Privacy Policy

COMFORT ESSENCE SDN. BHD. (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data that you provide to us when you visit, browse, register with, or make purchases through our Website.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal data in connection with our Website, products, services, customer communications, and online transactions.

This Privacy Policy is intended to apply to customers, visitors, users, and other individuals who interact with COMFORT ESSENCE SDN. BHD. through our Website or other related channels.

We process personal data in connection with our commercial activities in Malaysia and aim to handle personal data in accordance with applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 (Act 709), as amended and applicable from time to time. The Malaysian Personal Data Protection Department identifies principles including notice and choice, disclosure, security, retention, data integrity, and access as key personal data protection principles.

Definitions

For the purposes of this Privacy Policy:

  • “Company” (referred to as either the “Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to COMFORT ESSENCE SDN. BHD.
  • “Goods” refers to the items offered for sale on the Service.
  • “Orders” means a request by You to purchase Goods from Us.
  • “Service” refers to COMFORT ESSENCE SDN. BHD., accessible from https://comfortessencesb.com/
  • “You” means the individual accessing the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
  • “Website” refers to the website operated by the Company and accessible from https://comfortessencesb.com/
  • “Personal Data” means information relating directly or indirectly to an identifiable individual.
  • “Processing” means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, updating, retrieval, or deletion.
  • “Third Party” means any individual, company, organization, service provider, contractor, payment provider, courier, or other entity that is separate from the Company.
  • “Cookies” means small data files placed on your device when you visit or interact with certain websites.

1. Introduction

This Privacy Policy describes the manner in which COMFORT ESSENCE SDN. BHD. collects and processes Personal Data when You:

  • Visit our Website.
  • Browse our Products.
  • Create or use an account.
  • Place an Order.
  • Make a payment.
  • Subscribe to communications.
  • Contact our customer service team.
  • Submit an enquiry.
  • Submit a review or other content.
  • Participate in a promotion.
  • Interact with our Website through cookies or similar technologies.
  • Otherwise communicate or interact with us.

We recognize that privacy is important and will take reasonable steps to handle Personal Data responsibly and securely.

The Malaysian Personal Data Protection Department states that a Personal Data Protection Notice is intended to inform individuals about how their personal data is collected, processed, stored, disclosed, and protected, and that such notice is a mandatory element for data users processing personal data under the applicable Act.

2. Personal Data We May Collect

Depending on how You interact with us, we may collect different categories of Personal Data.

This may include:

Identification Information

  • Full name.
  • Username.
  • Account information.
  • Information necessary to verify an Order or customer account.

Contact Information

  • Email address.
  • Telephone number.
  • Mobile phone number.
  • Residential address.
  • Delivery address.
  • Billing address.
  • Other contact details provided by You.

Order Information

When You purchase Goods from us, we may collect information relating to your Order, including:

  • Products purchased.
  • Product quantities.
  • Order number.
  • Order date.
  • Order value.
  • Delivery details.
  • Billing information.
  • Order history.
  • Return or refund information.
  • Customer service communications relating to your Order.

Payment Information

Depending on the payment method used, payment-related information may be processed by our payment service providers.

This may include information required to authorize and complete a transaction.

Where payment is processed by a third-party payment provider, the relevant payment provider may independently process your payment information according to its own privacy policy and terms.

We do not intend to collect or retain complete payment card information unnecessarily.

Technical Information

When You visit or interact with our Website, certain technical information may be collected automatically.

This may include:

  • IP address.
  • Browser type.
  • Device type.
  • Operating system.
  • Screen resolution.
  • Website access time.
  • Pages visited.
  • Referring website.
  • General browsing activity.
  • Website interaction information.
  • Error and diagnostic information.

3. How We Collect Personal Data

We may collect Personal Data through several methods.

Information You Provide Directly

You may provide Personal Data when You:

  • Create an account.
  • Place an Order.
  • Complete checkout.
  • Contact us.
  • Submit an enquiry.
  • Subscribe to our newsletter.
  • Submit a product review.
  • Request assistance.
  • Participate in a promotion.
  • Complete a form on our Website.

Information Collected Automatically

Certain information may be collected automatically when You use the Website through cookies, analytics technologies, server logs, and similar technologies.

Information Received From Third Parties

Where appropriate and permitted by applicable law, we may receive information from third parties such as:

  • Payment providers.
  • Courier and logistics providers.
  • Website service providers.
  • E-commerce service providers.
  • Analytics providers.
  • Marketing service providers.
  • Fraud prevention providers.

We will only use such information for legitimate purposes connected with our business and the services provided to You.

4. Purposes for Collecting and Processing Personal Data

We may collect and process Personal Data for purposes including:

  • Processing and fulfilling Orders.
  • Confirming payments.
  • Arranging delivery.
  • Communicating with You about your Orders.
  • Responding to customer enquiries.
  • Processing returns and refunds.
  • Providing customer support.
  • Managing customer accounts.
  • Improving our Products and services.
  • Improving Website functionality.
  • Maintaining Website security.
  • Preventing fraud and misuse.
  • Managing promotions and campaigns.
  • Sending marketing communications where permitted.
  • Conducting business administration.
  • Maintaining business and transaction records.
  • Complying with applicable legal and regulatory obligations.
  • Resolving disputes.
  • Enforcing our Terms and Conditions.
  • Protecting the rights, property, and safety of the Company, customers, and others.

We aim to collect and process Personal Data only for purposes that are relevant to our business activities and the services we provide.

5. Processing of Personal Data for Orders

When You place an Order, we require certain information to process and fulfil the transaction.

This information may be used to:

  • Confirm your Order.
  • Verify payment.
  • Prepare Products.
  • Arrange delivery.
  • Contact You about the Order.
  • Provide Order updates.
  • Handle returns and refunds.
  • Resolve delivery issues.
  • Provide customer support.
  • Maintain transaction records.

Without certain information, we may not be able to process or fulfil your Order.

6. Delivery Information

If You purchase Goods from us, we may provide necessary delivery information to our appointed courier or logistics provider.

This may include:

  • Recipient name.
  • Delivery address.
  • Telephone number.
  • Order reference.
  • Parcel information.

This information is provided for purposes such as:

  • Preparing shipment.
  • Delivering your Order.
  • Contacting You regarding delivery.
  • Tracking shipments.
  • Resolving delivery problems.

We will take reasonable steps to ensure that information disclosed for delivery purposes is limited to what is reasonably necessary for the relevant service.

7. Payment Information

Payments made through the Website may be processed by third-party payment service providers.

Depending on the payment method, You may be redirected to or interact with a third-party payment platform.

We may receive limited payment-related information necessary to:

  • Confirm payment status.
  • Process an Order.
  • Identify a transaction.
  • Process refunds.
  • Resolve payment issues.

We recommend reviewing the privacy policy of the relevant payment service provider before using its services.

8. Customer Communications

If You contact us, we may retain records of the communication for purposes including:

  • Responding to your enquiry.
  • Providing customer support.
  • Resolving complaints.
  • Investigating Order issues.
  • Improving our customer service.
  • Maintaining appropriate business records.

This may include communications submitted through email, Website forms, or other customer service channels provided by us.

9. Marketing Communications

Where permitted by applicable law and where appropriate, we may use your contact information to send information about:

  • New Products.
  • Special offers.
  • Promotions.
  • Discounts.
  • Seasonal campaigns.
  • Company updates.
  • Other information relating to our Products and services.

Where consent is required, we will seek appropriate consent before sending marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the relevant communication or by contacting us.

Please note that opting out of marketing communications does not necessarily stop essential service communications.

For example, we may still contact You regarding:

  • Orders.
  • Payments.
  • Deliveries.
  • Returns.
  • Refunds.
  • Account security.
  • Important Website or policy changes.

10. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to improve Website functionality and user experience.

Cookies may be used for purposes including:

  • Remembering preferences.
  • Maintaining shopping cart functionality.
  • Supporting account functions.
  • Understanding Website usage.
  • Improving Website performance.
  • Measuring Website traffic.
  • Supporting marketing activities where applicable.
  • Maintaining Website security.

Some cookies may be necessary for the Website to function correctly.

You may be able to control or disable certain cookies through your browser settings.

However, disabling certain cookies may affect Website functionality, including shopping cart, account, or checkout features.

11. Analytics

We may use analytics tools to understand how visitors interact with our Website.

Analytics information may help us understand:

  • Which pages are visited.
  • How users navigate the Website.
  • Which Products receive interest.
  • Website performance.
  • Technical issues.
  • General traffic patterns.

Analytics information may be aggregated or otherwise processed to help us improve our Website and services.

12. Disclosure of Personal Data

We may disclose Personal Data to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These parties may include:

  • Payment service providers.
  • Courier and delivery companies.
  • Website hosting providers.
  • E-commerce service providers.
  • IT and technical service providers.
  • Website maintenance providers.
  • Analytics providers.
  • Marketing service providers.
  • Customer support providers.
  • Professional advisers.
  • Auditors.
  • Legal advisers.
  • Government authorities.
  • Regulatory bodies.
  • Law enforcement agencies where legally required.

We will take reasonable steps to ensure that third parties receiving Personal Data handle such information appropriately and for legitimate purposes.

13. Service Providers

We may appoint third-party service providers to perform certain functions on our behalf.

These may include services relating to:

  • Website hosting.
  • Website development.
  • Website maintenance.
  • Payment processing.
  • Delivery and logistics.
  • Customer support.
  • Email communications.
  • Analytics.
  • Security.
  • Fraud prevention.
  • Marketing.

Where third-party service providers process Personal Data on our behalf, we aim to use appropriate contractual, technical, or organizational measures to protect the information.

14. Legal and Regulatory Disclosure

We may disclose Personal Data where reasonably necessary to comply with applicable laws, regulations, court orders, legal processes, or lawful requests from government or regulatory authorities.

We may also disclose information where necessary to:

  • Protect our legal rights.
  • Investigate suspected fraud.
  • Prevent illegal activities.
  • Protect the security of our Website.
  • Enforce our Terms and Conditions.
  • Protect the safety of customers or other individuals.
  • Respond to lawful requests.

15. Business Transactions

If the Company is involved in a business transaction such as:

  • Merger.
  • Acquisition.
  • Restructuring.
  • Sale of assets.
  • Sale of business.
  • Corporate reorganization.
  • Transfer of business operations.

Personal Data may be transferred or disclosed as reasonably necessary in connection with that transaction, subject to applicable legal requirements.

Where appropriate, we will take reasonable steps to ensure that Personal Data continues to receive appropriate protection.

16. Cross-Border Transfers

Our primary business operations are based in Malaysia.

However, certain third-party service providers used by our Website may process or store information outside Malaysia.

Where Personal Data is transferred outside Malaysia, we will take reasonable steps to ensure that such transfers are handled in accordance with applicable legal requirements and appropriate safeguards.

This may apply to services such as:

  • Website hosting.
  • Cloud services.
  • Payment processing.
  • Email services.
  • Analytics.
  • Customer support.
  • Other technology services.

Malaysia’s Personal Data Protection framework includes guidance concerning cross-border transfers of personal data, and applicable requirements should be considered when Personal Data is processed outside Malaysia.

17. Security of Personal Data

We take reasonable steps to protect Personal Data against:

  • Unauthorized access.
  • Unauthorized disclosure.
  • Accidental loss.
  • Misuse.
  • Alteration.
  • Destruction.
  • Unauthorized processing.

Security measures may include appropriate technical and organizational safeguards, access controls, password protection, secure communications, monitoring, and other measures appropriate to the nature of the information processed.

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

Therefore, while we take reasonable steps to protect Personal Data, we cannot guarantee absolute security.

18. Data Breach

If we become aware of a personal data breach affecting Personal Data, we will assess the incident and take appropriate steps in accordance with applicable legal and regulatory requirements.

Depending on the circumstances, this may include:

  • Investigating the incident.
  • Containing the breach.
  • Taking steps to prevent further unauthorized access.
  • Assessing potential risks.
  • Notifying relevant authorities where required.
  • Notifying affected individuals where required.
  • Taking corrective measures.

Malaysia’s current personal data protection framework includes specific guidance and regulatory requirements relating to personal data breach notification.

19. Retention of Personal Data

We will retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including:

  • Processing Orders.
  • Providing services.
  • Maintaining business records.
  • Handling disputes.
  • Processing returns and refunds.
  • Complying with legal requirements.
  • Enforcing agreements.
  • Protecting our legitimate business interests.

When Personal Data is no longer required, we may securely delete, destroy, anonymize, or otherwise dispose of it in accordance with our internal procedures and applicable legal requirements.

The Malaysian Personal Data Protection Department identifies the Retention Principle as requiring personal data not to be retained longer than necessary for the purpose for which it is processed.

20. Accuracy of Personal Data

We aim to keep Personal Data accurate, complete, and up to date where reasonably necessary.

You should inform us if any Personal Data provided to us changes or is inaccurate.

For example, You should update us if there is a change to your:

  • Name.
  • Email address.
  • Telephone number.
  • Delivery address.
  • Billing information.

We may contact You to verify or update information where reasonably necessary.

21. Access to Personal Data

Subject to applicable law and any applicable exceptions, You may request access to Personal Data that we hold about You.

A request may need to include sufficient information for us to:

  • Identify You.
  • Verify your identity.
  • Locate the relevant information.
  • Understand the nature of your request.

We may require reasonable verification information before responding to an access request.

The Malaysian Personal Data Protection framework recognizes an access principle under which individuals may access and correct personal data held about them, subject to applicable requirements and exceptions.

22. Correction of Personal Data

If You believe that Personal Data held by us is inaccurate, incomplete, misleading, or outdated, You may contact us to request correction.

We may request information or supporting documentation necessary to verify the requested correction.

Where appropriate, we will take reasonable steps to update or correct the relevant information.

23. Withdrawal of Consent

Where the processing of Personal Data is based on your consent, You may withdraw your consent by contacting us, subject to applicable legal requirements and any consequences of withdrawal.

Withdrawal of consent may not affect processing that:

  • Has already occurred lawfully.
  • Is required to fulfil an Order.
  • Is necessary to comply with a legal obligation.
  • Is otherwise permitted under applicable law.

If You withdraw consent for certain processing activities, we may not be able to provide particular services or features that depend on that information.

24. Marketing Opt-Out

You may choose not to receive promotional or marketing communications from us.

If You no longer wish to receive marketing communications, You may:

  • Use the unsubscribe link included in the relevant communication.
  • Contact us directly.
  • Follow the available opt-out instructions.

Please note that You may continue to receive non-marketing communications that are necessary for the provision of services.

25. Children’s Privacy

Our Website is intended for general consumer and shopping purposes.

We do not knowingly seek to collect unnecessary Personal Data from children.

If You believe that a child has provided Personal Data to us without appropriate authorization, please contact us so that we can assess the information and take appropriate action where required.

26. Third-Party Websites

Our Website may contain links to third-party websites, platforms, services, or applications.

These third-party websites may have their own privacy policies and data processing practices.

We are not responsible for the privacy practices, security, content, or policies of third-party websites.

You should review the relevant privacy policy before providing Personal Data to any third-party website.

27. Social Media

We may maintain or use social media pages or other online platforms to communicate with customers and promote our Products.

If You interact with us through a social media platform, the platform may independently collect and process information about You.

Your interaction with such platforms is subject to the privacy policy and terms of the relevant platform.

We encourage You to review those policies before providing Personal Data through social media.

28. Product Reviews and User-Submitted Content

If our Website allows You to submit Product reviews, comments, photographs, testimonials, or other content, certain information associated with your submission may be visible to other Website visitors.

Please avoid including personal or confidential information that You do not wish to make publicly available.

We may process submitted content for purposes including:

  • Publishing Product reviews.
  • Improving Products and services.
  • Customer feedback.
  • Website administration.
  • Marketing where permitted.

29. Fraud Prevention and Security

We may process Personal Data to detect, investigate, and prevent:

  • Fraudulent Orders.
  • Unauthorized transactions.
  • Payment abuse.
  • Account misuse.
  • Promotional abuse.
  • Website attacks.
  • Other unlawful or unauthorized activity.

This may involve reviewing transaction information, technical information, account information, or other relevant information.

30. Direct Communications

We may use the contact information provided by You to communicate with You regarding:

  • Orders.
  • Payments.
  • Deliveries.
  • Returns.
  • Refunds.
  • Product enquiries.
  • Customer service matters.
  • Account-related matters.
  • Important changes to our services or policies.

These communications may be sent through email, telephone, SMS, or other communication methods that You have provided or that are reasonably necessary to provide our services.

31. Data Protection Officer

Where applicable and where required by Malaysian personal data protection requirements, the Company may appoint a Data Protection Officer or other responsible person to oversee personal data protection matters.

Information relating to the Company’s relevant privacy contact may be provided through our Website or upon request.

Malaysia’s Personal Data Protection Commissioner has issued guidance and circulars relating to the appointment of Data Protection Officers following the amendments to the Personal Data Protection Act.

32. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be necessary due to:

  • Changes in our business.
  • Changes to our Website.
  • Changes to Products or services.
  • Changes to technology.
  • Changes to third-party service providers.
  • Changes in applicable laws or regulations.
  • Changes to personal data protection requirements.

The updated Privacy Policy will be published on our Website with a revised “Last Updated” date.

You are encouraged to review this Privacy Policy periodically.

33. Relationship With Other Policies

This Privacy Policy should be read together with other policies and documents published on our Website, including:

  • Terms and Conditions.
  • Shipping Policy.
  • Return and Refund Policy.
  • Cookie-related information, where applicable.
  • Promotional terms and conditions, where applicable.

These documents may contain additional information concerning how we operate our Website and provide services.

34. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of Malaysia.

Any dispute relating to this Privacy Policy or the processing of Personal Data by the Company shall be handled in accordance with applicable Malaysian laws and regulations.

Nothing in this Privacy Policy is intended to remove or restrict any rights that You may have under applicable Malaysian personal data protection or consumer protection laws.

35. Your Responsibilities

You are responsible for ensuring that information provided to us is accurate and up to date.

You should also take reasonable steps to protect your own information, including:

  • Keeping account credentials confidential.
  • Not sharing passwords with unauthorized individuals.
  • Logging out from shared devices.
  • Avoiding submission of unnecessary sensitive information.
  • Informing us if You suspect unauthorized use of your account.

We will not ask You to provide unnecessary confidential information through unsolicited communications.

36. Contact Us

If You have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of your Personal Data, You may contact COMFORT ESSENCE SDN. BHD.

COMFORT ESSENCE SDN. BHD.

Business Address:
1702-2, Jalan Kulim,
Taman Machang Bubok,
14020 Bukit Mertajam,
Pulau Pinang, Malaysia

Website:
https://comfortessencesb.com/

When contacting us regarding Personal Data, please provide sufficient information for us to understand and respond to your request.

We may need to verify your identity before processing certain requests involving access, correction, deletion, or other Personal Data matters.

37. Final Statement

COMFORT ESSENCE SDN. BHD. is committed to handling Personal Data responsibly and taking reasonable measures to protect the privacy and security of individuals who use our Website and services.

By using our Website, You acknowledge that You have had the opportunity to read this Privacy Policy and understand how your Personal Data may be collected and processed for the purposes described above.

If You do not agree with the applicable processing of your Personal Data, certain Website features, services, or transactions may not be available to You.

This Privacy Policy should be reviewed periodically to remain informed about how we handle Personal Data.

COMFORT ESSENCE SDN. BHD.
1702-2, Jalan Kulim, Taman Machang Bubok,
14020 Bukit Mertajam, Pulau Pinang, Malaysia

Shopping Cart