Privacy Policy

Effective Date: October 28, 2026

This Privacy Policy explains how dodopin.com (the “Website”, “Platform” or “Service”) collects, uses and protects personal data.

The Service is operated jointly by:

VELCORE TECHNOLOGY LIMITED
A private company limited by shares incorporated in Hong Kong
Business Registration Number (BRN): 80005054
Registered address:
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong

and

FUTURE ONE TECHNOLOGY LTD
A company incorporated in the United Kingdom
Company number: 17083222
Registered address:
71-75 Shelton Street, Covent Garden
London, United Kingdom
WC2H 9JQ

These companies operate the Website together. That does not make both of them the seller of every order, and it does not authorise one company to collect the other’s customer payments.

Platform operators. VELCORE TECHNOLOGY LIMITED and FUTURE ONE TECHNOLOGY LTD together operate the Website, the Dodopin brand and the shared support channels. A notice to legal@dodopin.com is a notice to both platform operators.

Seller of an order. The seller is the company that sells the product to you, issues the invoice and is responsible for that sale, including a statutory refund of that order:

  • PayOp: the seller is FUTURE ONE TECHNOLOGY LTD, a company incorporated in the United Kingdom. PayOp collects that payment for FUTURE ONE TECHNOLOGY LTD.
  • Stripe: the seller is VELCORE TECHNOLOGY LIMITED, a company incorporated in Hong Kong. Stripe collects that payment for VELCORE TECHNOLOGY LIMITED.

“Dodopin”, “we”, “us” and “our” mean the seller of the order when the sentence is about a purchase, payment, delivery, refund or invoice. When the sentence is about the Website, the brand or shared support, those words mean the platform operators.

Controllers. FUTURE ONE TECHNOLOGY LTD is the controller for personal data of a PayOp order, including the sale, the payment record, the invoice and refunds of that order. VELCORE TECHNOLOGY LIMITED is the controller for personal data of a Stripe order, including the sale, the payment record, the invoice and refunds of that order. Both platform operators use the shared Website account, the support inbox and the fraud controls. They are joint controllers only for that shared platform processing. The seller of an order decides the purposes of that order’s customer, payment and invoice data.

By using the Website you acknowledge this Policy. Where the law requires consent for a particular processing activity, we will request it separately.

This Policy should be read together with our Terms and Conditions, Cookie Policy and Anti-Fraud, AML and KYC Policy.

1. Information we collect

We may collect the following categories of personal data, depending on how you use the Service.

1.1 Identity and contact data

  • name
  • email address
  • phone number
  • billing or delivery details that you provide

1.2 Account data

  • username
  • login credentials (stored in hashed or similarly protected form)
  • account preferences and account activity

1.3 Transaction data

  • purchase history and order records
  • product, amount, currency and status
  • limited payment metadata returned by payment providers (we do not store full card numbers)

1.4 Technical data

  • IP address
  • browser type, device information and operating system
  • approximate location derived from IP where used for security or localisation
  • access times, logs and diagnostic data

1.5 Communication data

  • messages sent through support channels
  • email or other correspondence with us

1.6 Verification data

Where fraud-prevention, AML or KYC checks apply, we may collect identity documents, proof of address, a selfie or live verification image, and payment-method confirmation, as described in the Anti-Fraud, AML and KYC Policy.

2. How we use your information

We use personal data to:

  • provide, operate and maintain the Service;
  • create and manage accounts;
  • process orders, payments and delivery of digital products;
  • communicate about orders, support and service notices;
  • detect, prevent and investigate fraud, abuse, chargebacks and security incidents;
  • improve the Website, products and user experience;
  • comply with legal, tax, accounting, sanctions and regulatory obligations; and
  • establish, exercise or defend legal claims.

3. Legal bases (where GDPR or UK GDPR applies)

Where the EU GDPR or UK GDPR applies, we rely on one or more of the following bases:

  • performance of a contract with you, or steps taken at your request before a contract;
  • our legitimate interests, including operating the Service, securing accounts, preventing fraud and improving the Website, provided those interests are not overridden by your rights;
  • compliance with a legal obligation; and
  • consent, where we ask for it and the law requires it (for example certain cookies or marketing).

You may withdraw consent at any time, without affecting processing that took place before withdrawal.

3.1 Hong Kong Personal Data (Privacy) Ordinance

VELCORE TECHNOLOGY LIMITED is incorporated in Hong Kong. Where the Personal Data (Privacy) Ordinance (Cap. 486) applies to VELCORE, personal data is collected and used for the purposes in this Policy, and is kept securely.

This section does not mean that every disclosure needs your consent. The disclosures in section 5 are part of operating the Service. Where the EU GDPR or UK GDPR applies, the legal basis is one of those in section 3. That basis may be a contract, a legal obligation or a legitimate interest. Consent is used only where this Policy says consent is required.

4. Payments

We do not store full payment-card details.

Payments are processed by independent payment service providers. Those providers collect and process payment data under their own privacy notices. We receive confirmation of payment status and limited metadata needed to complete the order, prevent fraud and handle disputes.

5. Sharing and disclosure

We may share personal data with:

  • payment service providers, acquirers and fraud-screening partners;
  • hosting, infrastructure, email, analytics and security providers who process data on our instructions;
  • suppliers or fulfilment partners, only where necessary to deliver a product you ordered;
  • professional advisers (legal, accounting, compliance) under confidentiality;
  • competent authorities, courts or regulators where required by law or to protect our rights; and
  • a successor entity if we transfer or reorganise the business, subject to appropriate safeguards.

We do not sell personal data.

6. International transfers

FUTURE ONE TECHNOLOGY LTD is established in the United Kingdom. VELCORE TECHNOLOGY LIMITED is established in Hong Kong. Personal data of a PayOp order is controlled by the UK company. Personal data of a Stripe order is controlled by the Hong Kong company.

Shared platform operations, including hosting, email and support, may process personal data in the United Kingdom, Hong Kong and other countries where those providers operate.

Where UK GDPR or the EU GDPR restricts a transfer, including a transfer between the two companies for those shared operations, the transfer is made only when that law allows it, for example under an adequacy regulation, appropriate safeguards, or an applicable exception. Consent is not the ordinary basis for those transfers. You may ask which condition applies to your data by emailing legal@dodopin.com.

7. Retention

We keep personal data only for as long as needed for the purposes in this Policy, including:

  • providing the Service and keeping order records;
  • legal, tax and accounting retention;
  • dispute, chargeback and fraud-prevention periods; and
  • as otherwise required or permitted by law.

When data is no longer required, we delete or irreversibly anonymise it where reasonably practicable.

8. Security

We apply technical and organisational measures appropriate to the risk, including access controls, encrypted transmission where appropriate, and restricted staff access.

No online transmission or storage system is completely secure. You should also keep your own devices and passwords secure.

9. Your rights

Depending on your jurisdiction, you may have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of data;
  • object to, or request restriction of, certain processing;
  • request data portability;
  • withdraw consent; and
  • lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details below. We may need to verify your identity before we act on a request. Some rights are limited where we must keep data for legal, security or contractual reasons.

10. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy.

11. Children

The Service is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us so that we can delete it where required.

12. Third-party websites

The Website may contain links to third-party sites, games or payment pages. Their privacy practices are outside our control. You should read their policies before providing data to them.

13. Changes

We may update this Privacy Policy from time to time. Changes are published on this page. The Effective Date at the top is the date of the current version.

14. Contact

For privacy enquiries, contact us through the official channels on dodopin.com, or email legal@dodopin.com.

VELCORE TECHNOLOGY LIMITED
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong

FUTURE ONE TECHNOLOGY LTD
Company number: 17083222
71-75 Shelton Street, Covent Garden
London, United Kingdom
WC2H 9JQ