Privacy Policy

Last updated: July 24, 2025

EcoRing (“EcoRing,” “we,” “us,” or “our”) operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (collectively, the “Services”). The Services are supported by carefully selected third‑party providers — for example, we use iPay88 to process online payments securely. This Privacy Policy explains how we collect, use, and disclose your personal information when you interact with the Services. If there is a conflict between our Privacy Policy, this Privacy Policy prevails with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you or another person. Personal information does not include data that has been anonymised or de‑identified so that it cannot identify you. Depending on how you interact with the Services, where you live, and what applicable law permits, we may collect or process the following categories of personal information (including inferences derived from this information):

  • Contact details – name, billing and shipping addresses, phone number, and email address.
  • Financial information – credit‑card, debit‑card, or other payment‑method numbers; transaction details; confirmation codes; and related payment particulars.
  • Account information – username, password, security questions, preferences, and settings.
  • Transaction information – items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your order history.
  • Communications with us – content of your enquiries, feedback, or other correspondence.
  • Device information – details about your device, browser, or network connection; IP address; and other unique identifiers.
  • Usage information – how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  1. Directly from you – when you create an account, make a purchase, complete a form, communicate with us, or otherwise provide information.
  2. Automatically through the Services – from your device via cookies, pixels, and similar technologies when you browse or use our website.
  3. From service providers – when our vendors (e.g., payment processors, logistics partners) collect or process information on our behalf.
  4. From partners or other third parties – such as marketing or analytics providers.

How We Use Your Personal Information

Depending on how you interact with us or which parts of the Services you use, we may use personal information for the following purposes:

1. Provide, Tailor, and Improve the Services

We use your personal information to perform our contract with you and operate the Services. This includes processing payments through iPay88, fulfilling orders, remembering preferences, sending account‑related notifications, handling returns or exchanges, enabling product reviews, and creating a customised shopping experience.

2. Marketing and Advertising

We use your personal information to send marketing and promotional communications (by email, text message, or postal mail) and to show you relevant online ads, including based on items you viewed, added to your cart, or purchased.

3. Security and Fraud Prevention

We use your personal information to authenticate accounts, provide a secure shopping experience, detect and investigate fraudulent or malicious activity, protect public safety, and secure our Services.

4. Communicating with You

We use your personal information to provide customer support, respond to requests, and maintain our relationship with you.

5. Legal and Compliance

We use your personal information to comply with applicable laws, respond to legal processes, enforce our terms, and protect our rights and the rights of others.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes, including:

  • Payment processors (such as iPay88), our e‑commerce platform provider, and other service providers that perform functions on our behalf (e.g., IT infrastructure, data analytics, customer support, cloud storage, fulfilment, and shipping).
  • Business and marketing partners that help us deliver advertising or promotions. These partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of targeted advertising (see Your Rights and Choices below).
  • Third parties you authorise – when you instruct us to share information (e.g., to ship a product) or when you use social‑media widgets or single‑sign‑on integrations.
  • Our affiliates – within our corporate group, for the purposes described in this Privacy Policy.
  • In connection with a business transaction – such as a merger, acquisition, restructuring, or bankruptcy; to comply with legal obligations; to enforce our terms or policies; or to protect the Services, our rights, and the rights of others.

Third‑Party Service Providers

We rely on carefully selected third‑party providers to power different aspects of the Services (e.g., hosting, payment processing, analytics, marketing, and logistics). These providers may process personal information in jurisdictions other than your own. Whenever we share personal information with third‑party providers, we require them to handle that information in accordance with this Privacy Policy and applicable data‑protection laws.

Third‑Party Websites and Links

The Services may link to external websites or platforms operated by third parties. We are not responsible for the privacy or security practices of such sites. We recommend reviewing their privacy policies before providing any personal information. Information you share on public or semi‑public venues, including social‑networking platforms, may be viewable by others.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you are a parent or guardian of a child who has provided us with personal information, please contact us so we can delete it. We do not knowingly “sell” or “share” (as defined by applicable law) personal information of individuals under 18 years of age.

Security and Retention of Your Information

We employ reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure. How long we retain personal information depends on our business needs, legal requirements, and the purpose for which the information was collected.

Your Rights and Choices

Depending on where you reside, you may have some or all of the following rights with respect to your personal information (subject to legal limitations):

  1. Access / Know – request access to the personal information we hold about you.
  2. Delete – request deletion of personal information we maintain about you.
  3. Correct – request correction of inaccurate personal information.
  4. Portability – request a copy of your personal information in a portable format.
  5. Opt Out of Targeted Advertising – direct us not to use or disclose personal information for personalised ads. If you enable the Global Privacy Control signal in your browser, we will honour it in accordance with applicable law.
  6. Manage Communication Preferences – unsubscribe from marketing emails at any time by following the instructions in our messages. You may still receive non‑promotional communications (e.g., order confirmations).

Residents of the UK or European Economic Area may also:

  • Object to or restrict processing of personal information for certain purposes.
  • Withdraw consent where processing is based on consent (without affecting prior processing).

To exercise any of these rights, please contact us using the details below. We may verify your identity before fulfilling your request. You may also appoint an authorised agent to act on your behalf, subject to verification.

Malaysia PDPA

Under Malaysia’s Personal Data Protection Act 2010 (PDPA), certain categories of personal data (for example, data relating to your health, religious beliefs, or biometric identifiers) are treated as sensitive personal data and will only be processed with your explicit consent or as otherwise permitted by law.

Consent withdrawal

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us using the details below. Your withdrawal will not affect the lawfulness of processing carried out before the withdrawal, and we may continue to retain or process your information where another lawful basis applies (e.g., to comply with legal obligations).

Complaints

If you have concerns about how we process personal information, please contact us first so we can address them. Depending on where you live, you may have the right to lodge a complaint with your local data‑protection authority.

International Transfers

We may transfer, store, and process personal information in countries outside your own. Where required, we rely on recognised legal mechanisms, such as Standard Contractual Clauses, to safeguard cross‑border data transfers.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will post any revised version on this page, update the Last updated date, and provide additional notice if required by law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise your data‑protection rights, please email customercare@eco-ring.com.my or write to us at EcoRing Malaysia (HQ), Lot 2.7,2.8,2.9, Ansa Hotel, 101, Jln Bukit Bintang, Bukit Bintang, 55100 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur. EcoRing is the data controller of your personal information.