Privacy Policy

Last Updated: 16 Oct 2025

SMCR LABORATORIES SDN BHD is committed to protecting your privacy and ensuring compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as applicable international regulations. This policy explains how we collect, use, disclose, and protect your personal data.

Information We Collect

- Personal details (e.g., name, contact information, address, email)
- Payment information (processed via secure third-party gateways)
- Health-related preferences, only when voluntarily provided (e.g., for tailored product suggestions)
- Website usage data (cookies, browsing activity)

How We Use Your Information

- To process and deliver your orders
- To provide customer support and respond to inquiries
- To improve our products, services, and website experience
- To comply with regulatory requirements and audits

Sharing of Information

- With logistics partners for delivery
- With payment providers for secure processing
- With regulators or law enforcement agencies when required by law
- We do not sell, rent, or trade your personal data to third parties.

Cross-Border Data Transfers

We may transfer your personal data outside of Malaysia for processing or storage. Such transfers will comply with applicable laws, and we will ensure that appropriate safeguards are in place to protect your information.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After this period, your data will be securely deleted or anonymized.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with PDPA and other applicable regulations.

Your Rights

- Access, correct, or delete your personal data
- Withdraw consent at any time (this may limit our ability to provide certain services)
- Request information about how your data is used and shared

Data Security

We employ industry-standard encryption, firewalls, and access controls to protect your personal data. While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure.