Extra Natural's Privacy Notice (Notis Privasi)

Last Updated: 29 December 2025

This Privacy Notice is issued in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and its 2024 amendments. It explains how we collect, use, and protect your personal data.

1. Collection of Personal Data

We collect personal data that is necessary for our business transactions, including but not limited to: • Identification: Name, IC number (if required for high-value items/verification), gender, and date of birth. • Contact: Shipping address, billing address, email address, and phone number. • Technical: IP address, cookies, and browsing behavior on our site.

2. Purpose of Collection

Your data is processed for the following purposes: • To process and fulfill your orders. • To manage your account and provide customer support. • To comply with legal and tax obligations in Malaysia (e.g., SST record keeping). • For marketing purposes (subject to your explicit consent).

3. Source of Personal Data

Most data is collected directly from you when you register an account or make a purchase. We may also collect data from cookies or third-party payment gateways (e.g., IPAY88, Billplz) to verify transaction status.

4. Disclosure to Third Parties

We do not sell your data. However, we may disclose your data to: • Logistics Partners: Courier services (e.g., LineClear, NinjaVan) for delivery. • Payment Processors: To facilitate secure payments. • Regulatory Bodies: To comply with Malaysian law or law enforcement requests.

5. Your Rights (Access & Correction)

Under the PDPA, you have the right to: 1. Access: Request a copy of your personal data held by us. 2.Correction: Request to update or correct inaccurate data. 3. Withdraw Consent: Opt-out of marketing communications at any time. 4. Data Portability (New 2025): Request to transfer your data to another service provider in a machine-readable format.

6. Security & Retention

We implement practical technical and organizational measures to protect your data. We retain your personal data only for as long as necessary to fulfill the purposes outlined above or to meet legal requirements.

7. Contact Us

If you have any questions about your privacy or wish to update/delete your personal data, please contact our Privacy Coordinator at hr@extranatural.com.my. We will respond to your request within 21 days as required by the PDPA.