SlayDots Privacy Notice
Last updated: 22 October 2026
This notice explains how BUNBUN LABS LIMITED uses personal data on SlayDots (slaydots.com). It is for visitors and buyers in Malaysia, Singapore, the United Kingdom and the Netherlands. We sell to businesses only, but we still hold data about the people who work for them.
The short version
- We collect what we need to run accounts, orders, pools, payments, delivery and support.
- Cards are handled by Airwallex or Stripe. We never store full card numbers.
- Before chat text reaches an AI model, we remove email addresses, phone numbers, ID numbers and card and bank account numbers. Our filter cannot reliably spot names, so please keep names out of the chat.
- Staff read a chat only when you ask us for help, or to resolve a problem.
- Factories do not get your company name, contact details or address.
- We send pool alerts and reminders only if you opt in, and every message has an easy opt-out.
- Your data is stored on our server in Australia and may be handled in other countries, including China and the United States.
- You have rights over your data. They are listed below, with the regulator in each country.
1. Who we are
BUNBUN LABS LIMITED ("BunBun Labs", "we", "us") runs SlayDots and decides how your data is used. We are a UK company registered in Scotland. Company number: SC896662. Registered office: Albert Drive, Glasgow, Scotland, United Kingdom.
- Privacy contact: [email protected]
- WhatsApp: +84 35 748 1850
2. The data we collect
| Data | What it includes |
|---|---|
| Account data | Company, contact name, email, WhatsApp number, delivery address, tax or VAT number. |
| Orders and invoices | What you ordered, pools you joined, prices, invoices and shipping invoices. |
| Payment records | What was paid, when, how, and the status. Cards are handled by Airwallex or Stripe. We never store full card numbers. |
| AI chat messages | What you type to the assistant, and its replies. This includes anonymous visitors. |
| WhatsApp conversations | Messages between you and us on WhatsApp. |
| Technical data | IP address, device information, and the cookies needed to run the site. |
| Alert choices | Whether you opted in to alerts and reminders, the number or email you gave for them, and any opt-out. |
Most of this comes from you. Payment records also come from Airwallex and Stripe. Technical data comes from your device when you use the site.
3. How we use your data, and why
We use your data for:
- accounts, orders, pools, payments, invoices and delivery
- support
- answering your questions in the AI chat
- fraud prevention and security
- checking and improving the AI assistant (section 4 says when staff read chats)
- legal and tax obligations
- pool alerts and reminders, if you opt in (section 9)
United Kingdom and Netherlands. The law asks us to name our legal basis for each use:
| What we do | Legal basis |
|---|---|
| Run your account, take orders, run pools, take payments, issue invoices, deliver goods, give support | Contract, where you are the buyer yourself (for example, a sole trader). Legitimate interests, where you act for a company: dealing with the business you work for. |
| Answer your questions in the AI chat, and keep a record of chats | Legitimate interests: answering the questions you ask, and being able to check what the assistant said. |
| Prevent fraud and keep the site secure | Legitimate interests: keeping our business and our buyers safe. |
| Check and improve the AI assistant | Legitimate interests: making the assistant more accurate and useful. |
| Meet legal and tax duties | Legal obligation. |
| Send pool alerts and reminders | Consent: we send them only if you opt in. You can withdraw your consent at any time. |
Malaysia and Singapore. The Personal Data Protection Act applies in each country. We use your data with your consent, which you give, for example, when you create an account, place an order or opt in to alerts. We also use it where the law allows use without consent, for example to carry out a contract or to meet a legal duty.
4. The AI assistant and your data
- The chat assistant is an AI. It is labelled as one. It can make mistakes.
- Before your chat text goes to an AI model, we automatically remove email addresses, phone numbers, ID numbers (such as MyKad, NRIC or FIN, and UK National Insurance numbers) and card and bank account numbers. The filter cannot reliably spot personal names, and no filter is perfect. Please keep names and other personal details out of the chat.
- Our AI model provider is DeepInfra, a company in the United States, which runs the GLM and DeepSeek models for us. It receives only the filtered chat text, not your account details. Its processing takes place in the United States.
- DeepInfra handles the text it receives under its own terms and privacy policy. Those decide how long it keeps the text and what it may do with it. We do not control this.
- We keep a record of chats (section 7). Staff read a chat only when you ask us for help, or to resolve a problem.
- The assistant does not approve quotes or orders. A person approves every binding quote.
- Do not type card numbers, passwords or other secrets into the chat.
- Anonymous visitors get about 10 messages. After that, we ask for a WhatsApp number or email. We use it only for that conversation and any order that comes from it, unless you opt in to alerts (section 9).
5. Who we share your data with
| Who | What they get | Why |
|---|---|---|
| Airwallex and Stripe | Payment details and the order information needed to take and refund payments. | Payments. |
| Our hosting: our own server, rented from OVH, in Sydney, Australia | All the data we hold. | Running the site. |
| AI model provider: DeepInfra (United States), running the GLM and DeepSeek models | Chat text, filtered as described in section 4. | The AI assistant. |
| Our shipping agent (warehouse in China) | Your delivery name, address and phone, and your tax or VAT number where customs need it. | Delivery and customs. |
| Factories | Quantities and branding files only. Never your identity. | Making your goods. |
| WhatsApp (Meta) | Your WhatsApp number and messages, when you choose to talk to us on WhatsApp. | Support, tracking updates, and alerts if you opt in. |
| Authorities | Data that the law requires us to give. | Legal duties. |
Factories do not get your company name, contact details or address. If you order under your own brand, the factory will see your logo or brand name, because it has to make it.
6. Sending data abroad
We work across four countries and with providers in other places. Your data leaves the United Kingdom, the European Union, Malaysia and Singapore:
- Our server is in Sydney, Australia.
- Our shipping agent's warehouse is in China.
- DeepInfra processes chat text in the United States.
- Airwallex, Stripe and WhatsApp (Meta) may handle data in other countries.
These countries may not protect personal data in the same way as the country where you are. Our safeguards:
- We filter chat text before it reaches an AI model (section 4).
- We use our providers' data protection contract terms where they offer them.
- Only staff who need it can reach our server and database, with role-based access (section 8).
7. How long we keep your data
| Data | How long |
|---|---|
| Accounting records, invoices and payment records | 6 years after the end of the financial year they belong to |
| AI chat logs | 12 months |
| WhatsApp conversations | 12 months |
| Account data and alert choices | While your account is active or you receive alerts, plus 2 years |
| Technical logs | 90 days |
We keep data only as long as we need it for the uses in section 3, or as the law requires. Then we delete it or make it anonymous.
8. Keeping your data safe
- Connections between your browser and our site are encrypted (HTTPS).
- Only our staff can reach our admin area and database, and each staff role can see only what it needs.
- Access rules inside our database (row-level security) limit each account to its own records.
- We back up our data regularly.
- Cards are handled by Airwallex or Stripe. We never store full card numbers.
9. Alerts and reminders
- We send pool-closing alerts and refill reminders by WhatsApp or email only if you opt in.
- A number or email you give us to keep chatting is used only for that conversation and any order that comes from it. It is not used for alerts unless you opt in.
- Every message has an easy way to opt out. You can also tell us at any time.
- Messages about your orders, payments, invoices and delivery are not marketing. We keep sending them while you have an order.
10. Your rights
You can ask us to:
- give you a copy of your data
- correct it
- delete it
- limit or stop our use of it
- send it to you in a portable format
Which rights apply depends on where you are:
| Where you are | Your rights |
|---|---|
| United Kingdom and Netherlands | See, correct, delete (in some cases), limit, object to, and move your data. Withdraw consent at any time. |
| Malaysia | See and correct your data. Withdraw consent. Ask us to stop uses that could cause damage or distress, or to stop direct marketing. Move your data, where the law gives you this right. |
| Singapore | See and correct your data. Withdraw consent. |
In every country you can opt out of alerts at any time. Withdrawing consent does not affect what we did before you withdrew it.
To use a right, email [email protected]. We may ask you to prove who you are. We reply within the time the law sets. In the UK and the Netherlands, that is normally one month.
11. Complaints
Please tell us first, so we can try to fix the problem. You can also complain to the regulator in your country:
| Country | Law | Regulator |
|---|---|---|
| United Kingdom | UK GDPR and Data Protection Act 2018 | Information Commissioner's Office (ICO), ico.org.uk |
| Netherlands | EU GDPR | Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl |
| Malaysia | Personal Data Protection Act 2010 (PDPA) | Jabatan Perlindungan Data Peribadi (JPDP), pdp.gov.my |
| Singapore | Personal Data Protection Act 2012 (PDPA) | Personal Data Protection Commission (PDPC), pdpc.gov.sg |
12. Cookies
We use essential cookies only. See our Cookie Notice.
13. Changes to this notice
We may update this notice. The date at the top of the page shows the last change. If a change is important, we will tell you by WhatsApp or email.
14. Contact
- Email: [email protected]
- WhatsApp: +84 35 748 1850
- Post: BUNBUN LABS LIMITED, Albert Drive, Glasgow, Scotland, United Kingdom