Logo Shein

Shein

Delete my data

Exercise your right to be forgotten

Compare

See alternatives

Edit this page

Suggest changes

Shein

Nationality
China
Belongs to group
Infinite Styles Services Co., Limited
Created on 2025-05-25 Unlock My Data Team
Updated on 2025-12-23 CNIL Sanctions Bot

Data Access

Required documents details
You need to be logged in
Access via email
Access via postal mail
Infinite Styles Services Co. Limited, 1-2 Victoria Buildings,Haddington Road,Dublin 4,D04 XN32,Irlande
Message exchanges
Response time
Under 1 month according to the RGPD
Comments
The process indicated in the mail to retrieve the file is not the right one, many difficulties to find the file

Data export

Examples of data exports
Response format
JSON

Data Breaches

Updated on December 23, 2025

1

Have I Been Pwned

1

SHEIN

📅 June 1, 2018

39.1M

accounts

In June 2018, online fashion retailer SHEIN suffered a data breach. The company discovered the breach 2 months later in August then disclosed the incident another month after that. A total of 39 million unique email addresses were found in the breach alongside MD5 password hashes.

Compromised data :

Email addressesPasswords
Verified breach

Terms Changes

1

Policy changes detected by Open Terms Archive

Shein specifies that the return window depends on third-party sellers

January 7, 2026

Shein updated its return and refund policies to clarify that the return period varies depending on third-party sellers.

General Conditions of Sale
Read more

Sanctions and transfer policy

CNIL Sanctions
Cookies déposés sans consentement : la CNIL sanctionne SHEIN d’une amende de 150 millions d’euros
Amount:€150,000,000Date:2025-09-03SAN-2025-005
Data transfer policy
Yes
Policy excerpt

The customer data of SHEIN for EU customers is stored within the EU and largely processed within the EU.
However, like all global online retailers, in order to serve customers around the world, it is necessary for SHEIN to access data internationally.
When a customer makes a purchase from SHEIN or from a seller on the SHEIN marketplace, their order and shipping information must be provided to the warehouse so that the order can be fulfilled.
Since many SHEIN products are shipped from China, this requires the transfer of this data to China.
This type of data transfer is permitted under the GDPR (Article 49(1)(b)) as it is necessary for the performance of SHEIN's contract with the customer and is subject to appropriate safeguards.
For other internal transfers of personal data between SHEIN affiliates, SHEIN has put in place a Global Intra-Group Data Transfer Agreement that includes the relevant Standard Contractual Clauses required under the GDPR.

Transfer destination countries
China, partner countries
Outside EU storage
Not indicated
Loading application data...