Privacy Policy
SabaiFresh™ (powered by Tindahan Global Distribution Co., Ltd.)
Effective date: [DD MMM 2025] • Last updated: [DD MMM 2025]
1) Who we are (Data Controller)
This website is owned and operated by Tindahan Global Distribution Co., Ltd. (“SabaiFresh”, “we”, “us”, “our”).
Primary business address: 4/F, World Wide House, Central, Hong Kong.
Privacy contact: privacy@sabaifresh.com | +852 6672 3812.
We primarily operate in Hong Kong, with sourcing and logistics in Thailand and support operations in the Philippines.
This Policy is intended to comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and reflects global best practices (e.g., GDPR principles). Where local laws require higher protection, we follow the higher standard.
2) What personal data we collect
We collect only what we need for specific, lawful purposes.
Information you provide
- Account & profile: name, email, phone, password, billing/shipping addresses.
- Orders & payments: order contents, totals, billing details (payment card data handled by payment gateways; we do not store full card numbers).
- Support & forms (e.g., WPForms): messages, attachments, preferences.
- Marketing: newsletter opt-ins, survey responses, product reviews, referral/affiliate IDs.
Information collected automatically
- Device and usage: IP address, browser type/version, pages viewed, timestamps, language, approximate location, referrer/UTM tags.
- Cookies and similar tech (pixels, local storage) for essential site functions, analytics, and ads.
- Transactional events (add-to-cart, checkout start, purchase) for store operations and performance tracking.
Information from third parties
- Payment gateways (e.g., Stripe/PayPal/[your provider]): payment confirmations, fraud risk indicators.
- Logistics partners (e.g., SF Express, Lalamove, Hongkong Post): shipping status and proofs of delivery.
- Social sign-ins/ads (e.g., Facebook/Google): only if you use these features, per your permissions.
We do not knowingly collect sensitive personal data.
3) Why we collect it (purposes) & our legal bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide the store & services | Account creation, cart/checkout, order fulfillment, returns | Contract performance |
| Customer support | Chat, email, phone assistance; warranty & complaints | Legitimate interests / Contract |
| Payments & fraud prevention | Process payments, detect fraud/abuse | Legitimate interests / Legal obligation |
| Shipping & logistics | Print labels, deliver, track | Contract performance |
| Marketing (opt-in) | Newsletters, offers, new arrivals | Consent (you may withdraw anytime) |
| Analytics & improvements | Site performance, UX testing, debugging | Legitimate interests |
| Legal & compliance | Tax/audit records, regulatory requests | Legal obligation |
4) Cookies & similar technologies
We use essential, functional, analytics, and marketing cookies. Key examples you may see:
woocommerce_cart_hash,woocommerce_items_in_cart,wp_woocommerce_session_*– run the cart/checkout.wordpress_logged_in_*,wp-settings-*– remember your login and preferences._ga*(Google Analytics),_fbp(Meta) – measure performance/ads attribution.
You can manage cookies via our Cookie Banner and your browser settings. Blocking essential cookies may break site functions.
5) Who we share data with (processors & partners)
We share personal data only with vetted providers under contracts that require confidentiality and security, for example:
- Hosting/CDN & security: [Your host], Cloudflare (if used).
- E-commerce platform & plugins: WordPress, WooCommerce, Elementor, WPForms, email/SMS tools.
- Payments: Stripe, PayPal, [local HK gateway], banks/merchant acquirers.
- Shipping: SF Express, Lalamove, Hongkong Post, DHL, FedEx (as applicable).
- Analytics & marketing: Google Analytics/Ads, Meta (Facebook/Instagram), email service providers.
We do not sell personal data.
6) International transfers
As a cross-border business, data may be processed in Hong Kong, Thailand, the Philippines, and other locations of our service providers. We use appropriate safeguards (contractual clauses, access controls, encryption) to protect your data across borders.
7) Retention—how long we keep data
We keep data only as long as necessary:
- Account data: while your account is active + up to 6 years for tax/audit.
- Orders & invoices: 7 years (or local legal requirement).
- Support tickets: 3 years after closure.
- Marketing consents & email logs: while subscribed + 2 years.
- Cookies: per type (session to 24 months).
When no longer needed, data is securely deleted or anonymized.
8) Your rights
Under PDPO (and, where applicable, GDPR-style rights), you can:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete/erase data where no longer needed (subject to legal retention).
- Object/opt-out of direct marketing at any time.
- Withdraw consent where processing is based on consent.
Requests: privacy@sabaifresh.com. We may ask for verification to protect your account.
Complaints: You may contact the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong. We encourage contacting us first so we can resolve issues quickly.
9) Security
We apply layered safeguards: HTTPS/TLS, firewall/WAF, access controls, role-based permissions, encryption at rest (where supported by providers), regular updates/patching, malware scanning, and staff confidentiality commitments.
No system is perfectly secure. If we detect a data breach likely to affect your rights, we’ll notify you and (where required) regulators without undue delay.
10) Minors
Our store is not directed to children under 16. We do not knowingly collect data from minors. If you believe a child has provided data, contact us to remove it.
11) Third-party links & social features
Our website may link to third-party sites or include embedded content (e.g., Instagram, YouTube). Their privacy practices apply when you interact with them. Please review their policies.
12) Marketing choices
- Emails/SMS: Use the unsubscribe link or contact us.
- Ads preferences: Adjust in your Facebook/Google accounts and via our Cookie Banner.
13) Changes to this Policy
We may update this Policy from time to time. Material changes will be highlighted on this page with a new “Last updated” date. Continued use of our services after changes means you accept the updated Policy.
14) Contact us (Privacy)
SabaiFresh™ – Tindahan Global Distribution Co., Ltd.
4/F, World Wide House, Central, Hong Kong
privacy@sabaifresh.com | +852 6672 3812
Regional contacts (operations only, not data controllers):
- Thailand: 89/12 Moo 6, Nong Chok, Bangkok 10530 • +66 95 868 4421
- Philippines: 135 Divine Mercy Bldg., Quimpo Blvd., Ecoland, Davao City 8000 • +63 945 813 8978 / +63 960 607 8972
Annex A: Quick Cookie & Consent Language (for your banner)
Your Choice – “Accept all”, “Reject non-essential”, or “Manage preferences”.
Strictly Necessary – Always on to run the store (cart, checkout, security).
Analytics – Help us improve site performance.
Marketing – Personalized offers and ads across platforms.
