1. Who we are
replica-jerseys.com is an independent sourcing site coordinating 1:1 football jersey orders with 11 verified Putian and Thai factories. The data controller is Marco D., reachable at +86 13395943217 via WhatsApp, or via email at [email protected].
2. What data we collect on the website
On the website itself (replica-jerseys.com) we collect minimal data:
- Anonymised analytics — page views, country (IP-based, not stored at full precision), referring page, device type. We use Cloudflare Web Analytics, which does not use cookies or fingerprinting.
- Service Worker cache — the site uses a Service Worker (sw.js) to cache CSS, JS and static assets in your browser for performance. This is local-only; nothing is sent to us from the cache.
- Wishlist (if used) — the optional wishlist feature stores selected kits in your browser's local storage. The data never leaves your device. We don't see what's in your wishlist.
We do not use Google Analytics, Facebook Pixel, third-party advertising trackers, or any cookie-based identification. We do not run remarketing pixels.
3. What data we collect during an order (via WhatsApp)
When you place an order through WhatsApp, we collect only the data needed to fulfil the order:
- WhatsApp display name and phone number (visible to us by default in any WhatsApp conversation)
- Shipping address (delivery only)
- Order specifics — country team, player name, number, size, kit version
- Payment confirmation (Wise transaction ID, USDT transaction hash, or bank transfer reference)
We do not collect: card numbers, government ID, date of birth, or any data not directly required to ship the kit.
4. How we use your data
- Fulfil your order — name and address go on the DHL waybill; order specifics go to the relevant Putian factory.
- Send QC photos — we send the photos via WhatsApp to the same number you ordered from.
- Send tracking — DHL tracking number sent via WhatsApp once the parcel ships.
- Resolve issues — if a kit needs a re-make, we use the original order data to coordinate the replacement.
We do not use your data for marketing emails, retargeting ads, or selling to third parties. We don't run a mailing list.
5. Who we share your data with
Three categories of necessary disclosure:
- The factory fulfilling your order — receives the kit specifics (no personal data beyond order number).
- DHL Express — receives the shipping address on the waybill.
- Customs authorities — receive the standard waybill declaration (item description, declared value).
We do not share your data with: advertisers, data brokers, social media platforms, or anyone else not in the above three categories.
6. How long we keep your data
- WhatsApp conversation history — retained on Marco's device for 24 months from last message, then deleted. Useful for re-orders and warranty.
- Shipping records (DHL waybills) — retained for 36 months for legal/customs purposes, then deleted.
- Payment confirmation — retained for 60 months for tax and dispute resolution purposes, then deleted.
7. Your rights (GDPR / CCPA / etc.)
Wherever you live, you have the right to:
- Access — request a copy of all data we hold about you. Send a WhatsApp message; we'll send back an export.
- Delete — request we delete all your data. We'll do so within 30 days, with the exception of records we're legally required to keep for tax purposes.
- Correct — request we update incorrect data.
- Object to processing — though if you've placed an order, we need to keep enough data to fulfil it.
Send any of these requests to [email protected] or via WhatsApp. We respond within 30 days.
8. Cookies
The website uses no advertising or analytics cookies. The only cookies that may be set are:
- Cloudflare's
__cf_bm(security, no tracking) - The Service Worker registration (technical, local-only)
We don't show a cookie banner because there's nothing to consent to beyond technical cookies that most jurisdictions exempt from consent requirements.
9. Data security
WhatsApp messages are end-to-end encrypted by default. Email is TLS-encrypted in transit. Cloudflare provides full TLS for the website. We don't store payment card data because we don't accept card payment — we route through Wise, USDT, and bank transfer, each of which handles its own data security on its side of the transaction.
10. Changes to this policy
If we update this policy, the "Last updated" date at the top changes. Material changes will be flagged in the next WhatsApp message you receive from us, if you have an active order.
11. Complaints
If you're not satisfied with how we've handled your data, you have the right to lodge a complaint with your local data protection authority. In the EU, this is your country's DPA; in the UK, the ICO; in California, the California AG.
Last updated: May 9, 2026.
Contact: WhatsApp · [email protected]