Privacy Policy

Freezeit™  ·  Effective May 2026

Freezeit™ (“Freezeit”, “we”, “us”, or “our”) is committed to protecting the personal data of our customers and website visitors in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and the Consumer Protection (Electronic Trade Transactions) Regulations 2024.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights in relation to that data.

1. General Principle

We collect and process personal data only for lawful purposes that are directly related to our business operations. We do not collect more data than is necessary and will not use your data in any manner that is incompatible with the purpose for which it was collected. By providing your personal data to us, you consent to our use of it in accordance with this policy.

2. Data We Collect (Notice)

We may collect the following personal data when you interact with us or place an order:

• Identity data: Full name
• Contact data: Phone number, email address
• Delivery data: Delivery address, postal code, state
• Transaction data: Order details, payment method type (we do not store full card numbers)
• Subscription data: Membership status, billing cycle dates, renewal history, pause and cancellation records
• Technical data: Browser type, device, IP address, pages visited (collected via cookies)
• Advertising data: Cookie identifiers set by Meta Pixel (e.g. _fbp, _fbc) and click identifiers (e.g. fbclid) used to attribute visits and conversions to our advertising campaigns
• Communication data: Any messages or enquiries you send to us
• Account credentials: If you sign in using Google, we receive your Google profile name, email address, and profile picture from Google. We never receive your Google password.
• Preference data: Communication preferences and marketing opt-in or opt-out status

3. How We Use Your Data (Choice)

Your personal data is used for the following purposes:

• Processing and fulfilling your orders and monthly subscription deliveries
• Managing your Freezeit Community membership — including billing, renewals, pausing, and cancellations
• Sending billing receipts, subscription confirmations, payment reminders, and failed payment notifications
• Arranging and coordinating delivery to your address
• Providing customer support and responding to enquiries
• Sending order confirmations and delivery updates
• Email marketing: Sending you newsletters, new product announcements, exclusive subscriber-only offers, seasonal promotions (e.g. birthday surprises, CNY, Hari Raya), and updates about the Freezeit brand — but only where you have provided consent or as a subscriber to our service
• Notifying you of subscription price changes or material updates to our Terms & Conditions, as required
• Improving our website and services
• Complying with legal and regulatory obligations

You have the right to opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly at jasonlee@freezeittissue.com. Opting out of marketing will not affect transactional emails related to your subscription or orders.

4. Disclosure & Third-Party Sharing

We may share your personal data with trusted third parties solely to fulfil your order and provide our services. These include:

• Logistics & Delivery Partners: We share your name, phone number, and delivery address with our courier and logistics providers to ensure successful delivery of your order.
• Payment Gateways: Payment information is processed securely by our third-party payment processors. We only receive confirmation of payment — we do not store your full payment card details.
• IT & Platform Providers: Our website and e-commerce platform providers may have access to data as part of service delivery, subject to strict confidentiality agreements.
• Sign-in Provider: If you choose to sign in via Google, we receive your basic profile data (name, email, photo). Google’s own privacy policy applies to data they collect on their side.
• Advertising Platforms (Meta / Facebook): We share a cryptographically hashed (SHA-256, irreversible) version of your contact and address data, together with your IP address, browser type, page URL, and conversion event details, with Meta Platforms, Inc. solely to measure the effectiveness of our advertising and reach relevant audiences. See Section 9 for full details and how to opt out.

We do not sell, rent, or trade your personal data to any unrelated third party for marketing purposes.

5. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure HTTPS connections on our website
• Access controls limiting data access to authorised personnel only
• Use of reputable, security-certified payment and logistics partners

While we take every precaution, no method of data transmission or storage is 100% secure. We encourage you to contact us immediately if you suspect any unauthorised use of your data.

6. Data Retention

We retain your personal data only for as long as it is necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Specifically:

• Order and delivery records are generally retained for 7 years in accordance with Malaysian commercial law requirements.
• Subscription membership data (including billing history and cancellation records) is retained for the duration of your membership and for 7 years thereafter.
• Marketing preferences and opt-out records are retained indefinitely to ensure we honour your communication preferences.

Account deletion: If you delete your account, your profile and login credentials will be permanently removed from our systems. However, we may retain certain transactional records (such as order history, payment confirmations, and billing records) even after account deletion, as required under Malaysian law — including the Income Tax Act 1967, the Companies Act 2016, and general commercial record-keeping obligations — for a period of up to 7 years. Such retained records are kept solely for legal compliance purposes and will not be used for marketing.

After the applicable retention period, data is securely deleted or anonymised.

7. Data Integrity

We take reasonable steps to ensure that the personal data we hold is accurate, complete, and up to date. If you believe that any of your personal data held by us is inaccurate or incomplete, please contact us and we will correct it promptly.

8. Your Rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Withdraw consent to the processing of your data (subject to legal or contractual restrictions)
• Request deletion of your personal data, where permitted by law
• Limit the processing of your data in certain circumstances

Delete your account yourself: You may permanently delete your account at any time directly from your Dashboard → Profile → Danger Zone → Delete Account. This will immediately remove your profile and login credentials. Please note that certain transactional records may be retained as described in Section 6 above to comply with Malaysian legal obligations.

To exercise any of these rights, or if you require assistance with account deletion, please contact our Data Protection Officer at:

jasonlee@freezeittissue.com

We will respond to all requests within 21 days as required under the PDPA.

Complaints to the regulator: If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi). Visit www.pdp.gov.my for more information.

9. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and measure the effectiveness of our advertising. You may disable cookies through your browser settings, though some features of the website may not function correctly as a result.

Meta Pixel and Conversions API: We use Meta’s Pixel and Conversions API to understand how visitors interact with our site, measure conversions from our advertising on Facebook and Instagram, and show relevant ads to people who have visited our site. To do this we share with Meta Platforms, Inc. a cryptographically hashed (SHA-256, irreversible) version of your email address, phone number, name, and address — together with your IP address, browser type, page URL, and conversion event details (e.g. Subscribe, Purchase). Hashing is performed before transmission so that Meta cannot recover the underlying personal data. You can manage how Meta uses your activity at facebook.com/adpreferences, or opt out of such tracking by adjusting your browser’s privacy settings or using a tracking-protection extension.

Google Analytics: We use Google Analytics to measure website traffic and understand how visitors use our site, including pages viewed, referral sources, approximate location, device type, browser information, and on-site interactions. Google Analytics may use cookies or similar technologies and may process this information on servers outside Malaysia. You can control cookies through your browser settings or learn more about Google’s data practices at policies.google.com/technologies/partner-sites.

10. International Data Transfers

Some of our trusted service providers may operate or store data outside Malaysia, primarily in the United States, Singapore, and the European Union. By using our services, you consent to your personal data being transferred to and processed in these jurisdictions.

We only work with providers that maintain data protection standards comparable to those required under the PDPA 2010, including encryption in transit, access controls, and contractual data-protection commitments.

11. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data, please contact us at:

FREEZEIT TISSUE (KT0609003-H)
jasonlee@freezeittissue.com