Privacy Policy
Last updated: [DATE]
This Privacy Policy explains how [REGISTERED BUSINESS / COMPANY NAME], trading as JOWEAR (“we”, “us”), collects, uses and protects your personal data when you visit thejowear.com or buy from us. We process personal data in line with Malaysia’s Personal Data Protection Act 2010 (as amended) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
1. The data we collect
- Contact and order details: name, email, phone number, billing and delivery address, order history.
- Payment information: handled directly by our payment partners. We receive only a confirmation and limited details (such as the last four digits of a card); we never store full card numbers.
- Made-to-measure details: body measurements and fit notes you choose to give us for a custom order.
- Messages: what you send us by email, WhatsApp or our contact form.
- Account data: your login details if you create an account.
- Website usage: IP address, device and browser type, pages visited, and cookies (see section 7).
2. How we use your data
- to process, deliver and support your orders, returns and exchanges;
- to make and confirm made-to-measure orders;
- to reply to your questions;
- to send order updates by email or WhatsApp;
- to send newsletters and offers, only if you have agreed — you can unsubscribe at any time;
- to prevent fraud and keep the Website secure;
- to understand and improve how our Website is used;
- to meet legal, tax and accounting obligations.
3. Who we share it with
We never sell your personal data. We share it only with service providers who help us run the shop, and only as much as they need:
- delivery and courier companies — to deliver your order;
- payment providers ([Fiuu, GrabPay, ShopeePay, card processors]) — to take payment;
- our website host and IT providers ([Hostinger]);
- email and newsletter tools ([Mailchimp]);
- analytics and advertising tools ([Google Analytics, Meta Pixel]) — only with your cookie consent where required;
- authorities, where the law requires it.
4. International transfers
Some of our service providers store data outside Malaysia. Where that happens, we make sure appropriate protection is in place as required by law.
5. How long we keep it
We keep order and invoice records for as long as tax and accounting law requires ([7] years). Other data is kept only as long as needed for the purpose it was collected for, then deleted or anonymised. Newsletter data is deleted when you unsubscribe.
6. Your rights
You can ask us to:
- give you access to the personal data we hold about you;
- correct inaccurate or incomplete data;
- withdraw your consent (for example, to marketing) at any time;
- limit how we process your data, or stop direct marketing;
- send your data to you or to another organisation (data portability), where technically feasible;
- delete your data, where we no longer need to keep it by law.
To make a request, email [PRIVACY EMAIL]. We reply within the time required by law. If you are in the EU, you also have the right to complain to your local data protection authority.
7. Cookies
We use cookies that are needed for the shop to work (such as your cart and login), and — with your consent where required — cookies for analytics and advertising. You can change your choices in your browser settings [or in our cookie banner].
8. Security
Our Website uses encrypted (HTTPS) connections, and access to customer data is limited to people who need it. If a data breach happens that is likely to cause you significant harm, we will notify you and the authorities as required by law.
9. Children
Our shop is not intended for children under 18, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date at the top.
11. Contact
[REGISTERED BUSINESS / COMPANY NAME], [FULL BUSINESS ADDRESS]
Data protection contact: [NAME / DATA PROTECTION OFFICER] · [PRIVACY EMAIL]