Who is responsible.
LAPEARL JEWELRY, registration number JR195207-H, is the data user for the purposes of Malaysia’s Personal Data Protection Act 2010. Its office is at D-29-01, Cybersquare (Vertex Tower), Jalan Teknokrat 7, Cyber 5, Cyberjaya, 63000 Selangor.
Where this policy says “we” or “LaPearl”, that is who it means.
What we collect.
LaPearl receives personal data when you choose to contact us by email, phone or WhatsApp. This may include your name, contact details, the content of your enquiry and any information you choose to provide.
When you submit online checkout, LaPearl receives and stores your name, email address, phone number, fulfilment choice and, for delivery, the shipping address. The server also stores the order items, prices and totals. The bag is saved in your browser’s local storage. Checkout drafts, the selected payment method and payment-recovery state are kept in session storage for the current browser tab.
How and why we use it.
Information you send directly to LaPearl is used to answer your enquiry and provide the help you request. Information submitted with an online order is used to create and manage the order, verify payment, arrange confirmed fulfilment, prevent duplicate or fraudulent activity, provide support and keep records where reasonably needed for business or legal purposes.
What we do not do
- We do not sell or rent personal data.
- We do not send marketing without a separate, deliberate opt-in.
- We do not use personal data for an unrelated purpose without an appropriate basis.
Who else sees it.
When you select an online payment method, Revenue Monster handles the payment credentials and transaction processing needed for that method. LaPearl receives payment status and transaction references used to verify the order, but does not receive full card or bank-account credentials. The website does not automatically book a courier. When LaPearl manually arranges delivery for a confirmed order, only the name, phone number and shipping address needed for delivery are provided to J&T Express. When you choose an email, phone or WhatsApp contact link, the relevant communication service handles the information you send under its own privacy terms. The hosting provider processes the technical requests and stored records needed to operate the website. LaPearl may also disclose information where required by law.
How long we keep it.
- Bag
- Stored in your browser until you remove the items or clear that browser’s data.
- Checkout draft and payment recovery
- Kept in session storage for the current browser tab so checkout can recover a language switch or interrupted attempt. The browser clears session storage when the tab is closed, and the site may clear payment-recovery state earlier when it is safe to do so.
- Order records
- Kept only as long as reasonably needed to fulfil the order, handle payment, refund or support matters, and meet tax, accounting or legal record-keeping requirements.
- Correspondence
- Kept only as long as reasonably needed to handle the enquiry or meet a legal record-keeping requirement.
The current website.
Payment availability is confirmed at checkout. When an online method is available and you submit checkout, the server creates an order record and may start the selected Revenue Monster payment flow. If no method is available, no online payment can be started. LaPearl does not ask you to enter full card or bank-account credentials on this website.
Security
LaPearl uses reasonable organisational and technical safeguards for personal data it receives. No system can be guaranteed completely secure.
Your rights.
Under the PDPA, you may ask LaPearl to:
- provide access to the personal data held about you;
- correct inaccurate or incomplete data;
- stop processing it for a particular purpose or record a withdrawal of consent;
- delete it where LaPearl is not required to keep it for tax, accounting or legal reasons.
Email laperletrading@gmail.com. LaPearl commits to responding within 21 days. We may ask for enough information to verify your identity before acting on a request.
If you are dissatisfied with how a request or complaint is handled, you may contact Malaysia’s Personal Data Protection Commissioner.
Changes
If this policy changes materially, the updated date at the top will change with it. Questions are welcome through the contact page.