Privacy Policy

Last updated: 2 November 2026

1. Who is responsible for your data

lishi-tool.com is operated by Xi’an Lockartist Security Equipment Co., Ltd., Weiyang District, Xi’an, Shaanxi 710021, China. We are the data controller for the personal information described below. Contact: sales@lockartist.com, +86 153 5368 6577.

2. What we collect

• Order and contact details — name, email address, phone number, billing and shipping address.
• Order information — products bought, order value, delivery and tracking status, returns and refunds.
• Payment information — the payment method used and transaction references. Card numbers are entered on our payment providers’ systems; we do not receive or store full card details.
• Technical information — IP address, device and browser type, pages viewed, referring site, and cookie identifiers.
• Communications — emails, contact-form messages and compatibility questions you send us.
• Marketing preferences — whether you have subscribed to our emails and what you have opened.

3. Why we use it, and our legal bases

• To fulfil your order (performance of a contract): taking payment, packing, shipping, customs paperwork, tracking, handling returns and refunds.
• To answer your questions (contract or legitimate interests): checking tool compatibility, order status, after-sales support.
• To prevent fraud and secure the store (legitimate interests and legal obligation): screening orders, detecting abusive traffic.
• To send marketing emails (consent where required, otherwise legitimate interests with an opt-out in every email).
• To measure and improve the store (legitimate interests, and consent for non-essential cookies where required).
• To meet legal obligations (legal obligation): tax, accounting, consumer-protection and product-safety record keeping.

4. Cookies and similar technologies

Essential cookies keep your cart and checkout working and cannot be switched off without breaking the store. Analytics and marketing cookies are only set where the law in your country allows it or where you have consented. You can block or delete cookies in your browser settings; blocking essential cookies will prevent checkout from working.

5. Who we share data with

• Shopify Inc. — our e-commerce platform, hosting, checkout and analytics infrastructure.
• Payment providers — the provider you select at checkout (for example Shopify Payments, PayPal or a card acquirer), to process and, if needed, refund your payment.
• Carriers and customs brokers — SF Express, DHL, UPS, FedEx, EMS, TNT and Yanwen Express receive the name, address and phone number needed to deliver your parcel and clear customs.
• Email, analytics and advertising providers — to send order notifications and, where permitted, measure and promote our store.
• Professional advisers and authorities — where we are legally required to disclose information or need to establish or defend a legal claim.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising without your consent where consent is required.

6. International transfers

We operate from China and our store runs on infrastructure in Canada and the United States, so your information may be transferred to and processed in these countries. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

7. How long we keep it

• Order and invoice records: as long as tax and accounting law requires (typically 6–10 years).
• Account information: while your account is open, then deleted or anonymised after a period of inactivity.
• Support correspondence: up to 24 months after the matter is closed.
• Marketing records: until you unsubscribe, then up to 12 months to honour your opt-out.
• Analytics data: up to 14 months.

8. Your rights

Depending on where you live, you may have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• not be discriminated against for exercising these rights.

To exercise any of these rights, email sales@lockartist.com from the address used on your order. We may ask for information to verify your identity, and we respond within 30 days.

If you are in the EU or UK you also have the right to complain to your national data-protection authority. We would appreciate the chance to resolve the issue with you first.

9. Security

We use TLS encryption for the store, restrict staff access to order data on a need-to-know basis, and rely on payment providers that meet PCI-DSS requirements. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we protect your data to a standard appropriate to its sensitivity.

10. Children

Our store sells professional locksmith equipment and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The version published on this page applies from the date shown at the top. Material changes will be announced on the store.

12. Contact

Questions about this policy or your data: sales@lockartist.com, +86 153 5368 6577, or our contact form.