Legal

Privacy Policy

How Anvorel collects, uses and protects your personal data, in line with the Personal Data Protection Act 2010.

Effective 28 October 2026

1. Who we are.

Anvorel is the data user responsible for your personal data under the Personal Data Protection Act 2010 ("PDPA").

2. Personal data we collect.

• Identity and contact details: name, email address, phone number, billing and delivery addresses.
• Account details: login credentials, order history, wishlist and preferences.
• Transaction details: items purchased, amounts and payment status. Card and banking details are processed by our payment gateways; we do not store them.
• Communications: messages, reviews and enquiries you send us.
• Technical data: IP address, device and browser type, and how you use the website, collected through cookies, as described in our Cookie Policy.

3. How we use it.

• To process, deliver and support your orders, including returns and refunds.
• To manage your account and respond to your enquiries.
• To verify orders, prevent fraud and enforce our terms.
• To send marketing emails and newsletters, only where you have opted in. You can unsubscribe at any time.
• To improve our website, products and services.
• To comply with our legal and regulatory obligations.

4. Who we share it with.

We share personal data only as needed with: couriers and logistics partners, payment gateways, IT, hosting and email service providers, professional advisers, and authorities where required by law. We do not sell your personal data.

Some service providers may process data outside Malaysia. Where they do, we take steps to ensure your data receives a comparable level of protection, as required by the PDPA.

5. Cookies.

We use essential cookies to keep you signed in and remember your cart, and optional cookies to understand how the website is used. You can manage cookies in your browser settings; disabling essential cookies may stop parts of the website from working.

6. How long we keep it.

We keep personal data only as long as necessary for the purposes above, including to meet legal, tax and accounting requirements, after which it is securely deleted or anonymised.

7. Security.

We protect your data with encrypted connections, access controls and secure hosting. No system is completely secure, so please use a strong, unique password for your account.

8. Your rights.

Under the PDPA you may:

• request access to the personal data we hold about you;
• ask us to correct data that is inaccurate, incomplete or out of date;
• withdraw consent to, or limit, processing of your data, including for direct marketing.

To make a request, contact us through our contact form. We may need to verify your identity and may charge a fee permitted by the PDPA for access requests. If you withhold or withdraw required data, we may be unable to process your orders.

9. Language.

A Bahasa Malaysia version of this notice is available on request. If there is any inconsistency, the English version prevails.

10. Changes.

We may update this policy from time to time. The latest version is always on this page, with its effective date at the top.

11. Contact us.

Questions or requests about your personal data can be sent to: