Privacy Policy

This policy explains what personal data we collect, why we collect it, and what rights you have over it. It is provided in line with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Who we are

The data controller is Olin Beauty Sdn. Bhd. (Registration No. ), 108G, Jalan Komersil Senawang 4, Taman Komersil Senawang, 70450 Seremban, Negeri Sembilan, Malaysia.

2. What we collect

• Account data: name, email and phone number. We do not collect IC numbers. You are identified by your phone number, OTP verification and Member ID.
• Order data: delivery address, items purchased, and payment records.
• Usage data: IP address, browser type, and pages visited.
• Form data: information you submit through the agent application, partnership or contact forms.

3. Why we collect it

To process orders and delivery, manage your account and reward points, answer your enquiries, calculate commission for the agent who referred you, and meet accounting and tax obligations.

3a. Your consent

We ask for two separate consents, and you may give one without the other:

• PDPA consent — to process your data for orders, your account and support. This is required to place an order.
• Marketing consent — to send you offers, promotions and product news. This is optional, and declining it does not affect your orders or your member pricing.

The date and time of each consent is recorded. You may withdraw marketing consent at any time from the My Profile page or by contacting us.

4. Who we share it with

Courier companies for delivery, payment gateways to process transactions, and authorities where required by law. We do not sell your personal data to anyone.

5. Cookies

We use cookies to keep you signed in, remember your cart, remember your language choice, and record the agent who referred you for 30 days. You can clear cookies in your browser settings; some site features will stop working afterwards.

6. How long we keep it

Account data is kept while your account is active. Transaction records are kept for seven years as required by Malaysian accounting law. Form submissions that do not lead to an account are deleted after 24 months.

7. Your rights

You may request access to your personal data, request correction of inaccurate data, and request deletion of data no longer needed for its original purpose. Send requests to dinware10@gmail.com.

8. Security

Passwords are stored as hashes, not plain text. Connections to this site are encrypted. Sensitive uploads such as proposals are stored outside the public directory and cannot be reached by guessing a URL.

9. Contact

Questions about this policy: dinware10@gmail.com or 011-5690 5151.