Privacy Policy
Last updated: July 22, 2026
This Privacy Policy explains how Origin Game Limited, trading as Stamprints Global, collects, uses, shares, and protects personal information when you visit global.stamprints.com, create an account, place an order, submit custom artwork, contact us, or otherwise interact with us.
Origin Game Limited is the data controller for the processing described in this policy.
Controller:
Origin Game Limited
ROOM B 16/F Eubank Plaza, 9 Chiu Lung Street, Central, Hong Kong
Privacy contact:
acc@stamprints.com
1. INFORMATION WE COLLECT
We may collect the following categories of personal information:
• Identity and contact information, such as name, email address, telephone number, billing address, and delivery address.
• Account information, such as login details, saved addresses, preferences, and account activity.
• Order and transaction information, such as products ordered, customization choices, payment status, refunds, returns, disputes, and delivery information.
• Custom content, such as logos, artwork, photographs, text, names, initials, design files, proofs, and design communications.
• Communications, such as email, WhatsApp, Tidio chat, customer-service messages, reviews, and survey responses.
• Payment information. Payment providers process full payment credentials. We generally receive limited transaction, payment-status, fraud, and billing information rather than full card details.
• Device and usage information, such as IP address, browser, device type, operating system, referring page, pages viewed, clicks, cart activity, purchase activity, cookie identifiers, and advertising identifiers.
• Marketing information, such as subscription status, campaign interaction, advertising preferences, and consent records.
• Fraud, security, and compliance information, such as risk signals, login activity, chargeback information, and records needed to investigate misuse.
• Public information that you choose to publish, such as a review or public social-media post directed to us.
We do not ask you to include government identification numbers, health data, biometric data, or other unnecessary sensitive information in custom artwork or customer-service messages.
2. HOW WE COLLECT INFORMATION
We collect information:
• directly from you when you place an order, create an account, upload artwork, communicate with us, subscribe to marketing, or submit a review;
• automatically from your browser or device through cookies and similar technologies;
• from Shopify, payment providers, shipping carriers, advertising and analytics providers, customer-service tools, and fraud-prevention providers;
• from public sources when you communicate with or mention us publicly.
3. WHY WE USE INFORMATION AND OUR LEGAL BASES
We use personal information for the following purposes:
Order fulfillment and customer service. We process orders, prepare proofs, manufacture products, take payment, arrange delivery, manage returns and warranty claims, and answer questions. Where GDPR or UK GDPR applies, the legal basis is performance of a contract or steps requested before entering a contract.
Legal and financial administration. We maintain invoices, tax records, accounting records, refunds, and compliance records. The legal basis is compliance with legal obligations and performance of a contract.
Security and fraud prevention. We protect accounts, payments, the website, and customers; investigate suspicious transactions; and enforce our terms. The legal basis is our legitimate interest in preventing fraud and protecting our business and customers, and legal obligations where applicable.
Website operation and improvement. We maintain the store, measure performance, understand how customers use it, troubleshoot errors, and improve services. The legal basis is legitimate interests for essential and limited analytics, or consent where required for non-essential analytics.
Marketing. We send marketing email where you have consented or where applicable law allows marketing to existing customers. You can unsubscribe at any time. The legal basis is consent or, where permitted, legitimate interests.
Advertising and personalization. With consent where required, we and advertising partners use cookies or similar technologies to measure campaigns, personalize advertising, and conduct cross-context behavioral advertising. The legal basis is consent where required and applicable business purposes under regional privacy laws.
Legal claims and corporate transactions. We establish, exercise, or defend legal claims and may disclose information in connection with a merger, financing, restructuring, or sale. The legal basis is legitimate interests and legal obligations.
4. CUSTOM ARTWORK AND DESIGN FILES
We use private custom artwork, photographs, logos, text, proofs, and design communications only to review the order, prepare designs and proofs, manufacture products, perform quality checks, deliver the order, and provide after-sales support.
We do not use private custom materials to train general-purpose artificial intelligence models.
We do not publish private custom materials in advertising, portfolios, or social media unless you separately authorize that use.
Necessary employees, designers, manufacturers, contractors, and service providers may access custom materials only for the purposes described above and subject to appropriate confidentiality and data-protection obligations.
5. COOKIES, ANALYTICS, AND ADVERTISING
We use Shopify Customer Privacy to manage cookie consent and privacy choices. Where consent is required, non-essential analytics and advertising cookies are blocked until consent is given.
You can change or withdraw cookie choices through the cookie banner or privacy-preferences control.
We use Google Analytics 4 for analytics.
We may use Google Ads, Meta, Pinterest, TikTok, and Microsoft Ads for advertising, measurement, and campaign attribution. These providers may receive device identifiers, cookie identifiers, IP address, browsing activity, and purchase or conversion information where permitted by your choices and applicable law.
We do not currently use Microsoft Clarity, Hotjar, or another heatmap or session-recording service.
We do not currently use affiliate or influencer-tracking software.
6. SALE OR SHARING OF PERSONAL INFORMATION
We do not sell personal information for money.
Our use of advertising technologies may be considered “sharing” or “sale” under some United States state privacy laws because identifiers and activity can be used for cross-context behavioral advertising.
Where these rights apply, you can opt out through the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” control in the site footer or cookie banner.
We honor recognized Global Privacy Control signals as an opt-out request for the browser or device sending the signal, where required by applicable law.
We do not discriminate against you for exercising a privacy right.
7. SERVICE PROVIDERS AND OTHER RECIPIENTS
We disclose personal information only as reasonably necessary to operate the store, fulfill orders, comply with law, and protect our rights.
Current service categories and providers include:
• Ecommerce platform and hosting: Shopify.
• Payments: Shopify Payments, PayPal, and Stripe.
• Analytics: Google Analytics 4.
• Advertising and campaign measurement: Google Ads, Meta, Pinterest, TikTok, and Microsoft Ads.
• Email marketing: Shopify Email.
• Customer service and communications: WhatsApp and Tidio.
• Product reviews: Judge.me.
• Shipping and logistics: FedEx, DHL, and 4PX, together with local delivery partners where required.
• Fraud prevention and payment risk: Shopify and Stripe.
• Cookie and consent management: Shopify Customer Privacy.
These providers process information under their own terms, our instructions, applicable data-protection agreements, or a combination of these roles.
We may also disclose information to professional advisers, auditors, insurers, banks, regulators, courts, law-enforcement bodies, and parties to a business transaction where legally permitted or required.
8. SHOPIFY
Our store is hosted by Shopify. Shopify processes customer information to provide the ecommerce platform, checkout, security, fraud prevention, payment, privacy, and related services.
Shopify may act as our service provider or processor for some activities and as an independent controller for certain Shopify services. Shopify’s own privacy policies explain its processing.
9. INTERNATIONAL DATA TRANSFERS
We are based in Hong Kong. Personal information may be processed in Hong Kong, the United States, and other countries where Shopify and our service providers operate.
Those countries may have data-protection laws different from the laws where you live.
Where required, we use legally recognized transfer mechanisms or safeguards, such as adequacy decisions, contractual data-protection clauses, the United Kingdom transfer addendum or equivalent measures, and service-provider security commitments.
You may contact us for further information about safeguards that apply to a transfer.
10. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose described, including:
• Order, invoice, payment, tax, and accounting records: generally 7 years.
• Customer accounts: while the account remains active and afterward only as needed for orders, security, legal obligations, or disputes.
• Custom artwork, proofs, and quality-control records: up to 5 years to support the Lifetime Quality Warranty, unless a shorter or longer period is reasonably required.
• Customer-service, complaint, and dispute records: generally 3 to 5 years after the last interaction.
• Fraud, chargeback, and payment-dispute records: generally 5 to 7 years.
• Marketing records: until you unsubscribe, withdraw consent, or the information is no longer needed.
• Abandoned-cart information: generally 30 to 90 days, unless converted into an order or retained with consent.
• Cookie and advertising identifiers: according to the relevant cookie, generally from a session period up to 24 months.
We may retain information longer where required by law, necessary for legal claims, or needed to prevent fraud. We may keep anonymized information that no longer identifies you.
11. YOUR PRIVACY RIGHTS
Depending on where you live and the law that applies, you may have the right to:
• know whether we process your personal information and request access;
• receive information about the categories, sources, purposes, and recipients of personal information;
• correct inaccurate information;
• request deletion;
• restrict or object to processing;
• receive portable information in a usable format;
• withdraw consent at any time;
• object to direct marketing;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses of sensitive personal information where applicable;
• appeal a decision regarding a privacy request where applicable;
• lodge a complaint with a data-protection or privacy regulator.
The right to object to direct marketing can be exercised at any time.
You can request account deletion through your Shopify customer-account tools, where available, and can submit other privacy requests by emailing acc@stamprints.com.
We may ask for information reasonably necessary to verify your identity, account, order, or authority to act for another person. We will not require identity verification for an opt-out request beyond what applicable law permits.
We normally respond to GDPR and UK GDPR requests within one month. Where the CCPA applies, we handle requests within the applicable statutory periods. We may extend a response period where law permits and will explain the extension.
Some rights are subject to exceptions. For example, we may retain information needed to complete an order, honor a warranty, comply with tax and accounting laws, prevent fraud, or establish and defend legal claims.
12. CALIFORNIA AND OTHER UNITED STATES PRIVACY RIGHTS
Where the California Consumer Privacy Act or another United States state privacy law applies, residents may have rights to know, access, correct, delete, opt out of sale or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, and receive equal service and pricing.
The categories collected and disclosed for business purposes are described in Sections 1 and 7. We may disclose identifiers, commercial information, internet or electronic activity, approximate location derived from IP address, and marketing inferences to service providers and advertising partners for the purposes described in this policy.
Use the “Your Privacy Choices” control or send a request to acc@stamprints.com. We also honor applicable opt-out preference signals, including Global Privacy Control.
13. MARKETING COMMUNICATIONS
You can unsubscribe from marketing email by using the unsubscribe link in the message or by contacting us.
Opting out of marketing does not stop transactional communications about an order, payment, proof, delivery, return, warranty claim, account security, or policy update.
14. AUTOMATED PROCESSING
Stamprints does not make decisions that produce legal or similarly significant effects solely through automated processing.
Shopify, Stripe, and other payment or fraud providers may use automated risk signals to support payment authorization, fraud detection, and security under their own policies. Where a transaction requires review, we may conduct or request additional review.
15. SECURITY
We use reasonable technical and organizational measures designed to protect personal information, including access controls, secure service providers, encryption where appropriate, and staff or contractor confidentiality requirements.
No system is completely secure. If a personal-data breach requires notification under applicable law, we will notify affected individuals and regulators as required.
16. CHILDREN
The website is not directed to children under 16, and we do not knowingly collect personal information from children under 16.
If you believe a child has provided personal information, contact acc@stamprints.com so that we can investigate and delete it where appropriate.
17. THIRD-PARTY WEBSITES
The website may link to third-party websites, platforms, payment services, or social networks. Their privacy practices are governed by their own policies. We are not responsible for processing conducted independently by a third party that we do not control.
18. CHANGES TO THIS POLICY
We may update this policy to reflect changes in law, technology, service providers, or business practices. The updated policy will show a new “Last updated” date.
We will provide prominent notice, and where appropriate email notice, before a material change takes effect. We will not use previously collected information for a materially incompatible new purpose without an appropriate legal basis and notice.
19. CONTACT AND COMPLAINTS
Privacy questions and requests:
acc@stamprints.com
Controller:
Origin Game Limited
ROOM B 16/F Eubank Plaza, 9 Chiu Lung Street, Central, Hong Kong
You may also complain to the privacy or data-protection authority where you live. In Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data. Individuals in the European Economic Area or United Kingdom may complain to their local supervisory authority.
