Discretion is the product
You’re buying from a store whose customers value privacy more than almost anything. We built the data practices to match. Plain language below; last updated August 25, 2026.
What we collect
- Order data — your email, delivery address, and what you ordered. Needed to build and deliver your doll and to send factory photos for approval.
- Messages — what you send through the contact form or email.
- Essential cookies only — a session cookie that keeps your cart and wishlist working, and a browser setting that remembers you passed the age check. No advertising trackers, no social media pixels.
What we never do
- We never sell or share customer lists with anyone.
- We never pass product-level purchase details to payment providers, carriers or email services — they see a neutral company name and an order reference, not what you bought.
- We never send marketing email unless you asked for it, and even then the sender and subject lines stay neutral.
Sensitive data, treated as such
Under EU/UK law (GDPR Article 9), purchase records in this category can qualify as sensitive personal data. We treat all customer data at that standard regardless of where you live: encrypted in transit and at rest, access limited to staff handling your order, retained only as long as tax law requires ([retention period]), then deleted.
Your rights
Ask us at any time to show you the data we hold on you, correct it, or erase it (erasure honored fully once legal retention periods on invoices expire). Write to [email protected] from the email on your order — we verify by that address alone and don’t ask for ID documents.
Who processes data for us
Payment processors (for the transaction amount only), shipping carriers (name and address only), and our email provider (address and neutral order updates only). Each is bound by contract to use the data solely for that purpose. Data controller: [Company legal name, registered address].