1. Who We Are
This Privacy Policy describes how SF International Trade Sdn. Bhd. (Registration No. 202201036884), a private limited company registered in Malaysia with its registered office at:
Taman Cahaya Alam, Seksyen U12,
40170 Shah Alam, Selangor Darul Ehsan, Malaysia
(referred to as "we", "us", "our", or "SF") collects, uses, and protects your personal information when you use the SF Sourcing App (mobile and desktop) and our website at sfinternationaltrade.com (collectively, the "Service").
We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international standards.
2. Information We Collect
2.1 Account Information
When you register an account, we collect:
- Email address
- Password (encrypted, never stored in plain text)
- Full name
- Phone number (optional)
2.2 Sourcing Request Data
When you submit sourcing requests, we collect:
- Product details (name, specifications, quantity, target price)
- Reference links and product images
- Deadline and delivery requirements
- Notes and comments
2.3 Document Uploads
You may upload supporting documents and images. We store these files securely on our backend infrastructure for the purpose of fulfilling your sourcing requests.
2.4 Transaction Data
For approved quotations and orders, we collect:
- Quotation amounts and currencies
- Payment proof images (uploaded by you)
- Tracking numbers and courier details
- Delivery addresses
2.5 Communication Data
- Messages exchanged within order chat
- Notes and ratings on completed orders
2.6 Technical Data (Limited)
- Device type and operating system (for crash diagnostics)
- App version
- Approximate IP address (for security logging)
2.7 What We Do NOT Collect
- Location data
- Contacts or address book
- Camera/microphone data without explicit permission
- Health, financial account credentials, or biometric data
- Advertising identifiers
3. How We Use Your Information
We use your information to:
- Provide sourcing services from China to Malaysia
- Process and fulfill your sourcing requests
- Generate quotations and invoices
- Communicate order updates and notifications
- Improve app stability and user experience
- Comply with legal obligations
- Prevent fraud and unauthorized access
We do not sell your personal information to third parties.
4. Third-Party Services
We use the following third-party services to operate the Service:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Backend database and authentication | All app data |
| Frankfurter API | Currency exchange rates | None (rates only) |
| Netlify | Website hosting and form handling | Contact form submissions |
| Apple App Store / Google Play | App distribution | Account email |
These providers process data under their own privacy policies and applicable data protection laws.
5. Data Storage and Security
- Data is stored on secure servers operated by Supabase
- All data transmissions are encrypted using HTTPS/TLS
- Database access is protected by Row-Level Security (RLS)
- Passwords are hashed using industry-standard algorithms
- Access to personal data is restricted to authorized staff only
6. Data Retention
- Active accounts: Data retained while your account is active
- Inactive accounts: Data retained up to 24 months after last activity
- Order records: Retained up to 7 years for tax and legal compliance
- Deleted accounts: Data permanently removed within 30 days of deletion request, except where retention is required by law
7. Your Rights (PDPA 2010)
You have the right to:
- Access your personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent to data processing (note: this may limit Service functionality)
- Request deletion of your data
- Lodge a complaint with the Personal Data Protection Department of Malaysia
To exercise these rights, contact us at: syaiful@sfinternationaltrade.com
We will respond within 21 days as required by PDPA.
8. Children's Privacy
The Service is intended for business-to-business (B2B) use by individuals aged 18 and above. We do not knowingly collect data from children under 18.
9. International Data Transfers
Some third-party providers (e.g., Supabase) may store data outside Malaysia. We ensure such transfers comply with PDPA requirements and that adequate safeguards are in place.
10. Cookies and Tracking
The SF Sourcing App does not use cookies. Our website may use essential cookies for functionality. We do not employ tracking technologies for advertising purposes.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service and via email. The "Last Updated" date above reflects the most recent revision.
12. Contact Us
For questions, concerns, or requests regarding your personal data:
Registration No. 202201036884
No 26-2, Jalan Selasih K U12/K,
Taman Cahaya Alam, Seksyen U12,
40170 Shah Alam, Selangor Darul Ehsan, Malaysia
Email: syaiful@sfinternationaltrade.com
By using the SF Sourcing App and our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.