Privacy Movement
The Privacy Movement
Effective Date: 26 November 2025
This is not just a privacy policy. This is war on surveillance capitalism. A middle finger to every company that thinks your data is their asset.
Uncompromising. Your data is chalk, not ink.
Every other company treats your information like a permanent record. They remember shit you desperately want to forget. Fuck that.
We treat your data like RIVER. It flows through our systems when we need it to serve you. Then it washes away. Like morning dew. Like footprints in wet sand. Gone.
But our commitment to your privacy? That's not chalk. That's not water. That's carved in stone.
The Founder Knows What He's Rejecting
Our founder earned a Master's degree from a UK Russell Group university. He was trained in the techniques of mass data exploitation. He knows how to hoover up data and torture it with algorithms until it confesses.
He could have built Carbon Copy like everyone else: maximum tracking, maximum extraction. The playbook exists.
Instead, he asked one question: "If I were the customer, would I want to be treated this way?"
The answer was fuck no. And that answer became our entire business model.
We Don't Just Follow Rules. We Fund the Revolution.
We are proud members of the Electronic Frontier Foundation (EFF). This isn't marketing. This is alignment.
The Lie Everyone Else Tells You
The industry lies: "You can have maximum convenience and maximum security." Bullshit.
The most secure system is useless. The most convenient system is a surveillance nightmare. We choose to do the dirty work—the complex deletion workflows, the encryption architecture—so you get safety and service.
"We eat the complexity so you don't have to." — Our Chief Security Officer.
How We Actually Operate
1. What We Collect (And What We Don't)
Most companies vacuum up everything. We do the opposite. If we don't need it to serve you, we don't ask for it.
| Category | Examples | Retention |
|---|---|---|
| Identifiers | Name, email, phone, address, IP | Until account deletion or 3 years inactivity |
| Commercial | Purchase history, payment tokens | 7 years (Tax Law compliance) |
| Internet Activity | Pages viewed on Carbon Copy only | 24 months (Service improvement) |
| Session Data | Browsing session, cart | Evaporates on browser close / 30 days |
What We Do NOT Collect:
Government IDs (except temp age verification), Full Credit Card Numbers, Health info, Precise GPS, Biometrics, Social Media activity.
2. We Share Only When Necessary
We have never sold your personal data. We never will. This is not negotiable.
| Partner | Purpose | Data Shared |
|---|---|---|
| Shopify | Platform Host | Orders, Customer Data |
| Stripe / PayPal | Payments (PCI-DSS) | Tokens only (No full card #s) |
| DHL / SF / Lalamove | Delivery | Name, Address, Phone |
| Google Analytics | Site Stats | Anonymized IP, session data |
Who DOESN'T See Your Data: TikTok, Data Brokers, Ad Networks, Third-party marketers.
3. Intimacy Deserves Discretion
When you buy intimate products, you trust us. We honor that.
- Discreet Packaging: Plain boxes. No logos. Generic return address.
- Discreet Billing: Descriptor is "G ENTERTAINMENT LTD". No product names.
- Discreet Labels: Even the bottle labels don't say "Lubricant".
- Restricted Access: Warehouse staff only see SKU numbers, not product details. Support staff only see details if you open a ticket.
4. Deletion & Retention
When you delete your account, we delete your data. We don't "archive" it indefinitely.
- Browsing Session: Deleted when browser closes.
- Abandoned Cart: Deleted after 30 days.
- Transaction Records: Kept for 7 years (Mandatory Tax Law Compliance), then deleted.
Deletion Process: Request deletion -> 30 Day Grace Period -> Permanent Deletion -> Confirmation Email.
5. Your Rights, No Bullshit
For Hong Kong users: We don't need you to fill in a stupid form. Just email us in plain English.
- Access: Get a JSON/CSV of everything we have (30 days).
- Correction: Fix wrong info (3 days).
- Deletion: Wipe your account (30 days).
- Opt-Out: One click unsubscribe. No guilt trips.
To Exercise Rights: Email privacy@gentertainment.ltd
6. Cookies (The Necessary Evil)
Essential (Can't disable): session_id, cart_id, csrf_token.
Analytics (Can disable): Google Analytics (IP Anonymized).
Marketing (Opt-in): Abandoned cart recovery (deleted after 30 days).
What we DON'T use: Facebook Pixel, TikTok Pixel, Cross-site tracking.
Legal Annex: The Regulatory Details
Everything above is how we operate. Everything below is what lawyers require. If you are a regulator, enjoy.
Legal Annex: Detailed Specs (GDPR / CCPA / PDPO)
Legal Entity
G Entertainment Limited
Unit 1101, 11/F, Tower 1, Cheung Sha Wan Plaza, Kowloon, Hong Kong.
Privacy Officer: Mr. Vita Lam, HKCGI Cert: AML/CTF.
Legal Bases for Processing (GDPR Art 6)
- Contract Necessity: Account creation, orders, delivery.
- Legal Obligation: Tax records (7 years), AML regs.
- Legitimate Interests: Fraud prevention, security, analytics.
- Consent: Marketing emails, cookies.
International Transfers
We transfer data to Hong Kong, USA (Cloud), and Canada (Shopify). We use Standard Contractual Clauses (SCCs) for EEA/UK transfers.
Security Measures
- Encryption: TLS 1.3 (Transit), AES-256 (Rest).
- Access Control: Role-Based Access (RBAC), MFA required for staff.
- Payment: PCI-DSS Level 1 (Stripe/PayPal). We never see card numbers.
Jurisdiction Specifics
California (CCPA/CPRA): We do NOT sell personal data. You have the right to non-discrimination.
GDPR/UK: You have the right to data portability and the right to be forgotten.
Hong Kong (PDPO): Compliant with DPP1-6. Direct marketing only with consent.
Does This Matter?
We don't know yet. This represents real work and real sacrifice. We could get rich exploiting you like everyone else. We chose not to.
If you're reading this, whether our efforts are worth it depends on you. We bet there are enough people who give a shit. That's our bet.
Questions? Talk to Us.
We respond personally. No templates.
Privacy Officer: Mr. Vita Lam HKCGI Cert: AML/CTF
Email: privacy@gentertainment.ltd
Postal: G Entertainment Limited, P.O. Box 90796, Tsim Sha Tsui Post Office, HKSAR
p.s. meanwhile drafting this policy, we received another cold call. We hate spam, we really do.
