We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.

Controller of Personal Information

When you conduct a transaction on our website, as part of the process, we collect the personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated above only.

We collect such Non-personal and Personal Information for the following purposes:

1. To provide and operate the Services;

2. To provide our Users with ongoing customer assistance and technical support;

3. To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;

4. To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services; 

5. To comply with any applicable laws and regulations.

Security

Our company is hosted on the Wix.com platform. Wix.com provides us with an online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. 

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

Making a complaint

If you think we have breached the Act 709 Personal Data Protection Act 2010, or you wish to make a complaint about the way we have handled your personal information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.

To the extent that we are subject to the laws of Malaysia when processing personal data (“Personal Data”), [Tarinao Enterprise] is the controller with respect to your Personal Data. That means that we may determine how and why your personal data is used.

Legal Basis for Data Processing

We process Personal Data for the purposes set out in this Privacy Policy, as described above. Our legal basis to process Personal Data includes processing that is: necessary for the performance of the contract between you and Tarinao Enterprise with which you are member (for example, to register you for our services or to resolve billing or customer service inquiries related to your membership or products/services you have purchased); necessary to comply with legal requirements (for example, to comply with applicable accounting rules or to make mandatory disclosures to law enforcement); necessary for our legitimate interests (for example, to manage our relationship with you and to improve the website and our services); and, where legally required and we have no other valid legal basis to process Personal Data, we will use consent by our customers (for example, to provide you with marketing information or share information with third parties as described above), which may subsequently be withdrawn at any time (by contacting us as set out in the “Contact Us” section below) without affecting the lawfulness of processing based on consent before its withdrawal.

In some instances, you may be required to provide us with Personal Data for processing as described above, in order for us to be able to provide you with all of our services, and for you to use all the features of our website.

International Transfers of Personal Data

Personal Data we collect will be transferred internationally. Also, our employees and some of the third-parties to whom we disclose Personal Data (as set out above) may be located in other countries outside of Malaysia, some of which may not provide the same level of data protection as your home country. We take appropriate steps to ensure that recipients of your Personal Data are bound to duties of confidentiality and we implement measures to ensure that any transferred Personal Data remains protected and secure.

Data Retention

We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Rights

You may be entitled, in accordance with applicable law, to object to or request the restriction of processing of your Personal Data, and to request access to, rectification, erasure and portability of your own Personal Data. Requests should be submitted by contacting us as set out in the “Contact Us” section below. We will only share your information with third parties for marketing purposes where you have given your consent to do so, and you can opt-out of such sharing at any time. You may need to separately opt-out of receiving marketing from the third party.

If you are aware of changes or inaccuracies in your information, you should inform us of such changes so that our records may be updated or corrected. You may lodge a complaint with a supervisory authority if you consider that our processing of your Personal Data violates applicable law.

Contact Us

For further information about our Privacy Policy or practices, or to exercise control over your personal information, or make a complaint, please contact us via tarinao.malaysia@gmail.com.