Last updated: September 13, 2026.
Who is responsible for your data
Doris Dong is the website operator and data controller for personal data processed through https://chinamythos.com. The postal address on file is NW63PY. For privacy questions or requests, use the Contact page at https://chinamythos.com/pages/contact; no direct email address is published there.
What we collect
Depending on how you use the site, we may process your email address and newsletter preferences; account, authentication, and subscription information; messages or form submissions that you send us; purchase and service information needed to provide billing; and technical information such as IP address, browser, device, request time, and security or error logs. We do not ask for special-category data and you should not submit it through the site.
Why we use it and our legal bases
We use data to operate and secure the website, provide requested accounts and services, process subscriptions or purchases, respond to enquiries, send a newsletter when you have subscribed, prevent abuse, and comply with legal obligations. These activities rely on performance of a contract or steps requested before a contract, our legitimate interests in security and service operation, and legal obligations. Non-essential analytics, advertising, and similar technologies rely on your consent where consent is required.
Cookies and privacy choices
The site uses strictly necessary cookies and storage for functions such as authentication, security, session handling, and your display-theme preference. Optional analytics or advertising technologies, including Google services when enabled, should not be used for purposes requiring consent until you have made a choice. You can change or withdraw optional choices at any time using the Cookie Choices link in the site footer. Withdrawal does not affect processing that already occurred lawfully before withdrawal.
Service providers and sharing
We use service providers only as needed for hosting and infrastructure, authentication, email and newsletter delivery, analytics or advertising where enabled and permitted, and payment processing. These may include Cloudflare, Google, Stripe, and an email provider such as Resend or Cloudflare Email Service. Providers process data under their own terms and, where applicable, a data-processing agreement or other lawful transfer mechanism. We do not sell personal data.
International transfers
Some providers may process information outside the United Kingdom or European Economic Area. Where required, we use an adequacy decision, standard contractual clauses, or another lawful safeguard, and apply supplementary technical and organisational measures where appropriate.
How long we keep information
We keep account and service information for as long as needed to provide the service and then for a limited period needed for security, dispute handling, accounting, or legal obligations. Newsletter data is kept until you unsubscribe or withdraw consent, subject to suppression records needed to honour that request. Cookie and analytics retention depends on your choices and the configured provider settings. We delete or anonymise information when it is no longer needed.
Your rights
Subject to applicable law, you may ask for access to, correction of, deletion of, or restriction of your personal data; object to processing based on legitimate interests; request data portability; and withdraw consent at any time. You may also complain to the data-protection authority where you live or work. Send a request through the Contact page and include enough information for us to identify the relevant account or request; we may need to verify your identity before responding.
Security and changes
We use reasonable technical and organisational measures to protect personal data, but no online service can guarantee absolute security. We may update this policy when our processing changes. The current version will be published on this page with its updated date.