Privacy Policy

1. Information We Collect

• Account details — name, email address, phone number, and password (or Google sign-in) if you register.
• Shipping & billing details — delivery addresses and order history.
• Payment information — processed by our payment providers; we store only tokenised references (such as card brand and last 4 digits) and never your full card number or CVV.
• Wishlist, cart, and browsing activity on this website, including abandoned carts we may follow up on.
• Reviews and complaint records you submit.
• If you join our Agent Program: business/distributor details relevant to your Distributorship Agreement.
• Website & chat usage data — messages you send our AI shopping assistant, and basic analytics/cookie data.

2. How We Use Your Information

• To process, fulfil, ship and support your orders.
• To operate your account, wishlist, loyalty points, and (where applicable) agent/distributor records.
• To follow up on an abandoned cart or send order-related and marketing messages, where you have opted in or as otherwise permitted by law.
• To respond to reviews, complaints, and customer support enquiries.
• To detect and prevent fraud, and to comply with legal and regulatory obligations.

3. Our AI Shopping Assistant

Messages you send our AI chat assistant are processed by a third-party AI service provider in order to generate a reply. Please avoid sharing sensitive personal or payment information in the chat beyond what is necessary to answer your question.

4. Disclosure of Information

We do not sell your personal data. We may share it with trusted service providers who act on our behalf (such as payment processors, delivery couriers, our AI chat provider, and messaging platforms), and with authorities where required by law.

5. Cookies

This website uses cookies, including to keep you signed in and remember your cart. You can disable cookies in your browser settings, though some features (such as checkout) may not function properly as a result.

6. Data Security & Retention

We apply reasonable technical and organisational safeguards — including encrypted storage and row-level access controls — to protect your data against unauthorised access, loss or misuse, and retain it only for as long as necessary for the purposes above or as required by law (for example, order records for accounting purposes).

7. Your Rights

Under the PDPA, you may request access to, correction of, or deletion of your personal data, and may withdraw consent to marketing communications at any time — via your account settings or by contacting us below. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar data protection laws, you may have additional rights (such as data portability and objection to processing) under those laws; we will honour such requests to the extent they apply to us.

8. Contact Us

Email: healoasis1@gmail.com · Phone: +60 11-330 00930