Privacy Policy

Who we are

This website is the Sihatree online store. This policy explains how we handle personal data under Malaysia's Personal Data Protection Act 2010.

The information we collect

• Orders: your name, email address, phone number, delivery and billing address, and what you ordered.
• Your account: if you create one, your login details, saved addresses and wishlist.
• Messages: what you send us through the contact form, email or WhatsApp, and wholesale quote requests (including your business details).
• Return requests: the items, the reason, your description and the photos you upload.
• Newsletter: your email address, if you subscribe.
• Visits and shopping activity: on our own servers we record the pages you view, the searches you make on this site, and the products you view, add to your cart, save to your wishlist or buy - with the time, the page address, the website that sent you, any campaign tags in the link, your approximate country and your language. A random identifier stored in a cookie links your visits together. When you sign in, create an account or check out with your email address, this activity is linked to your customer record. These logs do not contain your IP address.

How we use your information

• To take, pay for, deliver and support your order, including returns and refunds.
• To answer your messages and quote requests.
• To keep the site and your account secure and to prevent fraud.
• To understand which pages, products and searches are used, and to improve the site.
• To personalise what you see - for example, showing the flavour you bought before first, or popular products in search.
• To measure our advertising and to show our ads to people who have visited the site.
• To send marketing emails, only if you asked for them.

Your country and language

On your first visit we work out your country from your IP address, using an offline database kept on our own server - your IP address is not sent to anyone for this. We use the country to choose the language and currency the site opens in; you can change both at any time and your choice is remembered. IP geolocation by DB-IP.

Orders and payments

Card details are entered directly with our payment providers (such as Stripe and PayPal) and never reach our servers. We keep only the provider's reference, the card brand and the last four digits.

Marketing messages

We send marketing emails only if you subscribe. Every email has a link to stop them, and you can also write to us at info@sihatree.com.

Cookies

We use cookies for the cart, sign-in, language and currency, for our own visit records, and for analytics and advertising tools. We do not show a cookie consent banner. The Cookie Policy lists the cookies and explains how to block or delete them in your browser.

Third-party services

We share only what each service needs to do its job:

• payment providers, to take your payment and process refunds;
• couriers, to deliver your parcel;
• our email provider, to send order updates and newsletters;
• our hosting provider, which stores the site and its database;
• analytics and advertising platforms, when switched on - Google (Analytics and Ads), Meta (Facebook and Instagram), TikTok, Snapchat, Microsoft Advertising and similar services. They may receive the pages you view, the products and value of a purchase, and, for conversion measurement, a scrambled (hashed) form of your email address.

We do not sell your personal data.

Data security

The site is served over an encrypted connection (HTTPS). Passwords are stored in a scrambled (hashed) form. Access to customer data is limited to staff who need it, and staff sign-in to the control panel uses two-step login.

How long we keep data

• Visit, search and product-activity records: 400 days, then deleted automatically.
• Order records: for as long as Malaysian tax and accounting rules require.
• Newsletter contacts: until you unsubscribe.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, withdraw your consent to marketing, or ask us to delete it, subject to records we must keep by law. Write to info@sihatree.com.

Contact

Questions about this policy: info@sihatree.com or WhatsApp +60 11-1111 9912.