Customer information
Privacy Policy
How we handle your information when you browse, enquire or shop with us.
Effective date: 10 October 2026
1. Who we are
海南钰韵本草进出口有限公司 (Hainan Yuyun Bencao Import & Export Co., Ltd.) operates https://hnyuyunai.com. We are responsible for the personal information described in this policy.
Business contact address: Room A5002, 5th Floor, Area A1, Fuxingcheng, No. 32 Binhai Avenue, Binhai Subdistrict, Longhua District, Haikou, Hainan, China
For privacy requests, contact marychen@
2. Information we collect
- Contact and account information: your name, email address, phone number, account details and delivery or billing address when you provide them.
- Orders and customer support: the products you select, order amounts and status, delivery information, and messages or attachments you send us.
- Technical information: IP address, browser and device information, requested pages, security and access logs, and cookies or similar storage needed for website functions.
- Reviews: the name, rating and content you choose to submit. Information displayed with a review is visible to other visitors.
- Payment information: if a payment method is available for your order, the selected payment provider processes payment details under its own notice. Do not send card numbers or financial credentials through our contact form.
We obtain information from you, from your use of the website and, when relevant to an order, from payment and delivery providers.
3. How and why we use information
We use information to answer enquiries, administer accounts, process and fulfil accepted orders, provide after-sales support, prevent fraud, maintain website security and meet applicable tax, accounting, customs and other legal obligations.
Where the GDPR or UK GDPR applies, the relevant basis is taking steps at your request before a contract or performing a contract, meeting a legal obligation, or our legitimate interests in operating a secure website and responding to customers. Where consent is required, we rely on your consent and you may withdraw it.
We do not treat a product enquiry as permission to send unrelated marketing. You may object to direct marketing at any time.
4. Health information and service enquiries
Our retail contact form is for product and order enquiries. It does not include a health questionnaire, and providing health or allergy information is not a condition of making a retail enquiry or purchase. Please do not submit medical records, diagnoses, identification documents or other sensitive information in the general enquiry form.
Not providing health information does not mean that a product is suitable for you or that you have no allergies. Read product labels and the consumer notices, and seek qualified professional advice when appropriate.
We do not use health information for advertising, personalised pricing or automated decisions. Any separate counseling intake requiring sensitive information must provide its own appropriate information and consent arrangements before collection.
5. Cookies and website services
This website runs on WordPress and WooCommerce. Cookies and local storage may support the shopping cart, login, checkout, security and your saved website preferences. Our hosting and website services include Hostinger; pages also load the Hostinger Reach integration. Loading an external resource can disclose technical request information such as your IP address and browser details to its provider.
You can manage cookies and site storage through your browser. Blocking cookies needed for an account, cart or checkout may prevent those functions from working. External websites opened through our WhatsApp or Facebook links have their own privacy and cookie policies.
Where an optional service requires consent, the required choice must be provided before that service is used.
6. Sharing and international processing
We disclose information only as needed to operate the website and support the transaction or enquiry: to hosting and technical providers, payment providers used for an order, carriers and customs agents handling delivery, communication and support providers, and public authorities where disclosure is legally required. We may also disclose information as necessary to protect legal rights or as part of a lawful business transfer.
We do not sell personal information or share it for cross-context behavioural advertising. We do not provide health information to advertising platforms.
Our company is based in China. Information you send to us may therefore be processed in China, and service providers may process information in other locations. Applicable transfer requirements and safeguards depend on the service and jurisdiction involved. Contact us for information about the arrangements relevant to your data.
7. Retention and security
We retain information for as long as needed for the purpose for which it was collected, including responding to an enquiry, administering an account, completing an order, handling returns or disputes, and meeting applicable accounting or legal obligations. The type of record, the customer relationship, the nature of a dispute and legal retention requirements determine the period.
Records that must be retained for a legal obligation or an unresolved claim may not be immediately deleted following a request.
The website uses HTTPS for data in transit. No website or transmission method can be guaranteed completely secure. We will address security incidents and any required notifications in accordance with applicable law.
8. Your privacy rights
Depending on applicable law, you may request access to, a copy of, correction of or deletion of your information; restriction of processing; portability; or objection to certain processing. You may withdraw consent without affecting processing already lawfully undertaken.
Where GDPR or UK GDPR rights apply, we normally respond within one month. If a permitted extension is necessary, we will explain it. Where California privacy law applies, eligible residents may have rights to know, access, delete, correct, opt out of sale or sharing, and limit certain uses of sensitive information. We will not discriminate against you for exercising applicable rights. Verified California requests are generally answered within 45 days, subject to a permitted extension with notice.
Send requests to marychen@
9. Children
Retail purchases are intended for adults aged 18 or over. A parent or guardian must make any purchase for a minor. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, please contact us so we can review and address it.
10. Complaints and updates
Please raise privacy concerns with marychen@
We may update this policy to reflect changes in the website or our processing. The effective date appears above. Where required, we will give additional notice or seek fresh consent; continued browsing is not a substitute for consent where consent is required.