Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when customers visit our website, create an account, place an order, contact us or otherwise use our services.

By using our website or providing personal data to us, customers acknowledge the practices described in this Privacy Policy.

1. Personal Data We Collect

We may collect personal data such as:

  • Name

  • Email address

  • Telephone number

  • Billing and delivery addresses

  • Account and login information

  • Order and transaction details

  • Payment confirmation and limited payment information

  • Product preferences and shopping activity

  • Customer-service enquiries and communications

  • Reviews, feedback and survey responses

  • Device, browser, IP address and website-usage information

  • Marketing and communication preferences

  • Any other information voluntarily provided to us

Where a customer provides personal data belonging to another person, the customer confirms that permission has been obtained to provide that information.

2. How We Collect Personal Data

Personal data may be collected:

  • When customers visit or use our website

  • When customers create or update an account

  • When customers place or pay for an order

  • When customers request a return, refund or exchange

  • When customers contact customer service

  • When customers subscribe to marketing communications

  • Through cookies and similar technologies

  • From payment providers, couriers and service providers

  • From social-media platforms when customers interact with us

  • From other lawful sources where permitted

3. How We Use Personal Data

We may use personal data to:

  • Create and manage customer accounts

  • Process and verify orders and payments

  • Arrange packing, shipping and delivery

  • Provide tracking and transaction updates

  • Handle returns, refunds, exchanges and warranties

  • Respond to questions, complaints and customer-service requests

  • Prevent fraud, abuse and unauthorised transactions

  • Maintain website security

  • Improve our products, services and website

  • Analyse customer preferences and website performance

  • Maintain accounting, tax and business records

  • Send marketing communications where permitted

  • Comply with legal and regulatory obligations

  • Establish, exercise or defend legal rights

Where personal data is required to complete an order or provide a service, failure to provide the information may prevent us from completing the transaction.

4. Payment Information

Payments may be processed by third-party banks, payment gateways or financial-service providers.

We may receive payment confirmation, transaction references and limited payment details. Complete card, banking or electronic-wallet credentials may be collected and processed directly by the relevant payment provider.

Customers should review the privacy terms of the payment provider used during checkout.

5. Disclosure of Personal Data

We may disclose personal data to service providers that assist us with:

  • Payment processing

  • Fraud prevention

  • Courier and delivery services

  • Warehousing and fulfilment

  • Website hosting

  • Cloud storage

  • Information technology

  • Customer support

  • Email and messaging services

  • Marketing and analytics

  • Accounting, auditing, insurance and legal services

We may also disclose information:

  • When required by law, regulation, court order or government authority

  • To investigate suspected fraud, security incidents or unlawful activity

  • To protect our rights, customers or other persons

  • In connection with a merger, acquisition, restructuring or sale of a business

Service providers should receive only the information reasonably necessary to perform their services.

We do not sell personal data to third parties.

6. Cookies and Similar Technologies

Our website may use cookies, pixels and similar technologies to:

  • Operate essential website features

  • Maintain login sessions

  • Remember shopping carts and preferences

  • Measure website traffic and performance

  • Understand how customers use the website

  • Detect suspicious activity

  • Provide relevant content or advertising where permitted

Customers may manage cookies through their browser settings. Disabling certain cookies may affect website functionality.

7. Marketing Communications

We may send promotional emails, messages or advertisements where customers have consented or where otherwise permitted by law.

Customers may stop receiving marketing communications by:

  • Selecting the unsubscribe option in a message

  • Changing their account preferences

  • Contacting us through the contact details shown on the website

Customers may continue to receive non-promotional messages relating to orders, payments, deliveries, security or customer service.

8. Data Security

We take reasonable administrative, technical and physical measures to protect personal data against:

  • Loss

  • Misuse

  • Unauthorised access

  • Unauthorised disclosure

  • Alteration

  • Destruction

No internet transmission or electronic-storage system is completely secure. Customers are responsible for protecting their passwords and notifying us of suspected unauthorised account activity.

9. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • Complete transactions

  • Provide customer support

  • Maintain business and accounting records

  • Resolve disputes

  • Prevent fraud and abuse

  • Enforce agreements

  • Meet legal and regulatory requirements

When personal data is no longer required, it may be securely deleted, destroyed or anonymised.

10. Data Processed Outside Malaysia

Some service providers or cloud systems may process or store personal data outside Malaysia.

Where this occurs, reasonable steps will be taken to ensure that the information is handled with appropriate safeguards and in accordance with applicable legal requirements.

11. Personal Data Rights

Subject to applicable law, customers may request to:

  • Be informed whether their personal data is being processed

  • Access personal data held about them

  • Correct inaccurate, incomplete or outdated information

  • Withdraw consent previously given

  • Prevent processing likely to cause damage or distress

  • Stop the use of personal data for direct marketing

  • Exercise other rights available under applicable law

We may request information to verify the identity of the person making the request.

Some requests may be limited where information must be retained for legal, security, fraud-prevention or transaction-record purposes.

12. Withdrawal of Consent

Customers may withdraw consent to certain processing by contacting us.

Withdrawal of consent will not affect processing already carried out lawfully. It may affect our ability to provide services where the information is necessary to complete an order or meet legal obligations.

13. Data Breaches

Where a personal-data breach occurs, we may investigate the incident, take reasonable corrective measures and provide notifications where required by applicable law.

14. Children’s Personal Data

Persons who are not legally able to enter into a transaction independently should use the website only with the involvement and consent of a parent or legal guardian.

We do not knowingly collect children’s personal data beyond what is reasonably required to complete an authorised transaction.

15. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy, security or content practices of third parties. Customers should review the relevant third-party privacy policies before providing personal data.

16. Changes to This Policy

We may update this Privacy Policy when our practices, services or legal obligations change.

The revised version will be published on the website. Continued use of the website after publication indicates acknowledgement of the updated policy.

17. Contact

Questions, requests or complaints concerning personal data may be submitted through the contact details provided on the website.