Does Hello Retail Work in China? Data Residency, PIPL & an Offshore Personalization Engine

Hello Retail is a Copenhagen-based EU personalization engine: it tracks your shoppers' behavior and holds their contact data offshore in Europe, with no mainland-China region — so a China-facing store sends that personal data across the border under PIPL, loads its recommendations from offshore, and still needs an ICP filing. A compliance-first look at the two doors.

By the 21YunBox Compliance Team · Reviewed 2026-10-07 · Verified against HelloRetail's own documentation

Does Hello Retail work in China?

Whether you can use Hello Retail in China is first a data-residency question, not a speed one. Hello Retail is an e-commerce personalization engine — it tracks how your shoppers browse, search, click and buy, and holds the contact details behind your product recommendations and triggered emails — and where it keeps that data is what China's law responds to.

Hello Retail is a Copenhagen-based EU vendor that processes personal data under the GDPR and hosts it offshore in Europe through its sub-processors; it documents no mainland-China region. So personalizing for your Chinese shoppers routes their behavioral and contact data offshore: a cross-border transfer PIPL governs, needing notice, a separate consent for the transfer that your store's cookie banner or newsletter opt-in does not cover, a transfer mechanism, and — for a CIIO or large-volume handler — in-country storage. And because the recommendation script is fetched from that offshore infrastructure on every page load, the personalized blocks are also the part of your storefront most exposed to cross-border delivery. The table below lays out Hello Retail's posture and the rules it triggers.

This is a risk picture, not a verdict — your obligations turn on your shopper volumes and your role. Our China team can map your Hello Retail exposure with you →

Compliance snapshot

! Reachable, but the recommendation and personalization script is fetched from offshore EU infrastructure — it loads across the border on every shopper's page
! Holds shopper behavioral data and contact details (browsing, search, cart, purchases, emails) off the mainland to drive recommendations and triggered email
! That offshore shopper data is a PIPL cross-border transfer needing its own separate consent and a transfer mechanism
✕ No mainland-China hosting region or data-residency option documented — Hello Retail is an EU-based vendor
✓ A compliant, ICP-filed in-country delivery path exists — no rebuild, no migration

Get a compliance assessment

No China entity required to start

What HelloRetail's own documentation says about China

Fact	Primary source
In Hello Retail's own words: its GDPR documentation says, “We maintain an up-to-date list of our sub-processors” — the third-party providers that actually host the data it processes — and the company “is based in Copenhagen, Denmark.” Hello Retail is an EU vendor operating under the GDPR with a published Data Processing Agreement, and no mainland-China region appears in that documentation. The shopper behavior and contact details behind your personalization are held offshore in Europe.	Hello Retail — GDPR FAQ and company site, retrieved 2026-10-07
Holding your Chinese shoppers' browsing, purchase and contact data in the EU is a cross-border transfer of personal information under PIPL. The handler — you, the merchant, not Hello Retail — must give notice, obtain separate consent for the transfer, and satisfy one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification. That separate consent is distinct from the cookie or marketing opt-in you already collect on your store.	PIPL Chapter III, Articles 38–39
How heavy the obligation is scales with volume and role, not merely with turning personalization on. Under the CAC's March 2024 cross-border rules, a non-CIIO transferring fewer than 100,000 individuals' non-sensitive personal information in a calendar year is exempt from the security assessment, standard contract and certification — a threshold a growing store's shopper list can cross without anyone noticing.	CAC — Regulations on Promoting and Regulating Cross-border Data Flows, March 2024
For a CIIO or large-volume handler, personal information collected in China must be stored inside the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)). Because Hello Retail publishes no mainland-China region, the only way to keep your China shoppers' behavioral and contact data on Chinese soil is to run that storage on infrastructure inside the mainland — which is where an ICP filing enters the picture.	PIPL Article 40; CSL Article 39 (formerly Article 37)

Sources verified by the 21YunBox compliance team on 2026-10-07.

For a mainland-China audience, the deciding question about Hello Retail is not how fast its recommendations render — it is where your shoppers’ data is allowed to live, and whether the storefront carrying it is cleared to operate inside China at all. Hello Retail is an e-commerce personalization engine: it watches how shoppers browse, search, click and buy, holds the contact details behind your triggered emails, and feeds all of it back as product recommendations. That makes it, first, a personal-data question. Hello Retail is a Copenhagen-based EU vendor that processes this data under the GDPR and hosts it offshore in Europe through its sub-processors, with no mainland-China region. So a China-facing store running Hello Retail is reachable, but it sends your shoppers’ behavioral and contact data across the border, loads its personalization from offshore on every page, and still sits under the ICP regime that governs any public site served inside the mainland. The reachability is real; the data residency, the cross-border transfer and the licensing are the exposure.

Hello Retail GDPR FAQ support page, under the heading 'Who is Hello Retail using as sub-processors?', stating that Hello Retail maintains an up-to-date list of its sub-processors under the EU GDPR — Hello Retail's own GDPR documentation: the platform processes personal data under the EU GDPR and “maintain[s] an up-to-date list of our sub-processors” — the third-party providers that host the shopper data it collects. Source: support.helloretail.com/other/gdpr-faq

Hello Retail in China at a glance

What decides it	What it means for a China storefront
Where it runs	Hello Retail is a Copenhagen-based EU vendor; its personalization engine, and the shopper data it collects, are hosted offshore in Europe through its sub-processors. No mainland-China region is documented.
What it collects	Shopper behavior — browsing, search, clicks, cart and purchases — plus the contact details behind triggered emails. All of it is personal information under China's law.
How it reaches shoppers	Delivered as an on-site script the storefront loads in each shopper's browser; for mainland shoppers, its calls for recommendations and behavioral events cross the border to offshore infrastructure.
Serving the public	A store served to mainland visitors from inside China needs an ICP filing tied to a mainland hosting resource. A script layered onto the store has no ICP-filing path of its own.
Your shoppers' data	Behavioral and contact data of Chinese shoppers held in the EU is a cross-border transfer PIPL governs, plus a data-localization duty for CIIOs and large-volume handlers that an offshore region cannot meet.

The personalization engine is offshore — and it is the part of the store that crosses the border

Hello Retail works by loading a script into your storefront that runs in each shopper’s browser and calls back to Hello Retail’s European infrastructure for the personalized pieces of the page: product recommendations, search results, behavioral triggers. From inside the mainland, every one of those calls leaves the country and comes back, so the personalized, revenue-driving blocks are the part of the page most exposed to cross-border latency and loss — even when the rest of the storefront loads cleanly. Because they render on the client, a slow or dropped response does not simply delay the page; it quietly degrades the exact merchandising meant to lift conversion, and it does so invisibly, shopper by shopper. Hello Retail is not blocked in China — this is a delivery problem, not a wall — but “reachable” and “performing as designed for mainland shoppers” are not the same thing, and no setting inside Hello Retail moves its infrastructure onto Chinese soil.

Your shoppers’ behavioral and contact data leaves the mainland

Everything Hello Retail makes useful — the browsing histories, the cart and purchase events, the email addresses behind your triggered campaigns — is personal information under Chinese law, and Hello Retail holds it offshore in Europe. Serving China from that setup is a cross-border transfer of personal information under China’s Personal Information Protection Law, and the personal-information handler — you, the merchant, not Hello Retail — has to give notice, obtain a separate consent for the transfer that your store’s cookie banner or newsletter opt-in does not cover, and clear one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification. How heavy that duty is scales with how many shoppers you track and what role you play, not merely with switching the feature on. And if you are a critical information infrastructure operator or a large-volume handler, personal information collected in China must be stored inside the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty an EU-hosted personalization engine cannot satisfy.

The storefront itself still turns on an ICP filing

Data residency is only half of it. A public-facing store delivered to mainland visitors from inside China turns on an ICP filing (ICP 备案) under State Council Order No. 292 and MIIT Order No. 33, and that filing has to attach to a hosting resource physically located in the mainland. Hello Retail is a script layered onto your store, not the host of record, so it offers no ICP-filing path of its own — and an offshore personalization call cannot be filed at all. So “we already run Hello Retail” answers neither door: reaching Chinese shoppers is not the same as being cleared to serve them, and tuning the personalization does not create the mainland footing a filing needs.

This is a risk map, not a verdict: whether you need a transfer mechanism, in-country storage, an ICP filing, or all three depends on what your store serves, how much shopper data you hold, and who your users are — worth settling with counsel before you build.

Where 21YunBox fits — a compliant overlay, not a migration

You keep building on Hello Retail. We add the piece an EU-hosted personalization engine cannot provide for China: compliant, ICP-filed delivery from inside the mainland, set in front of your existing storefront — no rebuild, no second codebase, and no move off Hello Retail. The slow, cross-border parts of the experience are repaired from in-country while the resources that are already fast stay direct, and our China team maps your PIPL cross-border and data-residency obligations against your entity and your shopper volumes — standing up, where the law requires your China shoppers’ data to stay on the mainland, the in-country storage a lawful China storefront needs. Your store and your personalization stay exactly where they already run.

Get a compliance assessment →

Related reading:

Frequently Asked Questions

Does Hello Retail store Chinese shoppers' data in China?

No. Hello Retail is a Copenhagen-based EU vendor that processes data under the GDPR and hosts it with sub-processors in Europe; it documents no mainland-China region. So the browsing behavior, purchase history and contact details of your China shoppers are held offshore.

We already have cookie and marketing consent on our store — isn't that enough under PIPL?

Not on its own. PIPL treats sending personal information outside China as a separate act that needs its own separate consent, distinct from the cookie banner or newsletter opt-in you collect on the store. You also need a lawful transfer mechanism, and possibly in-country storage if your shopper volumes or your role trigger it. Treat it as a risk to confirm with counsel, not a settled yes.

Can 21YunBox help make our Hello Retail setup compliant in China?

Yes. Our China team can assess your cross-border and data-residency exposure for your shopper volumes and role, help put the separate-consent and transfer-mechanism path in place, and — where the law requires your China shoppers' data to stay on the mainland — stand up compliant, ICP-filed in-country delivery and storage in front of Hello Retail and your storefront. Get in touch to work through your case.