Privacy policy
Privacy Policy
Last updated: 9 October 2026
Overview
This store and website are operated by SENGOL&SONS LLP trading as EDC.ASIA, a limited liability partnership registered in Singapore with limited liability, UEN T23LL0756K. References to “EDC.ASIA”, “we”, “us” and “our” mean SENGOL&SONS LLP.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit www.edcasia.co, place an order, use our store features or contact us. These activities and features are referred to as the “Services”. Our store is powered by Shopify.
If this Privacy Policy conflicts with our Terms of Service on the collection, processing or disclosure of personal information, this Privacy Policy takes precedence for those matters.
1. Personal information we collect or process
Personal information is information that identifies you or can reasonably be linked to you. It does not include information that has been made anonymous so that it can no longer reasonably identify you.
Depending on how you interact with the Services, we may collect or process:
- Contact details: your name, email address, telephone number, billing address and delivery address.
- Payment and transaction information: payment-method details, payment confirmations, transaction records and payment credentials processed through our payment providers when required for checkout.
- Account information: your login and account-authentication information, preferences and settings.
- Shopping activity: products you view, add to your cart or wishlist, purchase, return, exchange or cancel, and your transaction history.
- Communications and claim information: enquiries, correspondence, reviews, order details, photographs, videos and other evidence you provide when seeking support or making a claim.
- Device and connection information: your browser, device, operating system, IP address and similar identifiers.
- Usage information: how you navigate and interact with our store, content, features and advertisements.
We may also derive preferences or other information from these interactions for the purposes described below.
2. Where information comes from
We collect personal information:
- From you, when you place an order, create an account, contact us, submit content or otherwise provide information.
- Automatically, through your use of the Services, including cookies, pixels and similar technologies.
- From Shopify and service providers, including providers supporting payments, delivery, fraud prevention, customer support and store operation.
- From business and marketing partners, where they provide information for the purposes described in this policy.
3. How we use personal information
We use personal information for the following purposes:
- Orders and customer services: processing payments, checking and fulfilling orders, arranging delivery, administering accounts, remembering requested preferences, sending order updates and handling cancellations, returns, refunds and claims.
- Operating and improving the store: maintaining our website and features, understanding how they are used, reviewing store performance, improving services and providing relevant product suggestions.
- Marketing and advertising: sending promotional communications and displaying relevant advertisements, including using shopping activity and preferences, subject to the consent requirements and choices described in this policy.
- Security and fraud prevention: verifying orders and accounts, detecting suspicious activity, investigating false or fraudulent claims, securing the Services and preventing misuse.
- Communicating with you: responding to enquiries, providing support and handling complaints.
- Legal and business administration: keeping required records, complying with legal obligations and valid legal requests, resolving disputes and establishing, exercising or defending legal claims.
4. Grounds for using personal information
We collect, use and disclose personal information with consent or on another basis permitted or required by applicable data-protection law.
Where European Economic Area or United Kingdom data-protection law applies to our processing, the grounds we rely on are:
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling orders, providing requested account services, handling related returns or claims, and taking steps you request before a purchase contract is formed | Performance of a contract or steps requested before entering into a contract. |
| Keeping records or making disclosures required by a legal obligation recognised under the relevant data-protection law | Compliance with a legal obligation. |
| Preventing fraud, protecting the Services, responding to enquiries, administering our business, analysing transactions and operational performance, providing relevant store recommendations and protecting or defending our rights | Our legitimate interests in running and protecting our business, where those interests are not overridden by your rights and freedoms. |
| Non-essential cookies, pixels or similar technologies for analytics, personalisation or advertising; personalised advertising based on activity across merchants or websites; and promotional communications for which consent is required | Your consent. |
| Promotional communications that the law allows us to send without consent | Our legitimate interests in promoting our business, subject to your right to object or unsubscribe. |
Where consent is required for a particular activity, we obtain it before carrying out that activity. You can withdraw consent as described in Section 12.
Shopify may determine its own purposes and legal grounds for some processing, as explained in Section 6 and Shopify’s privacy information.
5. How we disclose personal information
We disclose personal information as needed for the purposes described in this policy:
- To Shopify and service providers, including providers of payment processing, website hosting, IT support, analytics, fraud prevention and customer support.
- To fulfilment vendors and couriers, so they can prepare and deliver orders, investigate delivery issues and assess authorised product returns or claims.
- To business and marketing partners, to provide marketing and advertising services, subject to the relevant permissions and privacy choices. Partners may also process information under their own privacy notices.
- At your direction or with your consent, including when you choose an integration or ask us to share information for a particular purpose.
- For legal or business purposes, including with professional advisers, relevant authorities or parties to a proposed business transfer, where needed to comply with law, resolve disputes, protect rights or carry out that transaction.
For advertising-related sharing choices, use our Data sharing opt-out page.
6. Relationship with Shopify
Shopify hosts our store and processes personal information about your visits, purchases and other interactions to provide and improve its services. Information may be shared with Shopify and relevant service providers in countries other than the country where you live.
Depending on the Shopify features used by our store, Shopify may also provide Enhanced Services that use information from interactions with our store, other merchants and Shopify. These services can support personalisation, advertising, analytics, security and store improvements.
When Shopify determines the purposes and means of processing for those Enhanced Services, Shopify is responsible for that processing and for responding to requests about it. EDC.ASIA remains responsible for the personal information processing for which we determine the purposes and means.
You can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to learn about Shopify’s processing and exercise the rights available to you.
7. Cookies, advertising and privacy controls
Cookies, pixels and similar technologies may be used to operate the store, remember preferences, understand usage and support advertising.
Where consent is required for non-essential technologies, you can accept or decline them through the consent controls presented on the Services. You can revisit the store’s cookie preferences where those controls are provided. Browser settings may also let you manage cookies, although blocking necessary cookies can affect store functions.
You can use our Data sharing opt-out page to submit an opt-out request for uses that constitute the sale or sharing of personal information or targeted advertising under the relevant privacy laws.
Where applicable law requires us to honour a Global Privacy Control (GPC) signal, we treat it as an opt-out request for the browser and device sending the signal. If we can associate that signal with your account, we apply the request to that account as required. Learn more at Global Privacy Control.
We do not currently respond to other browser “Do Not Track” signals.
8. External websites and public content
Our Services may link to websites or platforms operated by other businesses. Their privacy practices are governed by their own policies. Review those policies before providing information to them. A link does not by itself mean we endorse the external website or its operator.
Information you choose to post publicly, including reviews or social-media content, may be visible to other people. Our use of personal information remains subject to this Privacy Policy. Permissions relating to content you submit for public display are described in our Terms of Service.
9. Children’s information
The Services are not directed at children, and we do not knowingly collect personal information from children below the age of majority in their jurisdiction.
If you are a parent or guardian and believe a child has provided us with personal information, contact us so we can review the matter and handle any necessary deletion.
As of the date this policy was last updated, we do not have actual knowledge that we sell or share personal information of individuals under 16, as those terms are defined by applicable privacy laws.
10. Security
We use reasonable security arrangements to protect personal information in our possession or control against unauthorised access, use, disclosure, alteration or loss.
No system or transmission method can be guaranteed completely secure. Keep your account credentials secure. Do not email full payment-card details, passwords or security codes, and provide only information reasonably needed for your enquiry or claim.
11. Retention
We retain personal information for as long as it is reasonably needed for the purposes described in this policy, including providing services, keeping legally required records, preventing fraud, resolving disputes and enforcing relevant agreements.
The retention period depends on the type of information, the transaction or relationship involved, and the applicable legal requirements. A deletion or consent-withdrawal request does not necessarily require us to remove records that we are still legally required or permitted to retain.
When information is no longer needed for a business or legal purpose, we delete it or make it anonymous.
12. Your rights and choices
Depending on the law that applies and the circumstances, you may have rights to:
- Access or know: request information about the personal information we hold and how it has been used or disclosed.
- Correct: request correction of inaccurate or incomplete information.
- Delete: request deletion of personal information, subject to the relevant exceptions.
- Receive or transfer information: obtain a copy in a portable format or request a transfer where the law provides that right.
- Object or restrict processing: object to certain uses or request that processing be restricted.
- Opt out of sale, sharing or targeted advertising: use the controls described in Section 7.
Withdrawal of consent. Where we rely on your consent to process personal information, you may withdraw it by emailing harris@edcasia.co or using the withdrawal option provided when consent was requested. We will act on the request within the period required by law, allowing reasonable notice where relevant, and explain any effect on our ability to provide a service you have requested. Withdrawal does not affect earlier lawful processing or processing that remains permitted or required by law.
Marketing preferences. You can unsubscribe from promotional emails using the link in those emails. We may continue to send non-promotional messages needed for your orders, account or enquiries.
We will not discriminate against you for exercising privacy rights provided by law.
13. Making a privacy request
Send privacy enquiries and requests to harris@edcasia.co, or use a relevant privacy control linked in this policy.
Describe your request and provide enough information for us to identify the relevant records. We may request reasonable information to verify your identity and protect against unauthorised disclosure or deletion.
Where the law permits an authorised agent to act for you, we may require evidence of that authority and appropriate identity verification.
We respond within the time required by the relevant law. If a request is refused or limited, we will explain the reason and any available review or appeal process as required.
14. Complaints
If you have a complaint about our handling of personal information, email harris@edcasia.co with the details so we can investigate.
You may also have a right to complain to the relevant data-protection authority or appeal a decision. In Singapore, the authority is the Personal Data Protection Commission. For the European Economic Area, see the list of supervisory authorities.
15. International transfers
Your personal information may be stored or processed outside the country where you live, including by Shopify, fulfilment vendors and other service providers.
When we transfer personal information outside Singapore, we comply with the transfer requirements of Singapore’s Personal Data Protection Act. This includes ensuring a standard of protection comparable to that required under the Act, unless a permitted exception applies.
Where EU or UK data-protection law governs a transfer, we use a lawful transfer mechanism where required, such as an applicable adequacy decision, standard contractual clauses or the relevant UK transfer arrangements. The appropriate safeguard depends on the recipient and the transfer.
You can contact us for information about the safeguards relevant to our handling of your personal information.
16. Changes to this Privacy Policy
We may update this policy to reflect changes in our practices, services or legal requirements. We will publish the revised policy, update the “Last updated” date and provide any notice or obtain any consent required for the change.
17. Contact information
Privacy and data-protection enquiries
SENGOL&SONS LLP trading as EDC.ASIA
Limited liability partnership registered in Singapore with limited liability
UEN: T23LL0756K
Email: harris@edcasia.co
Business correspondence address: 22 Sin Ming Lane, #06-76 Midview City, Singapore 573969
Website: www.edcasia.co
SENGOL&SONS LLP is the organisation responsible for our handling of personal information and, where that terminology applies, the data controller for processing whose purposes and means we determine.