This policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your personal information. If you use Sign in with Google, please read Section 4, "Use of Google User Data", in particular.
1. Scope
This Privacy Policy applies to sarong.vip (the "Site") and its services including product browsing, account registration, Sign in with Google, quotations, orders, customization and after-sales support. The Site is operated by SarongOEM. By using the Site you acknowledge that you have read this policy.
The Site serves business and wholesale buyers. If you do not agree with this policy, please do not register or submit personal information, and contact us at sarongvip@gmail.com.
2. Information We Collect
We collect only the information necessary to provide our wholesale services:
Account data: username, company name, contact person, phone number, email address and a one-way hashed password (we cannot read your password in plain text).
Sign in with Google: when you choose this option, we request only the openid, email and profile scopes via Google OAuth 2.0, and receive your Google account identifier (sub), email address, display name and profile picture URL. We never receive your Google password and never access Gmail, Drive, Contacts, Calendar or any other Google service content.
Transaction data: quotations, orders, items and quantities, shipping addresses, invoicing/customs information and payment status. Sensitive card data is handled directly by third-party payment providers; we do not store full card numbers.
Technical and log data: IP address, browser and device type, access times, pages visited, cookies and on-site analytics used for login security, fraud prevention, troubleshooting and site improvement.
Communications: enquiries and artwork you voluntarily submit via email, WhatsApp, customer support or customization forms.
3. How We Use Information
We process your information to perform our sales contracts, provide account services, comply with legal obligations and pursue legitimate business interests, specifically to:
Create and verify accounts, complete Google sign-in, and identify your membership tier and applicable pricing;
Process quotations, orders, production, quality control, customs clearance, shipping and after-sales service;
Send order status, shipping and account security notices (non-marketing);
Send new product and promotional information where you have consented; you may opt out at any time;
Prevent fraud, abuse and unauthorized access to protect accounts and transactions;
Comply with tax, customs, accounting and other legal obligations.
We do not make legally significant decisions about you solely by automated means, nor use your personal information for purposes unrelated to those described above.
4. Use of Google User Data (Limited Use)
This section specifically explains how the Site accesses, uses, stores and shares Google user data obtained through Sign in with Google, in compliance with the Limited Use requirements of the Google API Services User Data Policy:
We use Google user data only to provide and improve the user-facing sign-in and account functionality: creating or matching your Site account, displaying your name and avatar, and authenticating you;
We do not use Google user data for advertising of any kind, including targeted advertising, retargeting or building advertising audiences;
We do not sell, rent or transfer Google user data to data brokers;
We do not allow humans to read Google user data except where necessary for security and fraud prevention, to comply with law, or with your explicit consent, and access is limited to authorized personnel bound by confidentiality obligations;
We do not use Google user data to train general-purpose AI or machine learning models;
We share data only with service providers (such as hosting and database providers) where necessary to deliver the above functionality, under contracts imposing equivalent confidentiality and Limited Use obligations. We may also disclose data where required by law, in a merger or acquisition, or with your explicit consent;
We do not request any Google scopes beyond openid, email and profile.
5. Sharing and Disclosure
We do not sell your personal information. To fulfil transactions, we share data only as necessary with:
Payment providers (payments and refunds), logistics and customs brokers (delivery and clearance), and production/QC partners (order fulfilment);
Hosting, database, email and analytics providers, bound by contract to process data only on our instructions;
Affiliated business systems for order and customer record synchronization, with access under permission controls;
Regulators, courts or tax authorities, only where legally required or necessary to protect our and our users' lawful rights.
Beyond these cases, we do not disclose personally identifiable information to third parties.
6. Storage, Security and Retention
Your information is stored in access-controlled databases and transmitted over HTTPS/TLS. Passwords are stored as one-way hashes, and Google account identifiers and email addresses are used solely for account binding and authentication. We apply least-privilege access, log auditing and regular backups. No internet transmission is absolutely secure, so please safeguard your credentials.
We retain information only as long as necessary: account data until a reasonable period after account deletion, and order and transaction records for the periods required by tax, customs and accounting law. Data is deleted or anonymized afterward. You may request deletion of your account and related personal data at any time, except where retention is legally required.
7. Your Rights and Choices
You may access, correct, export or delete your personal information, withdraw marketing consent, and close your account. Submit your request to sarongvip@gmail.com; we will verify your identity and respond within a reasonable period.
Regarding Google account authorization: you may revoke the Site's access at any time via the Google Account permissions page at myaccount.google.com/permissions. After revocation, Google sign-in will no longer work for your account, without affecting data lawfully processed beforehand. You may continue using your Site username and password, or contact us to unlink your Google account.
8. Cookies and Similar Technologies
We use essential cookies to maintain login sessions, language preferences and cart state, and analytics cookies to understand page usage and improve the experience. You can block or clear cookies in your browser, but sign-in and checkout may then not function correctly.
9. Children's Privacy and Third-Party Links
The Site is a B2B procurement platform, is not directed to persons under 18, and does not knowingly collect their personal information. Links to third-party sites (such as Google, payment or logistics providers) are governed by their own privacy policies, for which we are not responsible.
10. Updates and Contact
This policy may be updated as our business or legal requirements change. Updates will be posted here with a new effective date, and material changes will be notified on the Site or by email. Effective date of this version: 2026-11-11.
For questions, complaints or requests regarding this policy, personal data or Google user data, please contact sarongvip@gmail.com (operator: SarongOEM). We will respond within a reasonable period.
