Privacy Policy

1. Introduction
C&C Panel is committed to safeguarding your personal data in accordance with global privacy standards. This policy outlines how we collect, process, and protect information through our digital properties (collectively, “Services”). By accessing our Services, you consent to the practices described herein.

2. Information Collection Practices
2.1 Directly Provided Data
When interacting with our Services (e.g., account registration, transactions, inquiries), you may voluntarily submit:

• Contact identifiers (name, email, phone)
• Delivery and billing addresses
• Transaction payment details
• Account credentials (encrypted)
• Communications content

2.2 Automatically Gathered Data
Our systems may collect:

• Device attributes (IP address, browser type, OS)
• Usage patterns (pages visited, session duration)
• Geolocation data (country-level)
• Referral source information

3. Purpose-Limited Data Utilization
We process information to:

• Execute purchase contracts and order fulfillment
• Deliver service communications (order updates, policy changes)
• Enhance platform security and fraud prevention
• Conduct anonymized analytics for service optimization
• Personalize content based on consent (opt-in required)
• Comply with legal obligations

4. Controlled Information Sharing
Data disclosure occurs only under specific circumstances:

• With payment processors for transaction completion
• To logistics partners for product delivery
• When legally mandated (court orders, regulatory requests)
• During corporate restructuring events (mergers, acquisitions)
• With marketing partners (solely upon explicit opt-in consent)

5. Cross-Border Data Transfers
User information may be transferred to and processed in jurisdictions outside your home country, including the United States where our primary servers reside. We implement GDPR-compliant safeguards (Standard Contractual Clauses) for international data transfers involving European users.

6. Data Retention Framework
We retain personal information:

• For active customer accounts: Until deletion request
• For transactional records: 7 years for tax compliance
• For marketing data: Until consent withdrawal
• Inactive accounts: Deleted after 24 months

7. Security Protocols
We employ enterprise-grade measures including:

• AES-256 encryption for data in transit/at rest
• Regular security audits and vulnerability testing
• Restricted role-based data access controls
• PCI-DSS compliance for payment processing

8. Children’s Privacy Compliance
Our Services are exclusively designed for users over the legal adult age in their jurisdiction. We do not knowingly collect data from minors. Suspected underage accounts will be immediately terminated. Report concerns to: emily.gu@changchedecor.com

9. Your Privacy Rights
Depending on residency, you may:

• Request access to or deletion of personal data
• Rectify inaccurate information
• Withdraw processing consent
• Object to certain data uses
• Exercise CCPA/GDPR rights (as applicable)

Submit requests via: emily.gu@changchedecor.com
Response timeframe: 15 business days

10. Digital Tracking Technologies
We utilize essential and functional cookies for:

• Session maintenance and cart preservation
• Site performance optimization
• Preference memorization
  Third-party analytics cookies require explicit opt-in through our cookie consent manager.

11. Policy Amendment Protocol
Material changes will be:

• Posted with prominent revision dates
• Notified via account holders’ email
• Archived in version history (available upon request)
  Continued Service use constitutes acceptance of revisions.

12. Contact Framework
For privacy inquiries or rights execution:

• Data Protection Officer: Emily Gu
• Email: emily.gu@changchedecor.com