Privacy & camera policy
Last updated 2 November 2026 · AFXUS Optics Ltd, Hong Kong SAR
1. Who we are
The data controller is AFXUS Optics Ltd, 12/F Tower 1, Kowloon Commerce Centre, 51 Kwai Cheong Road, Kwai Chung, Hong Kong SAR. Our EU representative under Art. 27 GDPR is AFXUS Europe GmbH, Mainzer Landstraße 36, 60325 Frankfurt am Main, Germany. Data protection officer: dpo@afxus.com.
2. What we collect
Account data (email, name, language, order history), shipping address, payment reference tokens issued by our providers (we never see or store card numbers), and aggregate site analytics. Support tickets include whatever you write in them.
3. On-device inference
Voice and vision queries are processed on the AFXUS Core chip by default. A request is only sent to our servers when it needs world knowledge (for example a part-number lookup) and then contains a compressed 640px crop and the transcribed query — not raw 4K video. You can disable cloud escalation in the AFXUS app; the assistant keeps working locally with a reduced knowledge scope.
4. Camera LED is hardware
The capture indicator is wired in series with the image sensor. If the LED is covered, damaged or removed, the sensor loses power. There is no firmware path to disable it, and capture requires a deliberate gesture on the right temple.
5. Legal bases (GDPR)
Contract (order fulfilment), legitimate interest (fraud prevention, service improvement), consent (marketing email — withdraw any time from Account → Alerts). Data is stored in the EU (Frankfurt) and Hong Kong; international transfers rely on Standard Contractual Clauses with a transfer impact assessment reviewed annually.
6. Retention
Order records: 7 years (tax). Support tickets: 24 months. AI chat transcripts: 12 months, then aggregated. Account: until deletion is requested, actioned within 30 days.
7. Your rights
You have the right to access, rectify and erase your personal data, the right to data portability, the right to object to processing based on legitimate interest, and the right to restriction. Write to privacy@afxus.com. We answer every subject access request within 30 days. You may also complain to your local supervisory authority or the Hong Kong PCPD.
8. Cookies
Strictly necessary: session, cart identity, CSRF. Analytics cookies are set only after consent and can be withdrawn from the cookie banner. We do not run third-party advertising pixels on this store.