Privacy Policy

This policy applies to the puritara.pro website, product purchases made on it, and direct communications with us. It does not cover linked external sites, as third parties maintain their own privacy policies.

The data controller is Puritara Wellness Sdn. Bhd., located at No. 42, Jalan Tupai, 34000 Taiping, Perak, Malaysia. For data privacy matters, email [email protected] or call +60 947 481 474.

We only collect information strictly necessary to provide each product and service category.

3.1 Information you provide directly

Full name, shipping address, email, and phone number provided during purchase, as well as support messages or product reviews. Purchase records are retained according to statutory accounting requirements, while chat and support messages are kept for up to 3 years from the last interaction.

3.2 Payment and transaction data

Invoice number, list of supplements ordered, payment amount, payment method, and package status. We do not store card or banking details on this website. Data is retained in accordance with mandatory accounting retention periods.

3.3 Automatically collected information

IP address, web browser type, device, article view history, referral links, and access times recorded by servers and cookies. Log records are stored for 30 days on the server and aggregate data is retained for up to 14 months in the analytics system.

3.4 Marketing and advertising data

Data on links, advertisements, or channels originating your visit here, used specifically to attribute orders to the relevant channel. This record is deleted after 90 days.

3.5 Information from third-party service providers

Parcel tracking updates from couriers and transaction confirmation from banks, matched with your order records.

3.6 Children

This portal is not intended for individuals under 18. We do not knowingly collect children's information; parents or guardians may email [email protected] to request immediate deletion.

Name, delivery address, email, and phone number are required to dispatch botanical compounds and send shipment status updates. Without this data, orders cannot be processed. Other details are optional.

• To pack inventory, dispatch parcels, issue official receipts, and manage the returns and refund process.
• To answer product formulation inquiries and send order tracking updates via email or SMS.
• To monitor server security, prevent suspicious transactions, and analyze portal usage statistics.
• To send product updates only if voluntarily subscribed; every notice includes an unsubscribe link.
• To comply with commercial legal obligations, such as archiving financial and accounting records.

We do not sell customer personal data. Information is only shared with operational service providers bound by processing agreements following our written instructions.

6.1 Payment processing

Banking institutions receive necessary transaction details for account transfer verification purposes.

6.2 Shipping and fulfilment partners

Logistics companies receive the recipient name, physical address, and phone number for parcel delivery and proof of delivery.

6.3 Service providers

Server hosting providers, transactional email systems, and help desk software process technical data on our behalf.

6.4 Advertising and analytics partners

External analytics and tracking cookies, which are active only with your consent, provide browsing activity data to system providers as stated in the Cookie Policy.

6.5 Legal and regulatory disclosures

We disclose information if required by judicial authorities or to protect our legal rights during purchase disputes.

6.6 Business transfers

If this business is acquired or merges with another entity, customer information will be transferred to the new owner under an equivalent level of protection.

Our operating partners may process information outside Malaysia. In such cases, we apply standard contractual clauses or legal adequacy decisions so that the level of protection remains assured.

Subject to the provisions of the Personal Data Protection Act 2010, you hold data subject rights.

8.1 Rights of review, amendment, deletion, and data portability

You have the right to inspect recorded data, correct factual errors, request deletion, receive a standard file copy, restrict processing, and withdraw consent at any time. Withdrawal of consent does not invalidate prior data processing.

8.2 Marketing choices

Every announcement includes an unsubscribe link. Analytics and advertising cookies can be disabled directly through the cookie settings panel.

8.3 Exercising your rights

Please submit requests to [email protected]. We will verify the applicant's identity and respond within 30 days. You may also lodge a formal complaint with the data regulator in Malaysia.

This portal is secured with an encrypted HTTPS connection. Order records are kept in a restricted-access environment and accessible only to personnel involved in product delivery. Card details are never requested or stored on this system.

Invoices and purchase details are retained according to statutory accounting time limits before being destroyed. Support message logs are retained for up to 3 years from the date of the last interaction. Server traffic logs are kept for 30 days and aggregate analytics for up to 14 months. Communication consent is retained until you revoke it.

External links to third-party portals, social media accounts, or payment gateways are governed by the privacy policies of those parties. We do not control and are not responsible for their data handling practices.

We update this document when there are changes to laws or inventory handling procedures. The active document is always accessible on this page with the revision date at the beginning.