1. Data Controller
Company Name: Shedoll (Dongguan) Technology Co., Ltd.
Registered Address: Dongguan City, Guangdong Province, China
Support Email:support@shedoll.com
Website Domains:shedoll.com / shedoll.cn
2. Types of Data We Collect
- Personal Identification Information: Name, email, phone number, shipping address (for order fulfillment)
- Payment Information: Payment methods (credit card/PayPal, etc.), billing address (full card numbers not stored)
- Sensitive Data: Customization requests related to sexual orientation (e.g., genital shape/color, replica customization), health data (e.g., product usage advice), user-uploaded custom images
- Technical Data: IP address, device information, browser type, Cookies (see Cookie Policy)
- User-Generated Content: Product reviews, customization descriptions, customer service communications
3. Data Processing Purposes & Legal Basis
| Purpose |
Data Type |
Legal Basis |
| Order Processing & Global Shipping |
Name, address, phone |
Contract Fulfillment |
| Payment Verification |
Payment information |
Contract Fulfillment |
| Custom Services (simulated hair implantation, weight reduction, etc.) |
Sensitive data, user-generated content |
Explicit User Consent |
| Personalized Product Recommendations |
Browsing history, product preferences |
User Consent |
| Marketing Email Delivery |
Email address |
User Consent |
| Customer Support & Dispute Resolution |
Order history, chat records |
Legitimate Interests |
4. Data Sharing & Third Parties
We share data only when necessary:
- Payment Gateways: Stripe, PayPal, etc. (PCI DSS compliant)
- Logistics Partners: DHL, FedEx, etc. (shipping labels show only "Adult Products/Anonymous Shipment")
- Cloud Providers: Alibaba Cloud servers (data encrypted on global CDN nodes)
- Analytics Tools: Google Analytics (uses Cookies for behavior tracking, requires consent)
5. User Rights (GDPR/CCPA)
You have the right to:
- Access/Export your personal data
- Correct inaccurate information
- Delete data ("Right to be Forgotten")
- Withdraw consent for sensitive data processing (contact support@shedoll.com)
- CCPA Requirement: Opt-out of data sale (we do not sell data)
6. Data Security Measures
- Transfer Encryption: Full-site HTTPS/SSL protocol
- Payment Security: PCI DSS compliant, no full card numbers stored
- Storage Security: Alibaba Cloud distributed storage + global CDN, sensitive data encrypted isolation
- Access Control: Employees sign NDAs, limited data access to essential personnel
7. Cookie Policy
- We use Functional Cookies (essential operations) and Analytical Cookies (experience optimization)
- Consent popup appears on first visit, where you can manage preferences (opt-out of non-essential tracking)
8. Children's Privacy
We do not target individuals under 18. If minor's data is identified, it will be immediately deleted and service terminated.
9. Data Retention Periods
| Data Type |
Retention Period |
| Order Information |
7 years (tax compliance requirement) |
| Payment Information |
Anonymized immediately after payment |
| Sensitive Customization Data |
2 years after order completion (or upon user request) |
| Marketing Data |
Until user unsubscribes |
10. Policy Updates
- Updates notified via website announcement or email
- Major changes (e.g., expanded data usage) require renewed user consent
12. Adult Industry Special Provisions
1. Sensitive Data Handling
- Custom requests (e.g., intimate part shapes, replicas) require separate explicit consent
- All sensitive data encrypted at rest, used solely for order fulfillment, not shared with third parties
2. Privacy by Design
- Shipping labels conceal product details (shows "Adult Products/Anonymous Item" only)
- User reviews displayed anonymously by default (e.g., "S*** User")
13. Membership Registration
- Members enjoy address book management, order history viewing, and other convenient features
- Member information (email, address, etc.) used solely for service provision
- Members can modify personal info or request account deletion via "My Account"
- After account deletion, personal data will be deleted (except where legally required)
English
