1. Who We Are and the Scope of This Policy

MascotStreet is a brand operated by Guangzhou Xiaoming Trading Co., Ltd., which is responsible for the personal information described in this Privacy Policy.

This policy applies to personal information handled through the Website and in connection with our quotations, orders, customer service, production, payment, and delivery activities. It does not govern a third party's website, platform, or service, even if that service is linked to or displayed on our Website.

2. Personal Information We Collect

The personal information we collect depends on how you interact with us.

A. Information You Provide to Us

We may collect:

• Account information: your name, email address, telephone number, address, login credentials, account preferences, wishlist, and order history.
• Contact and inquiry information: your name, email address, selected inquiry topic, company or organization, telephone number, and the contents of messages you send through our contact form, email, or other communications.
• Order and transaction information: products, quantities, billing and shipping details, recipient details, selected currency, order notes, quotation or invoice details, payment status, transaction identifiers, returns, refunds, and customer-service records.
• Custom-order information: drawings, logos, artwork, photographs, reference images, character descriptions, colors, materials, wording, accessories, deadlines, measurements, performer sizing information, approvals, feedback, and other specifications needed to quote, design, make, and deliver a mascot costume.
• Marketing information: your email address, subscription status, and marketing preferences when you sign up for newsletters or promotional messages.
• Other information you choose to provide: any additional information contained in files, photographs, messages, reviews, or other material you voluntarily send to us.

B. Payment Information

Payments are currently processed through PayPal or another payment method identified at checkout, in a quotation, or on an invoice. We do not receive or store your full payment-card number or card security code. The payment provider processes that information under its own privacy notice. We may receive information such as your payer name and contact details, billing or shipping information, transaction identifier, payment method type, payment status, amount, currency, and fraud or dispute information.

C. Information Collected Automatically

When you use the Website, we and the service providers supporting it may automatically collect:

• IP address and approximate location derived from it;
• Browser type, device type, operating system, language, and screen or interface information;
• Pages viewed, links selected, referring page, date and time of access, and other request or error information;
• Session, cookie, and local-storage identifiers;
• Shopping-cart contents, selected language and currency, account-session information, and interface preferences; and
• Security and diagnostic information used to protect, maintain, and troubleshoot the Website.

See our Cookie Policy for details about the cookies and similar technologies currently used on the Website.

D. Information From Other Sources

We may receive personal information from:

• Payment providers, including payment confirmation, dispute, refund, and fraud-prevention information;
• Shipping carriers, logistics providers, and customs agents, including address validation, tracking, delivery, and customs-status information;
• A business, school, team, agency, or other organization placing an order or communicating with us on your behalf; and
• Service providers that help us operate the Website, communicate with customers, prevent fraud, or fulfill orders.

If you provide personal information about another person, such as a recipient, colleague, performer, or authorized contact, you confirm that you are permitted to provide it and that you have given that person any notice required by applicable law.

3. How We Use Personal Information and Our Legal Bases

We use personal information only for the purposes described below. Where applicable law requires a legal basis, we rely on the basis shown in the table. The basis that applies can vary by location and context.

We may aggregate or de-identify information so that it no longer identifies a person. We may use and disclose that non-personal information for lawful business purposes.

4. Cookies and Similar Technologies

The Website uses cookies, local storage, scripts, and related technologies to keep the shopping cart, accounts, checkout, security, language, currency, PayPal features, and interface preferences working.

MascotStreet does not currently deploy standalone sitewide analytics or advertising tags such as Google Analytics or the Meta Pixel. Third-party services displayed on the Website, including PayPal, may process information for their own purposes as explained in their notices.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent the cart, account, or checkout from working. For a current description of the technologies we use and the choices available to you, please read our Cookie Policy.

5. How We Share Personal Information

We may disclose personal information only as reasonably necessary to the following recipients:

• Payment providers: PayPal and any other payment provider shown at checkout or identified in your quotation or invoice, to process payments, refunds, fraud checks, and disputes.
• Website and technology providers: hosting, e-commerce, security, email, storage, maintenance, and technical-support providers that help us operate and protect the Website and communicate with you.
• Production and fulfillment providers: authorized personnel, workshops, suppliers, and fulfillment partners that need order specifications, artwork, measurements, recipient information, or other details to prepare and fulfill an order.
• Shipping and customs providers: carriers, freight forwarders, warehouses, customs brokers, and customs or tax authorities that need recipient, order, value, and shipment information to deliver and clear an order.
• Professional advisers: accountants, auditors, lawyers, insurers, banks, and advisers where reasonably necessary for business, compliance, or legal purposes.
• Authorities and other parties for legal reasons: courts, regulators, law-enforcement agencies, government bodies, payment networks, rights holders, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, prevent fraud, enforce our agreements, or respond to a lawful request.
• Business-transfer recipients: a prospective or actual buyer, investor, lender, or successor in connection with a financing, merger, acquisition, reorganization, or sale of all or part of our business, subject to appropriate confidentiality protections.
• A recipient you direct or authorize: when you ask us to disclose information or give us valid consent.

Service providers that process personal information for us are authorized to use it only for the relevant service or as otherwise permitted by law. Some third parties, such as PayPal, carriers, and customs authorities, may independently determine how they process information under their own privacy notices and legal obligations.

6. International Data Transfers

MascotStreet is operated from China and serves customers internationally. Your personal information may therefore be processed in China and in other countries where our payment, hosting, communications, production, logistics, or professional-service providers operate.

Privacy laws in those countries may differ from the laws where you live. Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful mechanism, contractual protection, consent, or another permitted safeguard. You may contact us for more information about safeguards relevant to your personal information.

7. How Long We Retain Personal Information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide products and support, maintain business and transaction records, comply with tax, accounting, customs, trade, consumer-protection, and other legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

We apply the following retention criteria:

• Account information is generally kept while the account remains active and for a reasonable period after closure when needed for security, recordkeeping, or unresolved transactions.
• Quotation, order, custom-project, payment, shipping, return, and support records are kept for the period needed to complete the transaction, provide after-sales support, address warranty or dispute periods, and meet legal and accounting obligations.
• Design files, reference images, approvals, and sizing information are kept while needed to quote, produce, verify, support, or resolve issues concerning the order, and are then deleted, de-identified, or securely archived where continued retention is lawfully required.
• Marketing information is kept until you unsubscribe or we otherwise stop the relevant marketing. We may keep a limited suppression record so that we can honor your opt-out.
• Website, diagnostic, and security records are kept for a reasonable period based on operational, security, fraud-prevention, and troubleshooting needs.

When personal information is no longer needed, we will delete, de-identify, or securely dispose of it, subject to technical backup cycles and any legal requirement to retain it longer.

8. How We Protect Personal Information

We use reasonable technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure, misuse, or unauthorized access. Measures may include access restrictions, account and system safeguards, secure transmission, confidentiality requirements, service-provider controls, backups, and periodic review of our practices.

No website, email, transmission, or storage system can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and for notifying us promptly if you believe your account or information has been compromised.

9. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Ask whether we process your personal information and request access to it;
• Request correction or completion of inaccurate or incomplete information;
• Request deletion of personal information;
• Request restriction of, or object to, certain processing;
• Withdraw consent at any time where processing is based on consent;
• Request a portable copy of certain information you provided to us;
• Opt out of direct marketing;
• Opt out of a sale or sharing of personal information or certain targeted advertising where applicable (MascotStreet does not currently engage in these activities);
• Appeal a denied privacy request where applicable law provides that right; and
• Complain to the data-protection, consumer-protection, or other supervisory authority in your location.

To exercise a privacy right, email sale@mascotstreet.com or use our contact form. Please state that your message is a privacy request and describe the right you wish to exercise.

We may ask for information reasonably necessary to verify your identity and protect your account. If an authorized agent submits a request for you, we may ask for proof of authorization and may also verify your identity directly. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

These rights are not absolute. For example, we may need to retain information to complete an order, comply with law, protect security, maintain required records, or establish, exercise, or defend legal claims. Withdrawing consent does not affect processing that was lawful before withdrawal.

10. Marketing Communications

We send promotional email only where permitted by applicable law. You can unsubscribe by using the link in a marketing email or by contacting us at sale@mascotstreet.com. It may take a short time to update our systems.

Even if you opt out of marketing, we may still send non-promotional messages about your account, quotation, order, payment, delivery, policy request, or customer-service matter.

11. Children's Privacy

The Website and our purchasing services are intended for adults and are not directed to individuals under 18. We do not knowingly collect personal information directly from children. Although mascot costumes may be ordered for schools, youth groups, or children's events, the purchaser and person communicating with us must be an adult or an authorized representative of an organization.

If you believe a child has provided personal information to us without appropriate authorization, contact us so that we can review and delete it where required.

12. Third-Party Services and Links

The Website may link to or display third-party websites and services. Those third parties control their own privacy practices, and this Privacy Policy does not apply to them. We encourage you to review their notices before giving them personal information.

PayPal processes payment and related information under the PayPal Privacy Statement. Google may receive technical request information when your browser loads Google Fonts; its handling of information is described in the Google Privacy Policy.

13. Automated Decisions and Browser Privacy Signals

MascotStreet does not make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

Some browsers offer Global Privacy Control or Do Not Track signals. Because MascotStreet does not currently sell personal information, share it for cross-context behavioral advertising, or deploy standalone cross-site advertising tags, there is no sale or advertising-sharing opt-out to apply. We will honor legally recognized browser-based consent or opt-out signals if our practices change in a way that requires it.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, providers, or legal obligations change. We will post the revised version on this page and change the "Last updated" date. If a change materially affects how we use personal information or your choices, we will provide additional notice or request consent where required by law.