Your privacy matters to us. This page explains how Mochi XP collects, uses, and protects your personal data in compliance with GDPR, CCPA, and international privacy standards.
1. Who We Are
Mochi XP is operated by FDL Ltd., registered in Hong Kong and trading globally as Mochi XP.
We ship made-to-order toys and collectibles directly from verified partner workshops.
Contact: hello@mochixp.com
2. What We Collect
We collect only what’s needed to process your order and improve your experience:
-
Name, address, email, phone (for orders & delivery)
-
Payment info (processed securely — we never see full card data)
-
Order history (to handle warranty or service issues)
-
Device data (browser type, IP, cookies for analytics & security)
-
Support messages (for customer care follow-up)
We never request explicit content or sensitive identity documents.
3. Why We Collect It
Your data helps us:
-
Process and ship your orders
-
Send updates or resolve delivery issues
-
Provide customer support and after-sales service
-
Improve site performance and user experience
-
Send marketing emails only if you opt in
We never sell or rent your information to anyone.
4. Who We Share It With
To fulfil orders, we share limited data with trusted third parties:
-
Shopify (website platform)
-
Payment processors (eg. Stripe, PayPal, Shopify Payments)
-
Shipping partners (for delivery labels and tracking)
-
Analytics providers (Google Analytics, Meta Pixel, optional cookies)
All partners comply with international data laws and use secure, encrypted systems.
5. International Data Transfers
As a Hong Kong-based company serving global customers, your data may be stored or processed outside your country.
Shopify and our service providers meet GDPR adequacy or use Standard Contractual Clauses (SCCs).
6. Retention Period
We retain necessary order data for accounting, tax, and legal purposes — typically 6 years.
You can request deletion of your personal data once your order and any warranty period are completed.
7. Cookies
Cookies help us remember preferences and understand how visitors use our site.
Types we use:
-
Essential: required for checkout, cart, security
-
Performance: analytics and speed optimisation
-
Marketing (optional): remarketing and affiliate tracking
You can accept, reject, or manage cookies via our cookie banner or your browser settings.
8. Marketing Emails
We’ll email you only if you’ve subscribed.
Each message includes an unsubscribe link that removes you immediately.
9. Your Rights (GDPR / CCPA)
You may request to:
-
Access or correct your data
-
Delete or limit processing
-
Withdraw marketing consent
-
Request data portability
-
File a complaint with your local authority
Send all requests to hello@mochixp.com — we respond within 30 days.
10. Data Security
We use SSL encryption, HTTPS, and secure payment processing.
Only authorised staff can access customer data for legitimate purposes.
11. Billing Data
Payment information is processed through encrypted systems. The merchant descriptor on your statement will display “FDL Ltd.” only, ensuring total discretion.
12. External Links
We’re not responsible for privacy practices on third-party sites linked from Mochi XP (e.g., partner factories or suppliers).
13. Policy Updates
We may update this policy to reflect new laws or platform changes. The current version is always available on this page.
14. Contact
For any privacy or data questions, contact:
hello@mochixp.com
