Last updated September 14, 2026.
This policy explains what personal information xmastraditions, operated by ZONIDY LIMITED, collects when you visit xmastraditions.com or place an order, why we collect it, who we share it with, and the choices you have. It covers the California Consumer Privacy Act as amended by the CPRA, and the comparable state privacy laws in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana.
1. Information we collect
| Category | Examples | Why |
|---|---|---|
| Identifiers | name, shipping and billing address, email address, phone number, IP address | to process and deliver your order, to answer support email, to prevent fraud |
| Commercial information | items ordered, order value, return and refund history | to fulfill orders and handle returns |
| Payment information | the last four digits and card type only | to identify a transaction; the full card number goes directly to our payment processor and we never receive it |
| Internet activity | pages viewed, products viewed, referring site, device and browser type | to run the store, measure advertising, and improve the site |
| Geolocation | approximate location inferred from IP address | to calculate sales tax and detect fraud |
We do not knowingly collect personal information from children under 13, and we do not collect sensitive personal information as defined by the CPRA.
2. Where the information comes from
Directly from you at checkout, when you email us, and when you subscribe to our email list. Automatically from your device through cookies and similar technologies. From our service providers, such as our payment processor and our shipping carriers.
3. Cookies and tracking technologies we actually use
We run the following on this site, and nothing else:
- Shopify — essential cookies for the cart, checkout, and security. These cannot be switched off without breaking the store.
- Google Analytics 4 — analytics: which pages and products people look at, in aggregate.
- Google Ads tag — advertising and conversion measurement, which involves sharing online identifiers with Google for advertising purposes.
We do not run a Meta (Facebook) pixel, and we do not send marketing SMS.
A cookie banner appears on your first visit. You can reject advertising cookies from that banner and continue using the store normally. You can change your choice at any time through the cookie settings link in our footer, and you can also block or delete cookies in your browser.
4. Email marketing
We collect email addresses through a signup popup and at checkout, and we send occasional marketing email. Every message has an unsubscribe link, and unsubscribing takes effect immediately. We do not send marketing text messages and we do not sell your email address.
5. Who we share information with
We share only what is necessary, and only with:
- Shopify — our ecommerce platform
- Stripe — payment processing
- our fulfillment partner in China, which receives your name, address, phone number, and order contents in order to ship your parcel
- USPS and FedEx — delivery
- Google — analytics and advertising
- professional advisers, and law enforcement or regulators where we are legally required to disclose
We do not sell your personal information for money. However, sharing online identifiers with Google for targeted advertising is treated as a “sale” or “sharing” under California and several other state laws. You can opt out on our Your Privacy Choices page.
6. International transfers
Because our company is registered in Hong Kong and our fulfillment partner is in China, your order information is transferred and processed outside the United States. We share only what the partner needs to ship your order.
7. How long we keep it
Order records are kept for seven years for tax and accounting purposes. Support email is kept for two years. Marketing subscriber records are kept until you unsubscribe. Analytics data is retained for 14 months.
8. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and how we use it;
- access a copy of it;
- delete it, subject to our legal record-keeping obligations;
- correct inaccurate information;
- opt out of sale or sharing for targeted advertising;
- not be discriminated against for exercising any of these rights — we will not change your prices or refuse to serve you.
9. How to exercise a right
Email support@xmastraditions.com with the request and the email address you used to order, or call +1 323-283-4525. We confirm receipt within 10 business days and respond within 45 calendar days, and we will tell you if we need a 45-day extension. To protect your data we verify requests by matching the details you give us against our order records. An authorized agent may submit a request on your behalf with written permission.
10. Global Privacy Control
If you visit with the Global Privacy Control signal enabled, we treat it as an opt-out of sale and sharing for the browser and device you are using.
11. Security
The site runs over HTTPS and payment pages are encrypted. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
12. Changes
If we change this policy we will update the date at the top of this page.
13. Contact
xmastraditions is operated by ZONIDY LIMITED, registered office Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Rd, Central, Hong Kong. This is a registered office address only — we do not operate a retail store, showroom, or warehouse at this address. Email support@xmastraditions.com or call +1 323-283-4525.