‌Privacy Policy

Effective Date: November 8, 2026

1. Introduction

ABN Finest Limited (“we”, “us”, or “our”) operates the e-commerce website www.abnfinest.com, which offers a curated collection of minimal, functional desk storage tools designed to help users build a neat, tidy workspace easily. We are a small, dedicated team passionate about making everyday desktop spaces neater and more enjoyable, and we deeply value the privacy of every visitor and customer (“you” or “your”) who interacts with our platform.

This Privacy Policy is designed to clearly explain how we collect, use, store, share, and protect your personal information when you browse, access, or use our website and related services. We have crafted this policy in full compliance with the General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (UK GDPR), the Personal Information Protection Law of the People’s Republic of China, the Network Security Law, and all other applicable global data protection regulations, to ensure your personal information is handled with the highest level of security and respect.

By accessing or using our website and services, you acknowledge that you have read, understood, and agreed to all terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our platform and services.

2. Data Controller Information

The data controller responsible for your personal information processing is:

  • Full Legal Name: ABN Finest Limited
  • Registered Address: 33 First Avenue, Bexleyheath, Kent, DA7 5SS, United Kingdom
  • Contact Email: linaki@abnfinest.com
  • Contact Telephone: +44 121 817 7599
  • Designated Data Protection Officer (DPO) Contact: You may reach our DPO directly via the above listed email address for all privacy-related inquiries.

This information is presented in a prominent, clearly marked format as required by global data protection regulatory standards, to ensure you can easily identify and contact the responsible party for all your personal information matters.

3. Types of Personal Information We Collect

We only collect personal information that is necessary to deliver our full range of desk organization products and associated services to you, in line with the principle of data minimisation. The categories of information we may collect include:

  1. ‌Information You Provide Voluntarily‌
    • Account Registration Details: When you create an account on our platform, we collect your full name, email address, contact telephone number, and chosen account password.
    • Order and Fulfilment Information: When you make a purchase of our desktop organizers, document organisers, or other desk storage products, we collect your full name, delivery address including postal code, billing address, payment information, and order specific details (such as product selection, quantity, and customisation preferences if applicable).
    • Customer Support Communications: When you reach out to our team via email, contact form, or other messaging channels for after-sales service, product consultation, or complaint handling, we collect the content of your messages, your contact details, and any additional information you voluntarily share with us to assist your enquiry.
    • Marketing Preference Information: When you subscribe to our newsletter to receive updates on new arrivals, exclusive promotions, and desk organisation tips, we collect your email address and your stated preferences for the type of content you wish to receive.
    • Survey and Feedback Data: When you voluntarily participate in our market research surveys or submit product feedback, we collect your responses, usage experiences of our desk storage tools, and any additional opinions you choose to provide.
  2. ‌Information We Automatically Collect When You Use Our Website‌
    • Device Information: We collect details about the device you use to access our website, including hardware model, operating system version, unique device identifiers, browser type, and browser language setting.
    • Log Information: We automatically record your server access logs, including your IP address, access time, pages viewed on www.abnfinest.com, search keywords you entered, website crash reports, and other system operation log data.
    • Location Information: With your separate explicit consent, we may collect your approximate geographic location information to provide region-specific delivery options, localized product recommendations, and accurate estimated shipping time calculations. You may withdraw this consent at any time through the privacy settings on our website.
    • Cookie and Similar Tracking Technology Data: We use cookies, web beacons, and other similar tracking technologies to collect information about your browsing behaviour on our platform, which helps us remember your preferences, optimise your browsing experience, and improve the performance of our website. You can manage or disable cookie settings directly through your web browser at any time, though this may impact certain functional experiences on our site.
  3. ‌Sensitive Personal Information‌
    We do not actively collect sensitive personal information including biometric data, religious belief information, medical health data, or other categories of sensitive data defined by applicable laws. In limited circumstances, when processing cross-border orders that require customs declaration, we may collect your identity document information (such as ID number for customs clearance purposes) with your separate explicit consent, and this information will only be used for the explicit purpose of completing customs declaration and order fulfilment, and will never be retained longer than legally required.

4. Purposes and Legal Basis for Processing Your Personal Information

We process your personal information only for the clearly stated, legitimate purposes outlined below, and strictly in accordance with applicable legal bases:

  1. ‌Performance of Contractual Obligations‌
    This processing is necessary to fulfil our sales and service contract with you, including:
    • Processing, verifying, and completing your orders for our desk storage products
    • Arranging product delivery, logistics tracking, and after-sales support services
    • Verifying your account identity, ensuring normal operation of your registered user profile, and providing account management functions
    • Processing your payments, completing transaction reconciliation, and issuing relevant purchase receipts or invoices.
  2. ‌Legitimate Interests‌
    Based on our legitimate business interests, we process your information to:
    • Maintain the normal, secure operation of our website platform, prevent fraud, unauthorised access, cyber attacks, and other data security risks, and protect the safety of our users, our team, and our business operations
    • Conduct data analysis to understand user browsing preferences, optimise our product offerings (including our latest arrivals of minimalist desk organisers), improve our website interface, and develop new functions that enhance your shopping experience
    • Send you non-marketing service notifications, including order status updates, system maintenance alerts, and policy revision announcements that are necessary to inform you of important changes to our platform.
      We will always ensure that our legitimate interests do not override your fundamental privacy rights and freedoms.
  3. ‌Your Explicit Consent‌
    For any processing activities that are not covered by the above two legal bases, we will obtain your separate, explicit consent before processing your personal information. This includes sending you promotional marketing newsletters, collecting your precise location data, sharing your information with third party partners for targeted advertising purposes, and all other processing activities that are not strictly necessary to provide our core shopping services. You have the full right to withdraw your previously given consent at any time, through the contact methods we have provided or the dedicated privacy setting functions on our website.
  4. ‌Compliance with Legal Obligations‌
    We may process your personal information when it is necessary for us to comply with our statutory legal obligations, including fulfilling tax audit requirements, responding to valid legal requests from authorised judicial or regulatory authorities, and meeting all applicable legal, regulatory, and court order requirements.

5. How We Share, Transfer, and Disclose Your Personal Information

We will never sell, rent, or otherwise trade your personal information to any third parties for their commercial marketing purposes without your explicit separate consent. We may only share your information in the following limited circumstances:

  1. ‌Trusted Service Providers‌
    We may share your necessary personal information with carefully selected third party service providers who act as data processors on our behalf, including:
    • Logistics and delivery partners who require your name, delivery address, and contact number to complete the shipment of your ordered desk organisers to your specified location
    • Payment processing service providers who process your payment information securely to complete transaction settlements
    • Cloud service providers who host our website and store user data, with strict data encryption and access control measures in place
    • Technology service providers who provide website performance optimisation, security maintenance, and anti-fraud technical support services.
      All of these third party service providers will sign strict data processing agreements with us, requiring them to protect your personal information to the same high security standards that we follow, and prohibiting them from using your shared information for any purposes outside of the explicit instructions we provide.
  2. ‌Cross-Border Data Transfers‌
    As a company registered in the United Kingdom, certain of our service providers may be located outside of the European Economic Area (EEA) or your resident jurisdiction. When we need to transfer your personal information across national borders, we will strictly comply with all applicable data protection regulations, complete all required data出境 impact assessments, sign standard data protection clauses approved by relevant regulatory authorities, or implement other legally valid protective measures to ensure your personal information receives the same level of protection as required in your home jurisdiction. We will also clearly inform you of the details of overseas receiving parties, the purposes of the cross-border transfer, and the methods for you to exercise your data rights against overseas recipients, and we will obtain your separate explicit consent for all necessary cross-border data transfer activities as required by law.
  3. ‌Legal Disclosure Requirements‌
    We may disclose your personal information if we determine in good faith that such disclosure is reasonably necessary to comply with applicable laws, regulations, legal proceedings, or mandatory governmental requests; to protect the safety, property, or legitimate rights of ABN Finest Limited, our users, or the general public; or to investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to physical safety, or violations of our website terms of service.
  4. ‌Corporate Transaction Circumstances‌
    In the event of a merger, acquisition, asset restructuring, or full or partial sale of our business assets, we will ensure the confidentiality of all personal information involved in the transaction, and we will provide prior notice to all affected users before your personal information is transferred to the new relevant controller, and we will ensure the new controller is bound to the same terms outlined in this Privacy Policy.

6. How We Store and Protect Your Personal Information

  1. ‌Data Retention Period‌
    We will only retain your personal information for as long as it is strictly necessary to fulfil the specific purposes for which we originally collected it, including to complete order fulfilment, resolve after-sales disputes, meet statutory legal retention requirements for commercial and tax purposes, and maintain your account for the full duration you remain an active registered user. After the applicable retention period expires, we will securely delete or anonymise your personal information in full compliance with legal requirements, including implementing physical destruction of offline storage media and irreversible technical erasure of electronic data. For users who choose to permanently delete their account, we will complete the full clearing of all your personal data within 30 calendar days of your account deletion request, in line with our established User Data Forgotten Processing Procedures.
  2. ‌Security Protection Measures‌
    We have implemented a comprehensive, multi-level data security protection system to safeguard your personal information:
    • Technical Protection Measures: We use state of the art national standard symmetric encryption algorithms to encrypt all stored personal data, deploy zero trust architecture for system access control, implement dynamic data desensitisation processing when displaying user information in our internal business systems, maintain full operation logs for all data access and processing activities, and conduct regular vulnerability scans every quarter to identify and remediate potential security risks in a timely manner. We also maintain a dual active data backup system, ensuring all core user data completes incremental backups every day and full backups every week to prevent permanent data loss.
    • Management Protection Measures: We have established a clear four-level data management architecture, implemented strict access permission matrix controls for internal staff, and require all employees who have access to user personal information to complete more than 40 hours of annual data security专项 training and sign strict confidentiality agreements. All data operations involving user personal information are required to follow a two-person review and double sign approval mechanism to prevent unauthorised data access.
    • Emergency Response Mechanism: We have built a complete 1+3+N data security emergency response system, with one central command hub, three tiered emergency response levels, and full response protocols for N different types of data security incidents. In the event of a personal information security breach that poses a high risk to your rights and freedoms, we will immediately launch our emergency response plan, complete full incident tracing within 72 hours, and notify you and the relevant regulatory authorities in strict accordance with the time requirements specified by applicable laws.

7. Your Rights Under Applicable Data Protection Laws

Depending on the data protection laws applicable to your jurisdiction, you may be entitled to exercise the following rights related to your personal information processing. You may submit your request to us at any time via our contact email linaki@abnfinest.com, and we will respond to your request within no more than 15 working days, following verification of your user identity:

  1. ‌Right of Access‌ You have the right to request a copy of all personal information we hold about you, including details of the specific categories of information we process, the processing purposes, all third parties we have shared your information with, and the expected data retention period.
  2. ‌Right to Rectification‌ If you find that any of your personal information we hold is inaccurate or incomplete, you have the right to request us to immediately correct and update that information free of charge.
  3. ‌Right to Erasure (“Right to be Forgotten”)‌ You may request that we delete all or part of your personal information under circumstances including where the information is no longer necessary for the original collection purposes, you withdraw your previously provided consent for processing, or our processing of your information violates applicable legal regulations.
  4. ‌Right to Restriction of Processing‌ You have the right to request us to restrict the processing of your personal information while we verify disputes over the accuracy of your data, the legitimacy of our processing activities, or the handling of your legal claims.
  5. ‌Right to Data Portability‌ You may request us to provide your personal information that you have submitted to us in a structured, commonly used, machine-readable format, or request us to directly transmit this data to another data controller where technically feasible.
  6. ‌Right to Object‌ You have the right to object to our processing of your personal information that is based on our legitimate interest grounds, including for direct marketing purposes, at any time. Once you submit an objection to marketing processing, we will immediately stop all related marketing communications to you.
  7. ‌Right to Withdraw Consent‌ You may withdraw any consent you previously provided for specific processing activities at any time. Withdrawing your consent will not affect the lawfulness of any processing activities we completed before you submitted your withdrawal request.
  8. ‌Right to Lodge a Complaint‌ If you believe that our processing of your personal information has violated applicable data protection laws and infringed your legal rights, you have the right to submit a complaint directly to the relevant local data protection supervisory authority in your jurisdiction.

We provide a dedicated “Privacy Dashboard” visual interface on our website, where you can log in to your account to view all details of our processing of your personal information in real time, manage your privacy settings, adjust marketing preferences, and submit related rights operation requests with just a few simple clicks, without needing to send separate email enquiries.

8. Children’s Privacy Protection

Our website is a general e-commerce platform that sells adult oriented desk storage and organisation products. We do not intentionally collect any personal information from children under the age of 14 (or the equivalent minimum age threshold defined in your local jurisdiction). If we become aware that we have accidentally collected personal information from a child under the applicable minimum age, we will take immediate steps to securely delete that information from all our storage systems. If you are a parent or legal guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately via our provided contact email, and we will handle the situation promptly.

9. Updates to This Privacy Policy

We may need to revise and update this Privacy Policy from time to time, to adapt to changes in our business operations, new regulatory requirements, or adjustments to our service functions. When we make material changes to this Privacy Policy, we will post the updated version on the homepage of www.abnfinest.com with a clearly marked updated effective date, and we will send you a prominent pop-up notification on your next visit to our website, or send you a notification email if you are a registered user. The revised Privacy Policy will take effect after the public notification period specified by applicable laws is completed. If you continue to use our website services after the revised policy comes into force, it will be deemed that you have fully read, understood, and agreed to the updated terms of the policy.

10. Contact Us

If you have any questions, comments, concerns, or requests related to this Privacy Policy, or our personal information processing activities, please do not hesitate to contact us through the following official channels:

  • Contact Email: linaki@abnfinest.com
  • Postal Address: ABN Finest Limited, 33 First Avenue, Bexleyheath, Kent, DA7 5SS, United Kingdom
  • Contact Telephone: +44 121 817 7599

We will respond to all your privacy related enquiries as soon as possible, and we aim to resolve any issues you raise within 15 working days of receiving your message.