隱私政策與個人資料通知
最後更新：［日期］
本通知說明緣生樹 Primal Tree，由 PRIMAL TREE ENERGETIC SUPPLIES SDN. BHD.（以下稱「我們」）營運，如何在你瀏覽本網站、建立帳戶、下單、聯絡客服或使用相關服務時，收集、使用、披露及保護你的個人資料。
本通知適用於：［列出目前適用的官方網域］。
如經由 Shopee、社群平台或其他第三方服務與我們互動，該平台亦會依其自身政策處理資料；我們取得的訂單或聯絡資料，則依本通知及適用法律處理。
1. 我們收集哪些資料
視乎你使用的功能，我們可能收集：
聯絡與配送資料：姓名、電話、電郵、帳單及收貨地址，以及你提供的收件人資料。
帳戶與交易資料：帳戶資訊、訂單內容、付款狀態、交易參考號碼、購買及退換貨紀錄。
客服資料：你透過電郵、WhatsApp、表單或其他渠道提供的查詢、照片、影片及相關紀錄。
網站使用資料：IP 位址、瀏覽器及裝置資訊、瀏覽活動，以及由實際啟用的 Cookies 或類似技術產生的資料。
偏好與選擇：例如語言、行銷訂閱及其他由你設定的偏好。
資料可能由你直接提供，亦可能來自與訂單有關的收件人、配送公司、支付服務商、電商平台及技術服務供應商。
如你提供他人的收件或聯絡資料，請確保你有權提供，並讓對方知道其資料將用於相關服務。
我們不要求你為一般購物提供宗教信仰、健康狀況或其他敏感個人資料。請勿在非必要情況下提交此類資訊；如特定服務確需收集，我們會另外說明用途，並在依法需要時取得明確同意。
2. 我們如何使用資料
我們按適用法律及所需同意，將資料用於：
建立及管理帳戶。
核對、處理及配送訂單。
處理付款、退款、退換貨及售後服務。
回覆查詢及發送訂單、配送或服務通知。
防止詐騙、帳戶濫用及未經授權的交易。
維持網站安全、處理技術問題及改善購物體驗。
在取得所需同意後，發送產品消息、優惠及活動資訊。
履行會計、稅務、法律及合理爭議處理需要。
我們不會僅因你購買宗教用品，就將你標記為某一宗教信仰，或據此建立敏感個人資料檔案。
3. 必要與自願提供的資料
部分資料是完成訂單、配送、退款或履行法律義務所必需。若你不提供，或撤回相關同意，我們可能無法提供相應服務。
非必要資料及行銷訂閱屬自願提供。拒絕接收行銷訊息，不影響一般購物或售後服務。
4. 付款資料
付款可能由銀行或第三方支付服務商處理。我們可能取得付款狀態、交易參考號碼，以及核對付款或退款所需的有限資料。
請勿透過電郵、WhatsApp 或一般客服表單提供完整信用卡號、CVV、安全驗證碼、OTP 或網上銀行密碼。
如退款需要銀行帳戶資料，我們只會要求完成退款所需的資料，並透過適當方式核實。
［上線前補充：實際支付服務商名稱，以及本公司是否接收或保存完整卡號、代碼化付款資料或其他付款資訊。］
5. 我們可能向誰披露資料
我們可能在相關用途所需範圍內，向以下類別的接收者披露資料：
電商、網站託管及技術服務供應商，包括 SiteGiant。
銀行、支付及退款服務供應商。
配送、物流及訂單履行服務供應商。
實際使用的客服、通訊、分析及行銷服務供應商。
會計、法律及其他專業顧問。
依法有權取得資料的主管機關，或為處理合法申索而需要取得資料的相關方。
我們會按服務需要限制披露範圍，並採取合理措施要求服務供應商適當保護資料。
我們不會出售你的個人資料。
6. Cookies 與網站分析
本網站可能使用 Cookies 或類似技術，以維持購物車、登入、安全及其他必要功能。
如啟用分析、個人化或廣告追蹤工具，我們會說明其用途，並在適用法律要求時取得同意及提供選擇。你亦可透過瀏覽器管理 Cookies，但停用必要 Cookies 可能影響部分功能。
［上線前列明：實際啟用的分析及廣告工具，以及 Cookie 設定入口；沒有使用的工具不要列入。］
7. 行銷訊息與退訂
在取得所需同意後，我們可能透過電郵、WhatsApp 或其他已告知渠道發送行銷訊息。
你可使用訊息內的退訂方式，或聯絡我們停止接收。停止行銷訊息後，我們仍可能發送處理現有訂單、安全或法律事項所需的非行銷通知。
8. 保存期限與資料安全
我們僅在履行已說明用途、法律義務及合理爭議處理所需期間保存資料。不同資料類別的保存時間可能不同；資料不再需要時，會按適當程序刪除、銷毀或去識別化。
我們會採取與資料風險相稱的技術及管理措施，降低未經授權存取、遺失、濫用或披露的風險，但無法保證任何網路傳輸或儲存方式絕對安全。
如發生個人資料外洩，我們將調查及採取補救措施，並在適用法律要求時通知主管機關及受影響人士。
9. 境外處理與品牌過渡
我們使用的部分服務供應商，可能在馬來西亞以外處理或保存資料。如涉及跨境傳輸，我們會依適用法律評估及採取所需保障措施。
新舊品牌或網域過渡，不會單獨成為擴大使用個人資料的理由。若涉及營運主體或資料用途的重大變更，我們會提供適當通知，並在依法需要時取得同意。
10. 你的資料權利
在適用法律及相關限制下，你可以：
申請查閱及更正個人資料。
撤回同意，或要求停止直接行銷。
在法律允許的情況下，要求限制或停止特定處理。
在適用條件下提出資料可攜請求。
詢問資料是否仍需保存，或提出刪除請求；如有法律或合理保留義務，我們會說明限制。
我們可能要求合理資料以核實身分，避免資料被錯誤披露。部分要求可能影響服務提供，或涉及法律允許的程序及費用，我們會事先說明。
如對處理方式有疑問，你可先聯絡我們，也可向馬來西亞個人資料保護主管機關提出投訴。
11. 政策更新及聯絡方式
我們會在此頁公布更新版本及生效日期。如有影響資料用途、披露對象或權利的重大變更，我們會以適當方式通知，並在依法需要時重新取得同意。
個人資料聯絡窗口：
公司：PRIMAL TREE ENERGETIC SUPPLIES SDN. BHD.
公司註冊號碼：200901038972 (882107-P)
電郵：[email protected]
電話：0167839200 / 0197079200
地址：NO98. Jalan Sultanah 83000 Batu Pahat Johor
二、English Version
Privacy Policy & Personal Data Notice
Last updated: [Date]
This notice explains how Primal Tree, operated by PRIMAL TREE ENERGETIC SUPPLIES SDN. BHD. (“we”, “us” or “our”), collects, uses, discloses and protects personal data when you browse our website, create an account, place an order, contact us or use related services.
This notice applies to: [List the official domains currently covered].
If you interact with us through Shopee, social media or another third-party service, that platform also processes data under its own policies. Order or contact information received by us will be handled under this notice and applicable law.
1. Personal Data We Collect
Depending on the features you use, we may collect:
Contact and delivery information: names, telephone numbers, email addresses, billing and delivery addresses, and recipient details you provide.
Account and transaction information: account details, order contents, payment status, transaction references, and purchase, return and refund records.
Customer service information: enquiries, photographs, videos and related correspondence submitted through email, WhatsApp, forms or other channels.
Website usage information: IP addresses, browser and device information, browsing activity, and information generated by cookies or similar technologies actually enabled on our website.
Preferences and choices: language preferences, marketing subscriptions and other settings you select.
Information may come directly from you or from recipients, couriers, payment providers, marketplaces and technology providers involved in delivering our services.
If you provide another person’s information, please ensure you are authorised to do so and that they understand how their information will be used.
We do not require information about your religion, health or other sensitive matters for ordinary shopping. Please avoid submitting such information unnecessarily. If a particular service requires it, we will separately explain the purpose and obtain explicit consent where required by law.
2. How We Use Personal Data
Subject to applicable law and any required consent, we use personal data to:
Create and manage accounts.
Verify, process and deliver orders.
Handle payments, refunds, returns and after-sales support.
Respond to enquiries and send order, delivery and service notifications.
Prevent fraud, account misuse and unauthorised transactions.
Maintain website security, resolve technical issues and improve the shopping experience.
Send product news, offers and event information where the required consent has been obtained.
Meet accounting, tax and legal obligations and reasonably manage disputes.
We will not assign a religious identity to you or create a sensitive personal profile solely because you purchase religious products.
3. Required and Optional Information
Some information is necessary to fulfil orders, arrange delivery, process refunds or meet legal obligations. If it is not provided, or relevant consent is withdrawn, we may be unable to provide the associated service.
Optional information and marketing subscriptions are voluntary. Declining marketing does not prevent ordinary shopping or after-sales support.
4. Payment Information
Payments may be processed by banks or third-party payment providers. We may receive payment status, transaction references and limited information needed to verify payments or process refunds.
Do not send full card numbers, CVV codes, security codes, OTPs or online banking passwords through email, WhatsApp or general enquiry forms.
Where bank details are needed for a refund, we will request only the necessary information and verify it appropriately.
[Before publication, identify the actual payment providers and confirm whether the company receives or stores full card numbers, payment tokens or other payment information.]
5. Who May Receive Personal Data
Where necessary for the relevant purpose, we may disclose personal data to:
E-commerce, hosting and technology providers, including SiteGiant.
Banks and payment or refund providers.
Couriers, logistics and fulfilment providers.
Customer service, communications, analytics and marketing providers actually used by us.
Accounting, legal and other professional advisers.
Authorities entitled to receive the information, or relevant parties where necessary for lawful claims.
We limit disclosures according to service needs and take reasonable steps to require appropriate protection by service providers.
We do not sell your personal data.
6. Cookies and Website Analytics
Our website may use cookies or similar technologies for shopping carts, login, security and other necessary functions.
If analytics, personalisation or advertising tools are enabled, we will explain their purposes and obtain consent and provide choices where required by applicable law. You can also manage cookies through your browser, although disabling necessary cookies may affect functionality.
[Before publication, list the analytics and advertising tools actually enabled and provide the cookie settings link. Do not list tools that are not used.]
7. Marketing and Opting Out
Where the required consent has been obtained, we may send marketing by email, WhatsApp or other disclosed channels.
You may unsubscribe using the method provided in the message or contact us. After opting out, you may still receive non-marketing communications necessary for existing orders, security or legal matters.
8. Retention and Security
We retain personal data only as long as necessary for the stated purposes, legal obligations and reasonable dispute management. Retention periods may differ by data category. Information no longer required will be deleted, destroyed or de-identified through appropriate procedures.
We use technical and organisational measures proportionate to the risks to reduce unauthorised access, loss, misuse or disclosure. However, no internet transmission or storage method can be guaranteed completely secure.
If a personal data breach occurs, we will investigate, take remedial action and notify the relevant authority and affected individuals where required by applicable law.
9. Overseas Processing and Brand Transition
Some service providers may process or store information outside Malaysia. Where cross-border transfers occur, we will assess and implement the safeguards required by applicable law.
A brand or domain transition does not, by itself, justify expanding how personal data is used. Material changes involving the operating entity or data purposes will be communicated appropriately, and consent will be obtained where required.
10. Your Rights
Subject to applicable law and relevant limitations, you may:
Request access to and correction of personal data.
Withdraw consent or stop direct marketing.
Request restrictions on, or cessation of, particular processing where legally available.
Request data portability where applicable conditions are met.
Ask whether information still needs to be retained or request deletion. We will explain any legal or legitimate retention restrictions.
We may request reasonable information to verify your identity and prevent improper disclosure. Some requests may affect service availability or involve legally permitted procedures or fees, which will be explained beforehand.
You may contact us with concerns or lodge a complaint with Malaysia’s personal data protection authority.
11. Updates and Contact Details
Updated notices and effective dates will be published on this page. Material changes affecting purposes, disclosures or rights will be communicated appropriately, and renewed consent obtained where required.
Personal data contact:
Company: PRIMAL TREE ENERGETIC SUPPLIES SDN. BHD.
Registration number: 200901038972 (882107-P)
Email: [email protected]
Telephone: 0167839200 / 0197079200
Address: NO98 Jalan Sultanah 83000 Batu Pahat Johor