Privacy Policy

Last Updated: August 24, 2025

1. Introduction

At XDollWorld (“XDollWorld,” “we,” “us,” or “our”), your privacy is a priority. This Privacy Policy explains how we collect, use, disclose, and protect your Personal Information when you visit our website https://xdollworld.com (the “Site”), make a purchase, or interact with us. It also describes your rights under applicable privacy laws, including the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

2. Scope

This policy applies to Personal Information collected through our Site. It does not cover third-party websites linked from our Site.

3. Data Controller

The controller of your Personal Information is:
Name: Universe Technology (Changzhou) Co., Ltd
USA Office: 1033 N Todd Ave, Azusa, CA, USA

China Officie: No.3 Galaxy Moonbay, Changzhou, Jiangsu, China
Email: vic@xdollworld.com

4. Personal Information We Collect

We collect the following categories of information:

Category Examples 
Identifiers Name, email, phone number, billing/shipping address, IP address
Commercial Information Order history, products purchased, payment details (processed securely by third-party gateways)
Internet Activity Browsing history, pages visited, device type, browser, cookies (see Section 12)
Preferences Shopping habits, marketing choices, wishlists (if you create an account)
Geolocation Approximate location derived from IP address (not precise GPS without consent)
Sensitive Information Payment card details (deleted post-transaction), account login credentials

5. How We Collect Information

We collect information when you:

  • Place orders, create accounts, or contact us;
  • Interact with our Site (via cookies and tracking technologies);
  • Receive data from payment processors, shipping carriers, or analytics providers (e.g., Google Analytics).

6. How We Use Your Information

We process your data for these purposes and legal bases (under GDPR):

Purpose Legal Basis (GDPR) Categories Used
Fulfill orders & process payments
Contract Performance Identifiers, Commercial Information
Respond to inquiries & manage accounts
Legitimate Interests/Contract
Identifiers, Preferences
Send marketing communications
Consent (opt-in required)
Identifiers, Preferences, Internet Activity
Improve Site functionality & security
Legitimate Interests Internet Activity, Geolocation
Internet
Prevent fraud & comply with laws
Legal Obligation All relevant categories

7. How We Share Information

We disclose information to:

  • Service Providers: Payment processors (e.g., Stripe), shipping carriers (e.g., FedEx), IT/cloud storage providers.
  • Legal Authorities: If required by law (e.g., court orders).
  • Business Transfers: In mergers, acquisitions, or bankruptcy.
  • Advertising Partners: For personalized ads (see “CCPA Disclosures” below).

We never sell your name, contact details, or order history for monetary gain.

8. International Data Transfers

We operate globally. Your data may be transferred to and processed in countries outside your residence (e.g., the U.S.). We use Standard Contractual Clauses (SCCs) or other legal mechanisms to protect data transferred from the EEA/UK.

9. Data Security

We implement industry-standard measures:

  • SSL encryption for data transmission;
  • Restricted access controls;
  • Regular security audits.  

No method is 100% secure—promptly report suspicious activity to vic@xdollworld.com.

10. Data Retention

We retain Personal Information only as long as necessary:

  • Orders: 5 years for tax/legal compliance;
  • Marketing data: Until consent is withdrawn;
  • Inactive accounts: 2 years post-last activity.

Data is anonymized or deleted after retention periods.

11. Your Privacy Rights

GDPR Rights (EEA/UK Users):

  • Access, correct, or delete your data;
  • Restrict processing or object to marketing;
  • Data portability;
  • Withdraw consent (opt-out of emails via unsubscribe link).

CCPA Rights (California Residents):

  • Know what Personal Information we collect/disclose;
  • Delete Personal Information (subject to exceptions);
  • Opt-out of “sale/sharing” of data for ads;
  • Non-discrimination for exercising rights.

To exercise rights:

Email vic@xdollworld.com. We’ll verify your identity before processing requests.

12. CCPA-Specific Disclosures

  • No Monetary “Sale”: We do not sell Identifiers or Commercial Information for money.
  • Advertising “Sharing”: We may share Internet Activity/Preferences with ad partners for targeted ads.
    → Opt-out of ad sharing: Click “Do Not Sell or Share My Personal Information” in our footer or enable Global Privacy Control (GPC).
  • Sensitive Information: Payment data and login credentials are only used for order processing.

13. Cookies & Tracking Technologies

We use cookies to:

  • Enable checkout functionality (essential);
  • Analyze Site traffic (analytics);
  • Personalize ads (marketing).

Manage preferences: See our Cookie Policy for details.

14. Children’s Privacy

Our Site is not for users under 18. We do not knowingly collect data from minors. Contact us to request deletion of unintentionally collected minor data.

15. Third-Party Links

Our Site may link to other websites. We are not responsible for their privacy practices.

16. Policy Updates

We will notify you of material changes via email or Site notice. The “Effective Date” at the top reflects the latest version.

17. Contact Us

Email: vic@xdollworld.com

USA Office: 1033 N Todd Ave, Azusa, CA, USA

China Officie: No.3 Galaxy Moonbay, Changzhou, Jiangsu, China

 

We respond to requests within 30 days (CCPA: 45 days). For unresolved GDPR concerns, contact your local supervisory authority.