Privacy Policy

This Privacy Policy explains how we collect, use and share personal information when you visit steeljewelrymfg.com, apply for a trade account, place orders or contact us. We are a business-to-business supplier, so the people whose data we handle are mainly the representatives of our trade customers and the visitors to this website.

Last updated: October 2026

1. Who is responsible for your data

The data controller is Dongguan Yilumei Jewelry Co., Ltd. (东莞市伊露美饰品有限公司), a limited liability company registered in Dongguan, Guangdong Province, the People's Republic of China (Unified Social Credit Code 914419003042773167), trading as YILUMEI. Business address: Room 101, No. 1, Dongfang 2nd Lane, Huaide New Village, Humen Town, Dongguan, Guangdong Province, China. For any question about this policy or your data, write to wholesale@steeljewelrymfg.com.

2. What we collect

Trade account application: company name, tax or VAT identification number, contact name, email address, phone number, website, country, type of store or business, your message to us, and the password you choose (stored only in hashed form).
Orders: the products ordered, shipping and billing addresses, the name and phone number of the person receiving the delivery, the order history on your account, and the bank-transfer reference we receive from our bank. We do not take card payments and never see card numbers.
Correspondence: emails you send us, the message field of the account application, and our replies.
Technical data: IP address, browser type, pages visited, date and time of access and similar server-log data, together with the cookies described in section 8.

3. Why we use it and on what basis

To review account applications and run your account — necessary to take steps at your request before and under the contract with you.
To process orders, confirm them, receive payment and ship goods — necessary to perform the contract.
To answer your questions and provide support — performance of the contract and our legitimate interest in serving our customers.
To meet legal obligations — tax and accounting records, customs and export documentation, sanctions screening and responses to lawful requests from authorities.
To keep the website and our systems secure and prevent fraud — our legitimate interests.
To send you commercial information about our products — only to existing trade customers in relation to similar goods, or with your consent; every message includes a way to opt out.
Analytics and marketing cookies — only with your consent, as described in section 8.

We share personal data only as far as needed to run the website and fulfill your orders, with the following categories of recipients:

Website hosting: Vercel Inc. hosts the storefront; its server functions for this site run in Frankfurt, Germany.
Commerce platform and database: Medusa Cloud (Medusa) hosts our order and account system and its database on Amazon Web Services in Frankfurt, Germany.
Content delivery: Cloudflare provides DNS and delivers product images; it may see your IP address when images load.
Email: Resend delivers transactional emails such as order confirmations (EU region, Ireland); Zoho Mail hosts our customer-service mailbox (EU data centers).
Delivery: the carrier that ships your order receives the recipient name, delivery address and phone number, and our warehouse and fulfillment team in China receives the same details to pack and dispatch the goods.
Banks and advisers: our bank, accountants, lawyers and insurers where needed for payment, accounting or legal matters.
Authorities: customs, tax and other public bodies where the law requires it.

We do not sell personal information, and we do not share it with third parties for their own marketing or for cross-context behavioral advertising.

5. International transfers

Our website and order system store data in the European Union (Germany and Ireland). Our company is based in China: we access that data from China, and the delivery details of each order are sent to the carrier and to our warehouse in China so that the goods can be shipped. Where we transfer data of residents of the European Economic Area, the United Kingdom or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses, and we limit the data shared to what the transfer requires.

6. How long we keep it

Account data: for as long as your trade account is active, and up to 3 years after it is closed so that we can deal with any follow-up questions.
Orders, invoices and payment records: for the period required by applicable tax, accounting and customs law, generally 7 years after the end of the year of the transaction.
Emails and application messages: up to 2 years after our last exchange, unless they relate to an order or a dispute.
Server logs and security records: up to 12 months.

7. Your rights

Depending on where you live, you may have the right to ask us for access to the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw consent at any time where processing is based on consent. We will not treat you differently for exercising your rights.

European Economic Area, United Kingdom and Switzerland: you have the rights set out in the GDPR and equivalent laws, and you may lodge a complaint with the data-protection authority of your country.
California: if the California Consumer Privacy Act applies to you, you have the right to know what personal information we collect, use and disclose, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in that law.
Other jurisdictions: we will honor the rights granted by the privacy law that applies to you.

To exercise any right, email wholesale@steeljewelrymfg.com from the address on your account; we may ask you to confirm your identity before we act. We will respond within the time required by the applicable law, and in any case within 30 days.

8. Cookies

We use a small number of cookies that are strictly necessary for the website to work: they keep you logged in, remember the items in your cart, hold a cache key for your session, store your language preference and record your cookie choice. These cookies do not track you across other websites and do not require consent.

Analytics or marketing cookies (for example from Google, Meta or TikTok) are set only if we have connected the corresponding service and you have accepted them in the cookie banner. You can change or withdraw your choice at any time using the button below, and you can delete or block cookies in your browser settings; blocking the necessary cookies may stop parts of the website from working.

9. Security

The website is served over HTTPS, passwords are stored only as salted hashes, and access to customer data is limited to the people and providers who need it to serve you. No method of transmission or storage is completely secure; if a security incident affects your personal data we will inform you and the competent authorities as required by law.

10. Businesses only; no children

This website is intended for businesses and their representatives; we do not sell to consumers. It is not directed at children under 18, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it was last revised; significant changes will be announced on the website or by email to account holders.

12. Contact

Dongguan Yilumei Jewelry Co., Ltd. (东莞市伊露美饰品有限公司), Room 101, No. 1, Dongfang 2nd Lane, Huaide New Village, Humen Town, Dongguan, Guangdong Province, China. Email: wholesale@steeljewelrymfg.com. Our Terms and Conditions of Sale and Legal Notice contain further information about our business.