Privacy Policy

Last Updated: December 18, 2025

1. INTRODUCTION

At CustomPlushMaker (“We,” “Us,” “Our”), we recognize that your privacy is serious business. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (the “Site”) or make a purchase.

We are committed to protecting your personal data in accordance with applicable global privacy laws, including the General Data Protection Regulation (GDPR) for European users and the California Consumer Privacy Act (CCPA) for California residents.

2. INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device.

• 2.1 Information You Provide to Us:
  • Personal Identifiers: Name, email address, postal address, phone number, and account username.
  • Commercial Information: Records of products purchased, custom design specifications, hand-drawn sketches, prototypes, and photos you upload for customization purposes.
  • Financial Information: Payment information (credit/debit card numbers). Note: We do not store full credit card numbers on our servers. Transactions are processed securely by our third-party payment partners, including ZAMBITIOUS S.L.
  • Communications: The content of customer support messages, emails, and feedback forms.
• 2.2 Information We Collect Automatically:
  • Internet Activity: IP address, browser type, operating system, access times, and referring website addresses collected via cookies and similar technologies.
  • Device Data: Information about the device you use to access our Site, including hardware model and unique device identifiers.

3. HOW WE USE YOUR INFORMATION

We process your Personal Data for the following business purposes:

1. Order Fulfillment: To process your payments, manufacture your custom plush toys, and arrange for shipping and delivery.
2. Customization: To analyze your uploaded designs/photos to create prototypes and final products.
3. Communication: To send you order confirmations, shipping updates, and respond to your inquiries.
4. Security & Fraud Prevention: To monitor for theft, fraud, and other illegal activities, and to ensure the security of our platform.
5. Legal Compliance: To enforce our Terms and Conditions and comply with legal requirements (e.g., tax laws).
6. Marketing: With your consent, to send you newsletters and promotional materials. You may opt-out at any time.

4. DATA RETENTION POLICY

We adhere to the principle of “Storage Limitation.” We retain your personal data only for as long as is strictly necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category	Retention Period	Rationale
Financial & Transaction Records	7 Years	Retained to strictly comply with international tax, audit, and accounting regulations (e.g., IRS, VAT requirements).
Active Customer Account Data	Duration of Account + 2 Years	Kept while your account is active. If your account remains inactive for 2 years, we will securely delete or anonymize personal identifiers.
Marketing Data	Until Opt-Out or 2 Years	Retained until you unsubscribe. If you do not engage with our communications for 2 years, we will remove you from our marketing lists.
Custom Design Files	5 Years	Retained to facilitate re-orders or modifications of your custom designs. After 5 years, design files are archived or deleted.
Customer Support Inquiries	3 Years	Retained to maintain a history of service requests and to resolve potential disputes.
Cookies / Analytics Data	12 – 24 Months	Data related to browsing behavior is anonymized or automatically deleted after this period.

5. DISCLOSURE OF YOUR INFORMATION

We do not sell your personal information. We may share your information with trusted third parties for business purposes:

• Payment Processors: ZAMBITIOUS S.L. (Spain) and other payment gateways to facilitate transactions.
• Logistics Partners: Shipping companies and freight forwarders required to deliver your orders.
• Service Providers: Companies that provide data hosting, email delivery, and customer service tools.
• Legal Requirements: We may disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or act in urgent circumstances to protect the personal safety of users of the Site or the public.

6. INTERNATIONAL DATA TRANSFERS

Please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we share your personal information, in China, Spain, and other countries.

If you are a resident of the European Economic Area (EEA), please note that these countries may not have data protection laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law.

7. YOUR PRIVACY RIGHTS (GDPR & CCPA)

Depending on your location, you have specific rights regarding your personal data.

7.1 For Users in the EEA/UK (GDPR):

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data, subject to legal retention obligations (e.g., tax records).
• Right to Restrict Processing: Request to limit how we use your data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

7.2 For Users in California (CCPA/CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, sources, and purposes.
• Right to Delete: Request deletion of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of personal information (though we do not sell your data).

To exercise any of these rights, please contact us at toyseei@customplushmaker.com. We will respond to your request within the timeframe required by applicable law (usually 30-45 days).

8. SECURITY OF YOUR INFORMATION

We use administrative, technical, and physical security measures to help protect your personal information. This includes SSL encryption for payment data and restricted access to personal databases. While we take reasonable steps to secure the personal information you provide, please be aware that no security measures are perfect or impenetrable.

9. POLICY FOR CHILDREN

We do not knowingly solicit information from or market to children under the age of 13 (or 16 in certain jurisdictions). If we learn that we have collected personal information from a child without parental consent, we will delete that information as quickly as possible. If you become aware of any data we may have collected from children under age 13, please contact us immediately.

10. CONTACT US

If you have questions or comments about this Privacy Policy, please contact us at:

• Email: toyseei@customplushmaker.com
• Phone: +86-13386392308
• Address: Room 301, Gang’ao Building, No. 27 Shandong Road, Shinan District, Qingdao City, Shandong Province, China