This Privacy Policy explains how CÔNG TY TNHH SHOPLINK (ShopLink Company Limited) collects, uses, shares and protects your personal data when you use the Mr. Host platform, W2 game, our website, mini apps, QR activation and related services (collectively, the "Platform").
Order data: products, sizes, colors, customization choices, shipping details, payment status, support history.
Customization data: your "would to" phrase, design style, heart style, font style, QR placement, preview files.
AI and chat data: messages sent to Mr. Host, AI outputs, session IDs, support context.
Game data: QR scans, game-key IDs, points, rewards, rounds, referrals, community interactions.
Device and usage data: IP address, device/browser type, cookies, analytics events, logs.
Payment data: payment status, transaction references, fraud risk signals (we do not store full card numbers).
3. How We Use Your Data
Provide accounts, catalog, checkout, order fulfillment, delivery, returns and customer support.
Generate custom merch previews, production files, QR/game-key records and activation pages.
Operate Mr. Host AI, personalize responses, route support and improve safety.
Run the W2 game, rewards, anti-fraud, referral and community mechanics.
Comply with tax, accounting, e-commerce, consumer protection and legal obligations.
Maintain security, prevent abuse and troubleshoot systems.
Send service notices and, where permitted, marketing communications.
4. Legal Basis
Where required by applicable law, we process data based on:
Your consent (which you may withdraw at any time).
Performance of a contract (e.g., fulfilling your order).
Compliance with legal obligations (tax, accounting, e-commerce law).
Legitimate interests in security, fraud prevention and service improvement.
5. Sharing of Data
We may share your data with:
Payment providers and fraud-prevention vendors.
Print-on-demand manufacturers, fulfillment and shipping partners.
Cloud hosting, analytics and customer support providers.
AI model and infrastructure providers (for Mr. Host responses).
Regulators, tax authorities, courts or law enforcement where required by law.
We require these parties to process data only on our instructions and with appropriate safeguards.
6. International Transfers
Because the Platform may sell internationally and use global infrastructure, your data may be processed outside Vietnam or your home country. We use contractual, technical and organizational safeguards appropriate to the transfer and applicable law.
7. Data Retention
Account data: while account is active and for a reasonable period after closure.
Order, invoice and tax data: as required by accounting, tax and e-commerce laws.
AI chat data: as needed for support, safety, debugging and improvement.
Game and anti-fraud logs: as needed to protect fair play and resolve disputes.
8. Your Rights
Depending on applicable law, you may have the right to:
Access, correct or delete your personal data.
Restrict or object to processing.
Request data portability.
Withdraw consent (where processing is based on consent).
Lodge a complaint with a data protection authority.
To exercise your rights, contact us at privacy@shoplink.ai. We may verify your identity before processing your request.
9. Children
The Platform is not intended for children below the minimum age required by applicable law. We may remove accounts or content where age or consent requirements are not satisfied.
10. Security
We use reasonable administrative, technical and organizational measures to protect your data, including access controls, logging, backups, least-privilege practices and monitoring. No system can be guaranteed 100% secure.
11. Cookies
We use essential cookies for login, checkout and security, and may use analytics and marketing cookies where you have consented. You can manage cookie preferences through your browser settings or our cookie banner.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on the Platform with an updated date. Continued use of the Platform after changes constitutes acceptance of the updated policy.