Privacy Policy (Malaysia PDPA 2010 + APEC CBPR Compliant)

1. Introduction

Canadelia (“we”, “our”, “us”) is committed to protecting your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and the APEC Cross-Border Privacy Rules (CBPR) framework.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website.

2. Information We Collect

We may collect the following types of data:

2.1 Personal Information

  • Full name
  • Email address
  • Phone number
  • Shipping & billing address
  • Payment details (processed securely by payment providers)

2.2 Automatically Collected Data

  • IP address
  • Device information
  • Browser type
  • Website usage analytics
  • Cookies & tracking technologies

2.3 Product Verification Data

When scanning product QR codes:

  • Product ID
  • Date & time of verification
  • Registration details for giveaways

3. How We Use Your Information

We use your data for:

  • Order processing and payment confirmation
  • Shipping and delivery
  • Customer support
  • Product authenticity verification
  • Account registration and promotions
  • Website improvement and analytics
  • Compliance with legal requirements

4. Disclosure of Information

We may share your data with:

  • Payment processors
  • Shipping & logistics providers
  • Website hosting partners
  • Regulatory authorities (when required by law)

We do not sell or rent your personal information.

5. Cross-Border Data Transfer

In compliance with APEC CBPR, your data may be transferred securely to servers outside Malaysia, with appropriate safeguards in place.

6. Cookies & Tracking Technologies

We use cookies to improve user experience. You may disable cookies in your browser, but some features may not function properly.

7. Security Measures

We implement industry-standard measures such as:

  • SSL encryption
  • Access controls
  • Secure servers
  • Data minimization practices
  • Regular security reviews

However, no internet transmission is 100% secure.

8. Your Rights Under PDPA

You have the right to:

  • Access your personal data
  • Request correction
  • Withdraw consent
  • Request deletion (where applicable)

Requests may be emailed to:
📧 [email protected]

9. Children’s Privacy

Our website is not intended for children under 13.
We do not knowingly collect their data.

10. Updates to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page.

11. Contact Information

For privacy-related inquiries:
📧 [email protected]