Privacy Policy
Last updated: 2026-09-15 · 中文版
Privacy Policy
Last updated: 2026-09-15
MochiBuy ("we") processes personal data in order to buy and ship goods on your behalf. This policy explains what we collect, why, how long we keep it, and the rights you have.
1. What we collect
| Category | Examples | Why we need it |
|---|---|---|
| Contact data | name, email address, phone number | to confirm your order, quote shipping, send status updates |
| Delivery data | recipient name, phone, province/state, city, address, postcode, country | to buy from the seller and deliver internationally |
| Order data | items, quantities, selected options, amounts, payment status | to run the order and keep accounts |
| Payment data | payment method, transaction reference, amount, currency, timestamp | to match payments to orders and to reconcile |
| Technical data | IP address, user agent, pages viewed, referring URL | security (rate limiting, fraud prevention) and aggregate analytics |
| Communications | emails and support tickets you send us | to answer you and to keep a record of the case |
We never see your full card number. Card payments are handled by our payment processors (for example Stripe or PayPal); we only receive a transaction reference and a status.
2. Why we process it (legal bases)
- Performance of a contract — to buy, store, consolidate and ship your goods.
- Legitimate interests — preventing fraud and abuse, securing our systems, and improving the service.
- Legal obligation — accounting, tax and customs records.
- Consent — optional marketing emails and non-essential cookies. You can withdraw consent at any time.
3. Who we share it with
- Payment processors — to take payment and to handle refunds.
- Carriers and last-mile couriers — the recipient name, address and phone are printed on the shipping label; this is unavoidable for delivery.
- Chinese marketplace sellers — the delivery address inside China (our warehouse) and, where a seller requires it, the recipient name.
- Our email, hosting and logistics software providers — acting as processors under our instructions.
- Authorities — where required by law or to respond to a lawful request.
We do not sell your personal data, and we do not share it for third-party advertising.
4. International transfers
We operate from China and use service providers in other countries, so your data may be transferred outside your country of residence. Where required (for example for EU/UK residents), transfers rely on appropriate safeguards such as standard contractual clauses.
5. How long we keep it
- Order, delivery and payment records: as long as needed for the order and then for the statutory accounting period.
- Warehouse QC photographs: until 30 days after the parcel is delivered (or as long as needed to resolve a claim).
- Security logs (IP, rate-limit counters): a maximum of 12 months.
- Support tickets: 24 months after the last message.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to receive your data in a portable format, and to withdraw consent. Email hello@mochibuy.com and we will respond within 30 days. If you are in the EU/UK you also have the right to complain to your local supervisory authority.
7. Security
Passwords and session tokens are stored hashed or signed; administrative access to customer records requires authentication and is rate-limited. Access to order data requires both the order reference and the email address used to place the order.
8. Children
The service is not directed at children under 18 and we do not knowingly collect their data.
9. Contact
Data controller: MochiBuy. Privacy requests: hello@mochibuy.com.
Still have a question?
Email us — we answer within one business day, Mon–Sat 09:00–21:00 (GMT+8). Include your order reference if it is order-specific.