This Privacy Policy explains how T&L Slimming Global Sdn. Bhd. (Company Registration No. 201601024428 (1195367-T)), trading as Soft Snug ("we", "us"), collects, uses, shares, stores and protects your personal data when you browse softsnug.com, place an order, or contact us (together, the "Website").
We process personal data as a data controller under the Personal Data Protection Act 2010 of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024 (the "PDPA"). We ship internationally, so additional local rules may apply depending on where you are — see Section 17.
The terms on which we sell to you are set out separately in our Terms of Sale.
1What this Policy covers
This Policy covers softsnug.com and the orders you place on it, including orders you start on the Website and complete with us over WhatsApp.
It does not cover: our pages on Instagram and Facebook, which are governed by Meta's own policies; our products sold through retail partners and marketplaces, where that seller handles your data; and the SoftSnug App and FitPulse device, which have a separate policy because body-measurement data is a different kind of data altogether — see Section 16.
2You do not need an account
There is no login on the Website and we do not ask you to register. Your shopping cart is stored in your own browser, not on our servers, and it stays there until you clear it or complete checkout. If you browse without ordering, we never receive your name, address or contact details at all.
We only receive your personal data at the point where you decide to send it to us: when you complete checkout, when you message us on WhatsApp, or when you email or call us.
3What data we collect
(a) When you check out
The checkout form asks for:
- Required: full name, phone number, address line 1, postcode, state and country.
- Optional: email address, address line 2, city, a separate billing address, an order remark, and a promo code.
We also record what you ordered, the amount, the date, and the payment method you chose.
(b) When you order or ask us something on WhatsApp
Our product pages include a WhatsApp link that opens a chat with a pre-filled message naming the product. If you use it, we receive your WhatsApp phone number, your display name as WhatsApp shows it, and whatever you write to us — including any delivery details you send in order to complete a purchase that way. WhatsApp is operated by Meta and the conversation is also subject to Meta's own terms and privacy policy.
(c) Collected automatically when you browse
- IP address, browser type and version, operating system, device type and screen size.
- Pages viewed, time spent, products viewed or added to cart, and the page or advertisement that referred you.
- Cookies and similar identifiers — see Section 5.
(d) From our partners
- Payment providers: whether a payment succeeded or failed, the amount, the method type, and a transaction reference.
- Couriers: tracking number and delivery status for your parcel.
- Advertising and analytics platforms: aggregated campaign and audience reports, which do not name you to us.
(e) Please keep health details out of the order remark
Under the PDPA as amended, health data and biometric data are sensitive personal data. The Website is not designed to collect either, and our checkout does not ask for either. The order remark box is free text, so please use it for delivery instructions and gift messages only, and do not describe a medical condition there. If you do send us health details voluntarily — in a remark, an enquiry or a WhatsApp message — we will treat them as sensitive personal data, use them only to answer you, and never use them for marketing or advertising.
4Children
Our products are intended for adults aged 18 and above, and the Website is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
5Cookies and tracking
Cookies are small files stored by your browser. We group ours into three categories:
| Category | What it does | Set by | Optional? |
|---|---|---|---|
| Strictly necessary | Keeps your cart, carries you through checkout, and protects against fraud and abuse. Your cart is held in your browser's local storage under ss-cart-v2. |
Soft Snug | No — the store cannot work without these. |
| Analytics | Tells us which pages are used and where people drop off, so we can improve the site. Cookies: _ga (expires after 2 years) and _ga_<id>. |
Google Analytics 4 | Yes. |
| Advertising | Measures whether our ads work and lets us show relevant ads on Facebook and Instagram. Cookie: _fbp (expires after 3 months). |
Meta Pixel | Yes. |
Analytics and advertising cookies are set only after you accept them in our cookie banner. You can change your choice at any time through the cookie settings link in our footer, and you can delete or block cookies in your browser settings. Blocking strictly necessary cookies will stop checkout from working.
Two other services load content on the Website and will see your IP address as a result: Google Fonts, which serves the typefaces, and the Google Maps embed on our About page that shows where we are.
6How we use your data
| Purpose | What is used | Basis |
|---|---|---|
| Show the Website and keep it working and secure | Device and connection data, necessary cookies | Our legitimate interest in running a safe, functioning site |
| Process your order, take payment, ship it to you | Checkout details, order contents, payment result | Performance of our contract with you |
| Answer enquiries, handle warranty, returns and exchanges | Order records, enquiry content, contact details | Performance of our contract; legitimate interest in supporting customers |
| Keep accounting, tax and transaction records | Order and payment records | Compliance with legal obligations |
| Improve the Website and our products | Usage data, analytics cookies | Your consent |
| Advertise and measure campaign results | Usage data, advertising cookies and pixel identifiers | Your consent |
| Send you marketing messages | Name, phone number, email, purchase history | Your consent — you may withdraw at any time |
| Detect and prevent fraud, abuse and chargebacks | Order data, device and connection data | Legitimate interest in protecting the business and our customers |
Internal reporting — for example how many orders a campaign produced — is built from aggregated figures, not by reading through individual customers' records.
7How payments are handled
You can pay by senangPay (operated by DOKU), iPay88, Atome or PayPal. Whichever you choose, you enter your card, banking or account credentials on that provider's own secure page, not on ours.
We do not receive, store or have access to your full card number, CVV, or online banking credentials. What comes back to us is limited to what we need to release your order and account for it: whether the payment succeeded, the amount, the method type and a transaction reference.
Each payment provider handles your payment data as its own controller under its own privacy policy. If you choose Atome, which is an instalment service, Atome will carry out its own checks and collect its own information from you under its own terms.
8Delivery
Orders ship from Malaysia. To deliver your parcel we pass your name, delivery address and phone number to the courier appointed for your order. For orders going outside Malaysia, the courier and the customs authority in the destination country will also receive the information required to clear the shipment, which normally includes the recipient's name, address, contact number and a description and value of the goods.
9Who we share data with
We do not sell, rent or trade your personal data. We share it only in the situations below, and only as far as each one needs:
- Website hosting — Vercel Inc., which hosts softsnug.com and runs the checkout function.
- Order records — Supabase, which stores our customer order and transaction records.
- Payment providers — senangPay (DOKU), iPay88, Atome and PayPal, as described in Section 7.
- Couriers and customs authorities — as described in Section 8.
- Messaging — WhatsApp (Meta), where you choose to contact us that way.
- Analytics and advertising — Google (Analytics, Fonts, Maps) and Meta (Pixel), and only for the categories of cookie you have accepted.
- Professional advisers — lawyers, auditors and accountants, under duties of confidentiality.
Each provider we engage is under a written agreement that limits it to processing your data on our instructions and requires appropriate security. We may also disclose data where required by law, a court order or a competent regulator. If our business is reorganised, merged or acquired, your data may transfer to the new owner and will stay protected under this Policy or an equivalent one; we will tell you if the controller changes.
10Transfers outside Malaysia
Several of the providers above are based outside Malaysia or process data outside it. Our hosting is served from a Singapore edge region, and some checkout processing runs on infrastructure located in the United States. senangPay's operator DOKU is based in Indonesia, Atome in Singapore, and PayPal, Vercel, Supabase, Google and Meta in the United States.
Where we transfer personal data outside Malaysia, we rely on one or more of the following: the destination provides protection substantially similar to the PDPA; the transfer is necessary to perform our contract with you, such as sending your address to an overseas courier or your payment to a payment provider; or we have contractual safeguards in place with the recipient. We assess transfers before making them, keep records of them, and require encryption in transit and at rest.
11How long we keep data
| Data | Kept for |
|---|---|
| Order, payment and delivery records | 7 years after the transaction, to meet Malaysian accounting and tax record-keeping requirements |
| Warranty records | The warranty period plus 1 year |
| Enquiry, WhatsApp and support correspondence | 2 years from the last message, unless it relates to an open warranty claim or dispute |
| Marketing contact details | Until you unsubscribe, then a minimal suppression record so we do not contact you again by mistake |
| Analytics and advertising cookie data | As set out in Section 5 and in your cookie settings |
| Backups | Deleted data is removed from live systems promptly and cleared from backups within 30 days as backups rotate |
12Your rights
Under the PDPA you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Correct — ask us to fix data that is inaccurate, incomplete or out of date.
- Withdraw consent — withdraw consent to any processing that relies on it, including marketing and non-essential cookies.
- Limit processing — ask us to stop or restrict processing that is causing or likely to cause you distress, or to stop processing for direct marketing.
- Data portability — ask us to transmit your personal data to another data controller, where this is technically feasible and the formats are compatible.
To exercise any of these, contact us using the details in Section 18. Because we have no accounts, we will ask you for the order number and the phone number used on the order so we can locate your records and be sure we are not releasing them to someone else. We aim to respond within 21 days. A prescribed fee may apply to formal data access requests, as permitted by the PDPA.
If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, Malaysia), or to the regulator in your own country.
13Marketing and your choices
We send marketing messages only to people who have opted in. Every marketing email carries an unsubscribe link, and you can reply STOP to any marketing message on WhatsApp or SMS. Order confirmations, delivery updates and warranty notices are service messages, not marketing, and you will keep receiving those while an order is in progress.
Where marketing to a phone number is restricted in your country — for example numbers on Singapore's Do Not Call Registry — we check the applicable register before sending and honour your listing. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
14Security
We protect personal data with encryption in transit (HTTPS/TLS) and at rest, a content security policy that restricts what can run on the Website, access controls that limit staff access to what their role requires, and logging of administrative access. Order records are accessible on a need-to-know basis — for example so a team member can trace a delivery or process a warranty claim — and that access is recorded.
No system is completely secure. We keep our measures under review and require our providers to maintain appropriate safeguards.
15If there is a data breach
If a personal data breach occurs that causes or is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable and within 72 hours of becoming aware of it, and notify affected individuals within 7 days of notifying the Commissioner. Where affected individuals are in Singapore we will also notify the Personal Data Protection Commission of Singapore within 3 calendar days of assessing the breach as notifiable; where they are in Indonesia, within 72 hours. We maintain a breach response plan and keep records of breaches as required by law.
16Our products, the App, and what this data is not
Soft Snug sells wellness and fitness apparel and devices. They are not medical devices, and nothing you buy or ask us about here is a medical service. We do not build health profiles of customers, and we do not use what you buy to infer anything about your health for advertising purposes.
If you use the SoftSnug App with a FitPulse device, the body-composition and training data involved is handled under a separate App Privacy Policy. Buying a device on this Website does not link your purchase record to your measurement data.
17If you are outside Malaysia
We ship to Singapore, Brunei, Indonesia, Thailand, the Philippines, Vietnam, Hong Kong, Taiwan, China, Japan, South Korea, India, Australia, New Zealand, the United Kingdom, the United States, Canada, the United Arab Emirates, Saudi Arabia and elsewhere on request.
Singapore. Where we handle the personal data of individuals in Singapore we also comply with the Personal Data Protection Act 2012. Our contact details for data protection matters are in Section 18. Before sending marketing to a Singapore telephone number, including through messaging apps that use your phone number, we check the Do Not Call Registry.
Indonesia. Where we handle the personal data of individuals in Indonesia we also observe Law No. 27 of 2022 on Personal Data Protection.
United Kingdom and the European Economic Area. Where the UK GDPR or EU GDPR applies to an order, you additionally have the rights of erasure, restriction and objection, and the right to complain to your local supervisory authority.
Elsewhere. If the law where you live gives you stronger rights than this Policy describes, those rights apply.
18How to contact us about your data
Data controller: T&L Slimming Global Sdn. Bhd. (201601024428 (1195367-T))
Prime Axis Industrial Park No.16, Jalan Sepadu 25/123A, Taman Sri Muda, 40400 Shah Alam, Selangor, Malaysia
Privacy and data protection contact — for any question or request about your personal data, including access, correction, withdrawal of consent, portability or a complaint:
Email: info@softsnug.com
Phone / WhatsApp: +60 10 377 6319
By post: the address above, marked "Data Protection".
19Changes to this Policy
We may update this Policy from time to time. If we make a material change we will post a notice on the Website before it takes effect and update the effective date above. Where a change affects processing that relies on your consent, we will ask for your consent again.
本隐私政策说明 T&L Slimming Global Sdn. Bhd.（公司注册号 201601024428 (1195367-T)，以 Soft Snug 之名营业，以下称「我们」）在你浏览 softsnug.com、下单购买或与我们联系时（合称「本网站」），如何收集、使用、共享、存储与保护你的个人资料。
我们以资料控制者的身份处理个人资料，适用马来西亚《2010 年个人资料保护法令》（经《2024 年个人资料保护（修订）法令》修订，以下称「PDPA」）。我们提供国际配送，因此依你所在地不同，可能另有适用的当地规定，详见第 17 条。
我们向你销售所依据的条款，另载于销售条款。
1本政策适用的范围
本政策适用于 softsnug.com 以及你在上面下的订单，包括你在网站上开始、再通过 WhatsApp 与我们完成的订单。
不适用的部分：我们在 Instagram 与 Facebook 上的主页，那些由 Meta 自己的政策规范；我们通过零售伙伴与电商平台销售的产品，那些由该卖家处理你的资料；以及 SoftSnug App 与 FitPulse 设备，因为身体测量资料的性质完全不同，另有独立政策，详见第 16 条。
2你不需要开账户
本网站没有登录功能，我们也不要求你注册。你的购物车存在你自己的浏览器里，不在我们的服务器上，直到你自己清空或完成结账为止。如果你只是浏览而没有下单，我们根本不会收到你的姓名、地址或联系方式。
我们只在你决定把资料交给我们的那一刻才收到它：你完成结账、你在 WhatsApp 上给我们发信息，或你写电邮、打电话给我们。
3我们收集哪些资料
（a）你结账时
结账表单会询问：
- 必填：姓名、电话号码、地址第一行、邮编、州属与国家。
- 选填：电邮地址、地址第二行、城市、另一个账单地址、订单备注，以及优惠码。
我们同时会记录你买了什么、金额、日期，以及你选择的付款方式。
（b）你通过 WhatsApp 下单或询问时
我们的产品页有 WhatsApp 链接，点开会带出一段已填好产品名称的信息。若你使用它，我们会收到你的 WhatsApp 电话号码、WhatsApp 显示的名称，以及你写给我们的内容，包括你为了完成购买而传来的配送资料。WhatsApp 由 Meta 营运，该对话同时受 Meta 自身的条款与隐私政策规范。
（c）你浏览时自动收集的
- IP 地址、浏览器类型与版本、操作系统、设备类型与屏幕尺寸。
- 浏览过的页面、停留时间、查看或加入购物车的产品，以及把你带来我们网站的页面或广告。
- Cookie 与类似识别码，详见第 5 条。
（d）来自合作方的
- 支付服务商：付款成功或失败、金额、付款方式类型，以及交易参考号。
- 快递公司：你包裹的追踪号与配送状态。
- 广告与分析平台：汇总后的广告与受众报告，不会向我们指出你的姓名。
（e）订单备注请不要填健康细节
依经修订的 PDPA，健康资料与生物识别资料属于敏感个人资料。本网站不是为收集这两类资料而设计的，我们的结账流程也不会询问。订单备注栏是自由填写的，请只用来写配送指示或礼物留言，不要在那里描述病况。若你主动传给我们健康细节，无论是在备注、咨询还是 WhatsApp 信息里，我们都会以敏感个人资料看待，仅用于回复你，绝不用于营销或广告。
4未成年人
我们的产品供 18 岁及以上的成年人使用，本网站也不以儿童为对象。我们不会有意收集 18 岁以下人士的个人资料。若你认为有未成年人向我们提供了个人资料，请联系我们，我们会予以删除。
5Cookie 与追踪技术
Cookie 是由你的浏览器存储的小型文件。我们把它分成三类：
| 类别 | 用途 | 由谁设置 | 可选吗 |
|---|---|---|---|
| 必要 | 保留你的购物车、带你走完结账、防范欺诈与滥用。购物车存在你浏览器的本地存储中，键名为 ss-cart-v2。 |
Soft Snug | 不行，关掉商店就无法运作。 |
| 分析 | 让我们知道哪些页面被使用、用户在哪里流失，以便改进网站。Cookie：_ga（2 年后过期）与 _ga_<id>。 |
Google Analytics 4 | 可以。 |
| 广告 | 衡量广告成效，并在 Facebook 与 Instagram 上向你展示相关广告。Cookie：_fbp（3 个月后过期）。 |
Meta Pixel | 可以。 |
分析与广告 cookie 只有在你于 cookie 提示中同意后才会启用。你随时可以通过页尾的 cookie 设置链接更改选择，也可以在浏览器设置中删除或封锁 cookie。封锁必要 cookie 会导致结账无法完成。
另有两项服务会在本网站上载入内容，因而会看到你的 IP 地址：提供字体的 Google Fonts，以及关于我们页面上显示我们位置的 Google Maps 嵌入地图。
6我们如何使用这些资料
| 用途 | 使用的资料 | 依据 |
|---|---|---|
| 显示网站并维持其正常与安全运作 | 设备与连接资料、必要 cookie | 我们经营安全网站的正当利益 |
| 处理订单、收款、出货给你 | 结账资料、订单内容、付款结果 | 履行我们与你之间的合约 |
| 回复咨询、处理保修、退换货 | 订单记录、咨询内容、联系资料 | 履行合约；服务客户的正当利益 |
| 保存会计、税务与交易记录 | 订单与付款记录 | 遵守法律义务 |
| 改进网站与产品 | 使用资料、分析 cookie | 你的同意 |
| 投放广告与衡量成效 | 使用资料、广告 cookie 与像素识别码 | 你的同意 |
| 向你发送营销信息 | 姓名、电话号码、电邮、购买记录 | 你的同意，可随时撤回 |
| 检测与防范欺诈、滥用与拒付 | 订单资料、设备与连接资料 | 保护公司与顾客的正当利益 |
我们内部使用的报表，例如某个广告带来多少订单，是由汇总数字产生的，不是靠翻阅个别顾客的记录。
7付款如何处理
你可以选择 senangPay（由 DOKU 营运）、iPay88、Atome 或 PayPal 付款。无论选哪一个，你的卡片、网银或账户凭证都是在该服务商自己的安全页面上输入，不在我们的页面上。
我们不会收取、存储或存取你的完整卡号、CVV 或网银凭证。回传给我们的仅限于放行订单与做账所需：付款是否成功、金额、付款方式类型，以及交易参考号。
每一家支付服务商都以其自身资料控制者的身份、依其自身的隐私政策处理你的付款资料。若你选择分期服务 Atome，Atome 会依其自身条款进行自己的审核并向你收集自己的资料。
8配送
订单从马来西亚出货。为了把包裹送到你手上，我们会把你的姓名、收件地址与电话号码交给为你的订单指派的快递公司。寄往马来西亚境外的订单，快递公司与目的地国家的海关也会收到清关所需的资料，通常包括收件人姓名、地址、联系电话，以及货品的描述与价值。
9我们与谁共享资料
我们不会出售、出租或交易你的个人资料。仅在以下情况、且各自仅在必要范围内共享：
- 网站托管：Vercel Inc.，负责托管 softsnug.com 并运行结账功能。
- 订单资料存放：Supabase，用于存储我们的客户订单与交易记录。
- 支付服务商：senangPay（DOKU）、iPay88、Atome 与 PayPal，详见第 7 条。
- 快递公司与海关：详见第 8 条。
- 通讯：WhatsApp（Meta），若你选择以此方式联系我们。
- 分析与广告：Google（Analytics、Fonts、Maps）与 Meta（Pixel），且仅限于你已同意的 cookie 类别。
- 专业顾问：律师、审计师与会计师，受保密义务约束。
我们聘用的每一家服务商都受书面协议约束，协议限制其只能依我们的指示处理你的资料，并须维持适当的安全措施。在法律、法院命令或主管机关要求时，我们也可能依法披露资料。若公司发生重组、合并或被收购，你的资料可能一并移转予新的所有人，并继续受本政策或同等政策保护；资料控制者如有变更，我们会另行通知你。
10资料传输至马来西亚境外
上述部分服务商设立于马来西亚境外，或在境外处理资料。我们的托管由新加坡边缘节点提供服务，部分结账处理运行于位于美国的基础设施上。senangPay 的营运方 DOKU 设于印尼，Atome 设于新加坡，PayPal、Vercel、Supabase、Google 与 Meta 设于美国。
当我们将个人资料传输至马来西亚境外时，我们依据以下一项或多项：目的地提供与 PDPA 实质相似的保护水平；该传输是履行我们与你之间合约所必需，例如将你的地址交给境外快递、或将你的付款交给支付服务商；或我们已与接收方订立合约保障条款。我们会在传输前进行评估、保存传输记录，并要求传输过程与静态存储均加密。
11我们保存多久
| 资料 | 保存期限 |
|---|---|
| 订单、付款与配送记录 | 交易后 7 年，以符合马来西亚会计与税务记录保存要求 |
| 保修记录 | 保修期加 1 年 |
| 咨询、WhatsApp 与客服往来记录 | 自最后一则信息起 2 年，除非涉及未结的保修申请或争议 |
| 营销联系资料 | 直至你退订为止，之后保留最小限度的退订记录，以免我们误发信息给你 |
| 分析与广告 cookie 资料 | 依第 5 条及你的 cookie 设置所载 |
| 备份 | 已删除的资料会即时从线上系统移除，并随备份轮换于 30 天内自备份中清除 |
12你的权利
依 PDPA，你有权：
- 查阅：要求取得我们持有关于你的个人资料副本。
- 更正：要求我们更正不准确、不完整或已过时的资料。
- 撤回同意：撤回任何以同意为依据的处理，包括营销与非必要 cookie。
- 限制处理：要求我们停止或限制正在或可能对你造成困扰的处理，或停止用于直接营销的处理。
- 资料可携：在技术可行且格式兼容的前提下，要求我们将你的个人资料传送予另一资料控制者。
行使上述任何权利，请依第 18 条与我们联系。由于我们没有账户系统，我们会请你提供订单号与下单时使用的电话号码，以便找到你的记录，并确保不会把资料交给他人。我们的目标是在 21 天内回复。对于正式的资料查阅请求，我们可能依 PDPA 允许收取规定费用。
若你对我们的回复不满意，可向马来西亚个人资料保护专员（Jabatan Perlindungan Data Peribadi）投诉，或向你所在国家的主管机关投诉。
13营销与你的选择
我们只向已选择订阅的人发送营销信息。每一封营销电邮都附有退订链接；WhatsApp 或短信上的营销信息，你回复 STOP 即可退订。订单确认、配送通知与保修通知属于服务性信息，不是营销，在订单进行期间你仍会收到。
若你所在国家对向电话号码发送营销有额外限制，例如已登记于新加坡 Do Not Call 名册的号码，我们会在发送前查核相应名册并尊重你的登记。撤回同意不影响我们在撤回之前已合法进行的处理。
14安全
我们以传输加密（HTTPS/TLS）与静态加密、限制网站上可执行内容的内容安全政策（CSP）、依职务限定范围的存取控制，以及管理员存取的日志记录，来保护个人资料。订单记录以「因职务需要」为原则开放存取，例如同事为了追查配送或处理保修申请而查阅，且皆有记录留存。
没有任何系统是绝对安全的。我们会持续检视自身的措施，并要求服务商维持适当的保障。
15发生资料外泄时
若发生已造成或可能造成重大伤害的个人资料外泄事件，我们会在知悉后尽快且不迟于 72 小时内通报个人资料保护专员，并在通报专员后的 7 天内通知受影响的个人。若受影响者身处新加坡，我们会在评估该事件须通报后的 3 个日历天内通报新加坡个人资料保护委员会；若身处印尼，则在 72 小时内通报。我们设有资料外泄应变计划，并依法保存外泄事件记录。
16我们的产品、App，以及这些资料不是什么
Soft Snug 销售健康与健身类的服饰与设备。它们不是医疗器械，你在这里购买或询问的任何事项也不构成医疗服务。我们不会为顾客建立健康档案，也不会用你买了什么去推断你的健康状况来投放广告。
若你搭配 FitPulse 设备使用 SoftSnug App，其中涉及的体成分与训练资料适用另一份独立的 App 隐私政策。在本网站购买设备，不会将你的购买记录与你的测量资料关联起来。
17若你身处马来西亚以外
我们配送至新加坡、汶莱、印尼、泰国、菲律宾、越南、香港、台湾、中国、日本、韩国、印度、澳洲、新西兰、英国、美国、加拿大、阿联酋、沙特阿拉伯，其他国家可另行洽询。
新加坡。当我们处理身处新加坡个人的资料时，我们同时遵守《2012 年个人资料保护法》。我们处理资料保护事宜的联系方式列在第 18 条。在向新加坡电话号码发送营销前（包括通过以电话号码为基础的通讯应用），我们会查核 Do Not Call 名册。
印尼。当我们处理身处印尼个人的资料时，我们同时遵循 2022 年第 27 号《个人资料保护法》。
英国与欧洲经济区。若某笔订单适用英国 GDPR 或欧盟 GDPR，你另享有删除权、限制处理权与反对权，并有权向你当地的监管机关投诉。
其他地区。若你所在地的法律赋予你比本政策更强的权利，则以该等权利为准。
18资料相关事宜如何联系我们
资料控制者：T&L Slimming Global Sdn. Bhd.（201601024428 (1195367-T)）
Prime Axis Industrial Park No.16, Jalan Sepadu 25/123A, Taman Sri Muda, 40400 Shah Alam, Selangor, Malaysia
隐私与资料保护联系方式 —— 关于你个人资料的任何疑问或请求，包括查阅、更正、撤回同意、资料可携或投诉：
电邮：info@softsnug.com
电话／WhatsApp：+60 10 377 6319
邮寄：上述地址，请注明「Data Protection」。
19政策更新
我们可能不时更新本政策。如有重大变更，我们会在生效前于网站上公告，并更新上方的生效日期。若变更涉及以你的同意为依据的处理，我们会重新征求你的同意。