Privacy Policy

At Klinik Huda, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase. By using our services, you consent to the practices described herein.

1. Information We Collect

When you place an order or interact with our website, we may collect the following:

• Personal identification information: full name, email address, phone number
• Shipping information: delivery address, city, state, postal code
• Payment information: processed securely by Razorpay Curlec — we do not store your credit/debit card or online banking credentials
• Order history: products purchased, transaction dates, amounts
• Website usage data: IP address, browser type, pages visited (via cookies and analytics)

2. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders
• To communicate with you about your order status
• To provide customer support and respond to inquiries
• To improve our website and services
• To comply with legal obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA)

We do not use your personal data for unsolicited marketing without your consent.

3. Payment Processing

All payments are processed through Razorpay Curlec, a PCI-DSS compliant payment gateway. We do not collect or store your full payment card details, online banking credentials, or any sensitive financial data. Your payment information is transmitted directly to Razorpay via encrypted channels.

4. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your data only with:

• Shipping partners: to deliver your order
• Payment processors: Razorpay Curlec for payment processing
• Legal authorities: when required by law or to protect our rights

5. Data Retention

We retain your order and personal information for as long as necessary to fulfil the purposes described in this policy, or as required by Malaysian law. When no longer needed, your data will be securely deleted or anonymised.

6. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to your personal data held by us
• Request correction of inaccurate or incomplete data
• Withdraw consent for data processing (subject to legal obligations)
• Request deletion of your data where applicable

To exercise these rights, contact us using the details below.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

8. Cookies

Our website uses essential cookies to maintain your shopping cart session. We may also use analytics cookies to understand website traffic. You can disable cookies in your browser settings; however, this may affect the functionality of our store.

9. Contact

For privacy-related inquiries or to exercise your data rights, please contact us at 03-3393 3922, WhatsApp 017-927 0013, or visit us at 19, Jalan Muafakat 1, Taman Dato Bandar Meru, 41050 Klang, Selangor.