PRIVACY POLICY

Last Updated: August 2026

This Privacy Policy describes how MITRA JAYA EDAR SDN BHD (Company Registration No. 201901015973 (1325301-U)), operating under the brand Natureal Organic (“Natureal Organic”, “we”, “us” or “our”), collects, uses, discloses, stores and protects your personal information when you visit, use or make a purchase from natureal.co (the “Site”).

We are committed to handling personal data responsibly and in accordance with applicable Malaysian laws, including the Personal Data Protection Act 2010 (“PDPA”), where applicable.

By accessing the Site, submitting information to us or purchasing our products, you acknowledge the practices described in this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT

Device and Usage Information

When you visit the Site, we may automatically collect certain information about your device and how you interact with the Site, including:

• Web browser type;

• IP address;

• Device type;

• Operating system;

• Time zone;

• Cookies and similar technologies stored on your device;

• Pages and products viewed;

• Referring websites or search terms;

• Date and time of visits;

• Actions taken on the Site; and

• Other information about how you browse and interact with the Site.

We refer to this information as “Device Information.”

We may collect Device Information using technologies including:

• Cookies – small data files placed on your device or computer to remember preferences, maintain sessions and support website functionality;

• Log Files – files that record actions occurring on the Site and may collect IP address, browser type, internet service provider, referring and exit pages and timestamps;

• Web Beacons, Tags and Pixels – electronic technologies used to understand browsing activity, measure advertising performance and improve our services; and

• Other analytics, advertising and tracking technologies used by our technology and marketing partners.

Order and Customer Information

When you make, attempt to make, or enquire about a purchase through the Site, we may collect information including:

• Full name;

• Email address;

• Telephone number;

• Billing address;

• Shipping or delivery address;

• Order details;

• Products purchased;

• Payment method;

• Transaction information;

• Order status;

• Delivery information; and

• Other information reasonably required to process or fulfil your order.

We refer to this information as “Order Information.”

We generally do not directly store your complete credit or debit card details. Payment information may instead be processed securely by third-party payment gateways, banks, card networks or payment service providers.

When we refer to “Personal Information” in this Privacy Policy, we mean Device Information, Order Information and any other information that identifies or may reasonably identify an individual.

2. HOW WE USE YOUR PERSONAL INFORMATION

We may use Personal Information for purposes including:

• Processing and fulfilling orders;

• Processing and verifying payments;

• Arranging shipping and delivery;

• Providing invoices, receipts and order confirmations;

• Communicating with customers about orders, products, enquiries or services;

• Providing customer support;

• Managing returns, refunds and exchanges;

• Detecting and preventing fraud, suspicious activity or misuse;

• Verifying transactions;

• Maintaining and improving our website and services;

• Understanding how customers browse and interact with our Site;

• Conducting analytics and performance measurement;

• Measuring the effectiveness of marketing and advertising campaigns;

• Personalising advertisements and marketing communications where permitted;

• Administering promotions, campaigns and customer programmes;

• Maintaining business and transaction records;

• Complying with legal, regulatory, tax, accounting and compliance obligations; and

• Protecting our rights, customers, business, systems and services.

Where permitted by law and consistent with the preferences you have provided, we may also use your information to send you information about Natureal Organic products, promotions, offers and services.

3. SHARING YOUR PERSONAL INFORMATION

We may share Personal Information with third parties where reasonably necessary to operate our business, provide our services, complete transactions or comply with applicable laws.

Such parties may include:

• Shopify Inc. and related e-commerce technology providers used to operate our online store;

• Payment gateways and payment processors;

• Banks, card networks and financial institutions;

• Fraud prevention and transaction verification providers;

• Courier, logistics, fulfilment and delivery providers;

• Website hosting and technology providers;

• Customer service and communications providers;

• Analytics providers;

• Advertising and marketing platforms;

• Professional advisers such as accountants, auditors and legal advisers; and

• Government authorities, regulators, enforcement agencies or other parties where disclosure is required or permitted by law.

Payment Partners

Where necessary to process, verify, secure, administer or complete a transaction, we may share relevant customer Personal Information with payment gateways, payment processors, acquiring banks, issuing banks, card networks and other authorised payment partners.

The information shared may include, where relevant:

• Customer name;

• Email address;

• Telephone number;

• Billing information;

• Transaction value;

• Order reference;

• Payment method;

• Device or transaction information; and

• Other information reasonably required to process or verify payment.

Such information is shared only to the extent reasonably necessary for payment processing, fraud prevention, transaction verification, regulatory compliance, dispute management or related payment services.

We seek to handle such disclosures in accordance with applicable requirements under the Personal Data Protection Act 2010 (PDPA) and other applicable Malaysian laws.

Third-party payment providers may independently process Personal Information according to their own privacy policies, regulatory requirements, security standards and terms of service.

MITRA JAYA EDAR SDN BHD does not sell customer Personal Information to payment partners.

4. SHOPIFY

Our online store is hosted on Shopify.

Shopify provides the e-commerce platform that enables us to offer products and services through the Site.

Information submitted through our store may therefore be processed by Shopify and its service providers in accordance with their applicable privacy and security practices.

For more information about Shopify's privacy practices, you may refer to Shopify's Privacy Policy.

5. ANALYTICS

We may use analytics services, including services such as Google Analytics, to understand how visitors use the Site.

These services may collect information such as:

• Device information;

• Browser information;

• IP address;

• Pages visited;

• Time spent on the Site;

• Referral sources; and

• Interaction information.

Analytics information helps us improve the Site, understand customer behaviour and measure the effectiveness of our marketing activities.

6. ADVERTISING AND REMARKETING

We may use advertising and marketing platforms, including platforms such as Meta (Facebook and Instagram), Google and other advertising providers, to:

• Measure advertising performance;

• Understand how users interact with our advertisements;

• Create advertising audiences;

• Conduct remarketing or retargeting campaigns; and

• Display advertisements that may be more relevant to users.

These platforms may use cookies, pixels, tags or similar technologies to collect information about activity on our Site.

Where required, users may manage advertising preferences through the relevant advertising platform or device settings.

7. COOKIES

Cookies help us operate the Site, maintain shopping sessions, remember preferences, understand website usage and support advertising and analytics.

Depending on your browser settings, you may be able to block, restrict or delete cookies.

Please note that disabling certain cookies may affect the functionality of the Site, including shopping cart, checkout or account features.

8. LEGAL DISCLOSURES

We may disclose Personal Information where reasonably necessary to:

• Comply with applicable laws and regulations;

• Respond to lawful requests, court orders or government authorities;

• Investigate suspected fraud, misuse or unlawful activity;

• Enforce our agreements and policies;

• Protect our legal rights or property;

• Protect the safety and security of customers or other persons; or

• Establish, exercise or defend legal claims.

9. PERSONAL DATA PROTECTION AND YOUR RIGHTS

Subject to applicable Malaysian law, including the Personal Data Protection Act 2010, you may have rights in relation to Personal Information held by us.

Depending on the circumstances, you may request:

• Access to Personal Information we hold about you;

• Correction of inaccurate, incomplete or outdated Personal Information;

• Information regarding how your Personal Information is being processed;

• Withdrawal of consent for certain processing activities where processing is based on consent; or

• That we stop sending direct marketing communications to you.

Certain requests may be subject to exceptions, limitations, verification requirements or retention obligations under applicable law.

To submit a privacy-related request, please contact us using the details provided below.

10. MARKETING COMMUNICATIONS

Where you have provided consent or where otherwise permitted by law, we may send you promotional communications regarding products, offers, promotions and services.

You may unsubscribe from marketing emails by using the unsubscribe option included in relevant communications or by contacting us.

Transactional communications relating to orders, payments, deliveries, refunds or customer service may still be sent where necessary.

11. DATA RETENTION

We retain Personal Information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Fulfilling orders;

• Providing customer service;

• Maintaining transaction records;

• Processing refunds or disputes;

• Fraud prevention;

• Accounting and taxation;

• Legal and regulatory compliance; and

• Establishing or defending legal claims.

Order and transaction information may therefore be retained for periods required by applicable legal, accounting, tax, regulatory or business requirements.

When Personal Information is no longer reasonably required, we may delete, anonymise or otherwise securely dispose of it in accordance with our applicable practices.

12. DATA SECURITY

We take reasonable administrative, technical and organisational measures intended to protect Personal Information against:

• Unauthorised access;

• Improper use;

• Loss;

• Disclosure;

• Alteration; or

• Destruction.

However, no method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

13. INTERNATIONAL DATA TRANSFERS

Some of our technology, e-commerce, analytics, advertising or payment service providers may operate or store data outside Malaysia.

Accordingly, Personal Information may be processed or stored outside Malaysia where necessary for the provision of such services.

Where applicable, we will handle such transfers in accordance with applicable Malaysian data protection requirements.

14. THIRD-PARTY WEBSITES AND SERVICES

Our Site may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of third-party websites.

We encourage users to review the privacy policies of third-party services before providing Personal Information to them.

15. DO NOT TRACK

Certain browsers provide a “Do Not Track” signal.

Because there is currently no universally accepted industry standard for responding to all such signals, our Site may not automatically alter its data collection practices when a Do Not Track signal is received.

Users may nevertheless manage cookies and advertising preferences through browser, device and advertising platform settings.

16. CHILDREN'S PRIVACY

The Site is intended for general consumers and is not specifically directed at children.

We do not knowingly seek to collect Personal Information directly from children who are not legally able to provide valid consent under applicable law.

Where appropriate, purchases or use of our services by minors should be undertaken with the involvement or consent of a parent or legal guardian.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices;

• Changes to technologies or service providers;

• Changes to legal or regulatory requirements; or

• Other operational reasons.

The latest version will be made available on this page, and the “Last Updated” date may be revised accordingly.

18. CONTACT US

For questions regarding this Privacy Policy, requests concerning your Personal Information, or privacy-related complaints, please contact:

MITRA JAYA EDAR SDN BHD
Company Registration No.: 201901015973 (1325301-U)
Operating Brand: Natureal Organic

Privacy Compliance Officer
Block 18, Empire Gallery
Jalan Empayer,
41050 Klang
Selangor, Malaysia

Email: hello@natureal.co