Last updated: October 30, 2026 | Version 1.0

1. Who we are

2NLF is a brand of smart home security products, operated by WU DAO INTERNATIONAL CO., LIMITED, a company registered in Hong Kong (“WU DAO”, “we”, “us” or “our”). We are the controller of the personal information described in this Policy.

Registered address: FLAT/RM H, 11/F, VIET SHING FACTORY BUILDING, 145 WAI YIP STREET, KWUN TONG, KL HONG KONG.

Contact: 2nlf.info@gmail.com | WhatsApp: +52 55 7372 7238

2. Scope of this Policy

This Policy applies to www.2nlf.com, our mobile applications (including the TONEWLIFE app), and any related customer service, warranty and after-sales channels (together, the “Services”). It does not apply to third-party websites or services that we do not control, even if you reach them through a link on our site.

3. Information we collect

3.1 Information you give us

• Identity and contact details: name, email address, telephone number, shipping and billing address.
• Account details: email address, password (stored in encrypted form), and preferences.
• Order details: products purchased, order value, delivery method, order status and correspondence about your order.
• Payment information: the payment method used and transaction reference. We do not store full payment card numbers; card and wallet payments are processed by our payment providers.
• Content you submit: messages to customer service, product reviews, blog comments, and any files or photos you send us for warranty or after-sales purposes.
• Marketing preferences: whether you wish to receive our newsletters or promotional messages.

3.2 Information collected automatically

When you visit or use the Services, we collect: IP address, device and browser type, operating system and language, pages viewed and actions taken on the site, the referring page or campaign, approximate location derived from your IP address, cookie and similar identifiers, and timestamps.

3.3 Device and app information (only where you use these features)

If you pair a 2NLF device with our app, or activate optional features, we process: the device serial number and model, firmware version, connection and online status, and diagnostic data. If you activate cloud storage, remote viewing or notification services, we process the video and audio recordings you choose to upload or store, together with related metadata (time, device, duration).

Camera, microphone, photo library and notification permissions are requested only when a feature needs them. You can withdraw a permission at any time in your device settings; some features will then stop working.

3.4 Information from third parties

• Payment providers: confirmation that a payment was made, and fraud-prevention signals.
• Delivery carriers: delivery and tracking status.
• Analytics and marketing providers: aggregated statistics and, where you have consented, campaign attribution data.

4. How we use your information, and our legal bases

Providing the Services — creating and managing your account, processing and delivering orders, handling returns, refunds, warranty and after-sales service. Legal basis: performance of a contract.

Communicating with you — order confirmations, delivery updates, responses to your enquiries, service and security notices. Legal basis: performance of a contract / legitimate interests.

Safety and fraud prevention — detecting abusive or fraudulent activity and protecting our site, customers and devices. Legal basis: legitimate interests / legal obligation.

Improving the Services — understanding how our site and app are used, measuring performance and fixing errors. Legal basis: legitimate interests (or consent, where required).

Marketing — sending newsletters and promotions, where you have subscribed or where permitted by law. Legal basis: consent / legitimate interests (soft opt-in).

Legal and accounting — keeping invoices, tax and transaction records and defending legal claims. Legal basis: legal obligation / legitimate interests.

We do not use your personal information to make automated decisions that produce legal effects or similarly significant effects on you.

5. Cookies and similar technologies

We use cookies and similar technologies for four purposes:

• Strictly necessary — keeping your cart and session, remembering your login, security and load-balancing. These cannot be switched off through our banner.
• Functional — remembering your language, currency and display preferences.
• Analytics — understanding how visitors use the site (we use Google Analytics 4, with IP anonymisation where available).
• Marketing — measuring the effectiveness of our campaigns, only where you have consented.

Our cookie banner lets you accept or refuse non-essential cookies, and you can change your choice at any time. You can also block or delete cookies in your browser settings; refusing cookies may affect some features. We do not run cross-context behavioural advertising without your consent.

We do not currently respond to browser “Do Not Track” signals, but we honour the choices you make in our cookie banner.

6. Sharing your information

We do not sell or rent your personal information. We share it only as follows:

• Service providers acting on our instructions under written agreements: hosting and IT maintenance, payment processing (including PayPal and our card payment gateway), delivery (including DHL Express and store pickup), email and SMS delivery, analytics, and customer-support tools.
• Professional advisers such as lawyers and auditors, where necessary.
• Authorities and third parties where required by law, to respond to a valid legal request, or to protect the rights, property or safety of our customers, our company or the public.
• Business transfers — if our business or part of it is sold, merged or reorganised, personal information may be transferred to the successor entity; we will notify you and this Policy will continue to apply until replaced.

7. International transfers

We are established in Hong Kong and use service providers that may process personal information in other countries or regions, including the European Economic Area, the United Kingdom, the United States and Singapore. Where the law requires it, we put appropriate safeguards in place, such as standard contractual clauses approved by the relevant authority, together with an assessment of the provider's security practices.

8. How long we keep your information

• Orders, invoices, payment and tax records: 7 years after the transaction, as required by accounting and tax law.
• Account information: while your account is active, then 12 months after your last activity or your deletion request.
• Customer service tickets and correspondence: 3 years after the case is closed.
• Product reviews and blog comments: until you delete them or ask us to remove them.
• Marketing preferences and consent records: until you withdraw consent, plus 3 years as evidence of consent.
• Server and security logs: 12 months.
• Cloud recordings (if you subscribe): according to your plan and settings; deleted when the retention period you selected expires or when you delete them.

We may keep information longer where necessary to establish, exercise or defend legal claims, or where a law requires it.

9. How we protect your information

We use technical and organisational measures appropriate to the risk, including: encryption in transit (HTTPS/TLS); role-based access control and multi-factor authentication for administrators; encryption at rest where supported by our providers; regular backups; logging and monitoring; due diligence on processors; and an incident-response procedure. If a personal data breach occurs, we will notify the competent authority and affected users where the law requires it.

No method of transmission or storage is completely secure. Please choose a strong password, keep it confidential, and tell us immediately if you suspect unauthorised access to your account.

10. Your rights

Subject to applicable law, you may:

• Access the personal information we hold about you;
• Correct information that is inaccurate or incomplete;
• Delete your information, where there is no legal reason for us to keep it;
• Restrict or object to certain processing, including direct marketing;
• Port information you provided to us, in a structured, machine-readable format;
• Withdraw consent at any time, without affecting processing carried out before withdrawal;
• Complain to a supervisory authority.

Depending on where you live, the following may be relevant:

• Mexico — under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you may exercise your ARCO rights (access, rectification, cancellation and objection). You may also contact the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
• European Economic Area and the United Kingdom — you have the rights set out in the GDPR / UK GDPR, and may lodge a complaint with your local supervisory authority.
• Hong Kong — the Personal Data (Privacy) Ordinance (PDPO) applies, and complaints may be made to the Privacy Commissioner for Personal Data (PCPD).

How to exercise your rights: email us at 2nlf.info@gmail.com with the subject line “Privacy Request”. We may ask for information to verify your identity. We will respond within 30 days, or within the period required by applicable law. Requests are normally free of charge; we may charge a reasonable fee, or refuse a request, where the law allows us to do so (for example where a request is manifestly unfounded or excessive).

11. Children

The Services are not intended for anyone under the age of 18, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will delete it.

Some of our products (for example, baby monitors and elderly-care devices) are designed to help adults care for family members. Those devices are set up and controlled by the account holder, who is responsible for informing the people in the monitored area and for complying with local law.

12. Third-party links and services

Our site may contain links to third-party websites, social media pages and carriers' tracking pages. We are not responsible for their privacy practices; please read their privacy policies before providing personal information to them.

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in our services or in the law. We will publish the new version on this page with a new “Last updated” date. Where a change is material, we will also notify you by email or by a prominent notice on the site before it takes effect.

14. Language

This Policy is published in English. Where we provide translations for convenience, the English version prevails in case of inconsistency.

15. How to contact us

WU DAO INTERNATIONAL CO., LIMITED
FLAT/RM H, 11/F, VIET SHING FACTORY BUILDING, 145 WAI YIP STREET, KWUN TONG, KL HONG KONG
Email: 2nlf.info@gmail.com
WhatsApp: +52 55 7372 7238