Privacy policy

Last Updated: April 2026

This Privacy Policy describes how Questoy, operated exclusively by Zhuhai Quran E-Commerce Co., Ltd. (珠海趣然电子商贸有限公司) (hereinafter referred to as "the Company", "we", "us", or "our"), collects, uses, and discloses your personal information when you visit, use, or make a purchase or other transaction using our secure checkout gateway (shop.questoy.com) or otherwise communicate with us regarding our Services.

For the purpose of applicable data protection laws (including GDPR and UK Data Protection Act), Zhuhai Quran E-Commerce Co., Ltd. is the legal Data Controller of your personal information. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the processing of your data.

Please read this Privacy Policy carefully. By using and accessing any of the Services on shop.questoy.com, you acknowledge that you understand the collection, use, and disclosure of your information as described herein.

1. Personal Information We Collect or Process

We collect information that identifies or can reasonably be linked to you. We do not process anonymized or de-identified data that cannot identify you. Depending on how you interact with shop.questoy.com, we may process the following categories of personal information:

  • Contact Details: Your legal name, shipping address, billing address, phone number, and email address.

  • Financial Information: Transaction details, form of payment, encrypted payment confirmations, and partial payment card details necessary to securely process transactions through our integrated merchant partners (PayPal, Stripe, Shopify Payments).

  • Account Credentials: Your created username, password hashes, security questions, and localized account preferences.

  • Transaction Telemetry: Items you view, put in your shopping cart, add to your wishlist, purchase, return, exchange, or cancel, alongside your complete transaction history.

  • Customer Support Communications: Any information you choose to include in your inquiries sent to our concierge desk at support@questoy.com.

  • Device & Network Analytics: Information about your operating system, browser type, network connection parameters, IP address, and unique device identifiers collected automatically upon access.

2. Sources of Personal Information

We aggregate data from the following compliant infrastructure pipelines:

  • Direct Submission: Information you explicitly type into our forms during checkout, account registration, or support communication.

  • Automated Telemetry: Technical data harvested automatically via cookies, pixels, and web beacons when you navigate shop.questoy.com.

  • Fulfillment Partners: Operational logs synced from our global logistics providers and cloud storage systems.

  • Payment Infrastructure: Risk signals, fraud scores, and transaction confirmations passed back by Shopify and payment processors.

3. How We Use Your Personal Information

Zhuhai Quran E-Commerce Co., Ltd. utilizes your personal data for the following legitimate business purposes:

  • Fulfillment of Contractual Services: To process payments, verify collectable inventory, complete customs clearance under DDP (Delivered Duty Paid) terms, arrange international shipping, and manage valid 14-day return/RMA processing.

  • Risk Mitigation & Fraud Prevention: To verify identities, secure our checkout funnel, detect malicious or automated bot activities, and aggressively defend against fraudulent chargebacks on payment platforms.

  • Responsive Customer Concierge: To answer product queries, process defect evaluations via unboxing videos, and resolve shipping tracking updates.

  • Legal Compliance: To cooperate with international customs authorities, respond to valid court subpoenas, or satisfy compulsory regulatory audits.

4. How We Disclose Personal Information

Under no circumstances do we sell your raw personal information for standalone profit. We disclose data to trusted third parties strictly to enable our core operations:

  • With Shopify & Core Infrastructure Providers: To host our shopping cart framework, manage databases, and execute secure transaction flows.

  • With Payment Gateway Gatekeepers: To clear funds via secure, encrypted links (PayPal, Stripe, etc.).

  • With DDP Logistics & Customs Brokers: To pre-pay local import taxes and ensure seamless last-mile courier transit to your delivery address.

  • Corporate Restructuring: In the event of a legally verified merger, asset transfer, or corporate reorganization of Zhuhai Quran E-Commerce Co., Ltd.

5. International Data Transfers & Sovereign Safeguards

Questoy operates a global digital commerce framework. Personal information collected through shop.questoy.com will be transferred to, stored, and processed across secure servers managed by Shopify Inc. (located globally, including the United States and Canada) and our corporate operations databases in Mainland China.

If you reside within the United Kingdom or the European Economic Area (EEA), please note that when we transfer your data outside your economic zone, we strictly enforce recognized legal transfer mechanisms. This includes utilizing the European Commission’s Standard Contractual Clauses (SCCs) or equivalent UK international data transfer agreements, ensuring that your sovereign privacy rights travel safely with your data.

6. Security, Retention, and Imperfect Transmission

We implement enterprise-grade cryptographic controls and SSL layers across shop.questoy.com to prevent unauthorized data breaches. However, please be aware that no internet transmission protocol is 100% impenetrable. We strongly advise against sending unencrypted sensitive financial credentials via standard email channels.

We retain your transaction and personal logs only for as long as legally mandated to fulfill our service contracts, maintain accurate financial bookkeeping, settle disputes, and defend our merchant protection rights.

7. Your Sovereign Rights and Choices

Depending on your country or state of residence (e.g., EU GDPR, UK DPA, California CCPA), you may exercise specific structural controls over your data:

  • Right to Access & Know: Request a comprehensive breakdown of the personal information we currently hold regarding your identity.

  • Right to Erasure (Deletion): Direct us to erase your personal account data, subject to lingering statutory tax and bookkeeping holding periods.

  • Right to Rectification: Request immediate corrections to inaccurate shipping, billing, or contact data.

  • Global Privacy Control (GPC): Our servers natively respect GPC opt-out preference signals. If your browser transmits a valid GPC signal, we automatically stop tracking targeted marketing telemetry on that specific node.

To exercise any of these rights, please contact our Data Protection Officer directly at support@questoy.com. We will verify your identity against original checkout signatures prior to processing any structural modification requests.

8. Children's Privacy Notice

Our collectible art toys and curated digital services are intended strictly for mature collectors and individuals who have reached the legal age of majority in their jurisdiction. Questoy does not knowingly harvest, store, or process personal data from children under the age of 16. If we discover an unauthorized minor has created an account, the data profile will be instantly purged from our servers.

9. Corporate Legal Contact Information

Should you have any formal inquiries regarding this Privacy Policy, our data processing protocols, or wish to invoke your data rights, please contact our corporate headquarters:

  • Corporate Entity: Zhuhai Quran E-Commerce Co., Ltd. (珠海趣然电子商贸有限公司)

  • Registered Office Address: Room 302, Building 19, Xingye Road, Xiangzhou District, Zhuhai City, Guangdong Province, 519070, China (珠海市香洲区兴业路19栋302 珠海市, 519070 Guangdong, China)

  • Official Compliance Email: support@questoy.com

  • Direct Hotline: +86 15626922120

  • Corporate Operating Hours: Monday–Friday, 9:00 AM – 6:00 PM (GMT+8)