WONDERLAB Privacy Policy

2026-06-30

Release Date: June 24, 2026
Effective Date: June 24, 2026

Introduction

WONDERLAB (hereinafter referred to as "we") fully recognizes the importance of your personal information. We strictly comply with laws and regulations including the Personal Information Protection Law of the People's Republic of China, the Data Security Law of the People's Republic of China, and the Cybersecurity Law of the People's Republic of China, and process your personal information in accordance with the principles of lawfulness, legitimacy, necessity, good faith, and transparency.

This Policy explains how we collect, use, store, share, and protect your personal information, as well as the rights you are entitled to. Please read and fully understand this Policy, especially the terms marked in bold/underline, before using our website and related services. If you do not agree with any part of this Policy, please stop using our services immediately.

This Policy will explain:

  • Definitions

  • What personal information we collect and how we use it

  • How we use cookies and similar technologies

  • How we entrust processing, share, transfer, and publicly disclose personal information

  • How we store and protect personal information

  • Your rights

  • Protection of minors

  • Updates to this Policy

  • How to contact us

I. Definitions

Personal information: Any information recorded electronically or by other means that relates to an identified or identifiable natural person, excluding anonymized information.

Sensitive personal information: Personal information that, once leaked or unlawfully used, could easily harm the personal dignity of a natural person or endanger personal or property safety, including biometric data, religious beliefs, specific identity, medical health, financial accounts, location tracking, and the personal information of minors under the age of 14.

Anonymization: The process of making personal information unable to identify a specific natural person and incapable of being restored.

WONDERLAB: The legal entity operating this website, [please fill in the full company name], with registered address at [please fill in the address].

II. How We Collect and Use Your Personal Information

We follow the principle of minimum necessity and only collect and use your information for the following purposes during your use of the website:

(1) Helping You Register an Account
When you register a WONDERLAB official website account, you need to provide your mobile phone number or email address and set a password. If you refuse to provide this information, you will not be able to complete registration or use member functions.

(2) Responding to Your Inquiries and Requests
When you contact us via online customer service, message board, email, or telephone, you may need to provide your name, mobile phone number/email address, order number (if applicable), and a description of your issue so that we can locate the problem and handle your request.

(3) Marketing and Event Participation
When you participate in marketing activities such as lucky draws, surveys, or new product trials, you may need to provide your name, contact number, delivery address, and other information for identity verification and prize delivery. The specific information fields will be notified on the event rules page. You may refuse to receive such marketing information at any time via the unsubscribe instructions in the messages or by contacting customer service.

(4) Improving Website Services and Security
When you visit the website, we automatically collect necessary log information and device information, such as IP address, browser type, operating system, access time, browsing page path, and device model, for troubleshooting, preventing malicious attacks, analyzing page popularity, and optimizing browsing experience. This type of information generally does not separately identify your personal identity.

(5) Circumstances Where Consent Is Not Required by Law
In accordance with laws and regulations, we may collect and use your personal information without your consent in the following circumstances:

  • Directly related to national security or national defense security;

  • Directly related to public safety, public health, or major public interests;

  • Directly related to criminal investigation, prosecution, trial, and enforcement of judgments;

  • Necessary for responding to public health emergencies or for protecting the life, health, and property safety of you or others in an emergency;

  • Processing personal information that you have made public or that has been lawfully disclosed within a reasonable scope;

  • Other circumstances stipulated by laws and administrative regulations.

III. How We Use Cookies and Similar Technologies

Cookies are small text files stored in your browser by a website, used to remember your preferences, maintain login status, or analyze visit data. We use session cookies (deleted when the browser is closed) and persistent cookies (retained for a certain period).

Similar technologies include web beacons, pixel tags, etc., used to generate anonymized data analysis such as email open rates and page views.

You may manage or clear cookies at any time through your browser settings. Please note that disabling cookies may prevent some page functions from operating properly, such as maintaining login status.

IV. How We Entrust Processing, Share, Transfer, and Publicly Disclose Personal Information

(1) Entrusted Processing
We may entrust third-party service providers to assist in providing certain functions (such as SMS sending, email push, customer service systems, and data analysis). Such entrusted parties will process your information strictly in accordance with our instructions and the requirements of this Policy, and assume corresponding confidentiality obligations. We prohibit them from using the information for any other purpose.

(2) Sharing
We will not voluntarily share your personal information with third parties, except in the following circumstances:

  • Sharing with designated third parties with your explicit consent;

  • Sharing necessary information with our affiliates or authorized partners to achieve the purposes stated in this Policy, such as sharing delivery addresses with logistics service providers and sharing order information with payment service providers;

  • Providing your information as required by law or mandatory judicial or administrative orders.

(3) Transfer
We will not transfer your personal information, except in the following circumstances:

  • Obtaining your explicit consent;

  • In the event of a merger, division, acquisition, or asset sale, if the transfer of personal information is involved, we will inform you in advance of the recipient's name and contact details, and require the recipient to continue to be bound by this Policy. If the recipient changes the original processing purpose, we will obtain your consent again.

(4) Public Disclosure
We will not publicly disclose your personal information. If it is necessary to display desensitized winner information (such as a partially masked mobile phone number) for an event, we will clearly state this in the event rules and obtain your separate consent before publication. Unless required by law, we will not publish your information on public media.

V. How We Store and Protect Personal Information

(1) Storage Location
All personal information we collect and generate is stored within the territory of the People's Republic of China. If it is necessary to transfer it overseas, we will inform you in advance, obtain your separate consent, and complete security assessments or certifications in accordance with legal requirements.

(2) Storage Period
We retain your personal information only for the minimum period necessary to fulfill the purposes described in this Policy. Once the necessary period has expired, we will delete or anonymize the information. Where laws require mandatory retention for a longer period, such laws shall prevail.

(3) Security Protection Measures
We have adopted and passed industry-standard technical and management measures to safeguard information security, including but not limited to:

  • Encrypting transmitted data using SSL/TLS protocols;

  • Implementing access control, firewalls, and intrusion detection systems to prevent unauthorized access;

  • Encrypting and desensitizing stored data;

  • Conducting regular security assessments and employee privacy protection training.

(4) Security Incident Response
In the event of a security incident such as a leak, alteration, or loss of personal information, we will immediately activate our emergency response plan, take remedial measures, and, as required by law, promptly inform you via email, telephone, or notice of the basic situation, the scope of impact, the measures we have taken, and recommended preventive actions, while also reporting to the relevant regulatory authorities.

VI. Your Rights

Under the law, you have the following rights regarding your personal information:

  • Access and Copy: You have the right to obtain a copy of your personal information held by us through your account settings or by contacting customer service.

  • Correction and Supplement: If you find that your information is inaccurate or incomplete, you have the right to request correction or supplementation.

  • Deletion: You may request deletion of your personal information under the following circumstances:

    • The processing purpose has been achieved or cannot be achieved, and the data retention period has expired;

    • We cease providing services, or you have cancelled your account;

    • You withdraw your consent, and there is no other lawful basis for processing;

    • We have processed your personal information unlawfully.

  • Withdrawal of Consent: For personal information collected based on your consent, you may withdraw it at any time. After withdrawal, we will stop processing the corresponding information, but this will not affect the lawfulness of processing carried out prior to the withdrawal. You may withdraw consent by disabling browser permissions, unsubscribing from marketing messages, or contacting customer service.

  • Account Cancellation: You may submit a cancellation request via [specified path or contact customer service]. After account cancellation, we will stop providing products or services and will complete the deletion or anonymization of information within 15 working days (except where otherwise required by law).

  • Obtaining Personal Information Transfer: If you request the transfer of your personal information to another designated party, we will provide a transfer path where the conditions stipulated by the national cyberspace administration are met.

  • Restricting Automated Decision-Making by Information Systems: We generally do not make decisions that significantly affect your rights and interests solely through automated decision-making. If involved, we will provide an explanation and a way for you to refuse.

For the above requests, we will complete verification and respond within 15 working days of receipt. To ensure security, you may need to provide a written request and proof of identity. We will handle reasonable requests free of charge; for repeated or excessively burdensome requests, we may charge a cost-based fee at our discretion.

VII. Protection of Minors

Our website is primarily intended for adults. Children under the age of 14 are not permitted to register an account. If you are a minor aged 14 or above but under 18, please read this Policy accompanied by your parent or guardian and use this website only with their explicit consent.

If we discover that personal information of a minor has been collected without guardian consent, we will proactively delete it. If a guardian has any objection, please contact us immediately.

VIII. Updates to This Policy

We may revise this Policy from time to time based on business development and legal requirements. In the event of significant changes (such as changes to the purpose, method, or type of information, change of entity, or changes in the way rights are exercised), we will provide prominent notice through website pop-up announcements, email, or SMS.

The revised Policy will take effect from the effective date specified in the notice. Your continued use of our services after the effective date signifies your agreement to and acceptance of the updated Policy.

IX. How to Contact Us

We have appointed a personal information protection officer (or dedicated team). If you have any questions, comments, or need to exercise your rights regarding this Policy, please contact us via the following methods:

Operating Entity: [Shenzhen Precision Health Food Technology Co., Ltd.]
Personal Information Protection Contact Email: [internal-control@wonderlab.top]
Contact Phone: [0755-86537276]
Contact Address: [22/F, Block D, China Resources Land Building, Kefa Road, Dachong Community, Yuehai Subdistrict, Nanshan District, Shenzhen]

We will generally respond within 15 working days of receiving your request. If you are not satisfied with our response, particularly if you believe our personal information processing has harmed your legitimate rights and interests, you may also file a complaint with the relevant regulatory authority or bring a lawsuit before a court.

WONDERLAB
June 24, 2026