Privacy Policy

What we collect

• · Name, email, phone number, and delivery address — when you place an order
• · Email address — if you sign up for the newsletter
• · Your name and the text of your review — if you submit a product review
• · Order contents, amounts, and payment status — to fulfil and track your order

We never see or store your full card or bank details. Payment is handled directly by Stripe, our payment processor — see their own privacy policy for how they handle payment data.

Why we collect it

To process and ship your order, respond to enquiries, verify and moderate reviews before they go live, and — only if you've opted in — send you emails about new drops. We don't use your data for anything beyond running this shop.

Who we share it with

Stripe (to process payment), and our courier partners (to deliver your order — name, phone, and address only). We do not sell or rent your personal data to anyone.

If analytics or advertising pixels (Google Analytics, Meta, or TikTok) are active on this site, those providers may set cookies and receive anonymised browsing and purchase-event data to help us understand traffic and measure ads. You can block these via your browser's cookie or tracking settings.

How long we keep it

Order records are kept as long as needed for accounting, warranty, and legal purposes. Newsletter emails are kept until you unsubscribe or ask us to delete them.

Your rights

Under the PDPA, you can ask us to:

• · Show you what personal data we hold about you
• · Correct inaccurate data
• · Delete your data, where we're not required to keep it (e.g. for tax records)
• · Stop sending you marketing emails, at any time

Email hello@ciznails.my for any of the above.

Security

We take reasonable technical steps to protect your data (encrypted connections, access limited to what's needed to run the shop), but no online system is 100% secure.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.