1. Data Controller

Company Name: Shedoll (Dongguan) Technology Co., Ltd.

Registered Address: Dongguan City, Guangdong Province, China

Support Email:support@shedoll.com

Website Domains:shedoll.com / shedoll.cn

2. Types of Data We Collect

• Personal Identification Information: Name, email, phone number, shipping address (for order fulfillment)
• Payment Information: Payment methods (credit card/PayPal, etc.), billing address (full card numbers not stored)
• Sensitive Data: Customization requests related to sexual orientation (e.g., genital shape/color, replica customization), health data (e.g., product usage advice), user-uploaded custom images
• Technical Data: IP address, device information, browser type, Cookies (see Cookie Policy)
• User-Generated Content: Product reviews, customization descriptions, customer service communications

3. Data Processing Purposes & Legal Basis

4. Data Sharing & Third Parties

We share data only when necessary:

• Payment Gateways: Stripe, PayPal, etc. (PCI DSS compliant)
• Logistics Partners: DHL, FedEx, etc. (shipping labels show only "Adult Products/Anonymous Shipment")
• Cloud Providers: Alibaba Cloud servers (data encrypted on global CDN nodes)
• Analytics Tools: Google Analytics (uses Cookies for behavior tracking, requires consent)

5. User Rights (GDPR/CCPA)

You have the right to:

• Access/Export your personal data
• Correct inaccurate information
• Delete data ("Right to be Forgotten")
• Withdraw consent for sensitive data processing (contact support@shedoll.com)
• CCPA Requirement: Opt-out of data sale (we do not sell data)

6. Data Security Measures

• Transfer Encryption: Full-site HTTPS/SSL protocol
• Payment Security: PCI DSS compliant, no full card numbers stored
• Storage Security: Alibaba Cloud distributed storage + global CDN, sensitive data encrypted isolation
• Access Control: Employees sign NDAs, limited data access to essential personnel

7. Cookie Policy

• We use Functional Cookies (essential operations) and Analytical Cookies (experience optimization)
• Consent popup appears on first visit, where you can manage preferences (opt-out of non-essential tracking)

8. Children's Privacy

We do not target individuals under 18. If minor's data is identified, it will be immediately deleted and service terminated.

9. Data Retention Periods

10. Policy Updates

• Updates notified via website announcement or email
• Major changes (e.g., expanded data usage) require renewed user consent

11. Contact Us

12. Adult Industry Special Provisions

1. Sensitive Data Handling

• Custom requests (e.g., intimate part shapes, replicas) require separate explicit consent
• All sensitive data encrypted at rest, used solely for order fulfillment, not shared with third parties

2. Privacy by Design

• Shipping labels conceal product details (shows "Adult Products/Anonymous Item" only)
• User reviews displayed anonymously by default (e.g., "S*** User")