This Privacy Policy explains what personal data Palatez (“we,” “us”) collects through palatez.com (the “Site”), how we use it, and what rights you have.
1. Who We Are
Palatez operates palatez.com. Questions about this Policy or your personal data can be directed to [contact email to be added].
2. What Personal Data We Collect
Depending on how you use the Site, we may collect:
- Account and order information (via WooCommerce): name, email address, billing/shipping address, and order history, if you create an account or make a purchase.
- Payment information (via Stripe): our payment processor, Stripe, handles your card details directly. We do not store your full card number on our servers.
- Email and subscriber information (via Hostinger Reach): if you sign up for updates or a newsletter, we collect your email address (and any other details you provide) to send you marketing communications, which you may unsubscribe from at any time.
- Contact form submissions (via Fluent Forms): any information you submit through a contact or inquiry form on the Site.
- Analytics data (via Google Site Kit / Google Analytics): information about how you browse the Site, such as pages visited and general location, collected through cookies. See our Cookie Policy for detail.
- Comments, if commenting is enabled on the Site: the content of your comment, plus your IP address and browser information, to help with spam detection.
3. How We Use Your Data
We use your personal data to: fulfil and manage orders; process payments; respond to inquiries submitted through our contact forms; send you marketing communications where you have signed up to receive them (with the option to unsubscribe at any time); understand and improve how the Site is used; and maintain the security of the Site.
4. Who We Share Data With
We share personal data with the following third-party service providers, each acting for the purpose described: Stripe (payment processing), Google (site analytics, via Google Site Kit), and Hostinger Reach (email marketing and subscriber management, provided by our hosting provider, Hostinger). We do not sell your personal data. These providers may process data outside Malaysia; see Section 9.
5. Cookies
The Site uses cookies for site functionality, analytics, and (where applicable) email marketing tracking. See our Cookie Policy for full detail and how to control cookies through your browser.
6. Data Retention
We retain order and account data for as long as needed to fulfil the purposes described in this Policy and to meet our legal, accounting, and tax obligations. If you leave a comment, it is retained indefinitely unless you ask us to remove it. You may ask us to delete personal data we hold about you at any time, subject to Section 7.
7. Your Rights
Under Malaysia’s Personal Data Protection Act 2010, you have the right to request access to, and correction of, personal data we hold about you, and to withdraw consent to certain uses (such as marketing emails) at any time. If you are located outside Malaysia in a jurisdiction with its own data protection law (such as the EU/UK or California), you may have additional rights under that law, including data portability and erasure; contact us using the details in Section 1 and we will address your request under the framework that applies to you.
8. Data Security
We take reasonable technical and organizational measures to protect personal data we hold, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International Data Transfers
Some of our service providers (including Stripe and Google) may process personal data outside Malaysia. Where this occurs, we rely on the safeguards those providers offer as part of their own compliance frameworks. Their respective privacy policies contain more detail on how they handle and transfer data.
10. Children’s Privacy
This Site is not directed at children, and we do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us with personal data, please contact us so we can address it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page.
12. Contact
Questions or requests regarding your personal data can be directed to [contact email/address to be added].
Last updated: [date to be added upon publishing]. This page is a draft pending review by a Malaysia-qualified attorney and is not yet finalized. It should also be re-checked once actual visitor geography (EU/UK/California traffic) is confirmed via analytics, as that may require additional consent mechanisms beyond what this Policy alone can provide.