Privacy and Policy - Rehla Beauty

This document contains the privacy practices for www.rehlabeauty.com the web site of RHJ TIJARAH SDN. BHD (1421204-U).

Store (the “Site”).RHJ TIJARAH SDN. BHD (1421204-U) (the “Merchant”) takes its obligation to guard your privacy seriously. The purpose of this privacy policy is to inform you about the information that is collected about you, how the Company may use and disclose the information that is collected, and how information can be corrected or changed.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to our website https://rehlabeauty.com (“Website”) and any services we provide through it. By accessing or using our Website or engaging with our services, you consent to the collection, use, disclosure, and retention of your personal data in accordance with this Policy. If you do not agree with this Privacy Policy, please do not use our Website or services.

2. CHANGES TO THIS PRIVACY POLICY

We may, at our sole discretion, revise or add to this Privacy Policy from time to time. We will notify you of any changes by posting the updated version on the Website with a “Last Updated” date. Continuing to use the Website after such changes constitutes your acceptance of the revised Privacy Policy.

3. THE INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect and process the following types of personal data:

Personal Data: Information about an individual who can be identified, either directly or indirectly, such as under the Personal Data Protection Act 2010 (PDPA).
Identity Data: Your name, gender, date of birth, identification or passport number, or other identity documentation you upload.
Contact Data: Your address, email address, phone number, billing and shipping information.
Payment Data: Payment card details, bank account information, transaction history (processed by us or via our payment providers).
Log Data / Device Data: Your IP address, browser type, device information, operating system, usage data, location data (if location-enabled features are used).
Marketing & Communications Data: Your preferences in receiving marketing information from us, your communication history with us.

We collect this data from sources including:

Directly from you when you register, make a purchase, subscribe to our newsletter, or contact us.
Automatically when you use the Website (e.g., via cookies, tracking technologies).
From third-party service providers or public sources when relevant for fraud prevention, verification or compliance.

4. HOW WE USE YOUR PERSONAL DATA

We may use your personal data for various purposes, including but not limited to:

To provide, operate and maintain our Website and services.
To fulfil your orders, process your payments, manage delivery and customer support.
To verify your identity, prevent fraud or misuse, conduct risk assessments and ensure compliance with legal obligations.
To communicate with you regarding your account, orders, changes in services or policies.
To manage your preferences and send you promotional materials (if you have opted in).
To analyse how you use our Website and services, and to improve and tailor our offerings.
For our business operations such as auditing, backup, hosting, software upgrades and internal management.
For any other purposes we notify you of at the time of data collection or with your consent.

If we rely on your consent to use your personal data in a particular way, you can withdraw that consent at any time — which may affect our ability to provide services to you.

5. SECURITY PRACTICES

We adopt appropriate technical, physical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. For example, we implement encryption (SSL), access controls, backups, and internal policies. However, no method of transmission over the Internet or electronic storage is completely secure — we cannot guarantee absolute security.

6. ADVERTISING / MARKETING

If we use your personal data for advertising or marketing purposes, we will do so in accordance with this section.

We may use your personal data to send promotional information about our products or services or those of selected third parties, only if you have given your consent.
You may request that we no longer use your personal data for marketing by contacting us or following the unsubscribe mechanism provided in our communications.
We do not share your identifiable personal data with advertisers. We may, however, share aggregated, anonymised or pseudonymised data for advertising optimisation.

7. SHARING YOUR PERSONAL DATA

We will not share your personal data with third parties except under the following circumstances:

With our service providers, agents or contractors who assist us in operating our Website or delivering services (e.g., payment gateways, shipping/logistics, IT hosting).
With our affiliates or business partners in connection with our business operations, provided they handle your data in accordance with this Privacy Policy.
If required by law, regulation, legal process or governmental authority.
With your explicit consent.

When we permit third parties to collect or use your personal data on our behalf, we will use our reasonable efforts to ensure they only use it for purposes consistent with this Policy and maintain confidentiality and security safeguards.

8. COMMUNICATIONS FROM US

When you use our Website or services, we may send you service-related communications (such as updates to your account or orders) that you cannot opt-out of. We also send promotional communications if you have consented, and you may opt-out of those.

9. THIRD-PARTY SERVICES ON OUR SITE

Our Website may contain links or integrations to third-party websites, services or social media platforms. Your use of such third-party services is subject to their terms of service and privacy policies. We are not responsible for the practices or content of those third parties, and this Privacy Policy does not apply to data collected by them.

10. RETENTION OF YOUR PERSONAL DATA

We will retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Once the data is no longer required, we will take steps to securely delete, anonymise or destroy it.

11. TRANSFER OF YOUR DATA OVERSEAS

Your personal data may be processed or stored outside Malaysia (for example if our service providers operate overseas). We will take reasonable steps to ensure that any such international transfer is compliant with applicable data protection laws and that your data receives adequate protection.

12. YOUR RIGHTS

Subject to applicable laws, you have the following rights:

To request access to the personal data we hold about you.
To request correction or updating of inaccurate or incomplete personal data.
To request erasure of your personal data or cessation of processing (where allowed by law).
To object to processing or request restriction of processing.
To request portability of your personal data in a structured, commonly used, machine-readable format.
To withdraw consent to marketing or processing based on consent.
To lodge a complaint with the relevant data protection authority if you believe your rights have been breached.

To exercise any of these rights, please contact us using the details in Section 13.

13. CONTACT US

If you have any questions about this Privacy Policy or wish to exercise any of your rights, you may contact us:
REHLA Beauty
Email: ad***@*********ty.com
Phone: +6019-342 9377
Address: L1-02 Wangsa 118, Jalan Wangsa Delima,
53300 Kuala Lumpur.

Last Updated: 24 October 2025