This Privacy Policy describes how personal information is collected, utilised, retained, and safeguarded when you visit or make a purchase from www.crossloomglow.com (the “Website”). This policy applies to all patrons and visitors across the European Union, the United States, and Malaysia.

1. Data Controller Identification

For the purposes of the Malaysian Personal Data Protection Act 2010 (PDPA), the General Data Protection Regulation (EU) 2016/679 (GDPR), and relevant United States federal and state privacy statutes, the designated Data Controller responsible for your personal information is:

  • Corporate Entity: CROSSLOOM GLOBAL SHOP SDN BHD
  • Company Registration (SSM No): 202601024704(1686801-X)
  • Trading Brand: Crossloomglow
  • Registered Address: NO.28, PERSIARAN BERCHAM SELATAN 8, TAMAN DESA KENCANA, 31400 IPOH, PERAK, Malaysia
  • Official Contact Email: comfort@crossloomglow.com
  • Contact Telephone: +601153804528

2. Personal Information Collected and Purpose of Processing

We collect personal information necessary to execute commercial transactions and fulfil customer service requirements. The categories of information collected include:

  • Identification and Contact Data: Name, billing address, shipping address, email address, and telephone number.
  • Transaction Records: Details regarding products purchased, order dates, and interaction history.
  • Technical Identifiers: IP addresses, browser types, and standard web log data collected automatically during your visit.

Processing is conducted strictly under lawful bases, including the performance of a commercial contract, compliance with legal obligations, and legitimate business operations.

3. Payment Processing via Stripe

All financial transactions conducted on our Website are processed through Stripe, our third-party payment processing provider.

When an order is completed, financial information (such as credit or debit card details) is collected directly by Stripe through encrypted communication channels. CROSSLOOM GLOBAL SHOP SDN BHD does not store, process, or maintain full payment card details or sensitive account credentials on its internal systems. Stripe processes this information in accordance with its independent privacy documentation and applicable data protection requirements.

4. Data Retention Periods

Personal data is retained only for the timeframe required to fulfil the operational purposes outlined in this policy or to satisfy statutory obligations across Malaysia, the European Union, and the United States:

  • Transactional and Financial Records: Information related to completed commercial orders, invoicing, and customer transactions is retained for a period of seven (7) years following transaction completion. This retention period is mandatory to maintain compliance with commercial, tax, and auditing regulations in relevant jurisdictions.
  • Customer Communication and Inquiries: Correspondence, support requests, and administrative communications are retained for up to two (2) years from the date of last interaction, after which the data is deleted or anonymised, provided no ongoing legal obligation requires continued retention.

5. Consumer Privacy Rights

Depending on your geographic location, you possess specific statutory rights regarding your personal data:

  • European Union (GDPR): You have the right to request access to, rectification of, or erasure of your personal data; the right to restrict or object to processing; and the right to data portability.
  • United States (CCPA/CPRA and State Statutes): You have the right to request disclosure of categories and specific pieces of personal information collected, request deletion of personal information, and request correction of inaccurate data. CROSSLOOM GLOBAL SHOP SDN BHD does not sell or share personal information for third-party cross-context behavioural advertising.
  • Malaysia (PDPA 2010): You have the right to request access to and correction of your personal data, or to withdraw consent for processing where applicable.

To exercise any of these rights, please submit a written request to comfort@crossloomglow.com

6. International Data Transfers

As CROSSLOOM GLOBAL SHOP SDN BHD is headquartered in Malaysia and serves international customers in Europe and the United States, personal data may be transferred and stored across international borders. All cross-border transfers are executed using recognized legal transfer frameworks, including Standard Contractual Clauses (SCCs), to protect data integrity and uphold individual rights.

7. Data Safeguards

We implement appropriate organisational, technical, and administrative controls to protect personal data against unauthorised access, disclosure, alteration, or destruction. While we apply rigorous measures to protect data integrity, no electronic system or internet transmission can be evaluated as entirely risk-free; we continuously review and update our procedures to align with evolving standards.

8. Administrative Contact Information

For enquiries regarding this Privacy Policy or data processing practices, please contact our Data Controller:

  • Corporate Entity: CROSSLOOM GLOBAL SHOP SDN BHD
  • SSM No: 202601024704(1686801-X)
  • Address: NO.28, PERSIARAN BERCHAM SELATAN 8, TAMAN DESA KENCANA, 31400 IPOH, PERAK, Malaysia
  • Official Email: comfort@crossloomglow.com
  • Telephone: +601153804528