Privacy Policy
This Privacy Policy explains how NOVA KASTURI SDN BHD (Registration No. 202601016986 (1679083-M)) handles personal data when you visit novakasturi.com, place an order or contact us.
Personal Data We Collect
Depending on your interaction with us, we may collect:
- Your name, email address, telephone number, and billing and delivery addresses.
- Order details, selected products, transaction references and payment status.
- Account information, if you create an account.
- Messages, reviews and evidence submitted for customer service requests.
- Technical information such as IP address, browser type and website activity, where collected by our website services.
We collect information directly from you and, where necessary, from payment providers, delivery providers and services supporting your transaction.
Why We Use Your Data
We use relevant personal data to:
- Process payments and fulfil orders.
- Arrange deliveries and provide order updates.
- Manage accounts and respond to enquiries.
- Handle cancellations, returns, refunds and complaints.
- Maintain website security and prevent fraud.
- Meet legal, accounting and recordkeeping obligations.
Where we send optional marketing communications, we will obtain consent where required and provide a way to unsubscribe.
Information needed to process an order is necessary for that transaction. If you do not provide it, we may be unable to complete your purchase or delivery. Optional marketing information is not required to make a purchase.
Who May Receive Your Data
We may share necessary information with payment processors, couriers, hosting and IT providers, professional advisers, and authorities where disclosure is legally required.
These disclosures are limited to relevant purposes. We do not sell personal data.
Cookies
Our website may use cookies to operate the shopping cart, maintain sessions and remember preferences.
Any optional analytics or advertising cookies used must be described in our cookie settings or notice, with consent obtained where required. You can also manage cookies through your browser, although disabling essential cookies may affect website functions.
Storage, Security and Retention
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse and disclosure.
We retain personal data only for as long as necessary for the purposes described above, including applicable legal, accounting and dispute-resolution requirements. Data will then be securely deleted or anonymised where appropriate.
Overseas Processing
If our service providers process personal data outside Malaysia, we will take steps to ensure the transfer meets applicable Malaysian data protection requirements.
Your Choices and Rights
Subject to applicable law, you may request access to or correction of your personal data, withdraw consent where processing relies on consent, or ask us to stop direct marketing.
You may also request information about other applicable rights, including data portability where available. We may need to verify your identity before responding.
Withdrawing consent may affect services that depend on the relevant processing. It does not affect processing that is otherwise required or permitted by law.
Updates
We may update this policy to reflect changes in our practices or legal requirements. The updated version and its effective date will be published on this page.