Privacy Policy

1. Who We Are

This Privacy Policy explains how ESHU ("ESHU", "we", "us") handles information when you visit eshucustoms.com, place an order, or interact with our marketing on social platforms including TikTok. It also covers AIMS, ESHU's own internal marketing and content operations system, which we use to plan, review, and (for authorized platforms) publish ESHU's own marketing content — AIMS runs on ESHU's private infrastructure and is not a public product or a service offered to third parties.

2. Information We Collect

When you browse the site or place an order, we collect:

• Order and contact details you provide at checkout — name, email, phone number, and delivery address.
• Artwork, designs, or images you upload for custom printing.
• Order contents, pricing, and payment status. Card and payment details themselves are handled directly by our payment processor (Stripe) — we never see or store your full card number.
• Basic technical information (such as pages visited) needed to operate the site, and — only once you consent via the cookie banner — analytics and advertising identifiers from Google Analytics and the Meta Pixel.

3. Cookies & Analytics

Essential cookies (cart, market selection, checkout) are always on and required for the site to function. Analytics and marketing cookies (Google Analytics 4, Meta Pixel) only load after you actively opt in through the cookie banner shown on your first visit, and you can change your choice at any time from that same banner.

4. TikTok Integration (ESHU's Own Account)

ESHU uses AIMS to plan and manage ESHU's own presence on TikTok. To enable this, an authorized ESHU team member may connect ESHU's own TikTok Business/Creator account to AIMS using TikTok's official Login Kit and OAuth authorization flow. This is entirely optional, is initiated only by ESHU staff, and does not involve, request, or store any TikTok information belonging to our website visitors or customers.

Once connected, AIMS accesses only the permissions ESHU has requested and TikTok has granted:

• Basic account information — confirms which TikTok account is connected.
• Public profile information — display name, avatar, and bio.
• Account statistics — follower, following, and video counts, used to measure ESHU's own marketing performance.
• A list of ESHU's TikTok videos — used to track what ESHU has already posted.
• Uploading video drafts — lets AIMS transfer operator-approved video content to ESHU's TikTok account as a private draft, for a staff member to review and publish manually inside the TikTok app.

Uploading a draft does not automatically make it public. ESHU has not requested, and AIMS does not currently use, TikTok's Direct Post / automatic public-posting capability.

Access & refresh tokens. When this authorization is granted, TikTok issues an access token and a refresh token to AIMS. These are exchanged and stored server-side only — on infrastructure ESHU controls, protected by database-level access rules that permit only ESHU's own server-side systems to read or write them. They are never included in a page shown to website visitors, never placed in a browser-visible URL, and never exposed to client-side code.

Revoking access. ESHU can revoke this connection at any time from within TikTok (Settings > Manage Account > Manage apps) or via TikTok's developer tools. Once revoked, AIMS can no longer act on ESHU's TikTok account, and TikTok requires ESHU to re-authorize before AIMS can connect again.

5. How We Use Information

We use the information above to fulfil and ship your order, communicate with you about it, provide customer support, operate and secure the website, and — where you've consented — understand site usage and measure the performance of our own marketing (including ESHU's TikTok activity described above). We do not sell your personal information.

6. Storage & Security

Order, account, and integration data (including TikTok credentials, see Section 4) is stored in our managed Supabase database, access-controlled so that only ESHU's own server-side systems — never a website visitor's browser session or a public API — can read or write it. Payment details are handled directly by Stripe under its own security controls; we never store full card numbers.

7. Third-Party Service Providers

We share information with the following service providers, only as needed for them to perform their function:

• Stripe — payment processing.
• Supabase — database and file storage hosting.
• TikTok — only for the ESHU-account integration described in Section 4, and only once authorized.
• Google Analytics & Meta — website analytics and advertising measurement, only after cookie consent.

8. Data Retention

We retain order records for as long as needed for accounting, warranty, and legal purposes. TikTok access/refresh tokens are retained only for as long as the connection remains active, and are deleted or replaced whenever ESHU disconnects or re-authorizes the integration.

9. Your Rights

You may ask us to access, correct, or delete personal information we hold about you, or to withdraw analytics/marketing cookie consent at any time via the cookie banner. To make a request, contact us by emailing eshucreatives@gmail.com.

10. Deletion & Revocation Requests

To request deletion of stored integration data, or to have us confirm that a TikTok connection has been revoked and its stored tokens removed, contact us by emailing eshucreatives@gmail.com with your request. We handle these as genuine manual requests to our team — we do not yet offer an automated self-service deletion tool, and we won't claim otherwise. We will confirm once the request has been actioned.

11. Changes to This Policy

We may update this Privacy Policy as our practices change — for example, if AIMS's TikTok integration is extended in the future. Material changes will be reflected by updating the "Last updated" date above.

12. Contact Us

Questions about this policy or your data can be sent by emailing eshucreatives@gmail.com, or by mail to Dubai, United Arab Emirates. See also our Terms of Service.