This is a general template, not legal advice. Please review it (for example against Malaysia’s Personal Data Protection Act 2010) and complete the bracketed items before relying on it.

Who we are

This website is operated by Nanyang Aroma Tea ([registered business name and number to be added]). Contact: [Email to be added].

What we collect

• Information you give us when you place an order or create an account: name, phone number, email, billing and delivery address.
• Payment is processed by our payment providers; we do not store full card details on this website.
• Technical data such as cookies and basic analytics needed to run the shop (cart, login, language preference).

How we use it

• To process and deliver your orders and provide customer service.
• To send order updates, and marketing emails only if you have opted in (you can unsubscribe at any time).
• To keep the website secure and improve it.

Sharing

We share data only with service providers needed to run the shop (e.g. payment, delivery, email services) or when required by law. We do not sell your personal data.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at [Email to be added].

Changes

We may update this policy from time to time. Last updated: [date to be added].