Privacy Policy

This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our online platform for handmade cosmetics. By accessing or using our service, you signify your understanding of this policy.

Information We Collect

We collect personal information that you voluntarily provide to us when you register on our site, place an order, express an interest in obtaining information about us or our products, or otherwise contact us. The personal information we collect depends on the context of your interactions with us and our site, including:

Personal Identifiers: Names, addresses, phone numbers, email addresses.
Payment Information: Details necessary to process your payments, such as payment card information. This information is typically processed securely by third-party payment processors, and we do not store sensitive payment card details on our systems.
Order and Transaction Information: Details about the products you purchase and the transactions you conduct on our service.
Communications: Information you provide when you contact us with inquiries or feedback.

We may also automatically collect certain information when you visit, use, or navigate our site. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how you use our service.

How We Use Your Information

We use personal information collected via our service for various purposes related to our business operations, including:

To process your orders and manage your account.
To deliver products and services to you.
To communicate with you about your orders, products, services, and promotional offers.
To improve our site, products, and services.
To respond to your inquiries and provide customer support.
To send you marketing communications, where you have consented to receive them.
To prevent fraudulent transactions and monitor against theft.
To comply with legal obligations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Performance of a contract: To fulfil orders you place or provide services you request.
Your consent: For sending marketing communications or processing specific categories of data where required. You have the right to withdraw your consent at any time.
Legitimate interests: To improve our services, prevent fraud, and manage our business, provided your fundamental rights do not override these interests.
Legal obligations: To comply with applicable laws and regulations.

Sharing Your Information

We may share your information with third parties only in specific situations:

Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf (e.g., payment processing, data analysis, email delivery, hosting services, customer service, shipping and logistics).
Legal Requirements: We may disclose your information when legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena.
Vital Interests and Legal Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell your personal information.

Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Data Retention

We will only retain your personal information for as long as is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your Privacy Rights

In some regions, including the European Economic Area, you have rights under applicable data protection laws. These may include the right to request access and obtain a copy of your personal information, to request rectification or erasure, to restrict the processing of your personal information, to object to processing, and potentially the right to data portability. In certain circumstances, you may also have the right to withdraw your consent.

To exercise these rights, please contact us using the details provided elsewhere on our site or through official legal channels. We will consider and act upon any request in accordance with applicable data protection laws.

International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your own, including potentially outside the European Economic Area or Malaysia. When we transfer your personal information internationally, we take steps to ensure that your privacy rights are protected, often through standard contractual clauses or other legally recognized mechanisms.

Third-Party Websites

Our service may contain links to third-party websites that are not operated by us. We do not control and are not responsible for the privacy practices or content of these third-party sites. Please review the privacy policies of any third-party sites you visit.

Children's Privacy

We do not knowingly collect data from or market to children under 18 years of age. By using the service, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the service. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records.

Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by a revised date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

Our business operates from Kuala Lumpur, Malaysia. For formal legal correspondence or inquiries requiring a physical address, please use established official channels as required by law.