Effective Date: March 1st, 2026

1. Introduction and Data Controllers

This website, shop.gowinsemi.com, is operated by Melody Semiconductor LLC ("we," "us," or "Melody"), a California-based subsidiary of GOWIN Semiconductor Corp. For the purposes of your purchase and order fulfillment: Website Operator/Host: Melody Semiconductor LLC (California, USA). Payment Processor: Payments are processed via PayPal and received by Hong Kong GOWIN Semiconductor. Order Fulfillment: Hong Kong GOWIN Semiconductor processes and ships your order directly from their facilities.

2. Information We Collect

When you place an order, we collect "Personally Identifiable Information" (PII) including: Contact Information: Name, email address, and phone number. Shipping Information: Physical address for delivery. Transaction Information: Details of the products you purchased. Note on Payment Data: We do not store or collect your credit card or bank details. That information is provided directly to PayPal, whose use of your personal information is governed by the PayPal Privacy Statement.

3. How Your Data is Shared Internationally

Because we operate globally, your data will be transferred across borders to complete your transaction: To Hong Kong: Your order details (name, shipping address, and items purchased) are transferred from our California servers to Hong Kong GOWIN Semiconductor for the purpose of order fulfillment and shipping. To Payment Providers: Your transaction data is shared with PayPal (Hong Kong account) to verify and process your payment.

4. Your California Privacy Rights (CCPA/CPRA)

As a California-hosted entity, we provide the following rights to our users: Right to Know: You may request a list of the categories of personal information we have collected and shared. Right to Delete: You may request that we delete personal information collected from you, subject to certain legal exceptions (such as record-keeping for tax or shipping audits). Right to Correct: You may request that we update inaccurate personal information. To exercise these rights, please contact our privacy team at [Insert Email Address].

5. Security and Retention

We use industry-standard Secure Socket Layers (SSL) to protect your data during transmission. We retain your personal data only as long as necessary to fulfill your order and meet legal, accounting, or reporting requirements.

6. Third-Party Links

Our shop may contain links to the GOWIN Semiconductor main site or support forums. We are not responsible for the privacy practices of external sites once you leave our domain.

7. Contact Us

For any questions regarding this Privacy Statement or our data practices, please contact: Melody Semiconductor LLC 2010 N. 1st street, ste 540, San Jose, CA 95131 Email: support@gowinsemi.com

GDPR & UK GDPR Compliance Section

1. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds: Performance of a Contract: We process your name, address, and order details because it is necessary to fulfill your purchase and ship your items. Legal Obligation: We may process data to comply with tax, customs, and export control regulations (such as EAR99 reporting). Legitimate Interests: We process certain data to improve our shop’s performance and security.

2. International Data Transfers & Safeguards

Your personal data will be transferred to countries outside the EEA/UK: To the United States: Data is hosted by Melody Semiconductor LLC in California. To Hong Kong: Data is transferred to Hong Kong GOWIN Semiconductor for order fulfillment. Neither the US nor Hong Kong currently has an "adequacy decision" from the European Commission. Therefore, we protect your data using Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) to ensure a level of protection essentially equivalent to that in the EU/UK.

3. Your Data Rights

If you are located in the EEA or UK, you have the following rights: Access & Portability: Request a copy of your data in a machine-readable format. Rectification: Request correction of inaccurate information. Erasure ("Right to be Forgotten"): Request deletion of your data, provided we are not legally required to keep it for tax or shipping records. Restriction & Objection: Object to certain types of processing, such as direct marketing. Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

4. Data Retention

We retain order information for as long as necessary to fulfill the purposes for which it was collected, typically [e.g., 7 years] to comply with international tax and trade audit requirements. 5. Supervisory Authority You have the right to lodge a complaint with a Data Protection Authority in your country of residence if you believe your data has been handled improperly.