Privacy Policy

1. Information We Collect

At LEV Wigs, we are committed to protecting your privacy while providing exceptional service. We collect various types of information to enhance your shopping experience and fulfill our legal obligations.

Personal Information You Provide

When you interact with our website or make a purchase, we collect personal information that you voluntarily provide, including:

• Name and contact details: Full name, email address, phone number, and shipping/billing addresses
• Account credentials: Username and encrypted password if you create an account
• Payment information: Credit card details, billing address, and transaction history (processed securely through third-party payment processors)
• Communication records: Messages sent through our contact forms, customer service interactions, and Telegram conversations
• Custom order specifications: Wig preferences, measurements, color choices, and style requirements

Information Automatically Collected

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

• Device information: IP address, browser type and version, operating system, device identifiers
• Usage data: Pages visited, time spent on site, click patterns, referral sources, and navigation paths
• Location data: Approximate geographic location derived from IP address for region-specific content and fraud prevention
• Cookie data: Preferences, session identifiers, and tracking pixels for analytics and marketing purposes

This data collection is essential for providing personalized service, preventing fraud, and improving our website functionality. You have the right to control how this information is collected and used, as detailed in subsequent sections.

2. How We Use Your Information

We use the information we collect for specific, legitimate purposes that directly benefit your experience with LEV Wigs. Our data processing activities are designed to be transparent, fair, and compliant with applicable privacy laws.

Order Processing and Fulfillment

Your personal and payment information is primarily used to process your orders, including verifying payment details, arranging shipment, communicating delivery status, and managing returns or exchanges. We retain transaction records for accounting purposes and to resolve any disputes that may arise.

Customer Service and Communication

We use your contact information to respond to inquiries, provide product recommendations, offer styling consultations, and send transactional emails (order confirmations, shipping notifications, password resets). These communications are essential to fulfilling our contractual obligations to you.

Marketing and Promotional Activities

With your explicit consent, we may send promotional emails about new collections, special offers, and exclusive discounts. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or contacting us directly. We use engagement data to personalize marketing content and ensure relevance.

Website Optimization and Analytics

We analyze usage data and cookies to understand how visitors interact with our website, identify technical issues, optimize page performance, and improve user experience. This includes A/B testing, heat mapping, and conversion tracking through services like Google Analytics.

Fraud Prevention and Security

To protect both LEV Wigs and our customers, we use IP addresses, device information, and behavioral patterns to detect fraudulent transactions, prevent unauthorized access, and comply with legal requirements. This processing is necessary for our legitimate interests in maintaining a secure platform.

Legal Compliance and Business Operations

We process data to comply with tax regulations, accounting standards, consumer protection laws, and court orders. We also use aggregated, anonymized data for business reporting, trend analysis, and strategic planning purposes that do not identify individual customers.

3. Data Sharing and Disclosure

LEV Wigs does not sell your personal information to third parties. We only share data with trusted partners who assist in operating our business, and only to the extent necessary for specific purposes outlined below.

Third-Party Service Providers

We share information with carefully vetted service providers who perform functions on our behalf:

• Payment processors: Secure handling of credit card transactions (e.g., Stripe, PayPal) under PCI DSS compliance standards
• Shipping carriers: Delivery of your orders with tracking information (e.g., UPS, FedEx, DHL)
• Email service providers: Sending transactional and marketing emails (e.g., Mailchimp, SendGrid)
• Analytics platforms: Website performance monitoring and user behavior analysis (e.g., Google Analytics)
• Customer support tools: Managing inquiries and providing assistance (e.g., Zendesk, Telegram API for messaging)
• Cloud hosting services: Secure data storage and website infrastructure (e.g., AWS, Google Cloud)

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable privacy laws.

Legal Requirements and Protection

We may disclose your information when legally required to do so, including in response to court orders, subpoenas, law enforcement requests, or to comply with tax and regulatory obligations. We will also disclose information if necessary to protect our rights, property, or safety, or that of our customers and the public.

Business Transfers

In the event of a merger, acquisition, or sale of LEV Wigs assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information with other parties when you have given us explicit permission to do so, such as when you opt into third-party promotional partnerships or request specific integrations.

4. Cookies and Tracking Technologies

LEV Wigs uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver personalized content. Understanding how these technologies work helps you make informed choices about your privacy.

What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit our website. They contain information about your preferences, session data, and browsing activity. Cookies enable features like remembering your shopping cart, keeping you logged in, and providing relevant product recommendations.

Types of Cookies We Use

• Essential cookies: Necessary for website functionality, including shopping cart operations, secure login, and payment processing. These cannot be disabled without breaking core features.
• Performance cookies: Collect anonymous data about how visitors use our site, helping us identify and fix technical issues and optimize page load times.
• Functional cookies: Remember your preferences (language, region, font size) to provide a personalized experience across sessions.
• Marketing cookies: Track your browsing behavior to display relevant advertisements on third-party websites and measure campaign effectiveness.

Third-Party Tracking

We use third-party analytics and advertising services that may place cookies on your device:

• Google Analytics: Tracks website traffic, user demographics, and behavior patterns (you can opt out via the Google Analytics Opt-out Browser Add-on)
• Facebook Pixel: Measures ad performance and retargets visitors with relevant promotions on Facebook and Instagram
• Google Ads: Displays personalized advertisements based on your interests and previous interactions with our website

Cookie Consent and Control

When you first visit our website, you will see a cookie consent banner allowing you to accept or customize cookie settings. You can also manage cookies through your browser settings by blocking, deleting, or limiting certain types. Note that disabling essential cookies may impair website functionality. To update your preferences, click the "Cookie Settings" link in our website footer.

Do Not Track Signals

Some browsers offer "Do Not Track" (DNT) signals. Currently, there is no industry standard for responding to DNT signals, so our website does not alter its behavior based on DNT settings. However, you can still control cookies through your browser preferences and our cookie consent tool.

5. Your Rights (GDPR/CCPA Compliance)

LEV Wigs respects your privacy rights and is committed to full compliance with the General Data Protection Regulation (GDPR) for European Union customers and the California Consumer Privacy Act (CCPA) for California residents. You have significant control over your personal information.

Your CCPA Rights (California Residents)

If you are a California resident, the CCPA grants you the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we've collected, sold, or disclosed in the past 12 months
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, fraud prevention)
• Right to Opt-Out of Sale: We do not sell personal information, but you have the right to opt out if our practices change
• Right to Non-Discrimination: Exercise your CCPA rights without receiving discriminatory treatment (different prices, service levels, or quality)

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@levwigs.com or use the "Data Rights Request" form on our website. We will verify your identity to protect against fraudulent requests and respond within 30 days (GDPR) or 45 days (CCPA). You may also designate an authorized agent to make requests on your behalf by providing written authorization.

Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy:

• Order and transaction data: 7 years (for tax and accounting compliance)
• Marketing data: 2 years from last interaction, or until you unsubscribe
• Account data: Until you request deletion or close your account
• Analytics cookies: 26 months (Google Analytics default)

6. Data Security Measures

Protecting your personal information is a top priority at LEV Wigs. We implement robust technical and organizational security measures to safeguard data against unauthorized access, loss, misuse, or disclosure.

Encryption and Secure Transmission

All data transmitted between your browser and our website is protected using SSL/TLS encryption (indicated by the padlock icon in your browser). This ensures that sensitive information like passwords and payment details cannot be intercepted during transmission. Payment card data is processed through PCI DSS-compliant payment gateways that tokenize card information, meaning we never store full credit card numbers on our servers.

Access Controls and Authentication

We restrict access to personal information to authorized personnel only, based on role-specific permissions. Employees and contractors with access to customer data are bound by confidentiality agreements and receive regular privacy training. Administrative access requires multi-factor authentication (MFA) and is logged for audit purposes.

Infrastructure Security

Our website is hosted on enterprise-grade cloud infrastructure with built-in security features including firewalls, intrusion detection systems, DDoS protection, and regular vulnerability scanning. Databases are encrypted at rest using industry-standard algorithms, and backups are stored in geographically distributed locations with restricted access.

Regular Security Audits

We conduct annual security assessments and penetration testing to identify and remediate vulnerabilities. Our security policies are reviewed quarterly and updated to reflect emerging threats and best practices. Third-party service providers undergo security due diligence before integration.

Data Breach Response

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours (as required by GDPR) via email and prominent website notice. The notification will include details about the breach, affected data types, potential consequences, and remedial actions. We will also report the incident to relevant data protection authorities and cooperate fully with investigations.

Your Role in Security

While we take extensive precautions, security is a shared responsibility. Please protect your account by using strong, unique passwords, enabling two-factor authentication if available, and logging out after using shared devices. Never share your login credentials, and report any suspicious activity to our security team at info@levwigs.com.

7. International Data Transfers

LEV Wigs operates globally and serves customers across multiple countries. To provide our services effectively, we may transfer your personal information to countries outside your region, including locations with different data protection standards than your own.

Transfer Mechanisms

When transferring data from the European Union (EU) to countries outside the European Economic Area (EEA), we rely on appropriate safeguards recognized under GDPR:

• Standard Contractual Clauses (SCCs): EU-approved contractual terms that ensure data recipients provide adequate protection
• Adequacy Decisions: Transfers to countries deemed by the European Commission to have equivalent data protection laws (e.g., UK, Switzerland)
• Binding Corporate Rules: Internal policies for multinational organizations that ensure consistent data protection across jurisdictions

Data Processing Locations

Your personal information may be processed in the following locations:

• United States: Primary cloud hosting infrastructure (AWS US-East region) with servers in secure data centers
• European Union: EU-based servers for customers in GDPR-covered regions, ensuring data residency compliance
• Israel: Customer service and fulfillment operations for certain product categories
• Third-party service locations: Analytics, payment processing, and marketing tools may store data in their respective jurisdictions

Cross-Border Transfer Transparency

When you provide personal information, you acknowledge and consent to its transfer, storage, and processing in countries where our service providers operate. We ensure that all international transfers comply with applicable laws and maintain the same level of protection required in your jurisdiction. You can request details about specific transfer mechanisms by contacting info@levwigs.com.

UK GDPR Compliance

Following Brexit, we also comply with the UK GDPR for customers in the United Kingdom, using the International Data Transfer Agreement (IDTA) or other approved mechanisms for transfers outside the UK.

8. Children's Privacy

LEV Wigs is committed to protecting the privacy of children and complying with the Children's Online Privacy Protection Act (COPPA) and similar international regulations.

Age Restrictions

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from individuals under 16 without verifiable parental consent. If you are under 16, please do not submit any personal information through our website or create an account.

Parental Consent

If a parent or guardian wishes to purchase products for a child under 16, the adult must create the account and complete the transaction using their own information. Parents are responsible for supervising their children's online activities and ensuring compliance with age restrictions.

Discovery and Deletion

If we discover that we have inadvertently collected personal information from a child under 16 without parental consent, we will delete that information immediately and terminate any associated account. If you believe we have collected information from your child, please contact us at info@levwigs.com with details, and we will investigate and take appropriate action.

Educational Resources

We encourage parents to educate their children about online privacy and safe internet practices. Resources like the Federal Trade Commission's consumer information on children's privacy can help families navigate digital safety together.

9. Changes to This Policy

LEV Wigs reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or business operations. We are committed to transparency and will notify you of significant changes.

Notification of Changes

When we make material changes to this policy (such as altering data use purposes or sharing practices), we will provide prominent notice through:

• Email notification: Sent to the email address associated with your account at least 30 days before changes take effect
• Website banner: A visible notice on our homepage and key pages highlighting the updated policy
• Updated "Last Modified" date: The date at the top of this policy will reflect the most recent revision

Your Acceptance

Continued use of our website and services after the effective date of changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account and cease using our services. For significant changes requiring new consent (e.g., expanded data sharing), we will seek your explicit opt-in before applying the new terms to your information.

Policy Archive

We maintain an archive of previous policy versions available upon request. If you would like to review earlier versions or have questions about policy changes, please contact info@levwigs.com.

Review Frequency

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information. We conduct formal policy reviews at least annually to ensure ongoing compliance with evolving regulations and industry standards.

10. Contact Us

LEV Wigs values your privacy and is committed to addressing your questions, concerns, and requests promptly. If you have any inquiries about this Privacy Policy or how we handle your personal information, please reach out to us.

Privacy Inquiries

For questions specific to privacy, data protection, or exercising your rights under GDPR/CCPA:

• Email: info@levwigs.com
• Response time: We aim to respond within 2 business days

General Customer Support

For order inquiries, product questions, or general assistance:

• Email: info@levwigs.com
• Telegram: +86 185 6155 2182
• Phone: +86 185 6155 2182

Mailing Address

LEV Wigs Privacy Department
Chengyang District
Qingdao, Shandong
China

Data Protection Officer (DPO)

For EU customers, you may contact our designated Data Protection Officer regarding GDPR compliance:

• Email: info@levwigs.com

Regulatory Authorities

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with your local data protection authority:

• EU residents: Contact your country's supervisory authority (list available at edpb.europa.eu)
• UK residents: Information Commissioner's Office (ICO) - ico.org.uk
• California residents: California Attorney General's Office - oag.ca.gov

We appreciate your trust in LEV Wigs and remain dedicated to protecting your privacy while delivering exceptional products and service.