1) Introduction
This notice explains how R&R AUTHENTICS SDN. BHD. (Co. No: 202201046089 (1491786-V)), trading as Luxury Branded Outlet (LBO), processes your personal data in accordance with the Personal Data Protection Act 2010 (Act 709), as amended in 2024.
2) Categories of personal data
Identity & contact: name, phone, email, shipping/billing address.
Transaction: ordered items, amounts, payment status, transaction IDs (not full card numbers).
Communications & preferences: inquiries, support history, subscription choices.
Technical: IP address, device/browser info, cookies/identifiers (for site functionality and analytics).
Sensitive (only if provided): special delivery notes. We do not request health/biometric data.
3) Purposes & legal bases
Contract: order placement, payment processing, delivery/returns/warranty.
Legal obligation: tax and accounting records; responding to lawful requests.
Legitimate interests: site security, fraud prevention, service improvement, performance analytics.
Consent: marketing (promotions, offers, campaigns). You can withdraw consent anytime.
4) Marketing & your choices
Manage preferences anytime: click Unsubscribe in emails, reply “STOP” on WhatsApp/SMS, or email sales@luxurybrandedoutlet.com. We keep a record of consent and withdrawals.
5) Sharing & international transfers
We share data only with:
Couriers/fulfilment partners (shipping and tracking),
Payment gateways (e.g., DOKU, Atome, SPayLater, Grab PayLater; we do not store full card numbers),
Hosting/email/CRM/analytics providers (e.g., Hostinger, Google Analytics, Meta (Facebook/Instagram), WhatsApp and push notification tools),
Professional advisers/authorities where required by law.
Where transfers occur outside Malaysia, we implement appropriate safeguards (data processing agreements, security controls, risk assessments).
6) Retention
Accounting/tax records: 7 years.
Order & customer service records: 7 years.
Marketing data (name, phone, email and purchase history, where you have consented to marketing): kept for as long as your consent remains, even after the 7-year record period, until you opt out. We review this list periodically and remove contacts that no longer engage.
Data is securely deleted or anonymized when no longer needed.
7) Security
We apply reasonable technical and organizational measures (encryption-in-transit where applicable, access controls, audit logs, staff training). No system is 100% secure, but we work to minimize risk.
8) Your rights
You may request access to your data, correction of inaccuracies, restriction/objection (where applicable), data portability (where technically feasible), and you may withdraw marketing consent at any time. We may need to verify your identity before actioning a request.
9) Children
If a customer is under 18, consent should be provided by a parent/guardian.
10) Cookies & similar technologies
We use essential cookies for site functionality and, where permitted, analytics/advertising cookies. Manage preferences via your browser settings.
11) Data breaches
We maintain an incident response process. If an incident risks your rights, we will notify the relevant authority and affected individuals in a timely manner as required by law.
12) How to contact us
Data Controller: R&R AUTHENTICS SDN. BHD. (Co. No: 202201046089 (1491786-V))
Registered Address: 130-1, Jalan BMU2, Bandar Baru Merlimau Utara, 77300 Merlimau, Melaka, Malaysia.
Data Protection Officer (DPO): Dr. Rohaizu — sales@luxurybrandedoutlet.com, +60182889653
Permanent Privacy Notice: https://luxurybrandedoutlet.com/privacy-policy/
13) Changes to this notice
We may update this notice from time to time. The latest version will always be available at the link above.
Effective date: 14 Aug 2025 | Last updated: 4 Oct 2026
Notis Privasi (Bahasa Malaysia)
Notis ini menerangkan cara R&R AUTHENTICS SDN. BHD. (No. Syarikat: 202201046089 (1491786-V)), beroperasi sebagai Luxury Branded Outlet (LBO), memproses data peribadi anda mengikut Akta Perlindungan Data Peribadi 2010 (Akta 709), sebagaimana dipinda pada 2024.
- Data yang dikumpul: nama, telefon, emel, alamat penghantaran/bil, butiran pesanan dan bayaran (bukan nombor kad penuh), sejarah pertanyaan, serta maklumat teknikal (alamat IP, peranti, cookies).
- Tujuan: memproses pesanan, bayaran, penghantaran dan pemulangan; rekod cukai dan perakaunan; keselamatan laman dan pencegahan penipuan; pemasaran (hanya dengan persetujuan anda).
- Perkongsian: kurier, gerbang pembayaran (cth. DOKU, Atome, SPayLater, Grab PayLater), penyedia hosting/analitik/pemasaran (cth. Hostinger, Google, Meta, WhatsApp) dan pihak berkuasa jika dikehendaki undang-undang. Data pelanggan tidak dihantar kepada kedai brand di luar negara. Jika penyedia perkhidmatan menyimpan data di luar Malaysia, kami ambil langkah perlindungan yang sesuai.
- Tempoh simpanan: rekod perakaunan/cukai dan pesanan 7 tahun; data untuk pemasaran (nama, telefon, emel dan sejarah pembelian, jika anda bersetuju) disimpan selagi persetujuan anda kekal, termasuk selepas tempoh 7 tahun, sehingga anda menarik diri. Senarai ini disemak secara berkala.
- Hak anda: meminta akses dan pembetulan data, membantah pemprosesan tertentu, dan menarik balik persetujuan pemasaran pada bila-bila masa (klik Unsubscribe, balas “STOP” di WhatsApp/SMS, atau emel kami).
- Kanak-kanak: pelanggan bawah 18 tahun perlu persetujuan ibu bapa/penjaga.
- Hubungi kami / Pegawai Perlindungan Data: Dr. Rohaizu, sales@luxurybrandedoutlet.com, +60182889653, 130-1, Jalan BMU2, Bandar Baru Merlimau Utara, 77300 Merlimau, Melaka.
Jika terdapat percanggahan, versi Bahasa Inggeris di atas terpakai.