Privacy policy

This policy explains what we do with your personal data when you use etumaxpower.com or place an order. We sell products people buy discreetly, and we treat that as a reason to collect less, not more.

Who the controller is

Data protection requests reach the controller at the contact details below.

What we collect, and why

• Order data — your name, email address, shipping and billing address, phone number if you give one, and what you ordered. We need this to accept your order, ship it, and deal with a replacement claim. Lawful basis: performance of the contract with you.
• Payment data — handled by our payment provider, not by us. We receive confirmation that a payment succeeded and the last digits and type of the card. We never receive your full card number. Lawful basis: performance of the contract.
• Messages you send us — the content of emails and WhatsApp messages, so we can answer them. Lawful basis: our legitimate interest in answering customer enquiries.
• Technical data — the standard server records the site keeps when a page is requested, including IP address, used to keep the site available and secure. Lawful basis: our legitimate interest in operating a secure site.

What stays with us

Your data is never sold and never shared with advertisers. This site runs no advertising cookies and no profiling cookies, and there is no third-party chat widget in front of you — the WhatsApp button is a plain link, and nothing loads from a third party until you choose to use it.

Who processes data for us

• Stripe — payment processing. Stripe is an independent controller for the payment data it holds; its own privacy policy governs that.
• Our hosting provider — stores the site and its database, and keeps server logs.
• Shipping carriers — receive the name and address needed to deliver your parcel, and nothing about what is inside it beyond what a customs declaration requires.

International transfers

ETUMAX ENTERPRISE is established in Malaysia, so data you send us is processed outside the European Economic Area and the United Kingdom. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission’s standard contractual clauses, or the UK addendum to them, with the recipient.

How long we keep it

• Order records — seven years from the date of the order, which is the period we must keep commercial and tax records for.
• Customer messages — two years from the last message in the exchange.
• Server logs — twelve months.
• An account you create — until you ask us to delete it.

Your rights

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict what we do with it, to object to processing we carry out on the basis of legitimate interest, and to receive it in a portable format. Write to the contact address above and we will answer.

If you are in the EEA or the UK and you think we have handled your data wrongly, you can complain to your national data protection authority. We would rather you told us first.

Cookies

This site sets only the cookies it needs to work. The full list is on the cookie policy page.

Changes to this policy

We may update this policy. The date it was last updated is shown by the site.