1. PDPA notice and data controller
This website is operated by Originald Legacy (IP0539997-V). This policy explains how we collect, use, store, protect, and disclose personal data in commercial transactions, in line with Malaysia's Personal Data Protection Act 2010 (PDPA), including notice, choice, disclosure, security, retention, data integrity, and access principles.
2. Information we may collect
We may receive names, WhatsApp numbers, email addresses, order details, payment proof, communication records, support requests, and any account-related information voluntarily provided for a specific product. Basic technical information such as device type, browser, IP address, page views, and interaction events may be processed through website technology and analytics tools.
3. Consent and choice
By contacting us, submitting information, placing an order, using WhatsApp, or making payment, you understand and agree that your information may be processed for the purposes described in this policy. If required information is not provided, we may not be able to process orders, support requests, warranty claims, or refunds.
4. Purpose of processing
Information is used to respond to enquiries, confirm orders and payments, deliver digital products or instructions, provide support, process warranty or refund reviews, prevent fraud, improve website performance, maintain business records, and comply with legal obligations.
5. WhatsApp, email, and communication data
When you contact Originald through WhatsApp or email, your messages and contact details may be retained for order tracking, support history, dispute resolution, and business records. WhatsApp and email services are also subject to their own privacy policies.
6. Analytics and cookies
This website may use Google Analytics and related technologies to measure page visits, traffic sources, device information, page interactions, and outbound clicks such as WhatsApp actions. These tools may use cookies or similar technologies and may process technical data according to their own policies.
7. Third-party providers
Originald may link to or involve third-party platforms such as Google, Spotify, HBO Max, Prime Video, VPN providers, Canva, CapCut, SuperGrok, WeTV, iQIYI, WhatsApp, Google Fonts, payment channels, and hosting or analytics providers. These providers may process data under their own terms and privacy policies.
8. Disclosure of information
We do not sell customer personal data. Information may be disclosed only where necessary to communication providers, payment channels, technology service providers, professional advisers, dispute resolution parties, or lawful authorities with valid grounds.
9. Security and retention
We take reasonable steps to protect personal data from loss, misuse, unauthorized access, modification, or disclosure. Data is retained only as long as needed for order processing, warranty support, business records, legal compliance, dispute handling, and legitimate operational needs.
10. Data integrity
We take reasonable steps to ensure personal data used for transactions is accurate, complete, not misleading, and up to date. Customers are responsible for informing us if any submitted information is wrong or has changed.
11. Access, correction, and withdrawal
You may request access to personal data under our control, ask for correction of inaccurate data, withdraw consent for certain processing, or request deletion where legally and operationally possible. Withdrawal of consent may affect our ability to provide products, support, warranty, or refund handling.
12. Privacy contact and updates
For PDPA or privacy-related requests, contact us via WhatsApp 010-503 8055 or [email protected]. This policy may be updated when our products, technology, legal obligations, or business processes change.
