Privacy Notice
Effective date:
This notice explains how we handle your personal information when you use yjca.top (main site), kefu.yjca.top (AI customer service) and xue.yjca.top (Yunjin Academy).
1. Who we are
These websites are operated by 西安市雁塔区古风美人汉服体验馆, an individual business registered in China (operator: Meng Hongyu; Unified Social Credit Code 92610113MAC0RX8G84), trading as Yunjin Chang'an Hanfu Experience ("we", "us"). We decide how and why your personal information is processed (under the GDPR, we are the "controller").
- Address: Ground-floor shop, Cuihuali, Cuihua Road, Yanta District, Xi'an, Shaanxi (next to Crystal Orange Hotel, at Shili Hongzhuang Ge 十里红妆阁)
- Phone: +86 180 9207 8118
- Email: lluyanyu2008@gmail.com
2. What we collect and why
We process personal information only in the situations listed below. The main site has no contact form. It uses only our own analytics script, which records which pages are viewed (including the language version), how long each page is viewed, and whether contact options are viewed, clicked or copied (phone, WhatsApp, WeChat, contact links, or the enquiry message template). Visitors are told apart only by a temporary random ID in your browser's session storage that disappears when you close the page. No cookies are set, no names or phone numbers are collected (the records do include your IP address and browser type), no third-party analytics service is used, and the data stays on our own servers. Server access logs are described in section 3.
a) AI customer service and bookings (kefu.yjca.top)
- What: the information you enter in the booking form (visit date, number of people, mobile or international phone number, WeChat ID, notes) and the content of your chat with the AI assistant.
- Why: to confirm and arrange your booking, contact you, and answer your questions.
- How: the form and chat content are sent to our shop's back office, and staff are alerted through a workplace messaging tool (DingTalk, and possibly Feishu or WeCom). These alerts may include the contact details and enquiry you left. Chat content is also processed by the large language model service of DeepSeek, a company based in mainland China, to generate replies.
- Legal basis: necessary to arrange and perform the booking you request (contract). If you do not give contact details, we may be unable to confirm your booking; you can also book by phone.
b) Translation (main site)
- Switching to a language for which we have made our own version does not involve Google. Only if you choose a language we have not made ourselves, a prompt appears first, and the Google Translate widget loads only after you click to confirm.
- Once loaded, your browser stores a translation cookie (usually named "googtrans") and a local storage (localStorage) entry, and the page text plus technical information such as your IP address and browser type is sent to Google to produce the translation.
- Google's servers are located outside mainland China, so this information is transferred abroad and handled under Google's own privacy policy (policies.google.com/privacy).
- Legal basis: your consent. Nothing loads unless you confirm. You can withdraw at any time by clearing this site's cookies and local storage in your browser.
c) Yunjin Academy (xue.yjca.top)
- Registration: mobile number, WeChat ID, city, and any images you choose to upload (which may include photos of yourself), used to process your registration, contact you and arrange classes. Uploaded images are stored in Tencent Cloud Object Storage (COS).
- Feedback: WeChat ID and any images you upload, used to handle your feedback and questions.
- Orders and payment: order details (course, amount, time, order number), used to complete the transaction, provide after-sales support and keep accounts. Payments are handled by WeChat Pay. We do not receive your bank card number or similar payment details.
- WeChat login: if you choose to log in through our WeChat Official Account and grant authorization, we receive your OpenID (a user identifier WeChat assigns for our site) and your WeChat nickname, used to create and recognize your account.
- AI features: the three features below use DeepSeek's large language model service, and the related content is sent to DeepSeek for processing. Your name, phone number and WeChat identifier are not included.
- AI Q&A: your question plus the last 4 messages of the same conversation;
- AI copywriting: the topic, keywords and style you enter;
- Homework review and scoring: the homework photos you upload (sent as a temporary link; photos may show faces). If you do not want your photos processed by AI, please do not use this feature.
- Visit statistics: the site itself records aggregate information such as the number of visits and pages viewed to understand how the site is used. It sets no cookies, is not used to identify you, and we do not use third-party analytics services.
- Legal basis: registration, orders and login are necessary to provide the course you sign up for (contract); keeping order and payment records is required by tax and accounting laws (legal obligation); feedback is handled because you choose to send it (consent); visit statistics are based on our legitimate interest in understanding and improving the site, where the GDPR applies.
About uploaded images: please do not upload photos of other people, and do not upload photos of minors without a parent's or guardian's consent.
3. Who we share it with
All three websites are hosted by Tencent Cloud in its Shanghai data centre (mainland China). The servers automatically keep access logs, including IP address, time of access, pages requested and browser information, to keep the sites secure and fix faults. Chinese cybersecurity law requires websites to keep such logs (legal obligation; where the GDPR applies, also our legitimate interest in security).
Only the following parties access your information, and only as needed:
- Tencent Cloud – server hosting and storage;
- DeepSeek (in mainland China) – large language model service for the AI assistant and Yunjin Academy AI features;
- DingTalk (and possibly Feishu or WeCom) – alerting our staff to bookings and enquiries;
- Google – translation, only after you confirm;
- WeChat Pay – processing course payments;
- WeChat – Official Account login (only if you choose it).
We do not sell your personal information and do not use it for purposes other than those described here. We may disclose information where required by law or by a competent authority acting lawfully.
4. Where your information is processed
We are based in China. If you are visiting from abroad, your booking, registration and order information is sent to and stored on servers in mainland China, whose data protection laws may differ from those of your country. AI chat content is also processed in mainland China. The only transfer outside China is Google Translate, which happens only if you confirm it, as described in section 2(b).
5. How long we keep it
- Booking, registration and feedback information, chat records and uploaded images: no longer than 1 year after the service is completed or the issue is resolved, for after-sales support and accounting, unless the law requires otherwise. After that, we delete or anonymize them.
- Order and payment records: for the period required by law.
- Account information: until you close your account.
- Server access logs: at least 6 months and no longer than 1 year, then deleted.
- Visit statistics: main-site records include IP address and browser type and are kept no longer than 1 year, then deleted; Yunjin Academy visit statistics contain no information that identifies you.
- Translation cookie and local storage: stay in your browser until you clear them or they expire.
6. Your rights
Under China's Personal Information Protection Law and, where it applies to you, the GDPR, you may:
- access and obtain a copy of your personal information;
- have inaccurate or incomplete information corrected or completed;
- have your information deleted;
- restrict or object to our processing;
- withdraw your consent at any time (this does not affect processing already carried out);
- where legal conditions are met, receive your information in a portable form or have it transferred to another provider;
- close your Yunjin Academy account, after which we will delete or anonymize the related personal information, except records we must keep by law (such as order and payment records);
- ask us to explain this notice.
How to exercise your rights: contact us by phone or email (section 1). We may need to verify your identity first, and we will normally reply within 15 working days.
Complaints: you may complain to the Chinese authorities (such as the Cyberspace Administration or market regulation authorities) or bring a claim before a court. If you are in the EU/EEA, you also have the right to lodge a complaint with the data protection supervisory authority in your country of residence or work.
7. Children
Children under 14 may only submit a booking, registration or order with the consent of a parent or guardian, and we recommend that a parent or guardian does this for them. If we learn that we have collected a child's information without such consent, we will delete it promptly.
8. Security
We take reasonable technical and organizational measures to protect your information, but no internet transmission or storage is completely secure. If a personal information security incident occurs, we will take remedial action and notify you and the authorities as required by law.
9. Changes to this notice
When we update this notice, we will post the new version on this page and update the effective date. We will highlight significant changes on the website.
This notice is also available in Chinese. If the two versions differ, the Chinese version prevails.