Legal

Privacy policy

Last updated: 22 October 2026

This policy explains how Neloire collects and uses your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who we are

Neloire is run by [Registered business name] (SSM registration no. [000000000000]), Malaysia. We are responsible for the personal data you share with us.

2. What we collect

Your name, email, phone number and delivery address when you place an order.
Your order history and any messages you send us.
Your email address if you join our mailing list.
Basic browsing data, such as pages visited and device type, through cookies.

We do not collect or store your card or banking details. Payments are handled by our payment provider.

3. How we use it

To process, ship and support your orders.
To send order confirmations and shipping updates.
To send news and offers, only if you've opted in. You can unsubscribe anytime.
To improve our website and understand which products people like.

4. Who we share it with

We only share what's needed with trusted partners who help us run the shop: our payment provider, couriers (such as J&T Express and Pos Laju), our email service and our website host. We never sell your personal data.

5. Cookies

We use cookies to keep your bag working, remember your preferences and measure how the site is used, including through tools such as Google Analytics and the Meta Pixel. You can turn off cookies in your browser settings, but some parts of the site may not work properly.

6. How long we keep it

We keep order records for as long as required for accounting and legal purposes, and remove marketing data when you unsubscribe or ask us to.

7. Your rights

Under the PDPA, you can ask to see the personal data we hold about you, correct it, or withdraw consent for marketing. Email us and we'll respond within 21 days.