Privacy Policy

Last updated: 2026-09-20

Oligin Shop ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, and your rights, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who We Are

Oligin Shop, operated by [Company/Owner name] [(SSM No. XXXXXXXX-X)], [business address].
Contact: [email] | [phone/WhatsApp]

2. Personal Data We Collect

When you use our website or place an order, we may collect:

• Identity and contact details: name, email address, phone number
• Delivery and billing address
• Order information: products purchased, order history, delivery notes
• Account details: login email and encrypted password, if you create an account
• Technical data: IP address, browser type, device information, and pages visited (through cookies)
• Messages you send us: emails, WhatsApp messages, or feedback

We do not store your credit/debit card numbers or online banking details. Payments are handled by our payment provider [Billplz / other], which has its own privacy policy.

3. How We Use Your Data

We use your personal data to:

• Process, pack, and deliver your orders
• Confirm payments and send order updates
• Provide customer support and handle returns or complaints
• Manage your account
• Send promotions or news, only if you agree (you can unsubscribe at any time)
• Improve our website and products
• Prevent fraud and comply with legal or tax requirements

4. Who We Share Your Data With

We only share what's needed with:

• Courier partners [J&T Express / Pos Laju / Ninja Van] to deliver your order
• Payment providers [Billplz / other] to process payments
• Service providers such as web hosting, email, and analytics tools [list if used]
• Authorities, when required by law

We do not sell your personal data.

5. Cookies

Our website uses cookies to keep your cart, remember your login, and understand how visitors use the site. You can block or delete cookies in your browser settings, but parts of the site (such as checkout) may not work properly.

6. Data Retention

We keep your data only as long as needed for the purposes above or as required by law (for example, order and tax records for [7] years). After that, we delete or anonymise it.

7. Data Security

We take reasonable steps to protect your data, including [SSL/HTTPS encryption, restricted access, secure payment processing]. No online system is completely secure, but we work to keep your information safe.

8. Your Rights

Under the PDPA, you may:

• Request access to the personal data we hold about you
• Ask us to correct inaccurate or outdated data
• Withdraw consent for marketing or other uses
• Ask us to limit how we process your data

To make a request, email [email]. We may need to verify your identity, and we'll respond within the time required by law.

9. Children

Our website is not intended for children under 18, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.

10. Third-Party Links

Our site may link to other websites. We're not responsible for their privacy practices, so please read their policies.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page with the updated date.

12. Contact Us

Questions or complaints about your personal data?
Email: [email] | WhatsApp: [number]