Privacy Policy

This website and Gotopbuy services are operated by Three eye well Limited, which is the controller of your personal information.

Legal company name: Three eye well Limited; business registration number: 81522655-000-11-26-4; registered address: RM08, 2/F, No.143 Wai Yip Street, Kwun Tong, Hong Kong; operating address: Room 103, No.21 Lane 1, Sanyanjing, Yuexiu District, Guangzhou City, China.

Questions about this policy, our data processing or your rights may be sent to [email protected].

To provide shopping agent and forwarding services, we collect:

1. Account information: email address, phone number and securely hashed password provided at registration, plus nickname, avatar and authorization ID from social login providers;

2. Order and delivery information: product links, specification notes, recipient name, overseas shipping address and phone number;

3. Payment and balance records: top-up and transaction history. We do not store your credit card or payment account credentials; payments are processed by licensed payment providers;

4. Login and device logs: browser type, language preference, IP address at login and registration, and access records, used only for account security, unusual-login detection, risk auditing and service troubleshooting, never for cross-site advertising.

We use your personal information only to: purchase products, provide storage, consolidation and international shipping; process top-ups, refunds and after-sales requests; perform identity verification and fraud prevention; send order status notifications by email or in-site message; and comply with applicable laws.

We will not use your personal information for purposes beyond those described without your consent.

We use cookies and browser local storage to keep you signed in, remember your language and currency preferences, and secure your session. You may manage or delete cookies through your browser settings, but some features may not work properly without them.

We never sell your personal information. When necessary for the service, information may be shared with: Chinese suppliers and sellers (to purchase items), international carriers (to deliver parcels — only the recipient information required for the waybill), payment providers (to complete transactions), and regulators or judicial authorities as required by law.

All partners are bound by contracts and applicable laws to protect your data.

We protect your data with HTTPS encryption, salted password hashing, API authentication, access controls and regular security reviews.

Raw IP addresses in login audits, the latest-login IP shown in account records, and the registration-source IP are retained for 180 days by default, then cleared or anonymized by a scheduled task. Only authorized administrators may access raw IPs for security investigations. Risk-profile records store only irreversible HMAC digests and are deleted after 180 days by default, unless retention is required for legal, dispute or security-investigation purposes.

You have the right to access, correct and delete your personal information, close your account, withdraw consent, or request a copy of your data. You can update information directly in your dashboard, or contact [email protected] to exercise any of these rights.

This policy may be updated from time to time. Updated versions will be posted on this page with a revised “Last updated” date; material changes will be communicated via in-site message or email.

When you sign in with Facebook, we receive the Facebook user ID, public profile information (name and avatar) and, if authorized, your email address. We do not store your Facebook access token.

This information is used only to create or sign in to your Gotopbuy account, display profile details, prevent account abuse, and associate orders and support records with your account as requested.

You can remove Gotopbuy from your Facebook Apps and Websites settings. Our Deauthorize callback removes the Facebook login link. When Meta sends a data deletion request, we delete or anonymize the linked account's name, email, phone, addresses, cart, messages, tickets, inspection images and authentication tokens.

Payment, refund and financial audit records required by law may be retained in anonymized form without direct identifiers. You can check a deletion request at https://gotopbuy.com/data-deletion.

For manual assistance, email [email protected] with the deletion confirmation code returned by Meta.