Privacy Policy

1. Introduction

Datin Norehan's Apothecary ("we", "our", or "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

2. Information We Collect

We collect the following types of personal data:

• Contact information (name, email address, phone number, delivery address)
• Payment information (processed securely through our payment providers)
• Order history and purchase preferences
• Account credentials and membership information
• Communications with our customer service team
• Website usage data and cookies

3. How We Use Your Information

Your personal data is used for:

• Processing and fulfilling your orders
• Providing customer support and responding to inquiries
• Managing your membership and loyalty rewards
• Sending order confirmations and shipping updates
• Marketing communications (with your consent)
• Improving our products and services
• Complying with legal obligations

4. Disclosure of Personal Data

We may share your personal data with:

• Delivery service providers for order fulfillment
• Payment processors for secure transaction processing
• Marketing service providers (with your consent)
• Legal authorities when required by law

We do not sell your personal data to third parties.

5. Your Rights Under PDPA

Under Malaysia's PDPA, you have the right to:

• Access your personal data that we hold
• Request correction of inaccurate or incomplete data
• Withdraw consent for data processing
• Request deletion of your personal data (subject to legal requirements)
• Limit the processing of your personal data

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by Malaysian law. Order information is typically retained for 7 years for tax and accounting purposes.

8. Cookies and Tracking

Our website uses cookies to enhance your browsing experience, analyze site traffic, and personalize content. You can control cookie settings through your browser preferences.

9. Marketing Communications

With your consent, we may send you promotional emails about our products, special offers, and wellness tips. You can unsubscribe at any time by clicking the unsubscribe link in our emails.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under PDPA, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.