Privacy Policy

CreatiDrop (“we,” “us,” or “our”) is operated by HANGZHOU JINCHEN TECHNOLOGY CO., LTD.

CreatiDrop ("we", "us", or "our") respects and protects the privacy of all users. This Privacy Policy (the "Policy") explains how we collect, use, store, share, and protect your personal information when you use the CreatiDrop website (https://www.creatidrop.com/) and related services (the "Service").

CreatiDrop is a dropshipping company that provides one-stop fulfillment services (3PL + POD) and brand incubation to sellers in the European and American markets. We understand the importance of your personal information and will handle it with care and responsibility.

Important Notice: Please read and fully understand all terms of this Policy before using our Service, especially those regarding your critical interests, disclaimers, applicable laws, and dispute resolutions. When you agree to our Terms and Conditions, you are deemed to have agreed to all provisions of this Policy.

This Policy does not replace any data processing agreement, service agreement, or other contract entered into between CreatiDrop and a merchant.

Applicable Law: This Policy is intended to describe our Personal Information practices and support compliance with applicable privacy and data protection laws, which may include the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK GDPR, the Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable data protection laws and regulations. In the event of any conflict between this Policy and applicable law, applicable law shall prevail.

References to a particular law do not mean that such law necessarily applies to CreatiDrop or to every user, business relationship, or processing activity.

In this Policy, the following terms have the meanings set forth below:

• • "Service": Refers to the CreatiDrop website (https://www.creatidrop.com/) and all products and services we provide, including but not limited to dropshipping fulfillment (3PL), print-on-demand (POD), brand incubation, product sourcing, order fulfillment, warehousing, and logistics services, returns, refunds, order-related customer support, risk control, and compliance activities.
• • "Personal Data" / "Personal Information": Means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession). This includes but is not limited to name, email address, mailing address, phone number, payment information, IP address, and device information.
• • "Usage Data": Means data collected automatically when browsing the website or generated while using the Service, including but not limited to page visit duration, IP address, browser type, and access time.
• • "Cookies": Means small text files or similar technologies stored on or accessed through your device to operate the Service, remember settings, maintain security, or provide other functions described in this Policy.
• • "Data Controller": Means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For Personal Data that CreatiDrop collects and uses for its own purposes, CreatiDrop acts as the controller where applicable.
• • "Data Processor" / "Service Provider": Means a third-party company or individual providing services on behalf of CreatiDrop. For Merchant-Supplied End Customer Data, CreatiDrop generally processes such data on behalf of the relevant Merchant as a processor, service provider, or contractor, as applicable.
• • "Merchant": Means a seller, store owner, business customer, or authorized user that uses the Service.
• • "Merchant Customer Order Data": means recipient contact details, delivery address, order and product information, tracking information, and related return or customer-support information submitted or synchronized by a Merchant.
• • "Partners": Means third parties we cooperate with to provide the Service, including but not limited to carriers (such as DHL, UPS, FedEx), third-party payment processors (such as PayPal, Stripe, Payoneer), e-commerce platforms (such as Shopify, WooCommerce), POD suppliers, and warehousing service providers.
• • "Essential Information": Means certain information that is required for our Service. If you choose not to provide it, our Service provided to you will be affected.
• • "Non-Essential Information": Means information you give us that you can choose not to provide, as our Service provided to you will not be affected

Our Role for Merchant-Supplied End Customer Data

For Merchant-Supplied End Customer Data, the Merchant generally determines the purposes and means of processing, and CreatiDrop generally acts as the Merchant’s processor, service provider, or contractor. CreatiDrop processes such data in accordance with the Merchant’s instructions, the applicable service agreement, and applicable law.

CreatiDrop may independently act as a controller for limited processing that it determines itself, including account and platform security, fraud prevention, legal compliance, and the establishment or defense of legal claims..

Information You Provide to Us

When using our Service, we may ask you to provide the following Personal Information:

1. 1. Identity Information: Name, email address, phone number, mailing address, postal code, city/state/province;
2. 2. Account Information: Username, login credentials, authentication information, account settings and preferences;

Payment Information: Billing address, payment method, transaction status, payment confirmation, refund status, and other payment-related information. Full payment credentials may be handled directly by third-party payment processors.

1. 3. Business Information: Company name, tax identification number, business license, business address;
2. 4. Order Information: Order data, product information, customer delivery information generated or synced on the CreatiDrop platform;
3. 5. Communications Information: Records of communications between you and us, including emails, online chats, and ticket content;
4. 6. Profile Information: Personal description, avatar, and other information you provide in your account profile.
5. 7. Marketing Preference Information: Newsletter subscription, consent status, unsubscribe status, and communication preferences.

Merchants are responsible for providing legally required privacy notices and obtaining any legally required authorization before submitting or synchronizing end-customer Personal Information to CreatiDrop. Merchants should not submit Personal Information that is unnecessary for the relevant Service.

Information Collected Automatically

When you visit our website or use our Service, we automatically collect the following information:

1. 1. Device and Browser Information: IP address, browser type and version, operating system, device type, language preference;
2. 2. Usage Behavior Information: Pages visited, access time and date, dwell time, clickstream data;
3. 3. Location Information: Geographic location information based on IP address;
4. 4. Service Metrics: Technical error occurrences, settings preferences, backup information, version and time zone settings, authentication events, performance data, and security logs.

Automatically collected information may be used to operate, secure, troubleshoot, and maintain the Service. Merchant-Supplied End Customer Data will not be used for CreatiDrop’s own unrelated analytics, advertising, or profiling.

Information Obtained from Third Parties

We may lawfully obtain your Personal Information from the following sources:

1. 1. Carriers: Updated delivery and address information to correct records and improve order delivery;
2. 2. Payment Processors: Payment confirmations, refund status, and other transaction information;
3. 3. E-commerce Platforms: When you use CreatiDrop services through platforms such as Shopify, we may receive information related to your store and orders;
4. 4. POD Suppliers, Manufacturers, Sourcing Partners, Warehouses, Fulfillment Providers, and Return-Service Providers: Information reasonably necessary to produce, store, fulfill, ship, return, or support an order;
5. 5. Business Partners or Referral Sources: Information received where permitted by law and consistent with the notice provided when the information was collected.

We use the Personal Information we collect for the following purposes:

1. 1. Service Provision and Maintenance: To provide and maintain our Service, including product sourcing, order fulfillment, logistics and delivery, POD customization, and other core business functions;
2. 2. Account Management and Customer Support: To manage your account and handle your inquiries, complaints, and technical support requests;
3. 3. Service Improvement: To collect and analyze information to improve our service quality and develop new products and features;
4. 4. Service Monitoring: To monitor the usage of our Service and detect, prevent, and address technical issues;
5. 5. Communication and Notifications: To send you service notifications, update reminders, security alerts, and other account-related information;
6. 6. Marketing and Promotions: To provide you with news, special offers, and other information about products and services similar to those you have already purchased or inquired about. You may opt out of receiving such communications at any time by using the unsubscribe link in the email;
7. 7. Compliance and Security: To fulfill legal obligations, prevent fraud and other illegal activities, and protect our legitimate rights and interests as well as the personal safety of our users;
8. 8. Payment, Reconciliation, and Disputes: To process payments, billing records, refunds, transaction reconciliation, chargebacks, and disputes;
9. 9. Legal Claims: To establish, exercise, or defend legal claims and protect the rights, property, safety, and integrity of CreatiDrop, its users, and others.

CreatiDrop uses Merchant Customer Order Data only as reasonably necessary to fulfill and deliver orders, provide POD production, process returns, provide order-related support, prevent fraud, and comply with law. We do not use such data for CreatiDrop’s own direct marketing, targeted advertising, unrelated profiling, or model training.

If you are located in the European Economic Area (EEA) or the United Kingdom, and the GDPR or UK GDPR applies to the relevant processing for which CreatiDrop acts as a controller, we process your Personal Data on the following legal bases:

1. 1. Contract Performance: Processing is necessary for the performance of a contract with you (such as providing dropshipping services) or to take steps at your request prior to entering into a contract;
2. 2. Consent: You have given consent to process your Personal Data for one or more specific purposes, where consent is required;
3. 3. Legitimate Interests: Processing is necessary for our legitimate interests (such as improving or securing the Service, preventing fraud, administering our business, communicating with business users, and protecting legal rights), provided that such interests are not overridden by your rights;
4. 4. Legal Obligation: Processing is necessary for compliance with applicable laws and regulations;
5. 5. Legal Claims and Other Permitted Grounds: Processing is necessary to establish, exercise, or defend legal claims, or another lawful basis is available under applicable law.

Your Consent: Where your consent is required, we will obtain it in a freely given, specific, informed, and unambiguous manner. You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing completed before the withdrawal.

Where CreatiDrop acts as a processor, the relevant Merchant is generally responsible for identifying the legal basis for its processing and its instructions to CreatiDrop.

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Policy, or for a longer period as required to comply with legal obligations, resolve disputes, and enforce our agreements, protect security, prevent fraud, and establish or defend legal claims.

When determining an appropriate retention period, we may consider the duration of the account, Merchant relationship, order, or Service; the time required to complete production, fulfillment, delivery, returns, refunds, support, and reconciliation; applicable legal and record-keeping periods; security and fraud risks; and backup or disaster-recovery requirements.

• • Account Data: Retained for the duration of your account and for a reasonable period after account closure to meet legal and audit requirements;
• • Transaction Data: Retained in accordance with applicable tax and commercial record-keeping laws;
• • Usage Data: Generally retained for a shorter period, except when used to enhance security or improve functionality, or when a longer retention period is required by law.
• • Order and Fulfillment Data: Retained for a period reasonably necessary to complete production, delivery, returns, refunds, support, reconciliation, and applicable legal obligations;
• • Backup Data: Backup copies may remain until they are overwritten or deleted under the applicable backup or cloud-snapshot cycle.

When Personal Data is no longer required, we may delete it, anonymize it, or securely isolate it until deletion is reasonably practicable.

Sharing with Third-Party Service Providers

To facilitate the Service, we may share your Personal Information with the following categories of third parties:

1. 1. Carriers: Such as DHL, UPS, FedEx, for order delivery;
2. 2. Payment Processors: Such as PayPal, Stripe, Payoneer, for processing payment transactions;
3. 3. POD Suppliers: For production and delivery of print-on-demand products;
4. 4. Warehousing Service Providers: For product storage and fulfillment;
5. 5. E-commerce Platform Partners: Such as Shopify, WooCommerce, Shipstation;
6. 6. Cloud Service and Technology Providers: For data storage, website hosting, content delivery, backup, security, and technical support;
7. 7. Analytics Service Providers: For service analysis and improvement, ;
8. 8. Communications and Customer-Support Providers: Including email providers and the LiveChat service currently available through the website;
9. 9. Professional Advisers and Corporate Service Providers: Including auditors, insurers, legal advisers, and other professional service providers where reasonably necessary.

We require Service Providers that process Personal Information on our behalf to take appropriate security measures to protect your Personal Information in accordance with applicable law and to process it only in accordance with our instructions, applicable agreements, and applicable law. Certain third parties, such as carriers, payment providers, e-commerce platforms, or public authorities, may process Personal Information for their own purposes as independent controllers. Their processing is governed by their own privacy notices and applicable law.

Disclosure Required by Law

We may be required or permitted to disclose your Personal Data in the following circumstances:

1. 1. To comply with a legal obligation or respond to valid requests from public authorities (such as courts or government agencies);
2. 2. To protect and defend the rights or property of CreatiDrop;
3. 3. To prevent or investigate possible wrongdoing in connection with the Service;
4. 4. To protect the personal safety of users of the Service or the public;
5. 5. To protect against legal liability;
6. 6. To establish, exercise, or defend legal claims;
7. 7. To address an emergency or another circumstance permitted by applicable law.

Business Transactions

If CreatiDrop is involved in an actual or proposed merger, acquisition, financing, restructuring or asset sale, your Personal Data may be transferred or disclosed to relevant advisers, investors, purchasers, or successors. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

No Disclosure to Third Parties Without Your Consent

Except as otherwise provided in this Policy, we will not disclose your Personal Information to the public or any third party without your consent.

Your information, including Personal Data, may be transferred to, stored in, accessed from, or otherwise processed in jurisdictions outside of your state, province, country, or other governmental jurisdiction, where the data protection laws may differ from those in your jurisdiction.

Such transfers may include transfers to jurisdictions in which CreatiDrop or its Service Providers operate. We do not rely solely on your acceptance of this Policy as consent to an international transfer where another lawful transfer mechanism is required.

We will take reasonable and appropriate measures designed to ensure that your data is treated securely and in accordance with this Policy. Where required by applicable law, we will use an appropriate lawful transfer mechanism or safeguard, which may include an adequacy decision, contractual safeguards, or another mechanism permitted by applicable law. You may contact us using the details in the “Contact Us” section for further information about the safeguards applicable to your Personal Data. No transfer of your Personal Data will take place to an organization or a country unless appropriate safeguards or other protections required by applicable law are in place, including reasonable measures designed to protect the security of your Personal Data.

We and our Service Providers may use Cookies and similar technologies to operate and secure the website and platform, maintain sessions, remember settings, prevent abuse, and support requested functions.

• • Types of Cookies We Use:
• • Session Cookies: Used to operate our Service;
• • Preference Cookies: Used to remember your preferences and various settings;
• • Security Cookies: Used for security purposes.
• • Functional Cookies: Used to provide requested communication or online-chat functions.

Your Choices Regarding Cookies: You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of our Service.

Where required by applicable law, we will obtain consent before using non-essential Cookies and provide applicable privacy choices.

The security of your data is important to us. We implement appropriate technical and organizational measures designed to protect your Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures include, but are not limited to:

• • SSL/TLS encryption for data transmission;
• • Encryption of certain critical or sensitive information;
• • Authentication and role-based access controls;
• • Data-access restrictions and segregation measures;
• • Security assessments and vulnerability scanning;
• • Backup and recovery measures; and
• • Data protection training for employees.

Please note: No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Under applicable data protection laws (including GDPR and CCPA), you may have the following rights regarding your Personal Data:

These rights are not absolute and may be subject to applicable legal exceptions. We may retain or continue processing Personal Data where reasonably necessary to perform a contract, complete an order, comply with law, prevent fraud, protect security or another person’s rights, or establish or defend legal claims.

Rights under GDPR (for EEA Users)

1. 1. Right of Access: You have the right to request access to the Personal Data we hold about you and to obtain details of the processing;
2. 2. Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data;
3. 3. Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request deletion of your Personal Data;
4. 4. Right to Restrict Processing: In certain circumstances, you have the right to request restriction of processing of your Personal Data;
5. 5. Right to Data Portability: You have the right to receive the Personal Data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller;
6. 6. Right to Object: You have the right to object to the processing of your Personal Data on grounds relating to your particular situation;
7. 7. Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time.
8. 8. Right to Complain: You may lodge a complaint with the competent data protection supervisory authority in your habitual residence, place of work, or place of an alleged infringement.

Rights under CCPA (for California Residents, Where Applicable)

1. 1. Right to Know: You have the right to request that we disclose the categories and specific pieces of Personal Information we have collected, used, disclosed, sold or shared about you in the past 12 months;
2. 2. Right to Delete: You have the right to request deletion of Personal Information we have collected about you;
3. 3. Right to Correct: You have the right to request correction of inaccurate Personal Information;
4. 4. Right to Opt-Out: You have the right to opt out of the sale or sharing of your Personal Information to third parties;
5. 5. Right to Limit: Where applicable, you may have the right to limit certain uses and disclosures of Sensitive Personal Information;
6. 6. Right to Non-Discrimination: You will not receive discriminatory treatment from us for exercising your rights under the CCPA.

As of the Effective Date, CreatiDrop does not sell Personal Information or share it for cross-context behavioral advertising, and does not use Merchant-Supplied End Customer Data for its own advertising or unrelated profiling. If this changes, we will provide any opt-out mechanism required by applicable law. Requests relating to data processed solely on behalf of a Merchant may be referred to that Merchant.

How to Exercise Your Rights

To exercise any of the above rights, please contact us through the following methods:

• • Email: support@creatidrop.com
• • Mailing Address: Suite 612, Building A, No. 66 Yueming Road, Xixing Street, Binjiang District, Hangzhou, Zhejiang Province, 310051, China

Please identify the relevant account, Merchant, and right you wish to exercise and provide sufficient information for us to understand and verify the request.

We will respond to your request within the time period required by applicable law (usually within 30 days). We may need to verify your identity before processing your request to prevent unauthorized access.

A particular response period is not guaranteed where the relevant law does not apply, the request cannot be verified, additional information is required, an exception applies, or a lawful extension is available.

Do not send copies of identity documents unless we specifically request them through an appropriate channel.

Our Service is intended for business users and is not directed at children under 18 years of age. We do not knowingly collect Personal Information directly from children under 18. If we become aware that we have collected Personal Information from a child under 18 in circumstances inconsistent with applicable law, we will take reasonable steps to investigate and delete or otherwise handle the information as required by applicable law.

A Merchant must not submit a child’s Personal Information to CreatiDrop unless the Merchant has an appropriate legal basis and has provided any legally required notice or obtained any legally required consent.

We reserve the right to modify this Policy from time to time. Any changes to this Policy will be effective when we post the updated version on this page, with a new "Effective Date" indicated at the top of the page.

We encourage you to review this Policy periodically for any changes. Where required by applicable law, we will also provide you with prominent notice by email or by posting a notice on the Service.

Where the CCPA applies, we will review and update the disclosures in this Policy at least as frequently as required by applicable law.

Before a redesigned website or new website version activates additional analytics, advertising, affiliate-marketing, remarketing, or similar tracking technologies, we will review and update this Policy and related cookie controls as appropriate.

If you have any questions, comments, or complaints about this Policy, or wish to exercise your privacy rights, please contact us at:

CreatiDrop Customer Service Team

• • Email: support@creatidrop.com
• • Website: https://www.creatidrop.com/

If you are located in the European Economic Area and have concerns about how we process your Personal Data, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.

The governing law and dispute resolution provisions applicable to the Service are set out in the applicable Terms of Services.

Any dispute arising out of or in connection with this Policy shall first be resolved through friendly negotiation. If negotiation fails, the dispute resolution provisions in the applicable Terms of Services shall apply.

Nothing in this Section limits any rights or remedies that cannot be waived under applicable privacy or data protection law.

This Privacy Policy was last updated on July 20, 2026.