Privacy Policy
Last updated · 23 June 2026
This is a demonstration store. No real orders are processed and no payment is taken. The policy below is written to reflect how a live evaporize merch store would handle personal data under Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Who we are
evaporize merch ("we", "us", "our") operates this online store. We are the data user responsible for your personal data under the Personal Data Protection Act 2010 of Malaysia. For any privacy matter, contact us at our contact channel.
2. What we collect
- Identity & contact data — name, email address, phone number, delivery and billing address.
- Order data — items purchased, sizes, order value and history.
- Payment data — handled by our payment processor; we do not store full card numbers on our servers.
- Technical data — device, browser, and anonymous usage stored locally (e.g. your cart and theme preference in your browser).
3. Why we use it (purpose)
We process your data only for clear, lawful purposes: to fulfil and deliver your orders, process payments, provide customer support, send order updates, and — only with your consent — share product drops and offers. We do not use your data for any purpose incompatible with these without notifying you.
4. Consent
By providing your personal data and placing an order, you consent to the processing described here. Marketing communications are strictly opt-in, and you may withdraw consent at any time.
5. Disclosure
We disclose data only to parties needed to run the store — payment processors, delivery/logistics partners, and IT service providers — under confidentiality obligations. We never sell your personal data.
6. Security
We apply practical safeguards (encryption in transit, access controls) to protect your data against loss, misuse and unauthorised access, consistent with the PDPA Security Principle.
7. Retention
We keep personal data only as long as necessary for the purposes collected, or as required by law (e.g. tax records), after which it is securely deleted or anonymised.
8. Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Withdraw consent — opt out of marketing or limit processing.
To exercise any right, contact us and we will respond within the period required by the PDPA.
9. Cookies & local storage
This store uses your browser's local storage to remember your cart, wishlist and light/dark preference. These stay on your device and are not tracking cookies.
10. Changes
We may update this policy and will revise the "last updated" date above. Material changes will be highlighted on this page.