Who is responsible.
LAPEARL JEWELRY, registration number JR195207-H, is the data user for the purposes of Malaysia’s Personal Data Protection Act 2010. Its office is at D-29-01, Cybersquare (Vertex Tower), Jalan Teknokrat 7, Cyber 5, Cyberjaya, 63000 Selangor.
Where this policy says “we” or “LaPearl”, that is who it means.
What we collect.
When ordering becomes available, LaPearl will collect only the information needed to process and fulfil an order:
- name, email address and phone number, to confirm the order and contact you about it;
- a delivery address, when delivery is selected;
- what you bought, when and what you paid, as the order record;
- correspondence, when you email, call or message us;
- payment confirmation and a transaction reference from the selected payment provider.
Full card or bank credentials are intended to be entered with the selected payment provider rather than supplied directly to LaPearl. The provider and exact technical flow will be published before live ordering begins.
How and why we use it.
Order information is used because it is needed to perform the contract with you. Other information may be used because you asked us to, gave consent, or because records must be kept for tax, accounting or legal purposes.
What we do not do
- We do not sell or rent personal data.
- We do not send marketing because you bought something. Marketing requires a separate, deliberate opt-in.
- We do not use personal data for a purpose unrelated to the reason it was collected without an appropriate basis.
Who else sees it.
Only the part each recipient needs is shared:
- the selected payment provider, to handle the transaction;
- the courier, which needs a name, delivery address and phone number;
- the hosting provider, which operates the systems used for the store;
- our accountant and authorities, where accounting or law requires access.
Service providers will be required to handle personal data only for the agreed service and to protect it appropriately.
How long we keep it.
- Order records
- Seven years for tax and accounting records.
- Correspondence
- Two years after the exchange ends, then deleted unless it forms part of a record that must be kept longer.
- Newsletter details
- Until you unsubscribe, then removed.
The current frontend preview.
In the current frontend preview, the bag is saved in your browser’s local storage and checkout details remain in memory only for the open page session. Clearing browser data removes the bag. The preview does not submit customer details, create an order or take payment.
Security when ordering becomes available
When ordering becomes available, LaPearl will use reasonable organisational and technical safeguards and require its service providers to protect personal data. No system can be guaranteed completely secure.
Your rights.
Under the PDPA, you may ask LaPearl to:
- provide access to the personal data held about you;
- correct inaccurate or incomplete data;
- stop processing it for a particular purpose or record a withdrawal of consent;
- delete it where LaPearl is not required to keep it for tax, accounting or legal reasons.
Email laperletrading@gmail.com. LaPearl commits to responding within 21 days. We may ask for enough information to verify your identity before acting on a request.
If you are dissatisfied with how a request or complaint is handled, you may contact Malaysia’s Personal Data Protection Commissioner.
Changes
If this policy changes materially, the updated date at the top will change with it. Questions are welcome through the contact page.