Privacy Policy

PRIVACY POLICY

Last updated: August 13, 2026

This Privacy Policy explains how Sylphline collects, uses, discloses and protects personal information when you visit sylphline.com, create an account, place an order, subscribe to communications, contact customer care or otherwise use our services.

Sylphline operates its online store using Shopify.

For purposes of applicable data protection and privacy law, the business responsible for your personal information is:

Trading as: Sylphline
Website: https://sylphline.com
Email: support@sylphline.com

Company Name: Ningbo Niefan E-commerce Co., Ltd.
Company Address: Room 8-3-10, Zhihui Building No. 1, Duantang Subdistrict, Haishu District, Ningbo City, Zhejiang Province, China
Contact Information: +86 15969814076

1. INFORMATION WE COLLECT

Depending on how you interact with Sylphline, we may collect the following categories of personal information.

Identity and Contact Information

This may include your:

  • Name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

Order and Transaction Information

This may include:

  • Products ordered

  • Product variants or shades selected

  • Order value

  • Shipping method

  • Order history

  • Returns and refunds

  • Subscription information where applicable

Payment Information

Payments are processed through third-party payment and commerce providers.

Depending on your location and checkout options, these may include payment-card processors, PayPal, Klarna and Shopify-supported payment services.

Sylphline generally does not receive or store your complete payment-card number. Payment providers process payment details according to their own privacy and security practices.

Account Information

If you create an account, we may process information associated with your account, order history and account preferences.

Subscription Information

If you choose a recurring product subscription, we process information necessary to administer recurring orders, billing, shipping and cancellation requests.

Device and Usage Information

When you use the Site, we and our service providers may automatically collect information such as:

  • IP address

  • Browser and device type

  • Operating system

  • Approximate location

  • Pages and products viewed

  • Referring website

  • Interactions with the Site

  • Shopping-cart activity

  • Date and time of visits

  • Cookie and similar technology identifiers

Communications

If you contact customer care, submit a contact form or communicate with us about a return, damaged item, privacy request or other issue, we may retain the information you provide and our correspondence with you.

Marketing Information

If you subscribe to email marketing or otherwise agree to receive promotional communications, we may process your contact details, marketing preferences and related interaction information where permitted by law.

2. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • Operate and maintain sylphline.com

  • Process and fulfill orders

  • Process payments and refunds

  • Arrange shipping and delivery

  • Provide tracking information

  • Manage recurring subscriptions

  • Provide customer support

  • Process returns, damaged-item claims and other after-sales requests

  • Respond to privacy requests and complaints

  • Communicate important information about an order or account

  • Detect and prevent fraud, abuse and security incidents

  • Maintain business, accounting and transaction records

  • Improve our website, products and customer experience

  • Measure website performance

  • Personalize content where permitted

  • Send marketing communications where permitted by law

  • Measure or support advertising where permitted

  • Comply with legal and regulatory requirements

  • Establish, exercise or defend legal claims

  • Enforce our agreements and protect our legal rights

We will not use personal information for materially different purposes without providing any notice or obtaining any consent required by applicable law.

3. LEGAL BASES FOR PROCESSING

Where laws such as the European Union General Data Protection Regulation ("GDPR") or UK GDPR require us to identify a legal basis, we may process personal information because:

Performance of a Contract

Processing may be necessary to enter into or perform a contract with you, including:

  • Processing your order

  • Taking payment

  • Arranging fulfillment

  • Delivering products

  • Managing subscriptions

  • Processing refunds

  • Providing order-related customer service

Legal Obligations

We may process information where necessary to comply with legal, tax, accounting, regulatory, product-safety or other obligations.

Legitimate Interests

Where permitted by law, we may process information where necessary for our legitimate interests or those of a third party, including:

  • Fraud prevention

  • Security

  • Customer service

  • Website administration

  • Business operations

  • Service improvement

  • Protecting legal rights

Where we rely on legitimate interests, we consider those interests against your rights and interests as required by applicable law.

Consent

We may rely on consent where consent is required, including for certain marketing, advertising or non-essential cookie technologies.

Where processing is based on consent, you may withdraw that consent at any time, subject to applicable law.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. SHOPIFY

Our online store is hosted by Shopify.

Shopify processes certain personal information in order to provide the ecommerce platform, checkout functionality, security, store infrastructure and related services used by Sylphline.

Shopify may process personal information in accordance with its own privacy practices and applicable contractual arrangements with merchants.

Depending on your location and use of Shopify services, Shopify or its service providers may process information in countries outside the country in which you live.

5. SERVICE PROVIDERS AND OTHER RECIPIENTS

We may disclose personal information to service providers and other parties that help us operate Sylphline, including:

  • Shopify and ecommerce infrastructure providers

  • Payment processors

  • PayPal and/or Klarna where selected or available

  • Shipping carriers and logistics providers

  • Warehousing and fulfillment partners

  • Customer-support providers

  • Email and marketing service providers

  • Fraud-prevention and security providers

  • Website analytics providers

  • Advertising and marketing partners where applicable

  • Professional advisers such as accountants, lawyers and insurers

  • Government authorities or regulators where disclosure is legally required

We disclose only information reasonably necessary for these parties to perform the relevant services or where disclosure is otherwise permitted or required by law.

Some third parties may act as independent controllers or businesses under applicable privacy law and may apply their own privacy policies.

6. SHIPPING AND FULFILLMENT

Because Sylphline fulfills international orders through different fulfillment and logistics locations, order information such as your name, shipping address, contact details and ordered products may be provided to the fulfillment partners and carriers responsible for delivering your order.

Information may be processed in countries other than the country in which you live where necessary to fulfill and deliver your purchase.

7. COOKIES AND SIMILAR TECHNOLOGIES

Sylphline and its service providers may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for:

  • Essential website functions

  • Shopping-cart and checkout functions

  • Account functions

  • Site security

  • Remembering preferences

  • Analytics

  • Measuring website performance

  • Marketing and advertising where applicable

Where applicable law requires consent for non-essential cookies or similar technologies, we will request consent through privacy, cookie or consent controls available on the Site.

Where applicable, you may withdraw or modify your consent through those controls.

You may also control cookies through your browser settings, although blocking essential cookies may affect website functionality.

8. MARKETING COMMUNICATIONS

If you sign up for Sylphline emails, we may send you information about products, releases, promotions and store updates where permitted by law.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service-related messages relating to an order, refund, subscription, security matter, privacy request or account.

9. TARGETED ADVERTISING

Where we use advertising, analytics or marketing partners, those providers may process information about your use of the Site in order to measure advertising campaigns, understand interactions or provide advertising.

Certain privacy laws may describe some advertising-related disclosures as a "sale", "sharing", "targeted advertising" or another regulated disclosure even where no money is exchanged for personal information.

Where such rights apply, you may use the privacy controls available on the Site or contact support@sylphline.com to exercise an applicable opt-out right.

Where required by applicable law, we will also process recognized opt-out preference signals in the manner required by that law.

10. WE DO NOT SELL CUSTOMER INFORMATION FOR MONEY

Sylphline does not sell customer personal information in exchange for monetary payment.

However, certain privacy laws define "sale" or "sharing" more broadly than an exchange of personal information for money.

For example, certain advertising or marketing technologies may qualify as regulated sharing or disclosure under applicable law.

Where applicable law gives you a right to opt out of such activities, we will provide or honor the applicable opt-out mechanism.

11. INTERNATIONAL DATA TRANSFERS

Sylphline serves customers internationally and works with service providers located in different countries.

As a result, your personal information may be transferred to and processed in jurisdictions outside the country or region in which you live.

Those countries may have data-protection laws that differ from those in your jurisdiction.

Where applicable law requires safeguards for international transfers, we and our service providers may use legally recognized transfer mechanisms, contractual protections or other lawful safeguards.

Where the GDPR or UK GDPR applies, these may include adequacy decisions, appropriate contractual safeguards or other mechanisms permitted by applicable law.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Completing transactions

  • Maintaining order and accounting records

  • Providing customer service

  • Managing subscriptions

  • Processing privacy requests

  • Managing disputes and chargebacks

  • Meeting tax, regulatory and legal obligations

  • Preventing fraud

  • Maintaining security

  • Enforcing our agreements

  • Establishing, exercising or defending legal claims

Retention periods vary depending on the type of information, the purpose for which it was collected and applicable legal requirements.

Marketing information may be retained until you unsubscribe, withdraw applicable consent or the information is no longer required for the relevant marketing purpose, subject to any information we need to retain to record and respect your preference.

13. DATA SECURITY

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no website, internet transmission or electronic storage method can be guaranteed to be completely secure.

Customers should keep account credentials confidential and contact us if they believe their account or personal information has been compromised.

14. YOUR PRIVACY RIGHTS

Your privacy rights depend on where you live, the nature of our relationship with you and which privacy laws apply to Sylphline's processing of your information.

Subject to applicable law, you may have rights to:

  • Access personal information

  • Obtain information about how personal information is collected or used

  • Correct inaccurate personal information

  • Delete personal information

  • Restrict certain processing

  • Object to certain processing

  • Obtain a portable copy of certain information

  • Withdraw consent

  • Opt out of certain targeted advertising

  • Opt out of certain sales or sharing of personal information

  • Limit certain uses or disclosures of sensitive personal information

  • Appeal certain decisions relating to privacy requests

  • Make a complaint to Sylphline or an applicable regulatory authority

We will not unlawfully discriminate or retaliate against you for exercising privacy rights granted by applicable law.

Hong Kong Residents

Hong Kong residents may have applicable rights of access and correction under the Personal Data (Privacy) Ordinance and any other rights provided by applicable law.

Requests may be submitted to support@sylphline.com.

15. EEA PRIVACY RIGHTS — GDPR

If you are located in the European Economic Area ("EEA") and the GDPR applies to our processing of your personal data, you may have the following rights, subject to applicable conditions and exceptions.

Right of Access

You may request confirmation of whether we process personal data concerning you and, where applicable, receive access to that information and certain information about how it is processed.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

In certain circumstances, you may request deletion of personal data relating to you.

The right to deletion is not absolute. We may retain information where continued processing is required or permitted by law, including for legal obligations, transaction records, fraud prevention, disputes or legal claims.

Right to Restriction of Processing

You may request restriction of processing in circumstances provided by applicable data-protection law.

Right to Data Portability

Where applicable, you may request certain personal data you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit that information to another controller.

Right to Object

Where processing is based on legitimate interests, you may have the right to object based on your particular situation.

You may object to processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Automated Decision-Making

Where applicable law provides such rights, you may have rights relating to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with a competent data-protection supervisory authority.

You may generally contact the supervisory authority in the EEA country where:

  • You normally reside;

  • You work; or

  • You believe an alleged infringement occurred.

You may contact Sylphline first at support@sylphline.com, but you are not required to resolve a complaint with us before exercising a right to contact a competent supervisory authority where applicable law provides otherwise.

16. UK PRIVACY RIGHTS — UK GDPR

If you are located in the United Kingdom and the UK GDPR or other applicable UK data-protection law applies to our processing, you may have rights including:

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erasure in applicable circumstances

  • The right to restrict processing in applicable circumstances

  • The right to data portability where applicable

  • The right to object to certain processing

  • The right to withdraw consent where processing relies on consent

  • Applicable rights relating to automated decision-making

You may submit a request by contacting:

support@sylphline.com

UK Complaints

If you have a concern about our handling of your personal information, you may contact us at support@sylphline.com.

Where applicable, you also have the right to raise a data-protection complaint with the:

Information Commissioner's Office (ICO)
United Kingdom

Contacting Sylphline first does not remove or restrict any right you have to contact the ICO.

17. CALIFORNIA PRIVACY RIGHTS — CCPA / CPRA

This section applies to California residents to the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), applies to Sylphline and the relevant processing activity.

The rights described below are subject to the definitions, conditions, exceptions and exemptions contained in applicable California law.

Right to Know and Access

You may have the right to request information about our collection and use of your personal information, including, where applicable:

  • Categories of personal information collected

  • Specific pieces of personal information collected

  • Categories of sources from which personal information is collected

  • Business or commercial purposes for collecting, using, selling or sharing personal information

  • Categories of third parties to whom personal information is disclosed

  • Categories of personal information sold, shared or disclosed for business purposes where applicable

The types of information we collect are described in Section 1 — Information We Collect.

The purposes for which information is used are described in Section 2 — How We Use Personal Information.

The categories of recipients are generally described in Section 5 — Service Providers and Other Recipients.

Right to Delete

You may request deletion of personal information collected from you, subject to exceptions permitted by applicable law.

We may retain information where permitted or required, including where necessary to:

  • Complete a transaction

  • Provide requested goods or services

  • Maintain necessary business records

  • Comply with legal obligations

  • Detect or prevent fraud or security incidents

  • Resolve disputes

  • Establish, exercise or defend legal claims

Right to Correct

You may request correction of inaccurate personal information maintained about you, subject to applicable law.

Right to Opt Out of Sale or Sharing

Where Sylphline sells or shares personal information as those terms are defined under California law, you may have the right to direct us not to sell or share your personal information.

Sylphline does not sell customer personal information in exchange for monetary payment.

Certain advertising, analytics or marketing technologies may nevertheless constitute "sharing" or another regulated disclosure under California law.

Where applicable, you may exercise an opt-out right through privacy controls made available on the Site or by contacting:

support@sylphline.com

Global Privacy Control

Where required by applicable California law, Sylphline will process qualifying opt-out preference signals, including signals such as Global Privacy Control ("GPC"), as a request to opt out of sale or sharing for the browser or device from which the signal is sent and otherwise as required by applicable law.

Right to Limit Use and Disclosure of Sensitive Personal Information

If we use or disclose sensitive personal information in a manner that gives rise to a right to limit under the CCPA, California residents may exercise the applicable right to limit such processing.

This right applies only where the conditions established by California law are satisfied.

Right to Non-Discrimination

We will not unlawfully discriminate against you for exercising rights provided by the CCPA.

Subject to applicable law, exercising a California privacy right will not result in unlawful:

  • Denial of goods or services

  • Charging of different prices or rates

  • Provision of a different level or quality of goods or services

  • Retaliation for exercising a privacy right

This does not prohibit differences, programs or practices that are expressly permitted by applicable law.

Authorized Agents

Where permitted by California law, you may designate an authorized agent to make certain requests on your behalf.

We may require reasonable evidence demonstrating that the agent has authority to act for you.

Where permitted, we may also request verification directly from you.

We will not require identity verification for an opt-out request where applicable law prohibits such verification.

Submitting a California Request

California residents may submit an applicable request by contacting:

Email: support@sylphline.com

Please state the right you wish to exercise and provide information reasonably necessary for us to understand and process your request.

We will process verified requests within the period required by applicable law.

18. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on the jurisdiction and whether the relevant law applies to Sylphline, those rights may include the ability to:

  • Access personal information

  • Correct inaccurate personal information

  • Delete personal information

  • Obtain a portable copy of certain information

  • Opt out of certain targeted advertising

  • Opt out of certain sales of personal information

  • Opt out of certain profiling activities

  • Limit certain processing of sensitive personal information

  • Appeal certain decisions concerning privacy requests

Applicable requests may be submitted to:

support@sylphline.com

Where applicable law requires a procedure to appeal our decision regarding a privacy request, you may submit an appeal by replying to our decision or contacting support@sylphline.com and clearly stating that you wish to appeal the decision.

19. MAKING A PRIVACY REQUEST

To submit a privacy-rights request, contact:

support@sylphline.com

Please describe your request clearly and identify the right you wish to exercise.

Identity Verification

For security and fraud-prevention purposes, we may need to verify your identity before completing certain privacy requests.

Verification may involve confirming information reasonably related to your account, previous transactions or interactions with Sylphline.

We will seek only information reasonably necessary for verification and will handle verification information in accordance with applicable law.

Different verification requirements may apply depending on the type and sensitivity of the request.

Requests We Cannot Verify

Where permitted by law, we may be unable to complete certain requests if we cannot reasonably verify your identity or authority to make the request.

This does not apply where applicable law prohibits requiring verification for a particular type of request, including certain opt-out requests.

Response Timing

We will acknowledge and respond to requests within the periods required by applicable law.

Where applicable law permits an extension, we may extend the response period and will provide any notice required by that law.

Fees

We generally do not charge a fee for exercising applicable privacy rights.

Where permitted by law, a reasonable fee may apply to requests that are manifestly unfounded, excessive or repetitive, or we may decline such a request where applicable law permits us to do so.

Appeals

Where applicable privacy law gives you a right to appeal a decision regarding your privacy request, we will provide or honor the applicable appeal process.

20. PRIVACY COMPLAINTS AND REGULATORY CHANNELS

We take privacy complaints seriously.

If you have concerns about how Sylphline collects, uses, discloses, transfers, retains or protects personal information, or how we handled a privacy request, you may contact:

Trading as: Sylphline
Email: support@sylphline.com

Please provide enough information for us to understand the nature of your complaint.

We will review privacy complaints and respond in accordance with applicable law.

European Economic Area

Where the GDPR applies, you may lodge a complaint with a competent data-protection supervisory authority.

You may generally complain to the supervisory authority in the EEA country where you normally reside, where you work or where you believe an alleged infringement occurred.

You do not lose this right by contacting Sylphline.

United Kingdom

Where UK data-protection law applies, you may lodge a complaint with the:

Information Commissioner's Office (ICO)

The ICO is the United Kingdom's independent data-protection supervisory authority.

Your ability to complain to the ICO is not restricted by our internal complaint procedure.

California

Where the CCPA applies, California residents may make an applicable privacy complaint to the:

California Privacy Protection Agency (CalPrivacy / CPPA)

California residents may also have other complaint or enforcement channels provided by applicable California law.

Contacting Sylphline first does not restrict your ability to contact a competent regulator where you have the legal right to do so.

Other Jurisdictions

Depending on where you live, you may also have the right to submit a complaint to another competent privacy, data-protection or consumer-protection authority.

Nothing in this Privacy Policy is intended to prevent you from exercising a regulatory complaint right provided by applicable law.

21. CHILDREN

Sylphline is not intended for children under 18.

We do not knowingly seek to collect personal information from children for the purpose of allowing them to purchase products through the Site.

If you believe a child has provided personal information to us inappropriately, contact:

support@sylphline.com

We will take appropriate steps in accordance with applicable law.

22. THIRD-PARTY WEBSITES AND SERVICES

The Site may contain links, integrations or services operated by independent third parties.

Their privacy practices are governed by their own privacy policies and terms.

Sylphline is not responsible for how an independent third party processes information once you interact directly with that third party, except to the extent responsibility cannot lawfully be excluded.

We encourage you to review the privacy information provided by third-party websites and services before providing personal information to them.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to:

  • Our services

  • Technology

  • Business practices

  • Service providers

  • Privacy practices

  • Legal or regulatory requirements

The current version and its "Last updated" date will be posted on this page.

Where applicable law requires additional notice or consent for a material change, we will provide that notice or obtain consent as required.

24. CONTACT US

For privacy questions, privacy-rights requests or complaints, contact:

Trading as: Sylphline
Email: support@sylphline.com
Website: https://sylphline.com

Company Name: Ningbo Niefan E-commerce Co., Ltd.

Company Address:
Room 8-3-10, Zhihui Building No. 1,
Duantang Subdistrict, Haishu District,
Ningbo City, Zhejiang Province, China

Contact Information: +86 15969814076