Privacy Policy

Last updated: July 25, 2026 | Effective: July 25, 2026

Winking Home ("we", "us", or "our") is a B2B cleaning brush manufacturer and exporter headquartered at No.899, Tiantong North Road, Ningbo, People's Republic of China. We operate winkinghome.com (the "Site").

This Privacy Policy describes how we collect, use, share, and protect personal data when you visit our Site or contact us about our products and services. It also explains the rights available to you under applicable privacy law. Please read it carefully. By using the Site or submitting an inquiry, you acknowledge that you have read and understood this policy.

Contents

Personal Data We Collect
How We Use Personal Data
How We Share Personal Data
Data Retention
Security
Cookies & Tracking
Children
Third-Party Links
Changes to This Policy
Contact & Data Controller
Supplemental Disclosures — EU / UK
Supplemental Disclosures — California
Supplemental Disclosures — Canada

1. Personal Data We Collect

Data you provide directly. When you contact us, submit an inquiry form, request a quotation, or correspond with us by email or messaging app, we collect:

Identity & contact data — full name, job title, business email address, telephone number
Business data — company name, country or region, product interest, target quantity, and OEM/ODM requirements
Communication data — the content of messages, attachments, and any follow-up correspondence

Data collected automatically. When you visit the Site, our hosting infrastructure collects:

Log & technical data — IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. This data is collected by our hosting provider (GoDaddy) for security and performance monitoring
Preference data — your light/dark theme selection and language preference, stored in your browser's localStorage (on your device only — not sent to our servers)

We do not collect payment card numbers, government-issued identification numbers, biometric data, precise geolocation, racial or ethnic origin, health data, or any other sensitive category of personal information.

2. How We Use Personal Data

Purpose	Description
Responding to inquiries	Replying to questions, providing product specifications, samples, pricing, or catalogue information
Order fulfilment	Preparing Proforma Invoices, coordinating production schedules, and arranging export shipment where a commercial relationship is established
Business correspondence	Sending follow-up messages directly related to your inquiry. We do not send unsolicited marketing emails
Legal & regulatory compliance	Meeting export documentation, customs declaration, and trade finance requirements under applicable law
Security & fraud prevention	Monitoring and protecting the Site against unauthorised access, abuse, or fraudulent activity
Site improvement	Understanding how the Site is used in order to improve its content, usability, and performance

We do not sell, rent, or share your personal data for cross-context behavioural advertising or any third-party marketing purpose.

3. How We Share Personal Data

We share personal data only in the circumstances described below:

Service providers (processors) — our hosting provider (GoDaddy), email delivery service (SMTP provider), and website platform (WordPress/Elementor). Each is contractually required to process data only on our instructions and to maintain appropriate security standards
Logistics & trade partners — freight forwarders, customs brokers, and shipping agents, receiving only the minimum data necessary to fulfil an export consignment (e.g., consignee name, address, cargo description)
Government & regulatory authorities — customs agencies, trade regulators, and law enforcement, where required by export control regulations or applicable law
Professional advisers — lawyers, auditors, and accountants acting under professional duties of confidentiality
Business transfers — in connection with a merger, acquisition, or asset sale, subject to the successor providing equivalent privacy protections

We do not sell personal data to any third party. We do not share personal data for cross-context behavioural advertising.

4. Data Retention

Data Type	Retention Period	Reason
Inquiry & pre-sales correspondence	3 years	To allow for future business discussions and dispute resolution
Order & commercial transaction records	7 years	Accounting, tax, and export documentation obligations
Server log data (hosting provider)	90 days	Security monitoring; automatically purged by host
Browser localStorage (on your device)	Until you clear browser data	Theme & language preference; never transmitted to us

When personal data is no longer required for any of the above purposes, we securely delete or irreversibly anonymise it.

5. Security

We implement technical and organisational measures appropriate to the risk of processing, including:

TLS/HTTPS encryption for all data in transit between your browser and our servers
Web application firewall (WAF) at the hosting level to block malicious traffic
Access controls limiting internal access to personal data to authorised personnel with a business need
Timely application of security patches to our website platform and plugins

No internet transmission is completely secure. If you believe your data may have been compromised, contact us immediately at info@winkinghome.com.

6. Cookies & Tracking

Our Site stores only two items in your browser's localStorage: your theme preference (light or dark) and your language selection. These values remain on your device and are never transmitted to us or any third party.

We do not use advertising cookies, analytics trackers, social media pixels, or any third-party scripts that profile your browsing behaviour. No consent banner is required because no non-essential tracking technology is deployed. Should this change, we will update this policy and obtain any required consent before activation.

7. Children

Our Site and services are directed exclusively at business professionals. We do not knowingly collect personal data from anyone under the age of 18. If we discover we have inadvertently received such data, we will delete it without delay. If you believe a minor has submitted data through our Site, please contact us at info@winkinghome.com.

8. Third-Party Links

Our Site may contain links to external websites such as freight carriers or trade directories. We have no control over, and are not responsible for, the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, technology, or applicable law. The "Last updated" date at the top of this page indicates the most recent revision. For material changes, we will post a prominent notice on the Site. Your continued use of the Site after the effective date of any revision constitutes your acceptance of the updated policy.

10. Contact & Data Controller

The data controller responsible for personal data processed through this Site is:

Winking Home
No.899, Tiantong North Road, Ningbo, PRC
General enquiries: info@winkinghome.com
Privacy requests: info@winkinghome.com (subject line: Privacy Request)
Phone: +86 (574) 880 12 986

We will acknowledge receipt of privacy requests within 5 business days and resolve them within the timeframe required by applicable law (EU/UK: 1 month; California: 45 days; Canada: 30 days).

Supplemental Disclosure — European Union & United Kingdom

This supplement applies to individuals in the EU, EEA, UK, and Switzerland and supplements the main policy above.

Legal bases for processing (Article 6 GDPR / UK GDPR)

Processing purpose	Personal data involved	Legal basis
Responding to inquiries; providing quotations	Name, email, phone, company, product interest	Performance of a contract or pre-contractual steps (Art. 6(1)(b))
Order processing and export fulfilment	Name, address, company, order details	Performance of a contract (Art. 6(1)(b))
Security, fraud prevention, site improvement	Log data, IP address	Legitimate interests (Art. 6(1)(f)) — our interest in operating a secure and effective website
Customs and export documentation	Name, company, address, cargo details	Legal obligation (Art. 6(1)(c))
Optional follow-up communications	Email address	Consent (Art. 6(1)(a)) — you may withdraw at any time

Your rights. Under GDPR/UK GDPR you have the right to: access (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing (Art. 21); and withdrawal of consent at any time without affecting prior lawful processing. You also have the right to lodge a complaint with your national supervisory authority — EU residents should contact the authority in their Member State; UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers. Your data is transferred to and processed in the People's Republic of China. We rely on the European Commission's Standard Contractual Clauses (SCCs — Commission Decision 2021/914) and, for UK transfers, the UK International Data Transfer Agreement (IDTA), as the legal mechanism for such transfers. You may request a copy of the applicable transfer safeguards by contacting us.

Supplemental Disclosure — California (CCPA / CPRA)

This supplement applies to California residents and supplements the main policy above. References to "personal information" in this section have the meaning given under the CCPA/CPRA.

Categories of personal information collected in the past 12 months:

Category (CCPA)	Examples	Sold or shared?
Identifiers	Name, email address, phone number, IP address	No
Professional / employment information	Company name, job title, country	No
Commercial information	Product interest, inquiry content, quotation history	No
Internet / network activity	Pages visited, browser type (server logs)	No

We have not collected sensitive personal information as defined under CPRA in the past 12 months.

Your rights under CCPA/CPRA:

Right to know — request disclosure of the categories and specific pieces of personal information collected, the sources, the business purpose, and the categories of third parties with whom it is shared
Right to delete — request deletion of personal information we have collected, subject to legal exceptions
Right to correct — request correction of inaccurate personal information
Right to opt out of sale / sharing — we do not sell personal information and do not share it for cross-context behavioural advertising. You do not need to opt out, but you may contact us to confirm
Right to limit use of sensitive personal information — not applicable; we do not collect such data
Right to non-discrimination — we will not deny services, charge different prices, or provide a different quality of service because you exercised a privacy right

To submit a verifiable consumer request, email info@winkinghome.com with the subject line CCPA Privacy Request. We will respond within 45 days; complex requests may require an additional 45-day extension, which we will communicate to you in advance. You may designate an authorised agent to make a request on your behalf; we may require written proof of authorisation.

Supplemental Disclosure — Canada (PIPEDA)

This supplement applies to individuals in Canada and supplements the main policy above.

We collect, use, and disclose personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Accountability — Winking Home is responsible for personal information under its control. Our designated privacy contact is reachable at info@winkinghome.com
Identifying purposes — we identify the purposes for collection at or before the time of collection, as described in Section 2 above
Consent — we obtain your implied or express consent for the collection, use, and disclosure of personal information. You may withdraw consent at any time by contacting us, subject to legal or contractual restrictions. Withdrawal may limit our ability to provide certain services
Limiting collection — we collect only the personal information necessary to fulfil the identified purposes
Accuracy — we keep personal information as accurate, complete, and up to date as necessary. Please inform us of any inaccuracies
Cross-border transfers — your information may be transferred to, and processed in, China. We apply contractual and organisational measures to ensure it receives a comparable level of protection
Individual access — upon written request, we will inform you of the existence, use, and disclosure of your personal information and give you access to it. To submit an access or correction request, email us with the subject line PIPEDA Privacy Request. We will respond within 30 days
Complaints — if you are dissatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca