Last updated: 9 October 2026
This policy explains how Dian Wang Yi collects and uses personal information when you visit yunnandianwangyi.com or contact us. It also explains how we use cookies. We have written it to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are
The data controller is John Stephenson, trading as Dian Wang Yi, a sole trader based in the UK who sells Yunnan rock sugar syrups.
For any question about this policy or your personal data, email yunnandianwangyi@gmail.com or call +44 7958 302703.
Please note: nothing is sold through this website, and it has no checkout or customer accounts. Every purchase is made on eBay UK through our eBay store. When you buy from us on eBay, eBay handles your order, payment and delivery details under eBay’s User Privacy Notice. We receive the order information that eBay gives sellers (such as your name, delivery address and what you ordered) and use it only to fulfil and support your order.
What we collect and why
1. Contact form
- What: your name, email address and message, plus your phone number if you choose to give one, together with the date and time you sent the form. The form plugin may also record basic, non-identifying information about how the form is used, such as whether it was viewed and how long it took to complete.
- Why: to reply to your enquiry and keep a record of our correspondence.
- Lawful basis: our legitimate interests in answering questions from customers and potential customers. If your enquiry is about buying something, the basis is taking steps at your request before entering into a contract.
- Retention: up to 2 years after our last contact with you, then deleted.
The phone number is optional. Only give it if you would like us to call you back.
2. WhatsApp chat
- The chat button on our site (provided by the WPChat plugin) opens a conversation with us on WhatsApp. Your messages are sent and stored through WhatsApp, not on our website.
- What: the messages you send us, and your WhatsApp name and phone number as WhatsApp shows them to us. The plugin also sets session cookies to run the chat button (see the cookie table).
- Why: to answer your questions.
- Lawful basis: our legitimate interests in responding to customer enquiries.
- Retention: we delete chat conversations we no longer need within 2 years.
- WhatsApp is owned by Meta. WhatsApp processes your messages and account details under its own privacy policy.
3. Instagram feed
- Our Social page shows posts from our Instagram account, @yunnandianwangyi, using the Smash Balloon Instagram Feed plugin. The feed loads content from Instagram: some images come directly from Instagram’s servers (cdninstagram.com). When they do, your browser connects to Meta, and Meta receives your IP address and basic browser information.
- Why: to show our latest Instagram posts on our website.
- Lawful basis: our legitimate interests in showing our own social media content.
- If you click through to Instagram, Meta’s Instagram Privacy Policy applies.
4. Website and server logs
- What: when you visit any website, your browser automatically sends technical information. For our site this is recorded in our host’s server logs: your IP address, the date and time, the pages requested, your browser type and the referring page.
- Why: to keep the site secure, prevent abuse and fix faults.
- Lawful basis: our legitimate interests in running a secure, working website.
- Retention: as set by our hosting provider, normally no longer than 90 days.
5. Web fonts
Our site loads typefaces from Google Fonts (fonts.googleapis.com). Your browser therefore connects to Google, and Google receives your IP address. We use Google Fonts so that the site displays consistently, which is in our legitimate interests.
6. Cookies
See the cookie section below.
Who we share data with
We do not sell your personal data, and we do not share it for other companies’ marketing. We use these providers:
- Hostinger: hosts this website and its database. Contact form submissions and server logs are stored on its servers. Hostinger privacy policy.
- Google: we receive and answer emails, including contact form notifications, through Gmail. Google also serves the web fonts described above. Google privacy policy.
- Meta: WhatsApp, for chats, and Instagram, for our feed, as described above.
- eBay: all purchases, payments, delivery and returns. eBay is a separate controller for the data you give it, under eBay’s User Privacy Notice.
We may also disclose information if the law requires it, or to protect our legal rights.
International transfers
Some of these providers, such as Google and Meta, may process data outside the UK, including in the United States. Where they do, they rely on safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
How long we keep data
We keep personal data only for as long as we need it for the purposes above, as set out in each section. Where we have marked a period as a reasonable default, it is our current policy and we will update this page if it changes.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- ask us to limit how we use your data (restriction);
- object to our use of your data where we rely on legitimate interests;
- receive data you gave us in a portable format (portability);
- withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, email yunnandianwangyi@gmail.com. We will reply within one month. We will not charge you, unless a request is clearly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your data, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
Our website is not aimed at children under 13, and we do not knowingly collect their personal data.
Cookies
Cookies are small text files that a website stores on your device. Similar technologies, such as browser storage, work in a comparable way, and this section covers them too. Under PECR we may use cookies that are strictly necessary for the site to work, or for a service you ask for (such as the chat button), without asking you. For any other cookies we need your consent, which we ask for through the cookie banner.
You can change your choice at any time by clearing this site’s cookies in your browser, which makes the banner appear again. You can also block or delete cookies in your browser settings. Note that blocking some cookies may stop parts of the site, such as the chat button, from working.
We do not use advertising cookies. We do not use Google Analytics, the Meta Pixel or any similar tracking tools.
Cookies used on this site
| Cookie | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| blocksy_cookies_consent_accepted | This site (cookie banner) | Remembers whether you accepted or declined cookies, so the banner is not shown again | 12 months | Strictly necessary |
| PHPSESSID | This site (WPChat plugin) | Session identifier the chat button uses to keep track of your visit | Until you close your browser | Functional |
| wpchat_session_id | This site (WPChat plugin) | Identifies your chat session so that the chat button works correctly | 24 hours | Functional |
| wc_fragments_*, wc_cart_hash_* (browser storage, not cookies) | This site (WooCommerce) | Stores the website’s (empty) basket display to speed up page loads | Until you close the tab | Strictly necessary |
| wordpress_*, wordpress_logged_in_*, wordpress_test_cookie | This site (WordPress) | Used only when the site owner logs in to manage the website. Not set for visitors. | Session / up to 14 days | Strictly necessary |
Third-party content
Some content comes from other companies’ servers. Those companies receive your IP address and may set or read their own cookies under their own policies:
- Instagram (Meta): images in our Instagram feed, loaded from cdninstagram.com.
- Google Fonts: typefaces loaded from fonts.googleapis.com.
- WhatsApp (Meta): when you start a chat, the conversation takes place on WhatsApp.
- eBay: when you follow a link to eBay, eBay’s own cookie policy applies.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it last changed.