1. Who We Are
Feikawa (Hangzhou) Technology Co., Ltd., a company registered in Hangzhou, Zhejiang, China with registration number 91330110MAK4G6UL3A, having its registered office at Room 1819, Building 5, Pinggao Chuangye Cheng, Liangzhu Subdistrict, Yuhang District, Hangzhou, Zhejiang, China (the “Company”, “we”, “us”), operates a data relay gateway that connects e-commerce ERP systems to the TikTok Shop platform for order fulfilment. We act as a data processor on behalf of the seller; the seller is the data controller and determines why and how long order data is processed.
Contact: fikawo@163.com
In short: the seller decides what happens to the data. We only carry out the seller’s documented instructions and we never use the data for our own purposes.
2. Data We Process
As a transmission intermediary, we relay data required to serve TikTok Shop interface requests and webhook events: order numbers, SKU information, order status and logistics status.
Where order fulfilment requires it, personal data — recipient name, phone number, shipping address and postal code — passes through our gateway. It is handled in memory only: we do not create a persistent copy. We do not collect buyer email addresses, payment card data, device identifiers or browsing behaviour.
We do not collect any information about visitors to this page. See section 9.
3. Legal Basis
We process personal data only as necessary to perform the e-commerce order fulfilment contract, and only on the documented instructions of the seller. We do not process personal data for marketing, profiling or any secondary purpose without separate consent.
4. How Data Is Used
- To relay and process order, refund, product and fulfilment events between the ERP and TikTok Shop;
- To route data to the correct seller store;
- To maintain security audit logs (which exclude personal data).
5. Data Retention
| Data | Retention |
|---|---|
| Access and operational logs | 14 days |
| Audit logs (metadata only) | 365 days |
| Order personal data | Not retained. Relayed in transit only; not written to persistent storage. |
| Encrypted backup copies | Purged within 35 days |
| Store configuration and credentials | 90 days after the store is deactivated |
Order personal data is not written to persistent storage, so in normal operation there is no store of it to expire or delete. Encrypted backup copies are protected by a backup key held separately from our operational credentials; backup sets are rotated out and destroyed within 35 days, and every restore is a controlled operation, performed only by authorised personnel and recorded in our audit trail.
If a seller instructs us in writing to retain order data for a stated period and purpose, we will do so only that specified way, and only after this policy has been updated to disclose it. We will not extend retention silently.
7. Cross-Border Transfers
Data may be transferred from the TikTok Shop platform to our servers in the United States and onward to the seller’s ERP service in Hong Kong. Such transfers are protected by encryption in transit, strict access controls, and — where required — Standard Contractual Clauses or an equivalent transfer mechanism.
8. Security
All transmission is encrypted (TLS 1.2 or later). Personal data handled while relaying is processed in memory and is not written to disk, so we keep no store of order personal data at rest. The records we do keep — order and logistics status, and audit metadata — contain no personal data. Credentials are encrypted under keys held in a dedicated key management service that is not co-located with the business database, and are never written to logs. Access is restricted by least privilege, and every access to personal data is logged and monitored.
10. Children's Data
Our service is not directed to children, and we do not knowingly process personal data of children under 16. Order data relates to adult purchasers.
11. Your Rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, request data portability, or object to or withdraw consent for processing.
- Requests are free of charge.
- You may send them to fikawo@163.com or to the seller from whom you purchased.
- We will respond within 30 days.
How your request is handled
We act as a processor, not as the controller. We keep no persistent copy of order personal data, and we have no independent means of identifying you. The seller is the first point of contact for any request and is responsible for verifying your identity; the seller may do so by matching the details you provide against the order record it holds.
Because we do not keep a persistent copy, the personal data your request relates to is in most cases held by the seller or its ERP service, and the request will be handled and completed there.
Once the seller (or its ERP service) gives us a verified instruction, we will execute any deletion within 5 business days and confirm completion. Backups we keep contain configuration and audit metadata only, and any backup set is destroyed within 35 days.
12. Complaints
If you are not satisfied with our response, you may lodge a complaint with Cyberspace Administration of China or with the seller.
13. Changes
We may update this policy. Material changes will be published on this page with a new version number and effective date at least 14 days in advance. Previous versions are archived and available on request; the version history is also published on the change history page.
14. Contact
Privacy enquiries: fikawo@163.com
Postal: Room 1819, Building 5, Pinggao Chuangye Cheng, Liangzhu Subdistrict, Yuhang District, Hangzhou, Zhejiang, China