Privacy Policy

Privacy Policy

DollzParc Brand Privacy Policy

I. Policy Statement and Scope of Application

(1) Core Commitments

DollzParc (hereinafter referred to as "we") is keenly aware of the importance of personal information to you strictly adheres to the "Personal Information Protection Law of the People's Republic of China", "General Data Protection Regulation (GDPR)" and other domestic and foreign laws regulations, handling your personal information in accordance with the principles of "legality, legitimacy, necessity, and integrity", and is committed to building a safe and transparent information processing mechanism

(2) Scope of Application

This policy applies to our collection, use, storage, and transmission of personal information when providing services through all channels (online official/mini-program, offline "Creative Space" stores, robot stores, "DollzPark" private domain communities, and the Festival of Creative Toys, etc.) covering all business scenarios such as product purchase, logistics delivery, community interaction, and after-sales claims.

It does not apply to: the information processing behavior of thirdparty platforms (such as e-commerce platforms, payment institutions), please refer to the third-party privacy policy for such scenarios; nor does it apply to data that has beenized and de-identified (this type of data is no longer associated with a specific individual and does not constitute personal information).

II. Collection and Use of Personal Information

(1) Collection Scope: Minimized Collection Based on Business Necessity

We only collect the personal information necessary to achieve a specific service purpose, in the scenarios:

Service Scenario

Type of Personal Information Collected

Purpose of Collection

Account Registration and Login

Phone number / Email address, set

Identification verification, account security protection, service notification delivery

Product Purchase and Payment

Recipient's name, phone number, delivery address; payment-related (directly processed by payment institutions, we do not store complete bank card information)

Order fulfillment, logistics delivery, transaction settlement, after-sales tracing

Cross- Order Processing

Photos of the front and back of the ID card / number (in some areas), passport information (international orders)

Meet customs clearance and ensure compliance of cross-border transportation

After-sales and Claims Service

Photos of product damage/loss, unboxing videos, logistics waybill information, account information (for refunds)

Verify claims facts and complete the refund/replacement process

Community and Event Participation

Nickname, avatar, interaction (such as creative polls, comments), location information (optional, for offline event invitations)

Provide community services, organize offline activities, and optimize user interaction experience

Service Optimization and Security

Device information (model, operating system, IP address), login logs, order operation records, location information (only used to determine remote area logistics)

Identify abnormal operations, optimize service stability, and match logistics resources

(2) Collection Methods

Voluntary Provision: Information that you actively fill or upload when registering an account, submitting an order, or participating in an event;

Automatic Collection: Information about devices and operations collected through technical tools such as system back and cookies (cookies can be turned off through browser settings, and some personalized services may be limited after turning off

Third-party acquisition: The delivery trajectory information obtained from logistics partners (such as SF and DHL, and the transaction confirmation information obtained from payment institutions. Such acquisitions have already been authorized by you or comply with legal provisions.

(III) Use Restrictions

 only use your personal information in the following circumstances:

To achieve the service purpose that has been clearly notified (such as order delivery and after-sales claims);

With your separate consent, it is used for personalized recommendations (such as recommending the same series of IP goods based on purchase history);

To fulfill legal obligations (such as cooperating customs clearance and responding to regulatory inspections);

To protect our legitimate rights and interests or the legitimate rights and interests of others (such as identifying fraudulent orders and handling security incidents)

Without your express consent, we will not use personal information for other purposes unrelated to the service.

III. Sharing, Transfer, and Disclosure of Personal Information

I) Sharing Scenarios: Only Necessary Third-Party Cooperation

We only share personal information with the following third parties under the "Least Necessary principle and have clarified their confidentiality obligations through agreements:

Logistics service providers: Share recipient's name, address, phone number, etc., for the completion of commodity and logistics tracking;

Payment institutions: Share order amount, transaction time, etc., for the completion of payment settlement;

Cross-border customs clearance institutions: Share information, order information, etc., to meet the import and export regulatory requirements;

Technical service providers: Share device information, operation logs, etc., for maintenance and security protection (service providers are not authorized to use for other purposes).

(II) Transfer and Disclosure Restrictions

Without your written consent, we not transfer personal information to any third party; in the event of a merger, division, etc., the transferee will be required to continue to fulfill the obligation of privacy, otherwise, the transfer will be terminated;

Disclose personal information only under the following legal circumstances:

Obtain your explicit authorization;

Respond to legal by judicial organs and regulatory authorities;

To protect public interests and our or others' legitimate rights and interests from harm.

IV. Storage and Cross-border Transfer of Information

(I) Storage Regulations

Storage period: Follow the principle of "delete when the purpose is achieved", the specific storage period is as follows:

 information: Stored during the duration of your account, deleted within 15 days after account cancellation;

Order and logistics information: Retained for 2 years after the is completed (for after-sales traceability);

Claims related information: Retained for 1 year after claims completion;

Interactive content: Deleted within30 days after you delete it actively or the community is disbanded.

Storage security: Adopt encrypted storage (AES-256 algorithm), access control (only authorized personnel can access), regular security audits and other technical measures; for paper identity information (such as cross-border customs clearance photocopies), it handled by sealed archiving and regular destruction.

(II) Compliance with Cross-border Transmission

For personal information transmitted in relation to-border orders, we take the following compliance measures:

Information is transmitted only to the 12 countries/regions where services have been launched, and all have passed the assessment organized by the national network and information department;

Data processing agreements are signed with overseas recipients to clarify data protection responsibilities;

Sensitive information transmitted across borders is-identified (e.g., by hiding part of the ID number) to reduce privacy risks.

V. Core Privacy Rights of Users

You have right to exercise the following privacy rights at any time, and we will respond and handle them within 15 working days:

Right of Access and Inquiry: You can about your personal information collection and use records through "My Account - Privacy Center";

Right of Correction: If you find errors in your personal information (e.g, incorrect delivery address), you can correct it yourself within your account or contact customer service to correct it;

Right to Erasure: You can apply to delete your personal in situations where the purpose of service has been achieved, you withdraw consent, etc. (excluding personal information required to be retained by laws and regulations);

Right to With Consent: You can withdraw authorization for personalized recommendations, location information collection, etc. through "Privacy Center" (withdrawal will not affect the validity of information processing based consent before withdrawal);

Right to Account Deletion: You can apply for account deletion through customer service, and after deletion, all deletable personal information will be deleted ( for information that must be retained by law).

Right to Receive a Copy: You can apply to receive a structured, readable copy of your personal information, which facilitates migration.

VI. Special Protection of Children's Privacy

If you are under the age of 14, you need to use our services under the of a guardian. We only collect necessary information such as the minor's name and age (to determine the applicability of children's services), and the guardian's explicit is required; guardians can contact customer service to inquire about, correct, or delete the minor's personal information.

We do not provide blind box purchase services to minorsin accordance with the "Guidance on the Standardized Management of Blind Box Business Practices") and do not collect payment information from minors.

VII. Data and Breach Response

Safety protection measures: Establish a dual protection system of "technology   management", including:

Technical level: Real-timeusion detection, data transmission encryption, regular vulnerability scanning;

Management level: Privacy training for employees (mandatory training upon employment, quarterly refresher training), access log aud, compliance assessment of third-party service providers.

Breach emergency response: If a personal information breach occurs, an emergency plan will be immediately activated, remedial measures will taken, and you will be notified within 48 hours through text message, email, etc. (if the number of people involved is large, it will be announced on the website), and it will also be reported to the regulatory authorities.

VIII. Policy Updates and Consultation

Policy updates: This policy will be optimized to regulatory changes and business adjustments, and will be announced on the homepage of the official website after updates, and will take effect after 7 days of public announcement; major changessuch as expanded collection scope) will be additionally notified to you via text message and consent will be obtained.

Consultation and Complaints:

Complaint feedback Send an email to 973101709@qq.com, and we will feedback the handling results within 7 working days;

Dispute: If you are not satisfied with the handling results, you can complain to the local consumer association or network and information department

Effective Date: September 20, 2025

Personal Information Protection Officer: He Xin

Contact Information: 93101709@qq.com