Privacy
Privacy notice.
We collect only the information needed to handle enquiries, orders and delivery.
Effective 2026-09-07Who is responsible for your information
北京仲羿信息技术服务部（个体工商户）, operating as Himalaya Surprise, is responsible for the personal information described in this notice. For privacy questions or requests, contact hello@himalayasurprise.com.
Recognising return visits
Our first-party browser storage holds a random visitor identifier for up to 180 days from creation to associate repeat visits in the same browser. Our server stores a keyed hash of that identifier. It is not an account or proof of a person's identity; shared browsers may share an identifier. Clearing site data, using another browser or device, or the end of a private-browsing session can create a new identifier. No cross-site or IP-based identity matching is performed. Browser privacy signals are respected; when storage is unavailable, browsing and checkout continue normally and only session-level measurement may be available.
Information we receive
We receive the contact, delivery and order information you provide, together with limited technical and security records needed to operate the service. We do not receive or store your PayPal password or full card details.
How it is used
Information is used to verify availability, process and fulfil orders, communicate payment and delivery status, prevent misuse, maintain accounting records and respond to enquiries. Marketing messages require separate consent.
Anonymous site measurement
To understand how visitors use the website, our own analytics records anonymous session and page-visit identifiers, page paths without query parameters, the order and time of visits, time measured while a page is visible and in focus, and actions such as adding a work to the bag or opening checkout. Checkout stages may record whether address entry has started, details were submitted, delivery was confirmed, or a payment step was started, cancelled or returned a result. Stage records do not include what you type and do not establish that payment succeeded. Existing referring-domain and campaign tags (UTM) may also be recorded. These records are available only in our private administrative console. They do not contain names, email addresses, telephone numbers, delivery addresses, raw IP addresses, full referring URLs, user-agent strings, browser fingerprints or form contents. Private order links are redacted. We do not use session replay or link these identifiers across devices. Do Not Track and Global Privacy Control are respected.
Service providers
Only the information necessary for a task is shared with payment, hosting, email, carrier or professional service providers. PayPal handles payment information under its own privacy terms.
Retention and security
Anonymous site-measurement records are automatically deleted after 13 calendar months. Order, payment, enquiry and security records are retained only for operational, transaction, dispute and legal needs. Access to the administrative console is restricted and service secrets remain server-side.
Questions and requests
Use the contact page to ask about the personal information associated with an order or to request correction. Some transaction records may need to be retained where required for accounting, fraud prevention or legal obligations.