Privacy Policy

1. Scope

This Policy covers personal data collected when you browse sabaistyle.com, create an account, place orders, join our loyalty/affiliate programs, contact support, or interact with our ads and social channels.

2. What we collect

• Identity & contact: name, email, phone, billing/shipping address.

• Account data: username, hashed password, preferences.

• Orders & payments: items, totals, invoices, transaction IDs (full card data stays with our PCI-DSS payment processors).

• Device & usage: IP, device/browser, pages viewed, session IDs, approximate location (city/region).

• Cookies/SDKs: essential, analytics, and advertising identifiers.

• Support & UGC: messages, attachments, reviews, photos/videos you submit.

• Loyalty/Affiliate (if enabled): points, referrals, commissions, payout details (e-wallet/bank).

• In-store/CCTV (if any): for security and loss prevention.
  We do not intentionally collect sensitive data. Please don’t send it.

3. Why we use your data (Legal bases)

• Provide services & fulfill orders (accounts, checkout, delivery, returns). Contract necessity.

• Customer support & service messages. Contract necessity/legitimate interests.

• Personalization & analytics to improve UX and relevance. Legitimate interests/consent where required.

• Marketing (email/SMS/push/retargeting). Consent where required; otherwise legitimate interests with easy opt-out.

• Fraud prevention & security, debugging, abuse detection. Legitimate interests/legal obligation.

• Legal, tax, and compliance. Legal obligation.

4. Cookies & tracking (short form)

• Essential (cart, login, checkout) – always on.

• Performance/analytics (e.g., Google Analytics).

• Advertising/retargeting (e.g., Meta Pixel, Google Ads).
  Use our Cookie Settings to grant/withdraw consent for non-essential cookies. You can also clear/block cookies in your browser.

5. Payments

Processed securely by [Stripe/PayPal/Adyen/Other]. We store only tokens/last 4 digits and transaction references—not full card numbers.

6. Sharing & disclosures

We share data only as needed with vetted providers under data-processing agreements:

• Hosting/CDN, security, analytics, crash reporting.

• Payment gateways, anti-fraud tools.

• Email/SMS/push providers.

• Fulfillment, warehousing, couriers, and returns logistics.

• Loyalty/affiliate software (if used).

• Professional advisors and compliance (auditors, lawyers), authorities where required.

• Corporate transactions (merger/acquisition) with safeguards and notice.
  We do not sell personal information. Limited “sharing” for cross-context ads may occur—see California rights below.

7. International transfers

We operate in HK/PH/TH and may process elsewhere. For EEA/UK residents, transfers use Standard Contractual Clauses (SCCs) plus technical/organizational safeguards (encryption, access controls).

8. Retention

We keep data only as long as needed, then delete or anonymize:

• Orders/invoices: [X–Y years] (tax/audit).

• Accounts: active + [X years] after last activity.

• Support tickets: [X months/years].

• Marketing consents/logs: [X years].

• CCTV: [30–90 days] unless required for incidents.

9. Security

TLS in transit, encryption at rest (where applicable), role-based access, MFA for admin, least-privilege, monitoring, and staff confidentiality. No method is 100% secure—report incidents to [security@sabaistyle.com].

10. Your rights

Depending on your location, you can:

• Access/port a copy of your data.

• Rectify inaccuracies.

• Erase (subject to legal exceptions).

• Restrict/object to processing.

• Withdraw consent (e.g., marketing).

• Opt-out of marketing anytime via footer links or account settings.
  Request via [privacy@sabaistyle.com]. We may verify identity and will respond within legal timelines.

11. Children

Not directed to children under 16 (or local age). If you believe a child provided data, contact us for removal.

12. User-generated content & influencers

If you post reviews or tag #SabaiStyle (or campaign tags), you grant us a non-exclusive license to display that content on our Site and channels, per campaign rules. Do not include others’ personal data without consent.

13. Third-party links

External sites/apps have their own policies. Review before sharing data.

14. Region-specific notices

Hong Kong (PDPO): We are a “data user.” You have rights of access and correction under Cap. 486. Contact our Privacy Officer at [HK contact].
Philippines (DPA 2012): We are a personal information controller. You may contact the National Privacy Commission after contacting us first.
Thailand (PDPA): You have rights to access, rectification, deletion, and objection; complaints may be lodged with the PDPC.
EEA/UK (GDPR/UK-GDPR):

• Controller: [Company legal name + EU/UK contact]

• DPO (if appointed): [Name/email]

• Legal bases: as listed in §3.

• Transfers: SCCs + safeguards.

• Supervisory authority: You may complain to your local authority.
  California (CCPA/CPRA):

• We do not sell personal information. We may “share” identifiers/internet activity for cross-context ads.

• Rights: know, delete, correct, opt-out of sharing, and limit use of sensitive PI (not typically collected).

• Exercise rights or opt-out of sharing via the “Do Not Sell or Share My Personal Information” link or email [privacy@sabaistyle.com].
  Do Not Track: We don’t respond to DNT signals; use our cookie controls.

15. Data breach response

We maintain an incident response plan and will notify affected users and authorities when legally required.

16. Changes

We may update this Policy. We’ll change the “Last updated” date and, for material changes, provide notice on the Site or by email.

17. How to contact us

Email: privacy@sabaistyle.com
Postal: Tindahan Global Distribution Co., Ltd.Room 806, 8/F, First Group Centre, 23 Wang Chiu Road, Kowloon Bay, Kowloon                          Phone: +852 5321 5753