Privacy Policy
Your data is not the product. We collect only what’s necessary to fulfil your order and protect you from counterfeits.
What we collect — and why
We built senfind around a simple principle: your data is not the product. We collect only what’s necessary to fulfil your order, protect you from counterfeits, and serve The Crew. Nothing else.
Data we collect
- Order information: name, shipping address, email, phone number (for delivery coordination), payment confirmation reference. We do not store full card numbers — payments are processed by our payment providers.
- Membership data (The Crew): email address only. That’s it. No phone number required, no social media linking, no behavioural tracking profile.
- NFC tag registration: when you tap a product to activate your warranty or join The Crew, we record the unique NTAG 424 DNA serial number linked to your email. This is what proves authenticity — it’s a one-way binding, not a tracking device.
- Technical data: IP address (for fraud prevention and regional pricing), browser type, pages visited on senfshop.com. Retained for 12 months maximum, then anonymised.
What we never do
We do not sell your personal data to third parties. We do not run targeted advertising based on your browsing behaviour. We do not require social media logins. We do not collect biometric data, location history, or device fingerprints beyond standard web analytics.
Cookies & local storage
senfshop.com uses a minimal set of cookies: (1) essential session cookies for cart and login, (2) one analytics cookie (Matomo, self-hosted — no third-party data sharing), and (3) your consent preference. No advertising cookies from Google, Meta, or any other network. You can clear all cookies at any time without losing your membership status.
Your rights
- Access: request a copy of all personal data we hold about you. We respond within 30 days.
- Rectification: correct inaccurate data (name, address, email) at any time via Contact.
- Erase: request deletion of your personal data. We comply within 30 days, subject to legal retention obligations (e.g., tax records kept for the period required by Hong Kong Inland Revenue).
- Portability: receive your membership and order history in a structured, machine-readable format.
- Withdraw consent: opt out of marketing emails at any time via the unsubscribe link. One click, no retention tricks.
Legal bases
| Framework | Applies when |
|---|---|
| GDPR (EU/UK) | You are in the European Economic Area or United Kingdom. Our full GDPR notice, including DPO contact and complaint rights (your national supervisory authority), is available on request. |
| PDPA (Singapore) · Vietnam PDPD 2023 | You are in Singapore or Vietnam. Statutory rights apply alongside this policy; where local law offers stronger protection, the stronger provision wins automatically. |
| Malaysia PDPA 2010 | You are in Malaysia. Same principle: your statutory rights under the Personal Data Protection Act apply in full. |
| Hong Kong PDPO | As a Hong Kong-incorporated entity (Senfan Group Limited), we are subject to the Personal Data Protection Ordinance for all data processed through our HK office. |
Data retention
Order records: retained for 7 years (Hong Kong tax compliance). Membership email: kept until you unsubscribe or request deletion. NFC registration record: kept for the life of the product warranty (2 years) plus 1 year, then archived. Analytics data: anonymised after 12 months.
Third-party processors
We use a small number of essential service providers: Shopify (e-commerce platform), Stripe / PayPal (payment processing), DHL / FedEx / GHN / Ninja Van (logistics), and Matomo (self-hosted analytics). Each processes data under a Data Processing Agreement. We do not use Google Ads, Facebook Pixel, or any ad-tech stack.
Contact
For any privacy question, exercise of rights, or data subject request: email privacy@senfshop.com. We respond within 30 days, usually much faster. Our registered address is available on the About page.