BazaKit legal center
Privacy Policy
This policy describes how Cujia Group collects, uses, shares and protects personal information when operating BazaKit globally.
On this page
1. Controller and contact
Cujia Group (ไฟไฝณ้ๅข), based in Yiwu, Zhejiang, China, is the controller or personal-information processor for BazaKit unless another notice says otherwise. Privacy questions and rights requests may be sent to privacy@bazakit.com. Order support remains available at support@bazakit.com.
2. Information we collect
- Identity and contact data: name, company, address, email, telephone, tax/import identifiers and account credentials.
- Transaction data: cart, orders, payments, refunds, invoices, shipment and customs information. We normally receive payment status and limited payment details, not the full card number.
- Product and support data: preferences, reviews, uploaded photos/video, correspondence, return evidence and survey responses.
- Technical data: IP address, device, browser, approximate location, identifiers, cookie choices, logs and use of the site.
- Information from authorized payment, logistics, fraud-prevention, marketing or social-media partners.
3. Why and on what basis we use it
To create accounts, process orders, customize kits, collect payment, ship, clear customs, handle returns and provide supportโnecessary to perform a contract or take requested pre-contract steps.
To secure the service, prevent fraud, maintain records, improve products and defend legal claimsโour legitimate interests or corresponding lawful basis, balanced against your rights.
To comply with tax, customs, accounting, product-safety, sanctions and other legal obligations.
To send marketing or use non-essential cookies with consent where required. You can withdraw consent without affecting earlier lawful processing.
5. International transfers
Because BazaKit is operated from China and serves customers globally, information may be transferred to and processed in China and other countries involved in fulfilment. Where required, we use consent, standard contractual clauses, certification, security assessment or another lawful transfer mechanism and provide additional information upon request.
6. Retention
We keep information only as long as needed for the stated purposes: transaction and tax records generally for the legally required accounting period; support and dispute records for the applicable claim period; security logs for a proportionate operational period; and marketing data until consent is withdrawn or the relationship becomes inactive. We then delete or anonymize it unless preservation is legally required.
7. Your choices and rights
Subject to location and applicable law, you may request access, confirmation, correction, completion, deletion, restriction, portability, information about sharing, withdrawal of consent, objection to certain processing, and review of a decision based solely on automated processing. You may also complain to the relevant data-protection authority. We will verify identity and respond within the legally required time. Authorized-agent requests require proof of authority.
9. Security, children and incidents
We use proportionate organizational and technical safeguards, access controls and vendor review, but no internet service is risk-free. We will notify affected people and authorities of a qualifying breach as required. BazaKit is not directed to children, and purchasers must be at least 18 or the legal age of majority. Contact us if a child has provided information without valid authorization.
10. Changes
We may update this policy for legal, operational or service changes. The new version and effective date will be posted here; material changes will receive additional notice where required.
Need help?