Privacy Policy (Southeast Asia)
This policy applies to users located in Southeast Asia, including Singapore (Personal Data Protection Act), Malaysia (PDPA), Thailand (PDPA), Indonesia (Law No. 27 of 2022), Vietnam (Decree-Law on Personal Data Protection) and the Philippines (Data Privacy Act of 2012).
1. Information We Collect
- Information you provide: username, email, security question, etc.; - Usage logs: visit time, pages, IP address, browser type; - Order & payment records (processed by third-party payment providers).
2. Consent & Purpose Limitation
We collect, use and disclose personal data only with your consent or where permitted by applicable law, and only for purposes notified to you at the time of collection. You may withdraw your consent at any time, subject to legal or contractual restrictions.
3. Disclosure & Transfer
We do not sell your personal data. We may engage service providers (e.g., hosting, payment processors) under contractual safeguards. Where data is transferred across borders, we ensure an equivalent level of protection and comply with local transfer requirements (e.g., Singapore PDPA transfer obligations).
4. Do Not Call (Singapore)
For users in Singapore: unless you have given clear and unambiguous consent (or an exception applies), we will not send you telemarketing messages via telephone, SMS or fax in accordance with the Do Not Call (DNC) provisions of the PDPA.
5. Data Protection Officer / Contact
Singapore and Malaysia: you may contact our Data Protection Officer regarding data protection matters. For all users: contact us via the site footer to access, correct or delete your personal data, or to lodge a complaint.
6. Security & Retention
We apply appropriate security measures (encryption, access control, audit logging, backups) and retain personal data no longer than necessary for the purposes for which it was collected.