Last updated: 27 October 2026
Data controller: DP Lounge, [Registered company name], [Street address], Shenzhen, Guangdong, China · sales@dplounge.com

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to our website, our enquiry forms, our sales and order correspondence, and our dropshipping and wholesale relationships. It does not cover third-party websites we link to.

We are a business-to-business supplier. Most of the data we hold relates to business contacts acting for their companies, but we also process end-customer delivery details when we ship dropshipping orders on behalf of a seller. In that case we act as a processor for the seller and as controller for our own compliance obligations.

1. Information we collect

1.1 Information you give us

• Contact details — name, company, job title, email address, phone or WhatsApp number, country and shipping or billing address.
• Enquiry and order content — product interest, quantities, canvas sizes, drill types, packaging requirements, artwork or logo files, and any message you send through our forms or by email.
• Transaction data — quotations, invoices, purchase orders, payment references and shipping documents. We do not store full bank card details on our website.
• Dropshipping order data — the recipient name, delivery address, order reference and any personalised photo or text supplied for a custom kit. This data belongs to the seller who sent it to us.
• Account data — login details if we create a portal account for you, and the price lists or files we share with you.

1.2 Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, referring page, pages viewed and time spent.
• Cookie data — as described in section 6 below.
• Communication records — emails, form submissions, chat transcripts and call notes kept so we can answer consistently and resolve disputes.

1.3 Information from third parties

We may receive your business contact details from a trade-show list, a sourcing platform, a referral, a freight forwarder, a payment provider or a marketplace where you contacted us. We do not buy scraped personal data.

2. How we use your information

Purpose	Data used	Legal basis (GDPR)
Answering enquiries and preparing quotations	Contact details, enquiry content	Steps taken at your request before a contract
Producing and shipping your orders	Order, artwork, shipping and payment data	Performance of a contract
Free design conversion and proofing	Artwork and logo files you send	Performance of a contract or your request
Dropshipping fulfilment for a seller's customers	Recipient name, address, order reference	Processor acting on the seller's instructions
Invoicing, accounting and tax records	Transaction and business details	Legal obligation
Site security, spam prevention and fraud checks	Technical and cookie data	Legitimate interests
Improving our products, pages and pricing structure	Aggregated usage data	Legitimate interests
Occasional business updates you opted into	Name, company, email	Consent or soft opt-in for existing clients

We do not sell your personal information, and we do not share your designs, pricing or order history with other clients. Private-label artwork is never reused or resold.

3. Cookies and similar technologies

Our site uses a small number of cookies and similar storage technologies to keep the site working and to understand which pages help buyers.

• Strictly necessary — security, form protection, load balancing and remembering your cookie choice. These cannot be switched off without breaking the site.
• Analytics — aggregated page and traffic statistics so we know which guides and product pages are useful. Set only with your consent where required.
• Marketing — used only if you opt in, for example to measure whether an advert led to a genuine enquiry. We do not use remarketing cookies by default.

You can clear or block cookies in your browser settings, and you can withdraw consent at any time through the cookie banner or by emailing us. Blocking analytics cookies does not affect your ability to request a quote.

4. Who we share data with

We share only what is needed, and only with parties who support your order:

• Shipping and logistics providers — courier, air and sea freight partners, customs brokers and, where relevant, the seller's nominated forwarder.
• Payment and banking providers — banks and payment platforms used to receive and confirm payment.
• Manufacturing and print subcontractors — only where a component is produced outside our own factory, under confidentiality obligations.
• Technology providers — website hosting, email, form handling, analytics and CRM systems that process data on our instructions.
• Professional advisers — accountants, auditors and lawyers where necessary.
• Authorities — where we are legally required to disclose, or to establish or defend legal claims.

Because we are based in China and sell internationally, your data may be transferred to and processed in China and in the countries where our service providers operate. Where GDPR applies, we rely on appropriate safeguards such as standard contractual clauses, and we keep transfers to what is necessary for the order or enquiry.

5. How long we keep data

Record type	Retention
Enquiries that do not become orders	Up to 24 months, then deleted
Quotations and order records	Up to 7 years for accounting and warranty purposes
Artwork and production files	Kept while you are an active client so reorders match; deleted on request
Dropshipping recipient data	Retained only as long as needed for fulfilment, claims and the seller's records
Marketing subscriptions	Until you unsubscribe, plus a suppression record
Analytics data	Typically up to 26 months, aggregated

6. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal record-keeping duties.
• Object to or restrict certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing relies on consent.
• Lodge a complaint with your local data protection authority.

Write to sales@dplounge.com with the subject "Data request". We respond within 30 days and may ask you to verify your identity first. If your request concerns a dropshipping order placed by a seller, we will forward it to that seller, because they control that data.

California residents: we do not sell or share personal information for cross-context behavioural advertising as those terms are defined by the CCPA/CPRA. You may still exercise your access, deletion and correction rights using the contact above.

7. How we protect your data

• Access to client files, pricing and order data is limited to staff who need it for their role.
• Production files and client artwork are stored in restricted folders with separate access from general shared drives.
• Confidentiality and non-disclosure terms apply to staff and subcontractors, and we sign client NDAs on request.
• We use HTTPS across the site, and we do not ask for card details by email.

No system is completely secure. If a breach affects your personal data, we will notify you and any relevant authority without undue delay where the law requires it.

8. Children

Our website and sales process are aimed at businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.

9. Third-party links

Our pages may link to marketplaces, logistics tools or social platforms. Those sites have their own privacy policies, and we are not responsible for their practices. Read the policy of any site before submitting personal data to it.

10. Changes to this policy

We update this policy when our processes, tools or legal obligations change. The "last updated" date at the top always reflects the current version, and material changes will be highlighted on this page or by email to active clients.

11. Contact us

Questions about this policy or your data: sales@dplounge.com, or use the contact form.

---

Related pages: Contact · About us · Wholesale · OEM & private label · Dropshipping. This document is a template for general information and is not legal advice.