Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how WONDFUL (HK) TECHNOLOGY LIMITED, operating the ZENHAX online store ("ZENHAX," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you visit our website, purchase products, request vehicle-fitment assistance, contact us, or otherwise use our services.

1. Personal information we collect

Depending on how you use our services, we may collect:

• Contact and account information: name, email address, telephone number, billing and shipping addresses, account credentials, and communication preferences.
• Order and transaction information: products purchased, order history, payment status, returns, refunds, tax and shipping information. Payment-card details are generally processed by Shopify or our payment providers rather than stored directly by us.
• Vehicle and fitment information: vehicle make, model, year, trim, factory audio configuration, steering position, connector details, VIN or partial VIN when voluntarily supplied for compatibility review, and photos or videos you send to support fitment or troubleshooting.
• Communications and support information: emails, contact-form submissions, chat messages, call records or notes, product reviews, and information provided during warranty, return, or support requests.
• Device and usage information: IP address, browser and device type, cookie identifiers, pages viewed, referring URLs, approximate location, storefront interactions, and diagnostic data.
• Marketing information: preferences, campaign interactions, and advertising or analytics identifiers where those services are enabled and permitted.

2. How we collect information

We collect information directly from you, automatically through the storefront and related technologies, and from service providers and business partners such as Shopify, payment processors, shipping carriers, fulfillment warehouses, analytics providers, advertising partners, fraud-prevention services, and customer-support tools.

3. Why we use personal information

We may use personal information to:

• provide, personalize, and improve the storefront and customer experience;
• process payments, orders, deliveries, returns, refunds, and replacements;
• verify vehicle compatibility and provide installation or technical support;
• communicate about orders, products, service messages, and policy changes;
• detect, investigate, and prevent fraud, abuse, security incidents, and prohibited activity;
• maintain records, enforce our terms, resolve disputes, and comply with legal obligations;
• conduct analytics and improve products, content, and operations; and
• send marketing where permitted and in accordance with your choices.

Where applicable law requires a legal basis, we rely on performance of a contract, compliance with legal obligations, our legitimate interests, consent, or another basis permitted by law.

4. How we disclose personal information

We may disclose personal information only as reasonably necessary to:

• Shopify and commerce providers: to host and operate the store, process transactions, and provide connected commerce services;
• payment processors and financial institutions: to authorize payments, manage disputes, and prevent fraud;
• carriers, warehouses, installers, and fulfillment partners: to deliver orders and handle returns, replacements, or service requests;
• technology, analytics, advertising, and support providers: to operate, secure, measure, and promote our services where enabled;
• professional advisers and authorities: when reasonably necessary for legal, accounting, insurance, compliance, or safety purposes; and
• business transaction parties: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not disclose personal information to third parties for their independent direct marketing unless we provide notice and any choice required by applicable law.

5. Cookies, analytics, and advertising choices

Our storefront and service providers may use cookies, pixels, local storage, and similar technologies for essential functions, preferences, analytics, fraud prevention, and advertising. Where required, non-essential technologies are used only after an appropriate consent choice.

You may manage available choices through the cookie banner, customer privacy controls, browser settings, and advertising-platform controls. Blocking essential cookies may prevent parts of the storefront from working. Depending on the jurisdiction and the services enabled, certain advertising-related disclosures may be considered a "sale," "sharing," or use for targeted advertising. Where required, we provide a method to opt out and honor legally recognized preference signals when supported.

6. Direct marketing

We may send promotional email or other marketing only where permitted. You can unsubscribe using the link in a marketing message or by contacting us. Unsubscribing from marketing does not stop transactional communications about an order, account, return, safety notice, or service request.

7. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, maintaining warranty and transaction records, preventing fraud, resolving disputes, and meeting tax, accounting, legal, and compliance obligations. Retention periods vary by the type of information and applicable requirements. We delete, anonymize, or securely isolate information when it is no longer required.

8. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized or accidental access, use, alteration, disclosure, loss, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your account credentials and contact us if you suspect unauthorized use.

9. International processing and transfers

We operate from Hong Kong and use service providers and fulfillment partners in other countries, including the United States. Your personal information may therefore be processed in countries with data-protection laws different from those in your location. Where required, we use appropriate contractual or legal safeguards for cross-border processing.

10. Your privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information; to object to or restrict certain processing; to withdraw consent; to opt out of certain advertising disclosures; or to appeal a privacy decision. These rights may be subject to legal exceptions.

To make a request, email service@zenhax.email with the subject "Privacy Request." We may need to verify your identity and authority before responding. Authorized agents may be required to provide proof of authorization. We will not unlawfully discriminate against you for exercising a privacy right.

11. Children's privacy

Our services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it where required.

12. Third-party websites

Our website may link to third-party sites or services. Their privacy practices are governed by their own notices, and we are not responsible for their independent privacy practices.

13. Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. The revised version will be posted with a new "Last updated" date. We will provide additional notice when required by law.

14. Contact us

For privacy questions, access or correction requests, or complaints, contact:

WONDFUL (HK) TECHNOLOGY LIMITED
Attn: Privacy Contact
19H Maxgrand Plaza
No. 3 Tai Yau Street
San Po Kong, Hong Kong
Email: service@zenhax.email
Phone: +1 (951) 333-1337

You may also have the right to contact the privacy or data-protection authority in your jurisdiction.