SF International Trade SF International Trade

Legal

Privacy Policy

How SF International Trade Sdn. Bhd. collects, uses, and protects your personal information.

Effective 11 May 2026 · Last Updated 11 May 2026

1. Who We Are

This Privacy Policy describes how SF International Trade Sdn. Bhd. (Registration No. 202201036884), a private limited company registered in Malaysia with its registered office at:

No 26-2, Jalan Selasih K U12/K,
Taman Cahaya Alam, Seksyen U12,
40170 Shah Alam, Selangor Darul Ehsan, Malaysia

(referred to as "we", "us", "our", or "SF") collects, uses, and protects your personal information when you use the SF Sourcing App (mobile and desktop) and our website at sfinternationaltrade.com (collectively, the "Service").

We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international standards.

2. Information We Collect

2.1 Account Information

When you register an account, we collect:

  • Email address
  • Password (encrypted, never stored in plain text)
  • Full name
  • Phone number (optional)

2.2 Sourcing Request Data

When you submit sourcing requests, we collect:

  • Product details (name, specifications, quantity, target price)
  • Reference links and product images
  • Deadline and delivery requirements
  • Notes and comments

2.3 Document Uploads

You may upload supporting documents and images. We store these files securely on our backend infrastructure for the purpose of fulfilling your sourcing requests.

2.4 Transaction Data

For approved quotations and orders, we collect:

  • Quotation amounts and currencies
  • Payment proof images (uploaded by you)
  • Tracking numbers and courier details
  • Delivery addresses

2.5 Communication Data

  • Messages exchanged within order chat
  • Notes and ratings on completed orders

2.6 Technical Data (Limited)

  • Device type and operating system (for crash diagnostics)
  • App version
  • Approximate IP address (for security logging)

2.7 What We Do NOT Collect

  • Location data
  • Contacts or address book
  • Camera/microphone data without explicit permission
  • Health, financial account credentials, or biometric data
  • Advertising identifiers

3. How We Use Your Information

We use your information to:

  • Provide sourcing services from China to Malaysia
  • Process and fulfill your sourcing requests
  • Generate quotations and invoices
  • Communicate order updates and notifications
  • Improve app stability and user experience
  • Comply with legal obligations
  • Prevent fraud and unauthorized access

We do not sell your personal information to third parties.

4. Third-Party Services

We use the following third-party services to operate the Service:

Service Purpose Data Shared
Supabase Backend database and authentication All app data
Frankfurter API Currency exchange rates None (rates only)
Netlify Website hosting and form handling Contact form submissions
Apple App Store / Google Play App distribution Account email

These providers process data under their own privacy policies and applicable data protection laws.

5. Data Storage and Security

  • Data is stored on secure servers operated by Supabase
  • All data transmissions are encrypted using HTTPS/TLS
  • Database access is protected by Row-Level Security (RLS)
  • Passwords are hashed using industry-standard algorithms
  • Access to personal data is restricted to authorized staff only

6. Data Retention

  • Active accounts: Data retained while your account is active
  • Inactive accounts: Data retained up to 24 months after last activity
  • Order records: Retained up to 7 years for tax and legal compliance
  • Deleted accounts: Data permanently removed within 30 days of deletion request, except where retention is required by law

7. Your Rights (PDPA 2010)

You have the right to:

  • Access your personal data we hold about you
  • Correct inaccurate or incomplete data
  • Withdraw consent to data processing (note: this may limit Service functionality)
  • Request deletion of your data
  • Lodge a complaint with the Personal Data Protection Department of Malaysia

To exercise these rights, contact us at: syaiful@sfinternationaltrade.com

We will respond within 21 days as required by PDPA.

8. Children's Privacy

The Service is intended for business-to-business (B2B) use by individuals aged 18 and above. We do not knowingly collect data from children under 18.

9. International Data Transfers

Some third-party providers (e.g., Supabase) may store data outside Malaysia. We ensure such transfers comply with PDPA requirements and that adequate safeguards are in place.

10. Cookies and Tracking

The SF Sourcing App does not use cookies. Our website may use essential cookies for functionality. We do not employ tracking technologies for advertising purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service and via email. The "Last Updated" date above reflects the most recent revision.

12. Contact Us

For questions, concerns, or requests regarding your personal data:

SF International Trade Sdn. Bhd.
Registration No. 202201036884
No 26-2, Jalan Selasih K U12/K,
Taman Cahaya Alam, Seksyen U12,
40170 Shah Alam, Selangor Darul Ehsan, Malaysia
Email: syaiful@sfinternationaltrade.com

By using the SF Sourcing App and our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.