Privacy Policy

Privacy Policy
Last updated: August 19, 2025.

This Privacy Policy explains how HK Sine Limited, trading as DollsRebel (“DollsRebel”, “we”, “us”, “our”), collects, uses, discloses, and protects your personal information when you visit dollsrebel.com or communicate with us (the “Services”). “You” means any visitor, customer, or individual whose information we process.

By using the Services, you agree to this Privacy Policy. If you do not agree, please discontinue use.

1) Who we are (Data Controller)

HK Sine Limited (DollsRebel) is the data controller for personal information processed via the Services.
Contact: service@dollsrebel.com
Address: Room H020, 3/F, Phase 2, Kwai Shing Industrial Building, 42–46 Tai Lin Pai Road, Kwai Chung, Hong Kong.

2) Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date and, where required by law, notify you and/or seek consent.

3) What we collect

The information we collect depends on your interactions with us.

• Identifiers & contact data: name, email, phone number, billing/shipping address.

• Order & payment data: items purchased, order totals, payment confirmation (payments are processed by PCI-compliant providers; we do not store full card numbers).

• Account data: username, hashed password, security details.

• Shopping & usage data: items viewed/added to cart/wishlist; device, browser, IP address, session and analytics data collected via cookies, pixels, SDKs.

• Support content: messages, photos/videos you send to customer service.

• Third-party sources: platforms that help us operate the store (e.g., Shopify), payment processors, analytics and marketing partners, and logistics/fulfillment providers.

4) How we use information

• Provide and improve the Services: process payments and orders, shipping/returns, account administration, troubleshooting, analytics, service improvements.

• Communications: transaction emails (order, shipping, returns) and—where permitted—marketing messages (you can unsubscribe at any time).

• Security & fraud prevention: detect, investigate, and prevent fraudulent/illegal activities.

• Legal compliance: comply with law, enforce our terms, and protect our rights or users.

Legal bases (EEA/UK users): performance of contract; your consent (e.g., marketing cookies); our legitimate interests (e.g., site security, analytics); and compliance with legal obligations.

5) Cookies & similar technologies

We use cookies and similar technologies to operate the store, remember preferences, measure performance, and personalize content. Details about Shopify cookies are available at: https://www.shopify.com/legal/cookies.
Where required, we display a cookie consent banner that lets you manage preferences. You can also control cookies via your browser; blocking cookies may impact site functionality.

6) How we share information

We share personal information only as described below:

• Service providers / processors: hosting (Shopify), payments, analytics, customer support, fulfillment, shipping, cloud storage.

• Business partners & advertising technology (where applicable and permitted by law).

• Corporate transactions: mergers, acquisitions, or reorganization.

• Legal & safety: to comply with legal process or protect rights, users, or the Services.
  We do not use or disclose sensitive personal information to infer characteristics.

U.S. State privacy disclosure (e.g., California/CPRA):

• Sell/Share. We do not sell personal information. We [do/do not] “share” personal information for cross-context behavioral advertising.

  • If you do share via advertising cookies, include: You can opt out via our “Do Not Sell or Share My Personal Information” link or by enabling the Global Privacy Control (GPC) in your browser.

  • If you do not share, state: We do not “share” for cross-context behavioral advertising.

7) Security & retention

We use administrative, technical, and physical safeguards. No method is 100% secure.
We retain personal information only as long as necessary for the purposes above—for example:

• orders & tax records: 7 years (or as required by law);

• account data: for the life of the account;

• marketing data: until you unsubscribe or your consent is withdrawn;

• logs/analytics: for operational periods consistent with our security and analytics practices.

8) Children’s data

The Services are not intended for children, and we do not knowingly collect data from children. If you believe a child provided data, contact service@dollsrebel.com to request deletion.

9) International transfers

We may transfer, store, and process information outside your country (e.g., in the U.S. and other locations). Where required for EEA/UK transfers, we rely on Standard Contractual Clauses (SCCs) or other approved safeguards.

10) Your rights

Depending on your location, you may have the following rights (subject to legal limits):

• Access / Know, Correction, Deletion, Portability;

• Restriction/Objection (where we rely on legitimate interests);

• Withdraw consent (where processing is based on consent);

• Opt-out of marketing communications at any time;

• U.S. state law rights (e.g., CPRA/CPA/VCDPA/CTDPA/UTDPA): access, delete, correct, portability, and the right to opt out of “sharing”/targeted advertising (if applicable).
  You will not be discriminated against for exercising your rights. We may verify your identity (and, for authorized agents, proof of authorization). To exercise rights, email service@dollsrebel.com. If we deny a request, you may appeal by replying to our decision.

11) User-generated content

If you post reviews or other content publicly, that information becomes public. We are not responsible for how others use such information.

12) Third-party sites & links

Our Site may link to third-party websites. Their privacy and security practices are governed by their own policies.

13) Contact

Questions or requests about this Policy or our privacy practices: service@dollsrebel.com.