Privacy policy

Privacy Policy

【Chanlay International Trading Company】

【https://chanley-hk.myshopify.com】

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit, browse, or make purchases on our website. We are a Hong Kong registered unlimited company primarily serving customers in Malaysia. We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (Act 709) ("PDPA"). By accessing and using our Site, you consent to the practices described in this Privacy Policy.

Our registered business address:

【Room D,/F,On Hong Street,15-23 Yee Chong street】

【 MongKok，Kowloon,Hong Kong】

Business Registration Number: 【41667055】

Introduction 2

Data Controller Information 2

Information We Collect 3

How We Use Your Information 4

Information Sharing & Disclosure 5

Returns & Exchanges 6

Data Security 6

Cookies & Similar Technologies 7

Cross-Border Data Transfers 8

Data Retention 9

Your Rights Under the PDPA 9

Complaints 10

Children's Privacy 10

Third-Party Links 11

Changes to This Privacy Policy 11

Consent 12

1. Introduction

This Privacy Policy explains how Chanlay International Trading Company ("we", "our", or "us") collects, uses, stores, and protects your personal data when you visit, browse, or make purchases on our website 【https://chanley-hk.myshopify.com】("the Site").

We are a Hong Kong registered unlimited company and our primary e-commerce operations are directed towards customers in Malaysia. We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (Act 709) ("PDPA"). By accessing and using our Site, you consent to the practices described in this Privacy Policy.

All orders are fulfilled from our warehouse in Guangzhou, China. When you place an order, your personal data may be transferred across borders for the purposes of order processing, payment verification, and shipping arrangements. By submitting your personal data to us, you consent to these international transfers as described in this policy.

2. Data Controller Information

For the purposes of the PDPA, Chanlay Inernational Trading Company is the Data Controller responsible for your personal data. Although we are a Hong Kong registered company, we comply with the PDPA as we collect and process personal data of individuals in Malaysia.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: 【Chanley_hk@outlook.com】

Phone: 【+852 66324532】

Address: 【Room D,/F,On Hong Street,15-23 Yee Chong street, MongKok，Kowloon,Hong Kong】

3. Information We Collect

3.1 Information You Provide Directly

We collect personal data that you voluntarily provide to us during checkout, account registration, or when contacting customer service, including your name, email address, phone number, shipping address, billing address, and payment-related information.

For a better shopping experience, you may also voluntarily provide sizing and fit information (such as size preferences or body measurements) to receive personalized style and fit recommendations. This information is entirely optional.

We also collect information from your communications with us, including customer service inquiries, feedback, product reviews, and survey responses.

3.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and browsing activity, including your IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, products viewed, items added to cart, and general geographic location based on your IP address.

We also use cookies and similar technologies to recognize returning visitors, remember your preferences, and optimize website functionality. See Section 7 for more details.

4. How We Use Your Information

We process your personal data for the following lawful purposes under the PDPA:

Order Fulfillment:

To process and fulfill your orders, verify payments, arrange shipping and delivery from our Guangzhou warehouse, and provide order-related communications.

Customer Service:

To provide customer support, handle returns and exchanges, and respond to your inquiries.

Personalization:

To provide personalized size recommendations, style suggestions, and improve your shopping experience (only if you provide sizing information).

Fraud Prevention:

To verify transactions, prevent fraud, and protect the security of our Site and our customers.

Marketing Communications:

To send promotional emails, style tips, and newsletters — but only if you have explicitly opted in. You may unsubscribe at any time.

Legal Compliance:

To comply with applicable laws, regulations, and legal processes.

5. Information Sharing & Disclosure

We do not sell, trade, or rent your personal data to third parties for their marketing purposes.

We may share your personal data with trusted third-party service providers solely to the extent necessary to operate our business and provide services to you. These include:

Third Party	Purpose	Location
Shopify Inc.	E-commerce platform, hosting, order management	Canada / US / Singapore
Payment Processors	Secure payment processing	International
Logistics Partners	Order delivery and tracking from Guangzhou, China	China / Malaysia / International
Email Services	Transactional and marketing emails	US / International
Analytics	Website usage and performance monitoring	US

All third-party service providers are contractually bound to protect your personal data and are only permitted to process it for specified purposes. We may also disclose your personal data to comply with applicable laws, regulations, court orders, or to protect our rights and safety.

6. Returns & Exchanges

When you request a return or exchange, we collect additional information necessary to process your request, including your order number, reason for return or exchange, condition of the item, and bank account details for refund purposes.

This information is used solely to process your return or exchange request and issue refunds. Bank account details are deleted once the refund has been processed.

Please note that returns are sent back to our fulfilment centre in Guangzhou, China. We will provide you with the return address and instructions when you initiate a return.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, accidental loss, or unlawful processing.

These measures include SSL/TLS encryption for all data transmitted between your browser and our Site, secure payment processing via PCI-DSS compliant payment gateways, access controls limiting who can access personal data within our organization, and regular security assessments.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Cookies & Similar Technologies

Our Site uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files placed on your device when you visit a website. They help the site recognize your device and remember certain information about your visit.

The types of cookies we use are:

Category	Purpose	Examples
Strictly Necessary	Essential for site functionality; cannot be disabled	Cart, checkout, login
Analytics	Understand how visitors interact with our Site	Google Analytics
Functionality	Remember preferences and settings	Language, size preferences
Advertising	Deliver relevant ads and style recommendations	Facebook Pixel, Google Ads

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site.

9. Cross-Border Data Transfers

Your personal data may be transferred to, stored at, or processed in destinations outside Malaysia, including countries that may have data protection laws different from those in Malaysia.

Specifically:

Shopify hosts store data in multiple locations including the United States, Canada, and Singapore.

Our fulfilment operations in Guangzhou, China, require us to transfer order and shipping information to our logistics partners in China for processing and delivery.

Some of our service providers (e.g., payment processors, email marketing platforms) also operate internationally.

When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses and compliance with the PDPA's cross-border data transfer requirements. By submitting your personal data to us, you consent to these international transfers.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Data Category	Retention Period
Order & Transaction Records	7 years (tax and accounting compliance)
Account Information	While active; deleted upon request or after 2 years of inactivity
Marketing Consent Records	2 years after last interaction, or until consent is withdrawn
Customer Service Communications	3 years
Return/Exchange Records	2 years for warranty and quality assurance

After the applicable retention period, your personal data will be securely deleted or anonymized.

11. Your Rights Under the PDPA

As a data subject under the Malaysian PDPA, you have the following rights:

Right	Description
Right to Access	Request a copy of the personal data we hold about you
Right to Correction	Request correction of inaccurate or incomplete personal data
Right to Withdraw Consent	Withdraw consent for processing at any time
Right to Object	Object to processing for direct marketing purposes
Right to Erasure	Request deletion of your personal data, subject to legal requirements
Right to Restrict Processing	Request limitation on how we use your data
Right to Data Portability	Request transfer of your data in a structured format

To exercise any of these rights, please contact us at 【Chanley_hk@outlook.com】 with the subject line "Data Subject Request." We will respond within 21 days as required by the PDPA. We may need to verify your identity before processing your request.

12. Complaints

If you believe we have not handled your personal data in accordance with the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner Office (JPDP):

Personal Data Protection Commissioner Office (JPDP)

Level 8, Galeria PjH, Jalan P4W, Persiaran Perdana,

Precinct 4, Federal Government Administration Center,

62100 Putrajaya, Malaysia

Phone: 03-8000 8000 (MyGCC) / 03-7456 3888 (JPDP Call Center)

Email: aduan@pdp.gov.my

Website: www.pdp.gov.my

13. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take steps to delete that information.

14. Third-Party Links

Our Site may contain links to third-party websites (e.g., social media platforms, partner sites). This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified to you by posting a prominent notice on our Site or sending an email to the address associated with your account. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

【Chanlay International Trading Company】

Email: 【Chanley_hk@outlook.com】

Phone: 【+852 66324532】

Address: 【Room D,/F,On Hong Street,15-23 Yee Chong street, MongKok，Kowloon,Hong Kong】

17. Consent

By using our Site and providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, processing, and disclosure of your personal data as described herein, including the cross-border transfers of your data to Hong Kong, China, and other jurisdictions where our service providers operate.