Privacy Policy

Last updated: 8 November 2026

This policy explains what personal information Four Leaf Paper collects, why, who we share it with, and what you can ask us to do with it. It covers this website and our emails. It does not cover the checkout pages of our payment provider, which has its own policy.

1. Who is responsible

The data controller is Yulin City Fumian District Jukai Network Studio (玉林市福绵区巨凯网络工作室), Guangxi, China. Contact: wazigua858@gmail.com.

2. What we collect

• Order details: the email address you type at checkout, the name you optionally give us, the products and amounts, the order number, and the times of the order and delivery.
• Technical data: IP address, browser and device type, referring page, and the pages you visit on this site.
• Support messages: whatever you send us by email or through the contact form.
• Cookies and local storage: a session cookie if you sign in, a language cookie, and a small amount of local storage for checkout state.

We do not receive or store your card number. Payment details are entered on our payment provider's pages.

3. Why we use it

• to take payment, deliver the files, and email your receipt and download links;
• to answer support requests and handle refunds;
• to detect fraud and abuse, including rate-limiting download-link requests;
• to understand which pages and products are useful, so we can improve them;
• to meet tax, accounting and legal obligations.

4. Our legal bases (EEA/UK visitors)

Where the GDPR applies, we rely on: performance of a contract (delivering what you bought), legitimate interests (keeping the site secure, preventing fraud, improving the catalogue), consent (non-essential cookies and analytics, where required), and legal obligation (records we must keep).

5. Cookies

Essential cookies keep your session and language working and cannot be switched off. Analytics and similar tools are used to count visits and understand which pages are read; where the law requires consent, they load only after you agree. You can clear cookies in your browser at any time; the site will keep working, but you may need to pick your language again.

6. Who we share it with

We share the minimum necessary with service providers who process data on our behalf:

• payment providers — to take payment and handle refunds and chargebacks;
• email delivery providers — to send receipts, download links and support replies;
• hosting and infrastructure providers — to serve the site and store the files;
• analytics providers — to measure traffic, where consent applies.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. International transfers

Our servers and providers may be located outside your country, including in the United States and the European Union. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.

8. How long we keep it

Order and payment records are kept for as long as tax and accounting law requires (typically six to seven years). Support emails are kept for up to two years. Analytics data is kept in aggregate for up to 24 months. Download links expire after 90 days; the licence record stays so you can ask for your links again later.

9. Your rights

Depending on where you live, you may ask us to: confirm what we hold about you; correct it; delete it; restrict or object to certain uses; provide it in a portable format; or withdraw consent you previously gave. Email wazigua858@gmail.com and we will respond within 30 days. You can also complain to your local data protection authority. If you are in California, you have the right to know, delete, and opt out of "sale" or "sharing" — we do neither.

10. Children

Our products are sold to adults organising events. The site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has sent us data, contact us and we will delete it.

11. Security

The site runs over HTTPS. Download links are unguessable tokens tied to your order, expire after 90 days, and are rate-limited. Access to order data inside our business is limited to the people who need it.

12. Changes

We may update this policy. The date at the top shows the current version, and material changes will be announced on the site.

13. Contact

Privacy questions and requests: wazigua858@gmail.com. See also our Terms of Service and Refund Policy.