This page is maintained by YIZHAN (also written 一盏) and describes how we collect, use, and protect your personal information when you use our Light Record service. The Chinese version is available at /privacy and prevails in case of interpretive conflict.
1. Information we collect
- Sender name or nickname (optional; anonymous option available);
- Recipient name (used on the candle tag and Light Record);
- The message text you write;
- One contact channel for delivery notification (email / WeChat ID / phone number, choose one). This field is application-layer encrypted before being stored;
- Order metadata (package, occasion, important date, status, timestamps);
- First-party analytics events (page views, button clicks, checkout funnel). No third-party trackers.
2. Purposes
- Fulfilling and producing your order (real photography, Light Record);
- Delivering the digital gift (photo + Light Record link) via your contact channel;
- Fraud prevention and handling anomalous orders;
- Service operations and product analytics.
3. Storage and cross-border transfers
All personal data is stored in the European Union (Slovenia / EU-hosted infrastructure) and encrypted at rest. The recipient contact channel is further encrypted at the application layer before being written to the database.
Notice for users in mainland China: your personal information will be transferred to and processed outside China (in the EU). By placing an order and giving service consent, you acknowledge and agree to this cross-border processing, in line with the notice-and-consent requirement of Article 39 of the PRC Personal Information Protection Law (PIPL).
4. Retention
- Digital gift media (photo / video / Light Record link) are delivered via expiring signed URLs. Depending on package tier, the default access window is 7 days / 30 days / 365 days; after expiry the link no longer resolves.
- You may request deletion of your public gift page at any time (see §6).
- Minimal transaction records (order ID, amount, date) may be retained after a deletion request where required by tax, financial-reporting, or anti-fraud law, kept separate from any publicly visible content.
5. Two separate consents at checkout
Placing an order requires two independent checkboxes:
- Service & privacy consent — you agree to this Privacy Policy and the Terms of Service, including EU processing.
- Recipient-contact usage consent — you confirm you have the right to supply the contact you provided, and that we may use it solely to deliver this specific gift, not for any other marketing purpose.
Each consent is recorded separately and can be withdrawn independently; withdrawal affects our ability to deliver later notifications.
6. Your rights (GDPR + PIPL)
Regardless of whether you are an EU resident (GDPR) or a mainland-China resident (PIPL), you have the following rights:
- Access the information we hold about you;
- Correct inaccurate information;
- Delete / be forgotten (your public gift page and related personal data);
- Withdraw any consent at any time;
- Data portability (GDPR) / copy request (PIPL);
- Right to complain to an EU data-protection authority or the CAC in China.
How to exercise these rights: submit a deletion request via /delete, or contact us via /contact for any other data-subject request. We respond within a reasonable time.
7. What we do not do
- We do not sell, rent, or trade your personal information;
- We do not integrate third-party advertising or cross-site tracking cookies;
- Individual gift pages are not indexed by search engines (noindex).
8. Contact
For questions about this policy or to exercise your rights, please use /contact. Operator details appear in the site footer.