← Back to MCDFL

Legal

Privacy Policy

Last Updated: May 2026 · Applies to all MCDFL services

Welcome to MCDFL ("we", "our", or "us") — a B2B Print-on-Demand and dropshipping fulfillment provider. This policy explains how we handle data for Merchants and their End-Customers. We act as a Data Processor for your End-Customers' data; you remain the Data Controller.

01

Information We Collect

A. Merchant Data

When you register or integrate your store (Shopify, Etsy, WooCommerce) with us, we collect:

  • Identity & Contact: Name, business name, email, phone, billing address.
  • Financial Data: Payment details processed by compliant third-party gateways.
  • Integration Data: Store URLs, API keys, and authorization tokens.

B. End-Customer Data

To manufacture and ship products to your buyers, you provide us with:

  • Shipping Data: Name, address, postal code, phone number.
  • Personalization Data: Custom text, images, or designs for manufacturing.
We NEVER contact your End-Customers directly for marketing. We act strictly as your white-label manufacturing and shipping partner.
02

How We Use the Data

  • Fulfill Orders: Shipping data and design files used exclusively to print, package, and deliver parcels via carriers (USPS, FedEx, YunExpress, 4PX).
  • Process Payments: Financial data used to bill you for manufacturing and shipping costs.
  • Improve Services: Usage analytics to optimize our dashboard, rendering speeds, and API sync reliability.
  • Protect IP: Automated AI visual tools may scan product images to prevent third-party copyright infringement.
03

Data Sharing and Third Parties

We do not sell, rent, or trade your data or your End-Customers' data. We only share necessary data with trusted partners:

  • Logistics Providers: Shipping addresses shared with carriers for tracking and delivery.
  • Cloud & Hosting: Data securely hosted on Vercel, Supabase, and Cloudflare R2.
  • Marketing APIs (Pinterest): We use Pinterest API (v5) to publish our own B2B catalog pins. We do not transmit any Merchant or End-Customer data to Pinterest.
04

Intellectual Property & Designs

As a POD seller, you retain all intellectual property rights to artwork and designs you upload. We claim no ownership over your custom designs. Your design files are stored in encrypted cloud buckets and accessed only at the time of printing.

05

GDPR and CCPA Compliance

If you or your End-Customers are in the EEA or California, you have the right to access, correct, or delete personal data. As the Data Controller for your buyers, you are responsible for handling their privacy requests. Forward End-Customer deletion requests to us and we will purge their shipping details, retaining only anonymized records required for accounting and tax purposes.

06

Data Security & Retention

We implement industry-standard SSL/TLS encryption for data in transit and at rest. End-Customer shipping data is retained for a maximum of 6 months after delivery to handle logistics disputes or reprints, after which it is anonymized.

07

Contact Us

For privacy-related inquiries, data deletion requests, or questions regarding our Data Processing Addendum (DPA), please contact our legal team at [email protected].

← Return to Homepage