Privacy policy
Privacy Policy for [Shoyu Bros]
Last Updated: [19.05.2026]
1. Introduction
This Privacy Policy describes how ArtisanLab Sdn Bhd (202001018391) ("we", "us", or "our") collects, uses, and discloses your personal information when you visit or make a purchase from shoyubros.com (the "Site"). In compliance with the Malaysian Personal Data Protection Act 2010 (PDPA), we are committed to protecting the privacy of our customers.
2. Personal Information We Collect
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view.
When you make a purchase, we collect:
-
Identity Data: Name and IC/Passport number (if required for tax purposes).
-
Contact Data: Billing address, shipping address, email address, and phone number.
- Financial Data: Payment details (processed securely via Razorpay Curlec).
3. Purpose of Processing (Lawful Basis)
We process your personal data under the following grounds:
-
To Fulfill a Contract: Processing your order, arranging for shipping, and providing you with invoices/order confirmations.
-
Legal Obligation: To comply with Malaysian tax laws (SST) and e-invoicing requirements.
4. Disclosure to Third Parties
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example:
-
Shopify: To power our online store.
-
Razorpay Curlec: To process your payments securely.
-
Courier Services: To deliver your artisan shoyu to your doorstep.
-
Regulatory Bodies: We may share information to comply with applicable laws and regulations (e.g., KPDN or LHDN).
5. Your Rights Under PDPA
As a Malaysian data subject, you have the following rights:
-
Right of Access: You can request a copy of the personal data we hold about you
-
Right of Correction: You can request that we correct inaccurate or incomplete data.
-
Right to Withdraw Consent: You may withdraw your consent for marketing at any time by clicking "unsubscribe" or contacting us.
-
Right to Prevent Processing: You may request that we limit the processing of your data.
6. Data Retention
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. We retain data as long as necessary to comply with Malaysian accounting laws (usually 7 years).
7. Security
We implement physical, technical, and administrative security measures to protect your data. All payment transactions are encrypted using SSL technology through our payment gateway provider, Razorpay Curlec.
8. Contact Us
For more information about our privacy practices, or if you would like to make a complaint, please contact our Data Protection Officer:
ArtisanLab Sdn Bhd Email: artisanlabb@gmail.com
Address: NO. 41, JALAN PJS 1/28,TAMAN PETALING UTAMA 3, 46000 PETALING JAYA, SELANGOR DARUL EHSAN