Legal · Last updated 3 August 2026

Privacy Policy

This policy explains how My Royal collects, uses, shares and protects personal data when you visit my-royal.com, create an account, contact us or place an order.

1. Who controls your data

My Royal is the operator of this website and the data user responsible for personal data processed through it. We handle personal data in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 where it applies.

2. Data we collect

• Identity and contact data: name, billing and delivery address, email address and phone number.
• Order data: products, quantities, prices, currency, delivery choice, order history, returns, refunds and customer-service communications.
• Payment-related data: payment status, transaction references and limited card information supplied by our payment provider, such as card brand and last four digits. We do not store complete card numbers or card security codes.
• Account data: username, password hash, preferences and saved addresses.
• Technical and usage data: IP address, browser and device information, cookie identifiers, pages viewed, referral source, security events and checkout diagnostics.
• Information you choose to provide: messages, reviews, uploaded evidence for a damaged or incorrect order, and marketing preferences.

3. Why we use personal data

We use personal data to provide the website; process, verify, fulfil and deliver orders; take and reconcile payments; provide tracking and support; administer returns, refunds and cancellations; prevent fraud, card testing and abuse; maintain accounting and tax records; comply with legal obligations; improve the store; and send marketing only where permitted or consented to. We do not sell personal data.

4. Payments and PCI security

Card payments may be processed by Stripe and other payment providers offered at checkout. Payment details are encrypted in transit over HTTPS and are submitted to the selected payment provider. Stripe processes personal data under its own privacy policy. Our use of hosted or tokenised payment technology reduces the card data handled by our website; complete card details are not stored by My Royal. No online transmission is risk-free, but we use reasonable technical and organisational safeguards and work with payment providers that maintain payment-card security controls.

5. Who receives data

We share only the data reasonably required with service providers supporting the transaction, including payment processors, banks and fraud-prevention providers; couriers, postal operators, customs brokers and delivery partners; WooCommerce/website hosting, security, analytics, email and customer-support providers; professional advisers; and regulators or law-enforcement bodies when required. Providers may process data in other countries, where privacy laws may differ.

6. Cookies and similar technology

Essential cookies keep the cart, checkout, account login, currency and security features working. Preference and analytics cookies may remember choices and help us understand site performance. Where required, non-essential cookies are used only after your choice. You can control cookies through the consent controls (when displayed) and your browser, but blocking essential cookies may prevent cart or checkout functions.

7. Retention

We keep order, payment and transaction records for as long as reasonably required for fulfilment, support, fraud prevention, disputes, accounting, tax and legal obligations. Account and enquiry data is retained while needed for the relevant purpose. When data is no longer required, we delete, anonymise or securely restrict it, subject to backups and lawful retention duties.

8. Your choices and rights

Subject to applicable law, you may ask for access to or correction of your personal data, withdraw consent where processing relies on consent, unsubscribe from marketing, or ask questions about retention and deletion. We may need to verify your identity and may retain information required by law or needed to establish, exercise or defend legal claims. Contact support@my-royal.com.

9. Children

The store is not directed to children. A person who is not legally able to enter a purchase contract must use the store only with the involvement of a parent or legal guardian.

10. Third-party links and updates

Third-party websites have their own privacy practices. We may update this policy when our services, providers or legal obligations change. The date at the top identifies the latest version.