social platforms, and other providers involved in the Services. Where legally permitted, we may combine it with information you have supplied directly.

Details About a Gift Recipient or Another Person

If you arrange delivery to someone else, you may give us that person's contact and shipping details. Please ensure that you are authorized to provide this information for the purchase and delivery.

2. Purposes for Using Personal Information

We may use the information described above to:

  • Take payment and prepare, deliver, and track purchases.
  • Send order confirmations, shipping notices, and service updates.
  • Respond to questions and handle cancellations, returns, refunds, warranty matters, and other product requests.
  • Maintain customer accounts and remember selected preferences.
  • Run, assess, maintain, secure, and improve our website, products, and Services.
  • Identify and prevent fraud, unauthorized payments, security incidents, and misuse.
  • Tailor site content, product suggestions, and advertising.
  • Send promotional communications where legally permitted.
  • Evaluate the performance of advertising, offers, and marketing campaigns.
  • Meet legal, regulatory, tax, accounting, and recordkeeping requirements.
  • Establish, pursue, or defend legal claims.
  • Carry out another purpose explained when we collect the information, subject to applicable legal requirements.

3. Grounds for Processing Information

Where the law requires a recognized legal basis, our processing may rely on one or more of the following:

  • Contractual necessity: We need the information to fulfill an order or provide a service you have requested.
  • Legitimate interests: Processing supports purposes such as customer support, fraud prevention, website improvement, and protection of our business, where these interests are not overridden by your rights and interests.
  • Consent: You have agreed to a particular activity, such as certain promotional messages or non-essential tracking technologies. You may withdraw that consent.
  • Legal requirements: Processing is needed to meet an applicable legal, tax, accounting, or regulatory obligation.

The basis used depends on the information, the purpose of processing, and the laws that apply.

4. Cookies, Tracking Tools, and Browser Choices

Cookies and related technologies support website functions, saved preferences, performance measurement, and relevant advertising. The categories used through the Services may include:

  • Essential cookies, which support functions such as account access, checkout, shopping carts, and security.
  • Preference cookies, which remember choices such as your language, region, or currency.
  • Analytics cookies, which help us understand site usage and improve performance.
  • Advertising cookies, which support campaign measurement and advertising based on interests.

You can adjust cookie permissions in your browser and, where provided, through the privacy or cookie controls on the Site. Restricting certain cookies may affect checkout, saved preferences, or other functions.

Some browsers offer a "Do Not Track" setting or other privacy signals. These signals do not all operate in the same way. Where applicable law requires us to recognize an opt-out preference signal, including Global Privacy Control (GPC), we will treat it as a valid request within the scope required by that law.

5. When Information May Be Shared

We may disclose relevant personal information to the following recipients or in the circumstances described below.

Shopify and Providers Supporting the Store

We use Shopify to support our online storefront. Shopify and other providers may process information needed for hosting, checkout, payment handling, order fulfillment, communications, customer support, analytics, advertising, fraud prevention, data storage, and security.

Access by providers acting on our behalf is limited to what is needed for the services they perform, subject to applicable agreements and law. Some providers also process information for their own purposes under their own privacy policies where permitted.

Depending on the Shopify features enabled for the store and the services you use, Shopify may also process information to provide its own consumer or enhanced services. Information about Shopify's processing and your choices is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Financial and Payment Organizations

Payment processors, banks, card networks, and fraud-prevention providers may receive information to approve payments, assess risk, issue refunds, and handle transaction disputes.

Delivery and Fulfillment Partners

Warehouses, fulfillment providers, customs agents, and carriers may receive recipient details and relevant order information to prepare parcels, arrange delivery, and provide shipment updates. This may include names, addresses, telephone numbers, and email addresses.

Advertising and Measurement Partners

Analytics and advertising providers may receive cookie data, device identifiers, browsing activity, purchase activity, and similar information. Certain advertising disclosures can qualify as a "sale," "sharing," or targeted advertising under applicable privacy laws, even when no money changes hands.

Legal Obligations, Security, and Safety

We may disclose information when reasonably necessary to meet a legal requirement, respond to a lawful request, enforce our policies, address fraud or security risks, protect rights or property, or safeguard customers and the public.

Changes to Our Business

Information may be transferred in connection with a merger, acquisition, financing, restructuring, asset sale, bankruptcy, or similar transaction, subject to the legal requirements that apply.

At Your Request or With Your Permission

We may share information with another party when you ask us to do so or give the required consent.

6. Advertising and Opt-Out Options

MYBYTODO does not sell personal information in exchange for money. However, certain uses of analytics or advertising services may fall within legal definitions of selling, sharing, or targeted advertising.

Where you have an applicable opt-out right, you can use the privacy or cookie controls available on the Site or contact service@mybytodo.com. Recognized browser opt-out signals are handled as described in Section 4.

Your browser, device, or advertising platform may offer additional settings for managing personalized advertising.

7. How Long Information Is Kept

We keep personal information for as long as reasonably needed for the purposes explained in this policy. The appropriate period depends on the type of information, our relationship with you, and requirements connected with tax, accounting, legal obligations, fraud prevention, disputes, warranties, and the operation of our Services.

When information is no longer needed, we may delete it, make it anonymous, aggregate it in a form that does not identify you, or dispose of it securely, subject to applicable law and technical limitations.

8. Processing Across National Borders

Because MYBYTODO serves customers internationally and uses providers in different locations, your information may be stored or processed outside your country of residence. These locations may include the United States, Canada, Hong Kong, mainland China, and other places where our providers operate.

The privacy protections available in those locations may differ from those in your country. Where international transfers require safeguards, we use appropriate measures and take reasonable steps to protect information in accordance with this policy and applicable law.

9. Protecting Personal Information

We use reasonable organizational, technical, and physical measures designed to reduce the risk of unauthorized access, alteration, disclosure, loss, or misuse. Transaction data is transmitted using industry-standard encryption where supported.

No online service, transmission method, or storage system can guarantee complete security. Please keep your account credentials private and use trusted devices, browsers, and networks when accessing the Services.

10. Making a Privacy Request

The rights available to you depend on where you live and the laws that apply to the processing. They may include the right to:

  • Access personal information held about you.
  • Correct information that is inaccurate or incomplete.
  • Request deletion of eligible information.
  • Receive a portable copy of certain information.
  • Restrict processing or object to particular uses.
  • Opt out of targeted advertising or specified disclosures.
  • Withdraw consent for processing based on that consent.
  • Appeal a decision on a privacy request, where that right is available.
  • Raise a complaint with the relevant privacy or data-protection authority.

To make a request, email service@mybytodo.com with "Privacy Request" in the subject line. Explain what you would like us to do and provide enough information to help us locate the relevant account or transaction.

Where permitted and appropriate for the type of request, we may need to confirm your identity. Information provided for verification will be used only to verify and handle the request. We will not impose identity verification on an opt-out request where the law does not permit it.

Some requests may be subject to lawful exceptions, including obligations to retain records for legal, security, fraud-prevention, or contractual purposes. We will not discriminate against you for exercising a privacy right that applies to you.

11. Additional Information for California Residents

If you are a California resident and our processing is subject to the California Consumer Privacy Act, as amended ("CCPA"), your rights may include:

  • Knowing the categories and specific pieces of personal information collected about you.
  • Knowing the sources, purposes, and categories of recipients associated with that information.
  • Requesting correction or deletion of eligible information.
  • Opting out of the sale or sharing of personal information.
  • Limiting certain uses or disclosures of sensitive personal information where applicable.
  • Receiving equal service and pricing when exercising protected privacy rights.

Sections 1, 2, and 5 describe the information categories, sources, purposes, and types of recipients relevant to our practices.

Send California requests to service@mybytodo.com using "California Privacy Request" as the subject. An authorized agent may act on your behalf where permitted. We may request evidence of the agent's authority and identity verification where allowed for the particular request.

Further information about these rights is available from the California Attorney General.

12. Rights in the EEA, United Kingdom, and Other Regions

If relevant data-protection laws in the European Economic Area, the United Kingdom, or another jurisdiction apply, you may have rights to access, correct, erase, restrict, or obtain a portable copy of information, and to object to certain processing.

Where processing relies on your consent, you can withdraw that consent without affecting the lawfulness of processing carried out before withdrawal.

You may contact the data-protection authority in your country of residence if you have a concern about our handling of information. You are also welcome to contact us so that we can try to resolve the matter; doing so is not a condition of contacting an authority.

13. Information About Children

Our website and shopping Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information directly from children under that age.

If you believe a child has submitted information without appropriate permission from a parent or guardian, email service@mybytodo.com. We will review the circumstances and take appropriate steps to remove the information where required.

14. Links to Other Services

The Site may link to websites, applications, or services managed by other organizations. We do not control their content, security, or privacy practices. Review the relevant provider's privacy policy before providing information or using its services.

15. Email and Text Message Preferences

You can stop receiving promotional emails by using the unsubscribe link in an email or contacting service@mybytodo.com.

Opting out of promotions does not stop necessary service messages, such as order updates, transaction notices, security messages, or replies to support requests.

If you separately agree to receive text messages, your mobile provider's message and data charges may apply. To stop promotional texts, reply STOP or follow the opt-out instructions included in the message.

16. Updates to This Policy

We may revise this policy when our Services, information practices, technologies, or legal obligations change. The latest version will appear on this page with a revised "Last updated" date.

Where an update requires an additional notice or consent under applicable law, we will provide that notice or request the required consent.

17. Contact MYBYTODO

Please contact us with questions, complaints, or requests about this policy or the handling of your personal information.

Store name: MYBYTODO

Registered company name: 杭州十玥科技有限公司

Company name in English (translation): Hangzhou Shiyue Technology Co., Ltd.

Website: mybytodo.com

Privacy and customer support email: service@mybytodo.com