Lanhua Group (referred to as we, us, or our) operates this online store. We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have.
By using this website, creating an account, placing an order, or contacting us, you acknowledge this Privacy Policy.
1. Who we are
Lanhua Group is the controller of the personal data processed through this website.
2. Scope
This Policy applies to this website, our online store, customer accounts, orders, and customer support.
It does not apply to third-party websites that we link to. Please review their privacy policies separately.
3. Personal data we collect
Information you provide:
Name, email address, phone number, billing and shipping address, company name, tax or VAT number, account credentials, order details, communications, reviews, and marketing preferences.
Information collected automatically:
IP address, device and browser information, operating system, pages viewed, referring URL, approximate location, and cookie identifiers.
Information from third parties:
Payment providers (payment status and fraud checks), shipping carriers (delivery status), and social login providers (basic profile information such as name and email address if you choose to sign in with Google or Facebook).
We do not intentionally collect sensitive personal data, such as health, religious, or biometric data.
4. How we use personal data
Create and manage your account and authenticate your login.
Process, fulfil, and deliver orders, and handle returns and refunds.
Process payments and prevent fraud.
Provide customer support and respond to your inquiries.
Send transactional messages, such as order confirmations, delivery updates, verification codes, and password reset emails.
Send marketing communications where permitted. You can opt out at any time.
Personalise the website and improve our products and services.
Comply with legal, tax, and accounting obligations, and enforce our terms.
For business customers, manage business relationships, quotations, and credit terms.
5. Legal bases for processing
Performance of a contract: to create your account, process your order, and deliver your products.
Consent: for marketing communications, non-essential cookies, and social login, where required.
Legitimate interests: to prevent fraud, secure our website, and improve our services, balanced against your rights.
Legal obligation: to comply with tax, accounting, and regulatory requirements.
6. Cookies and similar technologies
We use essential cookies to operate the website, such as keeping items in your cart, maintaining your login session, and protecting against fraud.
Where permitted, we use analytics and marketing cookies to understand how the site is used and to improve our services.
You can manage cookies in your browser. Disabling essential cookies may affect website functionality. Where required by law, we ask for consent before setting non-essential cookies.
7. How we share personal data
Service providers: payment processors, shipping carriers, hosting and IT providers, email and SMS providers, analytics providers, marketing partners, and customer support tools.
Professional advisers: lawyers, accountants, and auditors, where necessary.
Authorities and third parties: when required by law, or to protect our rights, safety, and fraud prevention.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
We do not sell your personal data.
8. International transfers
We may process or store personal data in Malaysia and in other countries where our service providers operate.
Where we transfer personal data internationally, we take reasonable steps to protect it, including contractual safeguards and selecting providers with appropriate security measures.
9. Retention
We keep personal data only as long as necessary for the purposes described in this Policy, including account administration, order and tax records, dispute resolution, and legal compliance.
When personal data is no longer needed, we delete it or anonymise it.
10. Security
We use reasonable technical and organisational measures, such as HTTPS encryption, access controls, and confidentiality obligations for staff and providers.
No method of transmission or storage is completely secure. Please protect your password and notify us if you suspect unauthorised access.
11. Your rights
Subject to applicable law, including the Personal Data Protection Act 2010 in Malaysia and, where applicable, the GDPR or UK GDPR, you may have the right to:
Access the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request deletion of your personal data.
Restrict or object to certain processing.
Request portability of your personal data.
Withdraw consent at any time, without affecting processing that already took place.
Lodge a complaint with a supervisory authority. In Malaysia, you may contact the Personal Data Protection Commissioner.
To exercise these rights, please use the Contact Us page. We may need to verify your identity before responding.
You can opt out of marketing emails using the unsubscribe link in the email or by contacting us.
12. Children
Our website is not intended for children under 18.
We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us and we will delete it.
13. Third-party links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The updated version will be posted on this page with a new effective date. Material changes may be communicated by email or by a notice on the website.
15. Contact us
For privacy questions or requests, please use the Contact Us page and include Privacy Request in your message.
