Merdeka Sale Starts Now !
Privacy Policy For Aloaro Design
At Aloaro Design (“we”, “our”, “us”), accessible from http://aloaro.com.my, protecting the privacy of our visitors and customers is a priority. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding it, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy applies to our online activities and is valid for visitors and customers of our Website. It does not apply to information collected offline or through channels other than this Website.
Consent
By using our Website and/or placing an order, you consent to this Privacy Policy and agree to its terms.
Information we collect
Depending on how you interact with our Website, we may collect:
- Contact & account information: name, company name, address, email address, phone number (when you register an account, contact us, or place an order).
- Order information: products purchased, order value, delivery address, order history.
- Payment-related information: limited transaction data (e.g. amount, order reference, payment status) received from our payment processor. We do not collect or store your full card number, CVV, or online banking credentials — these are entered directly with our payment gateway, SenangPay (see Section 5 below).
- Communications: the contents of messages, enquiries, or attachments you send us.
- Technical/log data: IP address, browser type, ISP, date/time stamps, referring/exit pages, and click activity (see Section 3).
How we use your information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
Log Files & Cookies
Like most websites, Aloaro Design uses standard log files and cookies. Log files record visitor data such as IP address, browser type, ISP, timestamps, and referring/exit pages. This information is not linked to personally identifiable data and is used for site administration, trend analysis, and improving user experience.
Cookies store information such as visitor preferences and pages visited, helping us customize your experience. You may disable cookies through your browser settings at any time; some site features may not function properly if you do.
How We Use Your Information
We use collected information to:
- Process and fulfil your orders (including sharing necessary data with our payment processor and delivery partners);
- Provide, operate, and maintain the Website;
- Improve, personalize, and expand our Website and services;
- Communicate with you regarding orders, customer service, and (where you have opted in) marketing/promotions;
- Understand and analyze how the Website is used;
- Detect and prevent fraud.
Payment Processing — SenangPay
When you make a purchase on our Website, your payment is processed by our third-party payment gateway, SenangPay.
- To complete your transaction, we share necessary order details with SenangPay (such as order amount, order reference number, and your contact information).
- SenangPay independently collects and processes your card or banking details directly on their secure payment page. We do not have access to, and do not store, your full payment credentials.
- SenangPay’s handling of your data is governed by their own Privacy Policy and security standards. We encourage you to review it at: https://www.senangpay.my
- We are not responsible for SenangPay’s data practices, but we only work with payment processors that maintain industry-standard security certifications (e.g. PCI-DSS compliance).
Third-Party Advertising & Analytics
We and our advertising/analytics partners (e.g. Google) may use cookies and similar technologies to serve ads and analyze site traffic. For example, Google may use cookies to serve ads based on your visits to this and other sites; you may opt out via Google’s Ads Settings: https://policies.google.com/technologies/ads
We have no access to or control over cookies used by third-party advertisers. Each third-party partner has its own privacy policy governing their use of your data; please refer to their respective policies for details.
Data Sharing
We do not sell your personal data. We may share your data only with:
- Our payment processor (SenangPay), to process transactions;
- Delivery/courier partners, to fulfil orders;
- Service providers who help us operate the Website (e.g. hosting, analytics), under confidentiality obligations;
- Authorities, where required by Malaysian law.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, comply with legal/accounting obligations (including under Malaysian tax and consumer protection law), and resolve disputes.
Your Rights Under the PDPA
As a data subject under Malaysia’s Personal Data Protection Act 2010, you have the right to:
- Access — request a copy of the personal data we hold about you (a reasonable fee may apply);
- Correction — request correction of inaccurate or incomplete personal data;
- Withdraw consent — withdraw your consent to our processing of your data, subject to legal/contractual limitations;
- Limit processing — request that we limit the processing or disclosure of your data for marketing purposes.
To exercise any of these rights, please contact Aloaro Design through the contact details provided on our Website. We aim to respond to requests within 21 days, as required under the PDPA.
Note: We also honour applicable rights for visitors covered by other frameworks such as the EU GDPR (right to erasure, data portability, restriction of processing, and objection to processing) and the US CCPA (right to know, delete, and opt out of sale of personal data — we do not sell personal data) where such visitors interact with our Website.
Children's Privacy
We do not knowingly collect personal data from children under the age of 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal data, please contact us immediately and we will take steps to remove such information.
Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Website after changes are posted constitutes acceptance of the revised Policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact Aloaro Design through the contact details provided on our Website.
