Privacy policy

Who is responsible

Mosse Pearl Jewelry (registration number 202603199388), of Setia City Residences 6, B13-3, Jalan Setia Dagang AH U13/AH, Setia Alam, 40170 Shah Alam, Selangor, Malaysia, is the data user for the purposes of the Personal Data Protection Act 2010. Where this policy says “we”, that is who it means.

What we collect

Only what an order actually requires, which is:

• Your name, email address and phone number, so we can confirm the order and reach you if something about it changes.
• A delivery address, so the piece can be sent.
• What you bought, when, and what you paid — the order record itself.
• Correspondence, if you email or message us.

We never see your card or bank details. Payment is handled by a licensed payment provider on its own systems; we receive confirmation that a payment succeeded and a reference for it, and nothing more.

What we do not do

• We do not sell or rent personal data to anyone, for any price.
• We do not build advertising profiles, and the shop carries no third-party advertising or tracking pixels.
• We do not email you marketing because you bought something. That takes a separate, deliberate opt-in.

Why we are allowed to hold it

For order information, because we cannot perform the contract you entered into without it. For anything else — a newsletter, say — because you asked us to. Some records are kept because tax and accounting law requires it, regardless of either.

Who else sees it

A short list, and each only sees the part it needs:

• The payment provider, which handles the transaction and holds the card details we never receive.
• The courier, which needs a name, address and phone number to deliver.
• Our hosting provider, on whose servers in Malaysia the order database sits.
• Our accountant and, where legally required, the authorities.

How long we keep it

Cookies

The shop sets no advertising or analytics cookies. Your basket is kept in your own browser’s local storage so it survives a reload — that information stays on your device and is never sent to us until you place an order. Clearing your browser data empties it.

Security

The site is served over HTTPS. Order data sits in a database that is not reachable from the public internet, and administrative access requires a password stored only as a cryptographic hash. No system is perfect; if we ever discover a breach affecting your data, we will tell you rather than hope you do not notice.

Your rights

Under the PDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• stop processing it for a given purpose, or withdraw consent you gave;
• delete it, where we are not required to keep it for tax or legal reasons.

Email Mossepearl@icloud.com and we will respond within 21 days, which is the period the PDPA sets. If you are not satisfied with how we handle it, you may complain to the Personal Data Protection Commissioner.

Changes

If this policy changes materially, the date at the top changes with it. We do not backdate.

Questions are welcome — contact us.