Privacy Policy
Last updated: September 8, 2026
1. Data Controller
Shenzhen Yinestar Technology Co., Tld ("we", "us") is the data controller responsible for processing your personal data. Our registered address is F10, Huijingyuan Science and Technology Innovation Park, Nanpu Road, Bao'an District, Shenzhen.
2. Information We Collect
We collect information you provide directly when you:
- Submit an inquiry or contact form (name, email, company, country, message)
- Request a product quote or datasheet
- Subscribe to our newsletter
We also automatically collect certain technical data through cookies and similar technologies, including IP address, browser type, device information, and pages visited.
3. How We Use Your Information
We use your personal data to:
- Respond to your inquiries and provide customer support
- Process and fulfill product quote requests
- Improve our website and services
- Send relevant product information (with your consent)
- Comply with legal obligations
4. Legal Basis (GDPR)
We process your data based on: (a) your consent, (b) performance of a contract or pre-contractual measures, (c) our legitimate business interests, or (d) compliance with legal obligations.
5. Data Sharing
We do not sell your personal data. We may share data with trusted service providers who assist in operating our website and business, subject to appropriate data processing agreements.
6. Data Retention
We retain personal data only as long as necessary for the purposes described above, or as required by law. Inquiry data is typically retained for 3 years.
7. Your Rights
Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at [email protected].
8. Cookies
Our website uses essential cookies for functionality and optional analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings.
9. Contact
Shenzhen Yinestar Technology Co., Tld
Email: [email protected]
Phone: +86 18145838868
10. Google Sign-In for Back-Office Accounts
Google sign-in notice updated: September 8, 2026. This section applies to the optional Google sign-in feature for existing YINESTAR back-office accounts, where enabled.
Your choice and account linking
You can continue to sign in with your existing account password. To use Google, first sign in with that password and link your Google account in Personal Center > Account Security. Linking and unlinking require confirmation of your current back-office password. We do not automatically create an account, merge accounts because their email addresses match, or change your existing permissions through Google sign-in.
Information received and stored
Google provides a signed identity token that may contain your Google account identifier, email address, verification status, and profile information such as your name and picture. Our integration uses this token to verify your identity. For an active link, we store your stable Google account identifier, your verified email address if available, and the time the link was created. We do not copy your Google name or picture into your back-office profile, and we do not persist the complete Google identity token in our database or browser storage.
This sign-in flow does not give us your Google password or request access to your Gmail messages, Google Drive files, contacts, or other Google application data. It does not request or retain Google API access tokens or refresh tokens.
Purpose, Google connections and cookies
We use this information to verify sign-in requests, connect you to the back-office account you explicitly linked, display and manage that link, and protect account security. We do not use the Google account information obtained through this sign-in feature for advertising or sell it.
When the Google sign-in widget is loaded, your browser connects to Google, which may receive technical information such as your IP address, browser information and Google-related cookies. Google handles information on its services under its own privacy policy. Account selection and Google authorization take place in Google's interface, not in a password form hosted by YINESTAR.
YINESTAR uses a short-lived, HttpOnly pre-session cookie to bind verification to your browser, and a separate HttpOnly session cookie for your back-office sign-in. The pre-session is valid for no more than 10 minutes and each verification challenge for no more than 5 minutes. These are validity limits, not a promise that all associated records or backups are erased at those times.
Retention, unlinking and deletion requests
The Google link is retained while active. You can remove it in Personal Center > Account Security by confirming your current back-office password; an administrator can also remove the link. Unlinking clears the stored Google account identifier, linked email address and linking timestamp from the active account record, and revokes older back-office sessions. Password sign-in remains available. Local unlinking does not revoke YINESTAR's connection in your Google Account settings; you can manage that connection separately with Google.
When an administrator deletes a back-office account, its Google link is also cleared. Account deletion is a soft deletion and does not automatically erase every account record. Security audit logs record the acting back-office user ID and username, target account ID, action, timestamp and IP address; they do not include your Google identity token or password. Unlinking or deleting an account does not automatically erase earlier security logs or backups. Their retention remains subject to the purposes and obligations described in section 6.
To request access, correction or deletion of your personal data, including information remaining in account records, logs or backups, contact [email protected]. We will assess your request under applicable data protection requirements and explain any information that must be retained. There is no self-service account deletion function in Personal Center.