Privacy Policy

This policy explains what personal data we collect, why we collect it, who it is shared with, and what rights you have over it. It is provided in line with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Who we are

The data controller is Olin Beauty Sdn. Bhd. (Registration No. 201801018979), owner of the OLIN HIVE brand. This site is operated by Olin Beauty Sdn. Bhd. (Registration No. 201801018979), 108G, Jalan Komersil Senawang 4, Taman Komersil Senawang, 70450 Seremban, Negeri Sembilan, Malaysia.

2. What we collect

• Account data: name, email, phone number and state.
• Identity card (IC) number: the full number, which you enter on your member profile or on the Member Check form. It is used to confirm your JRM membership — see section 3.
• Date of birth: requested when you complete your member profile; optional when you place an order.
• Order data: delivery address, items purchased, and payment records.
• Proof of purchase: the receipt you upload when you request a Member Check.
• Old JRM membership records: if you were a JRM member before this site opened, your record (name, phone, email, IC, date of birth, old member number, date joined and state) is moved in from the JRM membership files. An Authorised Distributor may also register a customer who has bought from them as a member, with proof of purchase.
• Usage data: IP address, browser type, and pages visited.
• Form data: information you submit through the distributor application, partnership, consultation, pre-order or contact forms.
• Messages: the text and photos you send to Authorised Distributors through Messages in the Member Portal, and the time each message was sent and read. Photos are reduced in size, and the location data inside them is removed before they are stored.

3. Why we collect it

• To process orders and delivery, manage your account and reward points, answer your enquiries, calculate commission for the distributor who referred you, and meet accounting and tax obligations.
• IC number — to confirm that you are a JRM member, including when you buy from a JRM stockist or distributor in another state, and to match your old JRM membership record.
• Date of birth — for birthday greetings and gifts from us or your distributor.
• Messages — to deliver your enquiry to the distributor you choose and their reply to you, to send a copy of the conversation to your email and that distributor's email, and to investigate complaints.

3a. Your consent

We ask for two separate consents, and you may give one without the other:

• PDPA consent — to process your data for orders, your account, membership checks and support. This is required to place an order and to use your account.
• Marketing consent — to send you offers, promotions and product news. This is optional, and declining it does not affect your orders or your member pricing.

If your membership record was moved in from the old JRM membership files, we ask for your PDPA consent the first time you sign in. Marketing consent is never assumed — it stays off until you choose it.

Before your first message to an Authorised Distributor, we ask for your consent to share your name, phone number, messages and photos with that distributor, including any health information you choose to share, and for that conversation to be readable by OLIN HIVE administrators. This consent is asked once for each distributor you contact. Share only the health information your question needs — distributors are not medical practitioners.

The date and time of each consent is recorded. You may withdraw marketing consent at any time from the My Profile page or by contacting us.

4. Who we share it with

• The Authorised Distributor you buy from. When you buy from an Authorised Distributor's store (jrmnogori.com), or send them a consultation or pre-order request, your name, phone, email, delivery address and date of birth (if you gave it) go to that distributor so they can fulfil the order and contact you. A distributor cannot see another distributor's customers.
• The Authorised Distributor you contact through Messages. That distributor receives your name, phone number, messages and photos to answer your enquiry. They do not receive your email and cannot see your conversations with other distributors. A distributor cannot start a Messages conversation with you.
• OLIN HIVE administrators. Staff given special permission may read Messages conversations to investigate complaints and disputes, detect fraud or misuse, and ensure legal compliance, including the ban on medical claims. Every conversation opened is recorded — who opened it and when — and administrators cannot send messages in your conversation.
• The JRM network, through the JutawanBonda central register. For membership checks across states, we share membership identity only — name, IC number, phone number, Member ID and membership start date. Your reward points, membership tier and purchase history are not shared.
• Campaign gift recipient list. If you receive a gift in an OLIN HIVE campaign, your partial name and partial Member ID (for example "S*** A. · JRM-****-**704") may be shown in the recipient list on the OLIN HIVE website, the Member Portal and the distributor portal. Your full name, phone number and address are not shown.
• Courier companies for delivery, payment gateways to process transactions, email service providers to send our emails and message copies, and authorities where required by law.

We do not sell your personal data to anyone.

5. Cookies

We use cookies to keep you signed in, remember your cart, remember your language choice, and record the distributor who referred you for 30 days. You can clear cookies in your browser settings; some site features will stop working afterwards.

6. How long we keep it

Account data, including your IC number and date of birth, is kept for as long as your account is active. Transaction records are kept for seven years as required by Malaysian accounting law. Member Check proof of purchase is kept with the result of the check. Old membership files used to move records in are kept for 12 months after the move as evidence, then deleted. Form data that does not lead to an account is deleted after 24 months. Messages and their photos are kept for as long as your account is active. Copies already sent to your email and the distributor's email remain in those mailboxes and cannot be deleted by us.

7. Your rights

You have the right to request access to your personal data, to request correction of inaccurate data — including your IC number — and to request deletion of data that is no longer needed for its original purpose. Send your request to dinware10@gmail.com.

You can read every one of your Messages conversations again in the Member Portal.

8. Security

Passwords are stored as hashes, not plain text. IC numbers are stored encrypted, are not shown in lists or system logs, and are visible in full only on your own profile and to staff reviewing a Member Check request. Connections to this site are encrypted. Documents such as proof of purchase and membership files are stored outside the public directory and cannot be reached by URL. Message photos are stored outside the public directory. Only the two people in the conversation and authorised administrators can open them, and they are not kept in browser or phone caches.

9. Contact

Questions about this policy: dinware10@gmail.com or 011-5690 5151.