Privacy Policy
Table of Contents
- Introduction
- Information We Collect
- How We Collect Your Information
- How We Use Your Information
- Legal Basis for Processing (EEA / Residents)
- How We Share Your Information
- Cookies and Similar Tracking Technologies
- Data Retention
- Your Rights and Choices
- International Data Transfers
- Children’s Privacy
- Security Measures
- Do Not Sell or Share My Personal Information (California Residents)
- Changes to This Policy
- Contact Us
1. Introduction
Welcome to BJSABER (“we,” “us,” or “our”). We operate the website bjsaber.com (the “Site”) and sell handcrafted, high-end lightsaber collectibles and related accessories to customers in the United States.
BJSABER is a brand operated by Suzhou Yiyang Technology Co., Ltd., a Chinese limited liability company (有限责任公司) registered in Jiangsu Province, People’s Republic of China, with its principal place of business at Room 602-01, Building W02, South Bank New Land, No. 11 Yangfu Road, Suzhou Industrial Park, Suzhou Area, China (Jiangsu) Pilot Free Trade Zone, China.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, make a purchase, or otherwise interact with us.
By accessing or using the Site, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect the following categories of personal information:
2.1 Information You Provide Directly
- Account information: name, email address, password (hashed), phone number (optional)
- Order information: shipping address, billing address, order history, product preferences
- Payment information: credit/debit card details (processed by PayPal — we do NOT store full card numbers on our servers), billing details
- Communications: messages you send us via email, contact forms, or customer service
- Reviews and testimonials: content you voluntarily submit
- Marketing preferences: newsletter subscriptions, faction preferences (Light / Dark / Neutral Gray)
2.2 Information Collected Automatically
- Device information: IP address, browser type and version, operating system, device identifiers
- Usage information: pages viewed, products browsed, time spent on pages, referring URLs, click patterns
- Location information: country, region, city (derived from IP — we do not collect precise GPS location)
- Cookie data: see Section 7 below
2.3 Information from Third Parties
- Payment processors (PayPal): transaction status, fraud signals
- Analytics providers (Google Analytics): aggregated usage data
- Advertising platforms (Meta/Facebook Pixel, Google Ads): conversion data, audience insights
- Email service (Klaviyo): email open rates, click-through rates, list-unsubscribe status
- Logistics carriers (USPS, FedEx, DHL, China Post): tracking events, delivery confirmation
3. How We Collect Your Information
- Directly from you: when you register, place an order, subscribe to our newsletter, contact support, or post a review
- Automatically: through cookies, web beacons, pixels, and server logs
- From third parties: as listed in Section 2.3
4. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Examples |
|---|---|
| Order fulfillment | Process orders, ship products, send tracking info, handle returns |
| Payment processing | Charge payment methods, prevent fraud, manage refunds |
| Customer service | Respond to inquiries, resolve disputes, provide support |
| Marketing | Send newsletters (with consent), promotional offers, abandoned cart reminders |
| Site improvement | Analyze traffic, A/B test features, fix bugs, improve UX |
| Legal compliance | Tax reporting, anti-fraud measures, law enforcement requests |
| Personalization | Recommend products based on browsing history, display relevant content |
| PK / Faction game (if you opt in) | Track faction energy contributions |
We do NOT use your data for automated decision-making that produces legal effects on you.
5. Legal Basis for Processing (EEA / Residents)
If you are located in the European Economic Area (EEA), , or Switzerland, we process your personal data under the following legal bases (per Article 6 of the GDPR):
| Purpose | Legal Basis |
|---|---|
| Order fulfillment, customer service | Performance of contract (Art. 6(1)(b)) |
| Marketing emails (existing customers) | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails (new subscribers) | Consent (Art. 6(1)(a)) |
| Analytics, advertising | Consent via cookie banner (Art. 6(1)(a)) |
| Tax reporting, legal compliance | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention | Legitimate interest (Art. 6(1)(f)) |
6. How We Share Your Information
We do NOT sell your personal information to third parties for monetary consideration.
We share personal information with the following categories of recipients, only as needed:
6.1 Service Providers (Processors)
| Provider | Purpose | Data Shared |
|---|---|---|
| PayPal Holdings, Inc. | Payment processing, fraud detection | Card details, billing address, order total |
| PayPal | Payment processing | PayPal account, billing address, order total |
| Klaviyo | Email marketing, abandoned cart | Email, name, order history, browsing data |
| Hostinger International Ltd | Hosting, server logs | All data (stored on US-based servers) |
| Google LLC (Analytics, Ads) | Site analytics, advertising | IP, cookies, browsing data |
| Meta Platforms Inc. (Facebook Pixel) | Advertising, retargeting | Cookies, browsing data, conversion events |
| USPS / FedEx / DHL / China Post | Shipping, tracking | Name, shipping address, email (for tracking) |
| UpdraftPlus | Backup storage | Database snapshots (encrypted) |
| LiteSpeed / Cloudflare | CDN, caching, security | IP, request headers |
6.2 Legal Requirements
We may disclose your information if required to:
- Comply with applicable law, regulation, court order, or legal process
- Respond to lawful requests from public authorities
- Enforce our Terms of Service
- Protect our rights, privacy, safety, or property
- Detect and prevent fraud or illegal activity
6.3 Business Transfers
If BJSABER is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred to the acquiring entity. Where required by applicable law, we will provide notice before your information becomes subject to a different privacy policy.
7. Cookies and Similar Tracking Technologies
We use cookies, web beacons, pixels, and similar technologies. For full details, see our Cookie Policy.
Summary:
- Strictly necessary cookies: required for the Site to function (cart, checkout, login) — cannot be disabled
- Analytics cookies: Google Analytics — track site usage in aggregate
- Marketing cookies: Meta Pixel, Klaviyo — enable personalized ads and email
- Preference cookies: language, currency — remember your settings
You can manage cookie preferences via our cookie consent banner or your browser settings.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
| Data Type | Retention Period |
|---|---|
| Order records | 7 years (tax / accounting requirements) |
| Account information | For as long as your account is active, or as required by applicable law |
| Payment records | 7 years (financial regulation) |
| Customer support tickets | 3 years |
| Marketing email engagement | Until you unsubscribe |
| Analytics data (aggregated) | Up to 26 months (Google Analytics default) |
| Backup data | As long as reasonably necessary for operational and disaster-recovery purposes |
| Server logs | As long as reasonably necessary for security and fraud-prevention purposes |
After the retention period, data is securely deleted or anonymized.
9. Your Rights and Choices
9.1 For EEA / / Swiss Residents (GDPR Rights)
You have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate or incomplete data (Art. 16)
- Erase your data (“right to be forgotten”) (Art. 17)
- Restrict processing (Art. 18)
- Data portability — receive your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3))
- Lodge a complaint with your local data protection authority (Art. 77)
To exercise these rights, contact us at support@bjsaber.com. We will respond within the timeframes required by applicable law.
9.2 For California Residents (CCPA / CPRA Rights)
See Section 13 below and our dedicated Do Not Sell or Share My Personal Information page.
9.3 For All Users
- Unsubscribe from marketing emails: click “Unsubscribe” in any email or email unsubscribe@bjsaber.com
- Disable cookies: see our Cookie Policy
- Delete your account: email support@bjsaber.com
10. International Data Transfers
BJSABER is headquartered in the United States, and our servers are located in the US.
If you are located in the EEA, , Switzerland, or other jurisdictions with cross-border data transfer restrictions, please note that:
- Your data will be transferred to and processed in the United States
- The US may have different data protection standards than your jurisdiction
- For transfers from the EEA/, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission (2021/914) and the International Data Transfer Addendum
By using our Site, you acknowledge and consent to the transfer of your information to the United States.
11. Children’s Privacy
Our Site and products are not directed to children under 13 (or under 16 in the EEA/).
We do not knowingly collect personal information from children. Our lightsabers are collectibles and toy-grade electronics marketed to teens and adults (13+ for non-EU users, 16+ for EU users per GDPR guidance for information society services).
LIGHTSABER-SPECIFIC NOTE: Lightsabers are not weapons and are designed for safe use as collectibles and display items. We require purchasers to be at least 13 years old (or the age of digital consent in their jurisdiction).
If you believe we have collected information from a child in violation of these terms, please contact us at support@bjsaber.com. We will delete such information as required by applicable law.
12. Security Measures
We implement industry-standard technical and organizational measures to protect your information, including:
- Encryption in transit (HTTPS / TLS 1.3)
- Encryption at rest for sensitive data
- Payment card data is handled exclusively by PCI-DSS compliant processors (PayPal) — we never store full card numbers
- Access controls — only authorized personnel can access personal data, on a need-to-know basis
- Two-factor authentication for admin accounts
- Regular backups (encrypted)
- Security monitoring and intrusion detection
- Rate limiting on authentication endpoints
- Annual security review
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
13. Do Not Sell or Share My Personal Information (California Residents)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the “sale” or “share” of their personal information.
We do NOT sell personal information for monetary consideration.
However, we may “share” personal information for cross-context behavioral advertising (e.g., Meta Pixel, Google Ads). California residents may opt out of this sharing.
How to opt out: Visit our Do Not Sell or Share My Personal Information page for instructions, or email support@bjsaber.com.
Categories of personal information shared for advertising:
- Identifiers (cookie IDs, device IDs)
- Internet activity (browsing history on our Site)
- Inferences (preferences, characteristics)
13.1 Right to Erasure (“Right to be Forgotten”)
If you are a resident of the European Economic Area (EEA), California, or another jurisdiction that grants you data deletion rights, you may request that we delete your personal information.
How to Request Deletion:
Email support@bjsaber.com with subject line “Data Deletion Request” and include:
- Full name
- Email address(es) associated with your account
- Phone number (optional)
- A statement that you wish to delete your personal data
What We Will Delete:
- Account information (name, email, phone, address)
- Marketing preferences and communications history
- Browsing data (where identifiable to you)
- Cookie-based data (handled via Complianz preferences)
What We May Retain:
- Order transaction records — retained for 7 years as required by financial and tax regulations
- Anonymized analytics data (cannot be linked back to you)
- Records required to investigate fraud, disputes, or comply with legal requests
Response Time: We will action your deletion request within the timeframes required by applicable law, including GDPR Article 17 where applicable.
Confirmation: We may, at our discretion, send confirmation once deletion is complete.
If we cannot verify your identity, we may deny the request as permitted by applicable law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top will reflect the date of the most recent change.
For material changes, we may:
- Update the “Last Updated” date at the top of this policy
- Where required by applicable law, post a notice on our Site
- Where required by applicable law, notify registered users via email
- Where required by applicable law, request renewed consent
We encourage you to review this policy periodically.
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: support@bjsaber.com
- General Contact: support@bjsaber.com
- Mailing Address:
Room 602-01, Building W02, South Bank New Land, No. 11 Yangfu Road, Suzhou Industrial Park, Suzhou Area, China (Jiangsu) Pilot Free Trade Zone, China
For EEA / residents, you may also contact your local data protection authority to lodge a complaint.