Information We Collect
DollBot collects information to provide and improve our services. We collect the following types of data:
Personal Information
When you create an account, place an order, or contact us, we may collect:
- Full name and contact information (email address, phone number)
- Shipping and billing address
- Payment information (processed securely by our payment processor — we do not store full credit card numbers)
- Account credentials (email and encrypted password)
- Age verification data (confirmation that you are 18 years or older)
Usage Data
We automatically collect certain information when you visit our website:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website or search terms
- Device type and screen resolution
Cookie Data
We use cookies and similar tracking technologies to enhance your experience. See the Cookies & Tracking Technologies section below for details.
How We Use Your Information
We use the information we collect for the following purposes:
- Order Processing: To process and fulfill your orders, including shipping, payment processing, and order confirmation communications.
- Account Management: To create and maintain your account, authenticate your identity, and provide customer support.
- Communication: To send order updates, shipping notifications, and respond to your inquiries. Marketing communications are only sent with your explicit consent.
- Site Improvement: To analyze usage patterns, optimize our website performance, and improve user experience.
- Legal Compliance: To comply with age verification requirements, tax obligations, and other legal requirements applicable to our business.
- Security: To detect and prevent fraud, unauthorized access, and other security threats.
Cookies & Tracking Technologies
DollBot uses cookies to provide essential functionality and improve your browsing experience. A cookie is a small text file stored on your device by your web browser.
Essential Cookies
These cookies are necessary for the website to function and cannot be disabled:
- age_verified — Stores your age verification status so you are not prompted on every visit. Expires after 30 days. HttpOnly cookie.
- cookie_consent — Records your cookie consent choice (accepted or rejected). Expires after 365 days.
- Session cookies — Maintain your login session and shopping cart contents. Expire when you close your browser or after inactivity.
Analytics Cookies
We may use analytics services to understand how visitors interact with our website. These cookies collect aggregated, anonymous data about page views and site performance.
Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from accessing certain features of our website, including age verification.
Sharing Your Information
DollBot does not sell your personal information to third parties. We may share your information only in the following circumstances:
- Payment Processing: Your payment information is shared with our authorized payment processor (CCBill) to complete transactions securely.
- Shipping Partners: Your shipping address and contact information are shared with our logistics partners to fulfill and deliver your orders.
- Legal Requirements: We may disclose your information when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.
We do not sell your personal information. This applies to all users, including California residents under the CCPA.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account data: Retained while your account is active and for up to 3 years after account closure.
- Order data: Retained for 7 years for tax and legal compliance purposes.
- Usage data: Aggregated and anonymized after 24 months.
- Cookie data:Retained according to each cookie's expiration period as described above.
You may request deletion of your personal data at any time. See the GDPR and CCPA rights sections below for details on exercising this right.
Data Security
DollBot takes the security of your personal information seriously. We implement industry-standard security measures including:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- Encrypted storage of sensitive data including passwords (hashed with bcrypt) and payment tokens.
- Role-based access controls limiting employee access to personal data on a need-to-know basis.
- Regular security audits and vulnerability assessments.
- Secure, PCI-compliant payment processing through our authorized payment processor.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.
Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
- Right to Object: You have the right to object to processing of your personal data for direct marketing or when processing is based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Lawful Basis for Processing
We process your personal data on the following legal bases:
- Contract Performance: Processing necessary to fulfill your orders and provide our services.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention and website security.
- Legal Obligation: Processing necessary to comply with legal requirements, including age verification laws.
- Consent: Processing based on your explicit consent, such as marketing communications.
To exercise any of these rights, please contact our Data Protection Officer at privacy@dollbot.shop. We will respond to your request within 30 days.
Your Rights Under CCPA
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of the personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt out of the sale of your personal information. As stated above, DollBot does not sell personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or quality of services based on exercising your rights.
Do Not Sell My Personal Information: DollBot does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. This commitment applies to all users, and we do not engage in the sale of personal information as defined by the CCPA.
To exercise your CCPA rights, contact us at privacy@dollbot.shop or call our support line. We will verify your identity before processing your request and respond within 45 days.
International Data Transfers
DollBot is based in the United States. If you access our website from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located.
For users in the EEA or UK, we ensure that international data transfers are conducted with appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with GDPR requirements.
Children's Privacy
DollBot.shop is intended exclusively for adults aged 18 and older. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18.
If we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our systems. If you believe that a minor has provided personal information to us, please contact us immediately at privacy@dollbot.shop.
Adult Content & Privacy
We understand the sensitive nature of our products and take additional privacy measures to protect our customers:
- Discreet Billing: All charges appear under a discreet billing descriptor on your financial statements. No adult product references will appear on your statements.
- Discreet Communications: We do not reference specific product types in emails, notifications, or other communications. All correspondence uses neutral language.
- Discreet Shipping: All packages are shipped in plain, unmarked packaging with no indication of the contents or the nature of our business.
- Age Verification Data: We store only the minimum data necessary to verify your age (a confirmation status). We do not store copies of identification documents.
- No Third-Party Marketing: We never share your purchase history or product preferences with marketing partners or advertisers.
Changes to This Policy
DollBot may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date.
For material changes that affect how we handle your personal data, we will make reasonable efforts to notify registered users via email or a prominent notice on our website. Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.
Contact Information
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Privacy Email: privacy@dollbot.shop
- General Email: support@dollbot.shop
- Data Protection Officer: privacy@dollbot.shop
- Business Name: DollBot
- Website: https://dollbot.shop
For GDPR inquiries, our Data Protection Officer can be reached at privacy@dollbot.shop. We aim to respond to all privacy-related requests within 30 days.