Only What We Need
We collect the information needed to provide the store, complete orders, support customization, and respond to you.
Your Data, Clearly Explained
Privacy Policy
This policy explains how TingMascot collects, uses, shares, protects, and retains personal information when you visit tingmascot.net, create an account, request a quote, place an order, submit customization details, or contact us.
In brief We use personal information to run the store, make and deliver your order, provide support, keep transactions secure, and meet legal obligations. We do not sell personal information.
Payment Credentials Stay with Payment Providers
PayPal, Apple Pay, Google Pay, and the underlying payment providers process payment credentials. TingMascot receives limited transaction and status information, not your full card number.
Your Privacy Choices
You may ask to access, correct, delete, or otherwise control your information where applicable law gives you that right.
Who Is Responsible
About TingMascot
Changzhou Tingting Network Technology Co., Ltd., trading as TingMascot, is the business responsible for the personal information described in this policy and acts as the data controller where that term applies.
Controller Details
Privacy questions and requests can be sent directly to TingMascot. Using “Privacy Request” in the subject line helps us route your message correctly.
- Legal name
- Changzhou Tingting Network Technology Co., Ltd.
- Brand
- TingMascot
- Address
- Room 426, Building 10, Shimao Commercial Plaza, Sanjing Subdistrict, Xinbei District, Changzhou, Jiangsu, China
- sale@tingmascot.net
- Phone
- +86 153 5197 3522
Policy Guide
Find What You Need
Use these links to move directly to the part of the policy that matters to you. The regional section explains additional rights that may apply based on where you live.
Information We Handle
Personal Information We Collect
“Personal information” means information that identifies you or can reasonably be linked to you. What we collect depends on how you use the website and which services you request.
Customer Details
Name, email address, telephone number, billing and delivery addresses, country or region, and account sign-in information.
Transaction Information
Products, sizes, quantities, customization selections, order notes, quote requests, order status, shipping details, returns, refunds, and purchase history.
Files You Submit
Logos, artwork, reference images, names, numbers, lettering, measurements, fit preferences, event dates, and other instructions you choose to provide for a custom product.
Limited Payment Details
Payment method, transaction identifier, currency, amount, payment status, and limited security or fraud-prevention information received from the selected payment or digital-wallet provider. PayPal, Apple Pay, Google Pay, and the underlying processor, card network, bank, or issuer handle full card or account credentials as applicable.
Messages & Support
Emails, contact-form submissions, call details, reviews or feedback, privacy requests, and records of our responses.
Technical Information
IP address, browser and device type, operating system, referring page, pages requested, timestamps, session and online identifiers, language, currency, cookie information, ad-click parameters, configured conversion events, and security or diagnostic logs. Advertising-related information is processed according to the enabled tag features and applicable consent choices.
Please do not send unnecessary sensitive information. Customization files can
contain personal information about you or another person. Only submit content you are authorized
to provide, and do not include government identifiers, financial credentials, medical records,
precise location data, or other sensitive details that are not needed for the order.
Where It Comes From
How We Collect Information
Most information comes from you. Some information is produced automatically when you use the website or returned to us by a service provider involved in your transaction.
Directly from You
When you browse, create an account, place an order, request customization, upload a file, contact support, or exercise a privacy right.
Automatically
Through server logs, session technology, cookies, and similar tools used to operate, secure, and remember preferences on the store, and through the Google Ads measurement tag according to its configuration and applicable consent choices.
From Service Providers
For example, PayPal, Apple Pay, Google Pay, or an underlying payment provider may confirm payment status or supply limited transaction and security details, while carriers may provide tracking, delivery, delay, address, or customs updates.
From Someone Acting for You
An organization, team, school, family member, authorized agent, or other purchaser may provide information needed for your product or delivery.
Why We Need It
How We Use Personal Information
The table connects each main use to the legal basis TingMascot relies on where laws such as the EU GDPR or UK GDPR require a legal basis. More than one basis may apply to the same activity.
| Purpose | What We Do | Legal Basis Where Required |
|---|---|---|
| Provide the store and your order | Maintain your cart and account; prepare quotes; confirm, customize, produce, ship, track, cancel, return, exchange, or refund an order; and provide related support. | Performance of a contract or steps you request before entering one. |
| Process payment | Send the transaction to the selected payment or digital-wallet provider, receive payment confirmation, reconcile amounts, issue refunds, and maintain transaction records. | Contract; legal obligations; and legitimate interests in accurate payment administration. |
| Communicate with you | Answer questions, provide service notices, request missing order information, send tracking updates, and resolve complaints or disputes. | Contract and legitimate interests in responsive customer service. |
| Keep the service secure | Authenticate accounts, prevent fraud and abuse, troubleshoot errors, maintain logs, enforce terms, and protect customers, the website, and our rights. | Legitimate interests in security and fraud prevention; contract; and legal obligations. |
| Meet legal duties | Keep accounting and tax records, complete customs documents, respond to lawful requests, manage product or consumer claims, and establish, exercise, or defend legal rights. | Legal obligations and legitimate interests in compliance and legal claims. |
| Improve our service | Review aggregated service, order, support, and technical information to improve products, sizing guidance, website reliability, workflows, and customer experience. | Legitimate interests in improving and operating our business, balanced against your rights. |
| Send optional marketing | Send promotional email only where permitted, record your preferences, and stop messages when you unsubscribe or object. | Consent where required; otherwise legitimate interests where electronic-marketing law permits. |
| Measure advertising results | Use the Google Ads tag to understand how advertising leads to website visits and configured actions such as enquiries or purchases. Depending on configuration and consent choices, Google may receive page URLs, IP address, browser and device details, online identifiers, ad interactions, and conversion-event information. | Consent where required. See our Cookie Policy. |
Required information: you can browse much of the website without identifying yourself. We need certain identity, contact, delivery, customization, and transaction details to accept and fulfill an order. If required information is not provided, we may be unable to create the product, process the order, deliver it, or provide the requested service.
Worldwide Service
International Data Transfers
TingMascot is based in China and serves customers internationally. Your information may be transferred to, stored in, or accessed from countries whose privacy laws differ from those where you live.
How Transfers Are Protected
Information is principally handled in China and may also be processed where our payment, hosting, communications, production, delivery, professional, and technical providers operate. Those locations can include the United States, the United Kingdom, countries in the European Economic Area, Australia, and destination or transit countries needed to deliver your order.
Where applicable law requires a transfer safeguard, we use an available legally recognized mechanism, such as an adequacy decision, approved contractual clauses, or another permitted safeguard, together with supplementary measures appropriate to the circumstances. Contact us if you would like more information about the safeguard relevant to your information.
Storage Limits
How Long We Keep Information
We keep personal information only while it is reasonably needed for the purpose collected, a related legal or security purpose, or a required recordkeeping period. We then delete, anonymize, or securely isolate it unless continued retention is required by law.
| Record Type | Typical Retention Approach | Why |
|---|---|---|
| Accounts | While the account remains active. After closure, limited information may remain for the periods applying to orders, security, legal claims, and backups. | Provide account features, preserve order history, prevent fraud, and meet legal duties. |
| Orders, payments, invoices, tax, customs & shipping | For the legally required recordkeeping period and, where no fixed period applies, normally up to 7 years after the transaction. A longer period may apply where law or an active claim requires it. | Fulfillment, accounting, tax, customs, warranty, consumer protection, refunds, chargebacks, and legal claims. |
| Customization files & instructions | During production and for a reasonable period after delivery to support quality issues, repeat orders, disputes, or legal claims; then deleted or anonymized when no longer needed. | Produce the requested design and provide after-sales support. |
| Customer service & privacy requests | Normally up to 3 years after the matter is resolved, or longer when the message forms part of an order record, complaint, or legal claim. | Document the request, maintain service continuity, and demonstrate compliance. |
| Security & technical logs | Normally up to 12 months, unless needed longer to investigate an incident, prevent abuse, protect the service, or establish a legal claim. | Security monitoring, diagnostics, fraud prevention, and service reliability. |
| Marketing preferences | Until you unsubscribe or object. A minimal suppression record may remain so we can respect your choice. | Send permitted messages and make sure opted-out addresses stay opted out. |
| Cookies | Varies by cookie and browser setting. | See the durations in our Cookie Policy. |
Backup copies may persist for a limited additional period before being overwritten. If we must preserve information because of a dispute, legal hold, security incident, or regulator request, we restrict it to that purpose and retain it until the requirement ends.
Safeguards
How We Protect Information
We use reasonable administrative, technical, and organizational measures designed to protect personal information against accidental loss and unauthorized access, use, alteration, or disclosure.
Secure Processing
Measures can include encrypted transmission, access restrictions, account authentication, secure payment processing, monitoring, backups, and service-provider controls.
Your Part Matters
Use a unique account password, keep it confidential, sign out on shared devices, and contact us promptly if you believe your account or personal information has been compromised.
No method of transmission or storage is completely secure. If a personal-data incident occurs, we will investigate and notify affected individuals or authorities when applicable law requires it.
You Stay in Control
Your Rights & Choices
Privacy rights vary by location and are subject to exceptions. Depending on the law that applies, you may have some or all of the following rights.
Know & Access
Ask whether we process your information, obtain details about our practices, and receive a copy of eligible personal information.
Correct
Ask us to correct inaccurate personal information or complete information that is materially incomplete.
Delete
Ask us to delete eligible personal information, subject to legal, security, transaction, recordkeeping, and other permitted exceptions.
Restrict or Object
Ask us to restrict certain processing or object when processing is based on legitimate interests or used for direct marketing.
Portability
Receive eligible information you provided in a structured, commonly used, machine-readable format, and ask that it be transferred where technically feasible.
Withdraw Consent
Withdraw consent at any time where consent is the legal basis. This does not affect processing that was lawful before withdrawal.
Email and cookie choices: use the unsubscribe link in a promotional email or contact us to stop marketing. Service messages about an order or account are not promotional. You can manage browser storage as explained in our Cookie Policy.
Location-Specific Information
Regional Privacy Disclosures
These disclosures supplement the rest of the policy. They apply only when the referenced law covers TingMascot’s handling of your information and do not limit rights available under another law.
European Economic Area, United Kingdom & Switzerland
The controller, purposes, legal bases, recipients, transfers, retention approach, and rights required by applicable European data-protection law are described throughout this policy. You may also have the right to lodge a complaint with the supervisory authority where you live or work, or where you believe an infringement occurred.
- EEA residents can find their authority through the European Data Protection Board member list.
- UK residents can contact the Information Commissioner’s Office.
- Swiss residents can contact the Federal Data Protection and Information Commissioner.
We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significant effects about customers. Contact us to ask about the transfer safeguard applicable to your information.
California & Other U.S. States
In the preceding 12 months, TingMascot may have collected the categories described below for the business and commercial purposes explained in this policy and disclosed them to the recipient categories described under “Who We Share Information With.”
- Identifiers: name, contact details, addresses, IP address, account identifier, and account credentials.
- Customer-record and commercial information: order, payment-status, shipping, customization, service, return, refund, and purchase-history information.
- Internet or electronic-network activity: device, browser, session, cookie, page-request, security, and diagnostic information.
- General geolocation: approximate location derived from IP address and the city, region, or country in a delivery address.
- Electronic, visual, and similar information: messages, feedback, support records, and custom artwork or reference files you submit.
- Sensitive personal information: account sign-in credentials used only to provide and protect your account. Full payment credentials are handled by the selected payment or digital-wallet provider and the underlying processor, card network, bank, or issuer.
Subject to applicable law, you may request access, correction, deletion, or a portable copy, and you may appeal a denied request. We do not sell personal information, share it for cross-context behavioral advertising, use sensitive information to infer characteristics, or offer financial incentives for personal information. Because we do not sell or share personal information for those purposes, no sale or sharing opt-out is currently necessary. If that practice changes, we will update this notice and honor legally required preference signals.
We will not discriminate against you for exercising an applicable privacy right. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct verification with you. To appeal, reply to our decision or email us with “Privacy Appeal” in the subject line.
Australia, Canada & Other Regions
Depending on applicable law, you may request access to or correction of personal information, withdraw consent, object to certain uses, or complain about how information is handled. We will explain our decision if an exception prevents us from completing a request.
For Australia, the kinds of information, collection and handling practices, access and correction process, complaint process, and likely overseas disclosures are described in this policy. Likely overseas recipients may be located in China, the United States, the United Kingdom, the EEA, Australia, and the destination or transit countries needed for payment, production, support, customs, and delivery. You may contact the Office of the Australian Information Commissioner if a privacy complaint remains unresolved.
Canadian residents may also contact the Office of the Privacy Commissioner of Canada where federal privacy law applies. Other local regulators may also be available depending on your province, territory, or country.
How to Reach Us
Privacy Requests & Complaints
Email sale@tingmascot.net or use our contact form. We will respond within the period required by applicable law and will tell you if we need more time.
What to Include
- Use “Privacy Request” or “Privacy Complaint” in the email subject line.
- Describe the right you want to exercise or the concern you want us to investigate.
- Provide your name, the email associated with the order or account, your country or state, and an order number if relevant.
- Do not send a password or identity document unless we later request appropriate verification through a secure method.
We may request information reasonably necessary to verify your identity, locate the correct records, protect another person’s privacy, or confirm an agent’s authority. Verification information is used only for the request and related legal or security records.
Other Important Details
Children, External Sites & Updates
The points below explain how this policy applies to children’s information, third-party services, account deletion, and future changes.
Is TingMascot intended for children?
No. The store is intended for adults purchasing products and is not directed to children under 16. An adult ordering a product for a child should provide only the minimum information needed for sizing, customization, and delivery. We do not knowingly sell or share the personal information of children. If you believe a child submitted personal information without appropriate permission, contact us so we can review and delete it where required.
What happens when I use PayPal, Apple Pay, Google Pay, or another external service?
Third-party services and links have their own privacy practices. The selected provider and the underlying payment parties may process information needed to offer, authorize, complete, secure, or refund your transaction. Review PayPal's Privacy Statement, Google Pay privacy, terms, and policies, and Apple Pay & Privacy before using the relevant service. TingMascot does not control an external provider simply because it is offered at checkout or linked from our website.
Does deleting my account erase every order record?
Not necessarily. We can close the account and delete eligible profile information, but some order, transaction, tax, customs, security, complaint, or legal-claim records may need to be retained for the periods described above. Retained information is restricted to those purposes.
How will TingMascot update this policy?
We may update this policy when our services, providers, technology, or legal obligations change. The “Last updated” date shows the latest revision. If a change materially affects how we handle information already collected, we will provide additional notice or request consent where required.
Have a Privacy Question?
Email sale@tingmascot.net or send us a message through the contact form.
Last updated: September 4, 2026