DINGDINGKING.COM (DDK) INTERNATIONAL CONSUMER PRIVACY POLICY
Effective Date: June 24, 2026 | Document Reference: DDK-PRP-2026-V3

1. Revisionary Statement and Jurisdictional Compliance

• 1.1. Commitment to Data Sovereignty: Ding DingKing (“Company,” “we,” “us”) recognizes that data security is a foundational requirement for high-end consumer brands. This Privacy Policy outlines our strict protocols for the acquisition, cryptographic protection, internal storage, operational processing, and lawful disclosure of personal identity data collected from international consumers.
• 1.2. Multi-Jurisdictional Compliance Baseline: Our global processing framework is structured to meet or exceed the rigorous standards set by cross-border data protection legislation governing our primary production hubs and target consumption markets. This includes, but is not limited to:
  • The Personal Data Protection Act 2010 (PDPA) – Malaysia;
  • The Personal Data (Privacy) Ordinance (PDPO) (Cap. 486) – Hong Kong;
  • Relevant ASEAN Cross-Border Data Privacy Frameworks and APEC Cross-Border Privacy Rules (CBPR).

2. Exhaustive Specification of Data Accumulation

DDK restricts data collection strictly to information required to execute secure e-commerce transactions, fulfill cold-chain logistics, and manage relationship communications. We capture:

• 2.1. Explicit Identity and Communication Credentials: Full legal name of the ordering individual or corporate procurement officer, delivery coordinates, accurate residential or corporate billing coordinates, mobile numbers, and electronic mail credentials.
• 2.2. Transactional Metadata and Payment Identifiers: Transaction timelines, retail SKU items purchased, gross value metrics, and encrypted tokenized transaction records provided by PCI-DSS compliant third-party payment gateways. (DDK never saves raw debit/credit card CVV strings).
• 2.3. Automated Telemetry Records: Device connection IP addresses, web localization parameters, hardware browser version strings, and session historical paths extracted via integrated cookie files.

3. Legal Principles for Data Utilization and Processing

DDK deploys your private data records strictly under verifiable legal processing foundations, processing information to support:

• 3.1. Contractual Realization and Operational Logistics: Validating payment authenticity, executing order acceptance thresholds, coordinating international air-cargo transport channels, and transmitting automated shipping alerts to your contact points.
• 3.2. Institutional Marketing Communication: Delivering tailored brand alerts, agricultural harvest forecasts, and holiday corporate gifting opportunities exclusively where explicit consent has been logged via our preference controls.

4. Cryptographic Data Safeguarding and Retention Lifecycles

• 4.1. Security Infrastructures: Personal data items are instantly encrypted using industry-leading Secure Socket Layer (SSL) and Advanced Encryption Standard (AES-256) network architectures during data transit and storage phases inside our operational servers.
• 4.2. Retention Limitation: DDK retains personal database logs strictly for the chronological period required to achieve the initial logistics fulfillment objective, manage customer service workflows, or maintain statutory commercial auditing compliance under Malaysian tax rules. Discarded records undergo permanent cryptographic wiping.

5. Lawful Infrastructure Restrictions with Third-Party Partners

• 5.1. No Selling of Consumer Profiles: DDK does not sell, rent, trade, or lease customer data profiles to third-party data brokers or speculative advertising agencies.
• 5.2. Authorized Supply Chain Sharing: Personal records are shared exclusively with verified service entities within our integrated vertical fulfillment network, restricted to:
  • International Cold-Chain Logistics Operators: Air freight agents and local temperature-controlled courier networks who require delivery addresses and telephone contact points to coordinate physical product handovers;
  • Verified Customs Brokerage Entities: Authorized customs clearers operating in China and Hong Kong to process mandatory agricultural import filings, where DDK settles all duties;
  • Certified Financial Gateways: PCI-compliant transaction engines processing credit card settlements.

6. Exercise of Consumer Data Rights

• 6.1. Individual Data Sovereignty Rights: Subject to regional statutory boundaries, consumers hold the right to access their personal records, request corrections of inaccurate data, restrict processing types, or completely withdraw consent for relationship marketing.
• 6.2. Logging a Privacy Request: To execute any data protection rights, individuals may submit a formal request to our designated Data Protection Officer via email at privacy@dingdingking.com. DDK will verify the applicant's identity prior to modifying or deleting records.