Privacy policy

Last updated: September 8, 2026

Kstardolls is operated by k-stardolls Trading Co., Limited ("Kstardolls," "we," "us," or "our"). We operate this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you visit or use www.kstardolls.com, make a purchase or other transaction, create or use an account, subscribe to marketing communications, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of personal information, this Privacy Policy will control.

k-stardolls Trading Co., Limited is the controller of the personal information described in this Privacy Policy, except where another party is identified as independently controlling certain information.

Personal Information We Collect or Process

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process the following categories of personal information:

  • Contact information: such as your name, email address, telephone number, billing address, and shipping address.
  • Order and transaction information: such as products you view, add to your cart, purchase, return, exchange, or cancel; order history; transaction details; and shipping and delivery information.
  • Payment information: such as your selected payment method, billing details, payment confirmation, transaction status, and limited payment information made available to us by Shopify Payments, PayPal, or other payment providers. Full payment card details are generally processed directly by our payment providers and are not stored by us.
  • Account information: such as account login credentials, preferences, and settings, if you create a customer account.
  • Communications: information you provide when you contact us, request customer support, submit a return request, or otherwise communicate with us.
  • Device and network information: such as your IP address, browser type, device type, operating system, network connection, cookie identifiers, and other online identifiers.
  • Usage information: such as how and when you access, browse, search, and interact with the Services, including pages viewed, links clicked, referring pages, and shopping activity.
  • Marketing information: such as your email subscription status, marketing preferences, and interactions with our marketing messages or advertisements.
  • Inferences: preferences or interests inferred from your purchases, browsing activity, and interactions with the Services.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, including when you place an order, create an account, subscribe to marketing emails, contact us, or otherwise provide information to us.
  • Automatically through the Services, including through cookies, pixels, tags, software development kits, and similar technologies when you visit or use our website.
  • From service providers, including Shopify, Shopify Payments, PayPal, payment processors, fulfillment providers, shipping carriers, analytics providers, customer-support providers, and email-service providers.
  • From advertising and marketing partners, including Meta, Google, Shopify Email, and Klaviyo.
  • From other third parties, where permitted by applicable law.

How We Use Your Personal Information

We may use personal information for the following purposes:

  • Providing and improving the Services: to operate our website, process payments, fulfill and deliver orders, maintain customer accounts, remember preferences, process returns or exchanges, provide recommendations, and improve our products and shopping experience.
  • Customer service and communications: to respond to questions, provide order and delivery updates, address customer-support requests, and maintain our relationship with you.
  • Marketing and advertising: to send promotional emails through Shopify Email or Klaviyo where permitted by law; measure marketing performance; personalize advertising; and display advertisements through services such as Meta Pixel, Google Analytics, and Google Ads. We do not use your personal information to send SMS marketing messages.
  • Analytics: to understand how customers use our website, measure site performance, identify popular products, and improve our Services.
  • Security and fraud prevention: to authenticate accounts, secure transactions, detect and investigate fraud or other unlawful, unsafe, or malicious activity, and protect our customers, business, and Services.
  • Legal and compliance purposes: to comply with applicable laws, tax and accounting obligations, lawful requests, court orders, and legal processes; enforce our terms and policies; establish or defend legal claims; and protect our rights or the rights of others.

Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing, we rely on one or more of the following:

  • Performance of a contract: when processing is necessary to process your payment, fulfill and deliver an order, manage returns, provide customer support, or otherwise provide requested Services.
  • Legal obligations: when processing is necessary to comply with tax, accounting, consumer-protection, fraud-prevention, or other legal requirements.
  • Legitimate interests: when processing is necessary for our legitimate business interests, such as operating and improving the Services, securing our website, preventing fraud, understanding our customers, and conducting appropriate marketing, provided those interests are not overridden by your rights and interests.
  • Consent: where you have given consent, including for certain cookies, personalized advertising, or marketing communications. You may withdraw your consent at any time, without affecting processing that occurred before withdrawal.

Cookies and Similar Technologies

We and our service providers use cookies, pixels, tags, and similar technologies to operate and secure the website, remember your preferences, understand how you use the Services, measure performance, and provide or measure advertising.

These technologies may include:

  • Strictly necessary cookies, which are required for core functions such as shopping carts, checkout, account access, security, and fraud prevention.
  • Functional cookies, which remember your choices and improve website functionality.
  • Analytics cookies, including technologies used by Shopify and Google Analytics to help us understand website traffic and usage.
  • Advertising cookies and pixels, including Meta Pixel and Google Ads technologies used to measure campaigns and, where permitted, provide more relevant advertising.

Where required by law, non-essential cookies will be used only after you provide consent. You may manage your choices through the cookie banner or cookie preferences tool displayed on our website. You may also adjust your browser settings to block or delete cookies, although doing so may affect certain website features.

How We Disclose Personal Information

We may disclose personal information to third parties for legitimate business purposes and as described in this Privacy Policy, including:

  • Shopify, which hosts and supports our online store.
  • Payment providers, including Shopify Payments and PayPal, to process payments, refunds, and related transactions.
  • Service providers, including providers of website hosting, IT services, cloud storage, security, data analytics, customer support, order fulfillment, and shipping.
  • Marketing and advertising providers, including Meta, Google, Shopify Email, and Klaviyo, to deliver marketing communications, analyze performance, and provide or measure advertising where permitted by law.
  • Shipping and fulfillment partners, when necessary to prepare, ship, track, and deliver your order.
  • Professional advisers and authorities, including accountants, lawyers, insurers, auditors, regulators, courts, law-enforcement agencies, and government authorities where reasonably necessary or legally required.
  • Parties to a business transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our business or assets.
  • Other parties at your direction or with your consent, including when you request a third-party integration or social-media function.

Relationship with Shopify

Our Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the platform and related services. Information submitted through our store may be transmitted to and processed by Shopify and other service providers in countries outside your country of residence.

We may use Shopify features that process information from your interactions with our store, and in some circumstances Shopify may act as an independent controller of personal information. To learn more about Shopify's privacy practices, visit the Shopify Consumer Privacy Policy. Depending on where you live, you may also submit certain requests through the Shopify Privacy Portal.

Targeted Advertising and Data-Sharing Choices

Depending on where you live, certain disclosures of personal information for personalized or targeted advertising may be considered a "sale," "sharing," or "targeted advertising" under applicable privacy laws. You may opt out of these uses through our Data Sharing Opt-Out Page.

If you visit our website with a legally recognized Global Privacy Control preference signal enabled, we will treat the signal as an opt-out request for the browser and device used, as required by applicable law. If we can associate that device with your Shopify account, the request may also be applied to your account. Other than legally required preference signals such as Global Privacy Control, we do not generally respond to browser "Do Not Track" signals.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties. We are not responsible for the privacy, security, accuracy, or practices of websites and platforms that we do not control. If you follow a third-party link, please review that party's privacy notice and terms. Information you post in public or semi-public areas, including on third-party social networks, may be visible to others and may be used by those parties according to their own policies.

Children's Privacy

Our Services are intended for use by adults and are not directed to children under 13. Purchases must be made by an adult or with the involvement of a parent or legal guardian. We do not knowingly collect personal information directly from children under 13. If you are a parent or guardian and believe that a child has provided personal information to us, please contact us at ada@kstardolls.com so that we can take appropriate steps to delete it.

We do not knowingly sell or share, as those terms are defined under applicable law, the personal information of individuals under 16 years of age.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no security measure or method of transmission is completely secure, and we cannot guarantee absolute security. Please do not send sensitive or confidential information through unsecured communication channels. If you maintain a customer account, you are responsible for keeping your login credentials confidential.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining your account, processing orders and returns, providing customer support, meeting tax, accounting, recordkeeping, and other legal obligations, preventing fraud, resolving disputes, and enforcing our agreements.

The retention period may vary depending on the type of information, the nature of our relationship with you, legal limitation periods, and applicable legal requirements. When personal information is no longer needed, we will delete, anonymize, or securely dispose of it, subject to applicable law and technical limitations.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may be subject to conditions or exceptions under applicable law:

  • Access or knowledge: request access to or information about the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete personal information.
  • Deletion: request deletion of personal information we maintain about you.
  • Portability: request a copy of certain personal information in a portable format or request its transfer where applicable.
  • Restriction: request that we restrict certain processing of your personal information.
  • Objection: object to processing based on legitimate interests or for direct marketing.
  • Withdrawal of consent: withdraw consent where processing is based on consent.
  • Opt out of sale, sharing, or targeted advertising: opt out through our Data Sharing Opt-Out Page, where applicable.
  • Appeal: appeal our refusal of a privacy-rights request where applicable law provides this right.

You may exercise applicable rights by emailing ada@kstardolls.com or using an available privacy request tool on our website. We may need to verify your identity before processing a request. Where permitted, you may authorize an agent to submit a request on your behalf, but we may require proof of authorization and direct verification of your identity.

We will not discriminate against you for exercising applicable privacy rights. We will respond within the period required by applicable law.

Marketing Communications

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in those emails or by contacting us. If you unsubscribe, we may still send non-promotional communications, such as messages about your account, orders, payments, returns, security, or changes to our policies.

International Transfers

We and our service providers may transfer, store, and process personal information outside the country where you live, including in Hong Kong, the United States, Canada, and other countries where Shopify or our service providers operate. These countries may have data-protection laws that differ from those in your jurisdiction.

Where required for transfers from the European Economic Area or the United Kingdom, we rely on recognized safeguards, such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another legally recognized transfer mechanism.

Complaints

If you have a concern about how we process personal information, please contact us at ada@kstardolls.com. Depending on where you live, you may also have the right to appeal our decision or lodge a complaint with your local data-protection or privacy authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal obligations, or other operational reasons. We will publish the revised policy on this website, update the "Last updated" date, and provide any additional notice required by applicable law.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, or if you wish to exercise an applicable privacy right, please contact:

k-stardolls Trading Co., Limited
Email: ada@kstardolls.com
Address: Room H11, 1/F, Kaiser Estate Phase 2, No. 51 Man Yue Street, Hung Hom, Hong Kong