Privacy Policy
How Wingco Order Hub processes TikTok Shop order and buyer data.
Wingco Order Hub · Last updated: 10 November 2026
Who we are
Wingco Order Hub is an internal order management system operated by Wingco for its own TikTok Shop stores. It is not offered to other merchants and it is not available to the general public.
What data we process
- Order data from the TikTok Shop Open API: order identifiers, status, amounts, products, SKUs and product images.
- Shipping and contact data of buyers: recipient name, address and phone number, and the buyer's anonymised TikTok email address, where TikTok provides them. For orders shipped with TikTok Shipping, TikTok masks most of these fields before they reach us.
- Shipping labels: the label PDF TikTok Shipping issues for each order. It shows the recipient's name and address, because the carrier needs them.
- Shop credentials: API access and refresh tokens issued by TikTok Shop.
- Artwork files uploaded by our design staff, and the record of who approved each one.
- Staff account data: name, work email address, role and sign-in history of our own employees.
- Return and refund records for our own orders: the items returned, the reason given and the refund status.
- Settlement data for our own shops: amounts TikTok Shop is holding, settling and paying out to us. This is our own business data and contains no buyer personal information.
- Product catalogue data of our own shops: listings, variants, prices and images, used to match orders to artwork.
- Listing performance of our own shops from TikTok Shop Analytics: impressions, page views and orders per listing. It contains no buyer personal information.
- Orders of our own Etsy store, which reach us through Merchize, the print partner that store is linked to: the order number, status, amounts, products and images, and the recipient's name and shipping address as Etsy passes them to Merchize, and the shipping label our staff buy for such an order (on Etsy) when they attach one to it. They are handled like our TikTok Shop orders and kept for the same periods; nothing is sent back to Etsy by this Service.
We do not collect payment card details, government identifiers or biometric data, and we do not track visitors of this site.
Why we process it
Solely to run our own TikTok Shop stores: synchronising orders, verifying that the artwork matches what the customer ordered, producing shipping labels, passing production and shipping instructions to our fulfilment partners, handling returns, reconciling what TikTok Shop pays us, and seeing how our own listings perform. We do not use this data for advertising, profiling or automated decision making, and we never sell, rent or license it.
How we protect it
Access tokens and buyer personal data in our database are encrypted at rest with AES-256-GCM. All traffic is served over TLS. Access is restricted to named, authorised staff, each limited to the shops they are assigned; staff who design artwork never see buyer data, and the database is not reachable from the internet. Shipping label files are kept in our Google Drive and opened only through unlisted links that we give to the print partner producing that order. Order status changes, artwork approvals, label purchases, exports and account changes are recorded in an audit trail.
Who we share it with
- Print and fulfilment partners that produce and ship our orders (currently Snapfox, Mangotee Prints, PrintPoss, Lizy Printfull, Rapidprinttee, BurgerPrints, Printify, Merchize, PGPrints, Hogotopod, Snapecom, Lumiprint, Printbelle, LamPOD, Toaddit, FF10-Cago, Zootopbear, CB-Gift and the embroidery workshop Mỹ Hạnh), and Tebprint, which ships our own ready-made goods from its US warehouse: for the one order they handle, the product, size and colour, the print files (none for ready-made goods) and the TikTok shipping label, which shows the recipient's name and address — or, for an order of our Etsy stores, which has no such label, either the shipping label our staff bought for it (on Etsy), which shows the same, or the recipient's name, shipping address and phone number, so that the partner can buy the shipping and ship it (Snapfox, Mangotee Prints, Lizy Printfull, PrintPoss, Rapidprinttee, PGPrints, Hogotopod, Snapecom, Lumiprint, Printbelle, FF10-Cago, Zootopbear, CB-Gift). Nothing else.
- Contabo GmbH (hosting): runs the application and the database on a server in the European Union.
- Google: Google Drive stores artwork files and shipping labels; the Google Sheets API writes an order's production row into the order sheet of a partner that works from a spreadsheet; staff may sign in with Google.
We do not share data with any other third party unless required by law.
Where it is stored
The database runs on a dedicated server hosted by Contabo GmbH in the European Union. Artwork and shipping label files are stored in Google Drive. The data is accessed remotely by our operations team in Vietnam.
How long we keep it
We keep data only as long as running the order needs it. Deletion runs automatically every day:
- Shipping label files are deleted 30 days after the order is delivered or cancelled.
- Buyer name, address, phone and email stored with an order are deleted 90 days after the order is delivered, completed or cancelled.
- When a shop removes our authorisation in TikTok Seller Center, or we disconnect it, synchronisation stops immediately and its stored access tokens are deleted. That shop's buyer personal data and label files are deleted within 30 days.
- Order records without personal data (products, amounts, statuses) are kept for accounting.
- Database backups, taken before each release, stay on the same server with administrator-only access and are deleted after 90 days.
Your choices
Buyers who want their data corrected or deleted may contact the TikTok Shop store they ordered from, or write to us directly at privacy@wingcoteam.com. See Data deletion for what to include and how long it takes. We assist TikTok Shop and our stores with any request to access, update or delete customer data, and we respond to such requests without undue delay.
Security incidents
If we identify or suspect a breach affecting TikTok Shop data, we contain it, rotate affected credentials, and notify TikTok Shop through Partner Center within 24 hours of confirming the incident, along with any other party required by law.
Changes
We review this policy at least annually and whenever our processing changes materially. The date above shows the current version.