Do you sell my personal data?

No. We never sell customer data to third-party ad networks. We only share the minimum data with payment, logistics, and consent-gated analytics providers listed in our policy.

How do I exercise my GDPR / CCPA rights?

Email privacy@siliconeloversclub.com or hello@siliconeloversclub.com. We respond within 30 days (GDPR) or 45 days (CCPA). Rights include access, correction, deletion, data portability, and opt-out of sale.

Is my AI companion conversation data used for training?

No. All AI companion dialogues run on local hardware and are never uploaded to a server or used to train any AI model, internal or third-party.

How long do you keep my order data?

Order / invoice / logistics data is kept 7 years for international tax and AML compliance. After-sale emails 5 years. Marketing subscriptions are deleted on unsubscribe. Visitor accounts with no orders are purged after 24 months.

Do you sell to minors?

No. We do not sell to anyone under 18. We do not collect data from children under 13 (COPPA) or under 16 (GDPR-K).

What happens if I unsubscribe from marketing?

Your email is removed from Klaviyo and you stop receiving campaigns within 24 hours. Order and logistics emails continue because those are part of contract performance.

Datenschutzrichtlinie

General Principle

Silicone Lovers Club ("we" / "SLC" / "BOLDLOVE TECH Group brand") respects your privacy. This policy explains what we collect, why, how we use and protect it, and what rights you have, drafted against GDPR (EU) + CCPA / CPRA (California) + PIPL (China) + Shopify's Trust Services baseline, applied globally.

Scope: siliconeloversclub.com plus subpages, email correspondence, WhatsApp customer care, offline contracts, and any data synced through third-party platforms.

1. What We Collect

1.1 You give us directly

Account: name, email, password hash, shipping address, phone (WhatsApp / mobile)

Order: order number, product specification, payment channel, invoice info

Service: email bodies, WhatsApp chat logs, phone-call recordings (with explicit consent)

Custom build assets: model references, body spec, signed custom contract

1.2 Collected automatically

Device / network: IP, browser UA, OS, screen resolution, referrer

Behaviour / browsing: pages visited, dwell time, add-to-cart / abandonment, click heatmap (only after cookie consent)

Payment channel: only the status returned by the payment processor (Stripe / PayPal); we never store full card numbers or CVV

2. Why We Collect (Purpose Inventory)

Purpose	Legal basis (GDPR view)
Order processing + fulfilment + after-sale	Contract performance
Anti-fraud + anti-chargeback risk control	Legitimate interest
Customer-care response + logistics notification	Contract performance
Marketing email (subscriber)	Your explicit consent; opt-out anytime
Shopify platform-operations analytics (aggregated)	Legitimate interest
Legal obligation (tax / AML / customs)	Legal obligation

We do not: sell your data to third-party ad networks, use your custom build assets to train AI models, or share health / medical-class information.

3. Cookie Policy

We use four cookie categories. You can opt in / out per category on first visit:

Category	Purpose	Required?	Effect if off
Strictly Necessary	cart, login, risk control	Yes	Cannot place orders
Functional	language preference, recently viewed	No	No effect on checkout
Analytics	Google Analytics, Hotjar heatmap	No	No effect on checkout
Marketing	Meta Pixel, email-subscription tracking	No	No effect on checkout

Shopify's Consent SDK is offered at first paint with three buttons: Accept all / Strictly only / Customise. You can change preferences anytime via "Cookie preferences" in the footer.

4. Third-Party Service Inventory

We share the minimum necessary data with the following providers only. Anything off-list is not shared:

Service	Purpose	Data scope
Shopify Inc.	Site hosting + payments	Order + product + basic customer info
Stripe / PayPal / Klarna	Payment channel	Payment status + required card data
FedEx / UPS / DHL / TNT	Logistics	Shipping address + tracking number
Google Analytics / Meta Pixel	Marketing analytics (consent-gated)	Behaviour data
Klaviyo (email marketing)	Email subscription	Email + behaviour tags
Internal warehouse ERP	Inventory + fulfilment	Order + SKU

Every line item is governed by a GDPR / CCPA-aligned SCC / DPA.

5. Your Rights (Global Coverage)

5.1 GDPR (EU + UK + EEA users)

1. Right to be informed · 2. Right of access (free copy within 30 days) · 3. Right of rectification (within 7 days) · 4. Right to erasure (within 30 days) · 5. Right to restrict processing · 6. Right to data portability (JSON / CSV) · 7. Right to object · 8. Right to non-automated decision-making

5.2 CCPA / CPRA (California + applicable US states)

1. Right to know + access (2 free per year) · 2. Right to delete (within 45 days) · 3. Right to opt out of sale / sharing (one-click in footer) · 4. Right to limit use of sensitive personal information · 5. Right to non-discrimination

Note: SLC's product line involves intimate-use products. Under CCPA §1798.121(a) you have the right to limit sensitive use. We default to NOT collecting, using, or sharing sensitive categories.

5.3 PIPL (China users)

1. Right to know + decide (full policy + standalone consent) · 2. Right to access / rectify / delete (30-day response) · 3. Right to explanation on automated decision-making

5.4 Other jurisdictions

Australia APP / Canada PIPEDA / Brazil LGPD / Japan APPI / South Korea PIPA are handled at equal-or-stricter baseline.

6. AI and Machine-Learning Boundaries

No training: your conversations, orders, refund requests are never used to train any AI model — internal or third-party (including OpenAI / Anthropic / Google / Meta)

No inference: we do not infer race, religion, health, sexual orientation, or political leanings without explicit consent

Local inference: if you purchase our AI companion product, all dialogue logic runs on local hardware, no server uploads

Cloud LLM connection (e.g. OTA): enabled only with your explicit, encrypted consent — toggle off anytime

7. Minor Protection

SLC does not sell to anyone under 18

No COPPA-region under-13 / GDPR-K under-16 child data is collected

Suspected under-age order → instant refund + delete order, no identifying info retained

Parents who discover a child's mistake order → email hello@siliconeloversclub.com, human handling within 24 hours

8. International Data Transfer

Origin: China (own factory + ERP + customer care) → Shopify nodes (US / Canada)

Safeguards: EU users' data flows under GDPR Standard Contractual Clauses (SCC); California users under CCPA Service Provider framework; all transfers via TLS 1.3 + AES-256 at rest

Storage nodes: customer data primarily in US (Shopify nodes); tax-related fields duplicate to China for fiscal filing

Cross-border legal request: government requests → we notify you first (unless legally barred) + only release the minimum the law compels

9. Data Retention

Category	Retention	Reason
Order / invoice / logistics	7 years	OECD / accounting / AML / tax compliance
After-sale / service email	5 years	Legal-defence window
Marketing subscription	Deleted on unsubscribe	Consent ends
Cookie / behaviour	13-month rolling	Shopify / GDPR default
Unconverted visitor account	24 months	Then fully purged
AI companion dialogues (local)	Not persisted	Local session only

10. Security Measures

Transport: TLS 1.3 / HSTS / DNS-over-HTTPS

Storage: AES-256 + field-level tokenisation

Access: role-based minimum-privilege audit

Incident response: data event → user + regulator notification within 72 hours

Third-party audit: inherits Shopify SOC 2 Type II + ISO 27001 compliance

11. International Users — Special Notes

EU users: may complain to your local DPA

California users: may contact the California Attorney General

China users: may contact the Cyberspace Administration of China

Cross-border disputes: see Refund Policy and Terms of Service jurisdiction clauses

12. Policy Changes

This policy is reviewed periodically. For material changes, we email you 14 days before your next order. Continued ordering after change = acceptance of new terms.