Who we are

Suggested text: Our website address is: https://beauxmed.com.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.

Beauxmed Privacy Policy and Personal Data Protection Notice

Effective date: 27 July 2026
Last updated: 27 July 2026

1. Introduction

Beauxmed respects your privacy and is committed to protecting your personal data.

This Privacy Policy and Personal Data Protection Notice explains how Beauxmed Trade, trading as Beauxmed (“Beauxmed”, “we”, “us” or “our”), collects, records, holds, stores, uses, discloses, transfers and otherwise processes your personal data when you:

• visit or use our website;
• create or manage a customer account;
• place or attempt to place an order;
• make a payment;
• communicate with us;
• participate in a promotion, survey, loyalty programme or campaign;
• subscribe to or consent to marketing communications; or
• otherwise interact with Beauxmed.

This notice applies to Beauxmed’s website, online store, customer accounts, communications, marketing activities and related services.

By providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. Where consent is required, we will request it through the relevant registration, checkout, subscription or communication process.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data.

2.1 Identity and contact information

This may include:

• full name;
• billing and delivery address;
• email address;
• mobile or telephone number;
• account username;
• customer identification or reference number;
• date of birth or age range, where voluntarily provided;
• preferred language; and
• communication preferences.

2.2 Account information

This may include:

• account login details;
• encrypted or securely hashed password;
• account registration date;
• saved addresses;
• wishlist or saved products;
• account preferences;
• consent records;
• marketing preferences; and
• account activity.

You are responsible for keeping your login credentials confidential and for notifying us if you suspect unauthorised use of your account.

2.3 Order and transaction information

This may include:

• products viewed, selected or purchased;
• order number and order history;
• purchase value;
• discount, voucher or affiliate information;
• payment status;
• delivery selection;
• shipment tracking information;
• returns, refunds, cancellations or disputes;
• customer service history; and
• information necessary to verify or fulfil an order.

2.4 Payment information

Payments may be processed through HitPay and its banking, card, e-wallet, payment-network or other payment partners.

Depending on the payment method, payment information may include:

• payer name;
• billing details;
• payment method;
• payment status;
• payment reference or transaction ID;
• issuing bank or payment provider; and
• limited card information, such as card type or the last digits of a card, where made available to us.

Full card, bank-account or e-wallet credentials are generally submitted directly to the relevant payment processor rather than entered into or retained by Beauxmed. Payment processing is also subject to HitPay’s and the relevant payment provider’s own terms and privacy practices. HitPay states that its services include e-commerce payment gateway processing and that it applies privacy and security measures to data under its control.

2.5 Delivery information

For delivery and fulfilment purposes, we may process and share:

• recipient name;
• delivery address;
• telephone number;
• email address, where required;
• order or parcel reference;
• parcel description;
• parcel weight and dimensions;
• delivery instructions; and
• tracking and delivery status.

2.6 Website, device and technical information

When you use our website, we may automatically collect:

• Internet Protocol address;
• device type;
• browser type and version;
• operating system;
• approximate location derived from technical information;
• website pages visited;
• links or buttons selected;
• referring website;
• session information;
• login and security logs;
• cookie identifiers;
• shopping-cart activity;
• checkout activity; and
• dates and times of access.

2.7 Communications and user-provided information

We may collect information contained in:

• emails;
• WhatsApp messages;
• telephone calls;
• contact forms;
• product enquiries;
• reviews;
• survey responses;
• complaints;
• return or refund requests;
• social-media interactions;
• photographs or videos voluntarily submitted to us; and
• other communications with Beauxmed.

Please do not provide sensitive personal data that is unnecessary for your purchase or enquiry.

3. How we collect personal data

We may collect personal data:

• directly from you during registration, checkout or communication;
• through your Beauxmed account;
• automatically through cookies and website technologies;
• from HitPay and other payment providers;
• from J&T Express, EasyParcel or other appointed couriers and fulfilment providers;
• from affiliate links, promotional partners or social-media platforms;
• from fraud-prevention, security or verification providers;
• from publicly available sources; and
• from another person placing an order on your behalf.

Where you provide personal data concerning another person, such as a gift recipient, you confirm that you have authority to provide the information and have informed that person about the relevant processing.

4. Why we process your personal data

We may process personal data for the following purposes:

• registering, creating and administering customer accounts;
• authenticating users and securing accounts;
• processing and confirming orders;
• processing payments and refunds;
• arranging packaging, fulfilment, shipment and delivery;
• communicating order and delivery updates;
• providing customer service;
• responding to enquiries, complaints, returns and disputes;
• administering warranties, exchanges or refunds;
• maintaining transaction, accounting and tax records;
• detecting and preventing fraud, abuse and unauthorised transactions;
• enforcing our terms, policies and legal rights;
• improving our website, products, customer service and business operations;
• conducting analytics, research and customer segmentation;
• measuring advertising and campaign performance;
• personalising content, product suggestions and offers;
• sending marketing communications where you have consented or where otherwise permitted by law;
• managing affiliate, referral, loyalty or promotional programmes;
• complying with applicable laws, regulations, court orders and lawful authority requests;
• protecting the safety, rights and property of Beauxmed, customers and others; and
• facilitating a business restructuring, financing, acquisition, sale or transfer, subject to appropriate confidentiality arrangements.

Personal data requested during account creation or checkout may be mandatory where it is necessary to provide the requested account, payment, order or delivery service. Failure to provide mandatory information may prevent us from creating an account, accepting an order, processing payment or arranging delivery.

5. Registration and marketing consent

During account registration, you may be asked to consent to receiving Beauxmed marketing communications.

Where you select the marketing consent option during registration, you consent to Beauxmed using your name, email address, mobile number, account activity, order history, product interests and engagement information to send or display:

• product launches;
• special offers and promotional discounts;
• vouchers;
• abandoned-cart reminders;
• restock notifications;
• educational beauty and wellness content;
• customer surveys;
• event or campaign invitations;
• loyalty and affiliate promotions;
• personalised product recommendations; and
• advertisements relevant to your interests.

These communications may be delivered through:

• email;
• SMS;
• WhatsApp or similar messaging applications;
• telephone calls;
• social-media platforms;
• online advertising platforms;
• website notifications; and
• other contact channels you have provided or selected.

We may use your information to create advertising audiences or measure advertising performance through service providers such as social-media and digital-advertising platforms. Where feasible, identifiers may be hashed or otherwise protected before being transmitted.

We will not require you to continue receiving promotional marketing as a condition of completing an existing order.

You may withdraw your marketing consent at any time by:

• using an unsubscribe link in an email;
• replying “STOP” or following the instructions in an SMS or WhatsApp message;
• changing your preferences through your account dashboard, where available; or
• emailing beauxmed88@gmail.com.

Withdrawal from marketing will not affect essential account, security, payment, order, service or delivery communications.

Under section 43 of Malaysia’s PDPA, individuals may require an organisation to stop processing their personal data for direct-marketing purposes. The Act defines direct marketing broadly as advertising or marketing material directed to particular individuals.

6. Cookies and similar technologies

Our website may use cookies, pixels, tags, local storage and similar technologies.

6.1 Necessary cookies

These cookies support functions such as:

• account login;
• shopping carts;
• checkout;
• payment processing;
• fraud prevention;
• security;
• load balancing; and
• remembering privacy choices.

Some necessary cookies cannot be disabled through our cookie tool because the website may not operate correctly without them.

6.2 Preference cookies

These remember settings such as language, location, display or account preferences.

6.3 Analytics cookies

These help us understand website traffic, page performance, visitor journeys, conversion rates and technical problems.

6.4 Advertising and marketing cookies

These may be used to:

• measure advertising performance;
• limit repeated advertisements;
• understand campaign attribution;
• create relevant audiences; and
• display personalised advertisements on third-party platforms.

Where required, non-essential cookies will be activated according to the choices made through our cookie banner or consent-management tool.

You can also control cookies through your browser settings. Blocking certain cookies may affect website functions, account login, checkout or personalisation.

7. Disclosure of personal data

We may disclose personal data only where reasonably necessary for the purposes described in this policy, including to the following categories of recipients.

7.1 Payment providers

This includes:

• HitPay;
• banks;
• card networks;
• e-wallet providers;
• payment acquirers;
• fraud-prevention providers; and
• other payment-processing partners.

7.2 Couriers and fulfilment providers

This includes:

• J&T Express;
• EasyParcel;
• other appointed couriers;
• warehouse or fulfilment providers;
• customs agents; and
• delivery-support providers.

We will normally share only the information reasonably required to prepare, deliver, track, return or investigate a parcel.

7.3 Website and technology providers

This may include:

• website hosting providers;
• WordPress and WooCommerce-related service providers;
• database and cloud-storage providers;
• cybersecurity providers;
• email and communication providers;
• analytics providers;
• customer-management systems;
• backup and technical-support providers; and
• cookie-consent providers.

7.4 Marketing providers

This may include email, SMS, WhatsApp, social-media, advertising, affiliate, campaign-management and customer-engagement service providers.

These providers may process information to deliver communications, measure campaigns, create audiences or personalise advertising in accordance with our instructions and their applicable terms.

7.5 Professional advisers and authorities

We may disclose information to:

• accountants;
• auditors;
• insurers;
• lawyers;
• banks;
• regulators;
• tax authorities;
• courts;
• law-enforcement authorities; and
• other persons where disclosure is required or permitted by law.

7.6 Business transfers

If Beauxmed or its assets are involved in a proposed or completed merger, sale, acquisition, financing, restructuring or transfer, personal data may be disclosed to the relevant parties and advisers subject to confidentiality, legal and data-protection requirements.

We do not sell customers’ personal data as a standalone commercial product.

8. International processing and transfers

Some service providers, payment providers, cloud providers, analytics platforms or marketing platforms may store or process information outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is made for a lawful purpose and that appropriate contractual, organisational or technical safeguards are applied, subject to applicable Malaysian law.

9. Data security

We take reasonable and practical administrative, technical and organisational measures intended to protect personal data against:

• loss;
• misuse;
• unauthorised access;
• accidental disclosure;
• alteration;
• destruction; and
• other unauthorised processing.

Measures may include access controls, passwords, encryption where appropriate, secure connections, restricted administrative privileges, software updates, backups, staff confidentiality measures, service-provider assessment and incident-response procedures.

Where a third-party processor handles personal data for Beauxmed, we may require appropriate confidentiality and security measures according to the nature of the service and data involved.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should use a unique password, protect their devices and notify us promptly of suspected unauthorised account activity.

The Malaysian PDPA requires practical security measures and reasonable safeguards when processors handle data. It also requires personal data to be deleted or permanently destroyed when it is no longer required for its processing purpose.

10. Personal data breaches

Where we become aware of a suspected personal data breach, we may investigate, contain and remediate the incident.

Where required by applicable law, we will notify the Malaysian Personal Data Protection Commissioner as soon as practicable and notify affected individuals without unnecessary delay where the breach causes or is likely to cause significant harm.

The 2024 amendments introduced statutory breach-notification obligations and direct security responsibilities for data processors.

11. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

• maintain an active customer account;
• complete transactions and deliveries;
• handle returns, refunds and disputes;
• provide customer support;
• maintain accounting, taxation and business records;
• detect and prevent fraud;
• establish, exercise or defend legal claims;
• comply with regulatory and legal requirements; and
• maintain evidence of consent, withdrawal or privacy requests.

Different categories of information may be retained for different periods.

For example:

• active account information may be retained while the account remains active;
• order, payment, tax and accounting information may be retained for the applicable statutory period;
• customer-service records may be retained for a reasonable period after the enquiry is resolved;
• marketing information may be retained until consent is withdrawn or the information is no longer required;
• suppression records may be retained after an unsubscribe request to ensure that further marketing is not sent; and
• security logs may be retained for fraud prevention, investigation and system protection.

When information is no longer required, we will take reasonable steps to delete, anonymise or permanently destroy it.

12. Your rights and choices

Subject to applicable law, identity verification and permitted exceptions, you may request to:

• access personal data held about you;
• correct inaccurate, incomplete, misleading or outdated personal data;
• update your contact or account information;
• withdraw consent;
• stop direct marketing;
• restrict or object to certain processing;
• delete information that is no longer required;
• close your account;
• obtain information concerning the processing of your data;
• make a complaint; or
• request data portability where legally applicable and technically feasible.

Malaysia’s PDPA provides access and correction rights, while the 2024 amendments introduced a data-portability right subject to technical feasibility and compatible formats.

13. Managing your information through the account dashboard

You may access your My Account dashboard to review or update information made available there, such as:

• name;
• email address;
• telephone number;
• billing address;
• delivery address;
• password;
• saved account details; and
• available communication preferences.

Certain order, payment, security or historical records may not be directly editable through the dashboard.

For information that cannot be changed through your account, or for access, deletion, portability, account closure or privacy complaints, email:

beauxmed88@gmail.com

Please use the subject line:

Personal Data Request – [Your Name]

We may request reasonable information to verify your identity and protect your account before processing a request.

14. Deletion and account closure

You may request account closure or deletion through the account dashboard, where that function is available, or by contacting beauxmed88@gmail.com.

Account closure does not necessarily result in immediate deletion of every record.

We may retain information where reasonably necessary to:

• comply with tax, accounting or other legal requirements;
• maintain transaction and delivery records;
• resolve a dispute, chargeback, refund or complaint;
• detect or prevent fraud;
• enforce an agreement;
• protect legal rights;
• maintain an unsubscribe or suppression record; or
• comply with an order from a court, regulator or authority.

Where full deletion is not legally or operationally permitted, we may restrict the information from ordinary use and retain it only for the relevant permitted purpose.

15. Communications that cannot be opted out of

Even where you withdraw marketing consent, we may continue to send non-promotional communications concerning:

• account verification;
• password resets;
• payment confirmations;
• order confirmations;
• shipment and delivery updates;
• returns and refunds;
• safety notices;
• suspected fraud;
• changes materially affecting your account or order; and
• legal or privacy notices.

These communications are part of administering your account, transaction or requested service and are not promotional marketing.

16. Third-party websites and platforms

Our website may contain links to third-party websites, payment pages, social-media platforms or services.

Beauxmed does not control the privacy practices of independent third parties. You should review the relevant third party’s privacy policy before submitting information directly to it.

17. Minors

Our website and products are intended primarily for adults.

Persons under 18 should use the website or provide personal data only with the involvement and consent of a parent or legal guardian. Where we reasonably believe that personal data was submitted by a minor without appropriate consent, we may delete or restrict the information.

18. Accuracy of information

You should ensure that personal data provided to us is accurate, complete and current.

You may update available information through your account dashboard. Please notify us promptly if information relevant to an order, delivery or account changes.

19. Changes to this policy

We may update this Privacy Policy periodically to reflect:

• changes to our business;
• new services or providers;
• changes to website functionality;
• security developments; or
• legal and regulatory requirements.

The updated policy will be published on our website with a revised “Last updated” date.

Where a change materially affects the way we use personal data, we may provide an additional notice or seek further consent where required.

20. Contact details

For questions, complaints, marketing withdrawals or personal-data requests, contact:

Beauxmed Privacy Contact
Email: beauxmed88@gmail.com
Legal entity: Beauxmed Trade
SSM registration number: 202603053721 (JR0187890-K)
Business address:122a, Jalan Batu Unjur 1, Taman Bayu Perdana, Klang,41200, Selangor Darul Ehsan.