1. Introduction

Healthie is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy applies to information collected through our website and related services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identity Information: full name, date of birth, identity card number or passport number where required
• Contact Information: email address, phone number, and mailing address
• Account Information: username, password hash, and login session identifiers
• Financial Information: payment-related details processed through trusted payment providers where applicable
• Business Information: membership details, referral codes, and commission or bonus records where applicable
• Transaction Information: purchase history, order details, and payment records

2.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on the platform
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Primary Purposes

• Processing your membership registration and account management
• Processing and fulfilling your product orders
• Managing membership/referral records and calculating commissions where applicable
• Processing payments and preventing fraud
• Providing customer support and responding to inquiries

3.2 Secondary Purposes

• Sending product and promotional communications where consent has been given
• Improving our products, services, and platform functionality
• Conducting analytics and research to improve customer experience
• Complying with legal obligations and protecting our rights
• Detecting and preventing fraudulent activities

4. Legal Basis for Processing

We process your personal information based on:

• Contract Performance: processing necessary to fulfill our services to you
• Consent: where you have given explicit consent for specific processing activities
• Legal Obligations: processing required to comply with Malaysian laws
• Legitimate Interests: processing necessary for platform security, service improvement, and fraud prevention

5. Information Sharing and Disclosure

5.1 We May Share Your Information With

• Service Providers: payment processors, shipping companies, and IT infrastructure providers
• Business Partners: where applicable to membership/referral structures with limited information only
• Legal Authorities: when required by law or to protect our rights
• Professional Advisors: lawyers, accountants, and auditors

5.2 We Will Not

• Sell your personal information to third parties
• Share your information for purposes unrelated to providing our services
• Transfer your data outside Malaysia without appropriate safeguards where applicable

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit using SSL/TLS
• Secure server infrastructure and access controls
• Role-based access for staff and admin systems where applicable
• Regular security reviews and patching
• Secure backups and recovery procedures

7. Data Retention

We retain your personal information for as long as necessary to:

• Maintain your account and provide services
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements
• Prevent fraud and ensure security

Generally, we retain data for up to 7 years after account closure or last transaction, unless longer retention is required by law.

8. Your Rights Under PDPA

8.1 Right to Access

You may request access to your personal information we hold.

8.2 Right to Correction

You may request correction of inaccurate or incomplete personal information.

8.3 Right to Withdraw Consent

You may withdraw your consent for processing at any time, subject to legal and contractual restrictions.

8.4 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in Section 12.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Maintain your login session
• Analyze website traffic and usage patterns
• Improve platform performance and security

You can control cookies through your browser settings. However, disabling cookies may affect platform functionality.

10. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

12. Contact Us

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website or displaying a notice on our platform.

14. Governing Law

This Privacy Policy is governed by the laws of Malaysia. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the Malaysian courts.