Privacy Policy

2. Cookies & Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential cookies — Required for the Website to function (session, language preference). Cannot be disabled.
• Analytics cookies — Google Analytics (anonymized IP), Meta Pixel. Help us understand how visitors use our Website so we can improve it.
• Marketing cookies — Facebook Pixel for ad targeting, retargeting, and measuring ad performance. Used to show you relevant SPUNUM ads on Facebook/Instagram.

You can control cookies through your browser settings. Disabling essential cookies may break Website functionality.

3. How We Use Your Information

We use collected information for the following purposes:

• Process and respond to your inquiries (WhatsApp, email, contact form, Messenger)
• Prepare quotations, samples, and bulk orders; ship products; provide after-sales support
• Improve our Website content, product listings, translation quality, and user experience
• Send periodic business communications (new product launches, factory updates) — only with your consent
• Detect and prevent fraud, security incidents, and abuse
• Comply with applicable laws, tax obligations, and legal requests

4. Information Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Meta Platforms (Facebook, Instagram, WhatsApp Business) — We integrate Meta Pixel, Facebook Messenger, WhatsApp Business API, and Instagram for customer service. Data shared with Meta is governed by the Meta Privacy Policy (facebook.com/privacy/policy).
• Shopee Philippines & Indonesia — For sample orders and market-specific product listings in PH and ID markets.
• Service providers — Logistics (TK STAR LOGISTICS, local couriers), cloud hosting, payment processors, email service. All bound by data processing agreements.
• Legal compliance — When required by valid legal process (court order, government request) or to protect our legal rights.
• Business transfers — In the event of a merger, acquisition, or asset sale, your information may be transferred (with notice to you).

5. Data Retention

We retain your information for the following periods:

• Inquiry and quotation records: 3 years from last contact (business records)
• Order and shipping records: 7 years from delivery (tax and legal compliance)
• Marketing subscription: until you opt out
• Google Analytics data: 26 months (Google default retention)
• Meta Pixel audience data: per Meta's retention policy (typically up to 180 days)

After retention period, data is securely deleted or anonymized.

6. International Data Transfers

SPUNUM Group operates globally with manufacturing in Quanzhou, Fujian, China and warehouses in Manila (Philippines), Jakarta (Indonesia), and Bangkok (Thailand). Your information may be transferred to and processed in China or other jurisdictions where our service providers operate.

For cross-border transfers, we use the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Equivalent safeguards as required by GDPR, UK GDPR, and other applicable privacy laws
• SSL/TLS encryption for all data in transit
• Data Processing Agreements (DPAs) with all service providers

7. Your Privacy Rights

Depending on your jurisdiction, you have the following rights:

• GDPR (EU / UK / EEA) — Right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise: email garry@spunum.com
• CCPA / CPRA (California, USA) — Right to know what data we collect, right to delete, right to opt out of sale (we do not sell data). To exercise: email garry@spunum.com
• PDPA (Philippines, Thailand) — Right to access, correct, and request deletion of your data
• UU PDP (Indonesia) — Right to access, correct, complete, and delete your personal data
• General inquiries — Email garry@spunum.com. We respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for all data in transit (HTTPS)
• Encrypted storage for sensitive business data
• Access controls (only authorized personnel can access inquiry data)
• Regular staff training on data protection
• Incident response procedures (we will notify affected users within 72 hours of any data breach)

9. Children's Privacy, Updates & Contact

Children's Privacy — Our Website and services are intended for business professionals (B2B). We do not knowingly collect personal data from children under 16. If we learn we have collected such data, we will delete it promptly.

Policy Updates — We may update this Privacy Policy periodically. Material changes will be notified via a banner on the Website homepage. The "Last updated" date at the top will reflect the most recent revision.

Contact Us — For any privacy questions, requests, or complaints:

• Email: garry@spunum.com
• WhatsApp: +86 13925996929 (Global / PH / ID markets)
• Address: SPUNUM Group · Quanzhou, Fujian, China · With warehouses in Manila / Jakarta / Bangkok

EU Representative: For GDPR inquiries from EU/UK customers, contact us at garry@spunum.com (we respond within 30 days as required by GDPR Article 27).