privAcy pOlicy

This Privacy Policy explains how T&L Slimming Global Sdn. Bhd. (Company Registration No. 201601024428 (1195367-T)), trading as smoo (“we”, “us”), collects, uses, shares, stores and protects your personal data when you browse smoo.com.my, place an order, or contact us (together, the “Website”).

We process personal data as a data controller under the Personal Data Protection Act 2010 of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024 (the “PDPA”). The terms on which we sell to you are set out separately in our Terms & Conditions.

The short version: there is no account and no login — your cart lives in your own browser. Leaving your email for our offers is optional and is not an account; you can shop without it. At checkout we take only what a courier needs to reach you. Payment is by bank transfer inside your own banking app, so we never see your banking credentials. We don’t sell your personal data. You can ask us for a copy of your data, correct it, or ask us to delete it — see Section 10.

1. What this Policy covers

This Policy covers smoo.com.my and the orders you place on it. It does not cover our pages on Instagram, Facebook or TikTok, which are governed by those platforms’ own policies, or third-party websites we link to.

2. You do not need an account

There is no login on the Website and we do not ask you to register — no password, nothing to log into. That is separate from the email list: leaving your email for our offers is optional, is not an account, and is never required to shop (you can always buy at the regular price without it). Your shopping cart and small preferences are stored in your own browser, not on our servers. If you browse without ordering or signing up, we never receive your name, address or contact details at all. We only receive your personal data at the point where you decide to send it to us: when you join our email list, complete checkout, upload a payment receipt, or email us.

3. What data we collect

• (a) Email list signup (optional) — your email address and the date you signed up, when you choose to join our list (for example through a signup offer we may be running). Unsubscribe any time.
• (b) When you check out — required: name, phone number and delivery address; optional: email address and an order note. We also record what you ordered, the amount, the date, and your order number.
• (c) Payment receipt — the bank-transfer receipt you upload so we can verify payment. The transfer itself happens inside your own banking app; we never see or store your banking credentials.
• (d) Collected automatically — anonymous, aggregated visit statistics via Vercel Analytics (cookie-free), and, where enabled, advertising measurement via Meta Pixel. See Section 5.
• (e) From our partners — couriers give us the tracking number and delivery status of your parcel; advertising platforms give us aggregated campaign reports that do not name you to us.

Please keep sensitive details out of the order note. The note box is free text — use it for delivery instructions and gift messages only. Under the PDPA, health and biometric data are sensitive personal data; the Website is not designed to collect either. If you send us sensitive details voluntarily, we will use them only to answer you and never for marketing.

4. How we use your data

• Process your order, verify payment, ship it, and contact you about it — performance of our contract with you.
• Send you any signup offer you requested and, if you joined our list, occasional updates and offers — with your consent; unsubscribe any time.
• Keep the Website working and secure — our legitimate interest in running a safe, functioning store.
• Improve the site and measure our advertising — analytics and, where enabled, Meta’s advertising tools.
• Keep records we are legally required to keep — accounting and tax law.

5. Cookies, browser storage and tracking

• Strictly necessary (set by smoo, not optional): your cart is held in your browser’s local storage under smoo_cart_v1, and your popup/offer preferences under smoo_welcome_v1 / smoo_welcome_email. The store cannot work without these. They stay in your browser and are never sent to us except as part of an order you place.
• Analytics (Vercel Analytics): anonymous, aggregated visit statistics, collected without cookies and without identifying you.
• Advertising (Meta Pixel, where enabled): measures whether our ads work and lets us show relevant ads on Facebook and Instagram (cookie: _fbp, expires after 3 months). Governed also by Meta’s own policies. You can block or delete cookies in your browser settings at any time — the store still works.
• Google Fonts serves our typefaces and will see your IP address as a result of loading them.

6. Sharing

We never sell your personal data. We share it only with the services needed to run the store, and each only receives what it needs: courier companies (name, phone, address — to deliver your parcel); Vercel (our hosting and storage provider, where order, signup and receipt data is stored); and Meta’s advertising tools where enabled (aggregated measurement). We may also disclose data where the law requires it.

7. Storage, security and retention

Your data is stored securely with our hosting provider and is accessible only to our team. We keep order records for as long as needed for warranty, accounting and legal purposes; payment receipts until the order is settled and any claim period has passed; and email subscriptions until you unsubscribe, after which we remove your address from the marketing list.

8. Children

The Website is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.

9. International visitors

The Website is intended for customers in Malaysia and our data is processed under Malaysian law. If you browse from elsewhere, mandatory protections of your own country may also apply to you.

10. Your rights

Under the PDPA you can ask us to: access the personal data we hold about you; correct it; delete it; limit how we use it; or withdraw consent for marketing — at any time, by emailing us. We will respond within the timeframes the PDPA sets. If you are not satisfied with our response, you may complain to the Personal Data Protection Department (JPDP) Malaysia.

11. Changes to this Policy

We may update this Policy as the store grows. The latest version always lives on this page, with the date at the top. Material changes will be posted on the Website before they take effect.

12. Contact

T&L Slimming Global Sdn. Bhd. (201601024428 (1195367-T)), trading as smoo
Prime Axis Industrial Park No.16, Jalan Sepadu 25/123A, Taman Sri Muda, 40400 Shah Alam, Selangor, Malaysia
Email: hello.smootravel@gmail.com