Privacy Policy

Privacy Policy

Draft — to be reviewed by the client’s legal adviser before launch

Who we are

NUTRIVALE ENTERPRISE (registration number 202503333672 (EB-A2025120802084)), trading as Nutrivale, operates this website and sells Mindora. Our address is No. 1471, Persiaran Utama 4/14, Kulim Utama Fasa 2, 09000 Kulim, Kedah, Malaysia. For anything on this page, write to nutrivale.enterprise@gmail.com.

The name of the person responsible for data protection is to be added by the client.

What we collect when you order on this site

To take and deliver an order we ask for your name, email address, phone number, and delivery address — street, postcode, town or city, and state. That is the complete list, and we record nothing else about you.

We do not ask for your date of birth, gender, identification number, or any health information, and you do not need an account or a password to order.

We never see your card or online banking details. Those are entered with our payment provider, on their systems, and no card number, expiry date, security code or banking credential reaches us or is stored by us at any point.

What is kept in your browser

Your cart — the quantity you chose — is stored in your own browser, not on our servers, and is discarded after thirty days. It is there so your cart survives closing the tab. This site sets no cookies for customers, and runs no analytics, advertising pixels or tracking cookies. Staff signing in to manage orders receive one session cookie, which is unrelated to customers and is not used for tracking.

What we collect when you order another way

If you order through WhatsApp, we receive the phone number and the name attached to your WhatsApp account, together with the delivery address and order details you send us. That conversation is held on WhatsApp’s systems as well as ours. If you email us, we hold your email address and whatever you put in the message.

Why we use it

To take, pack and deliver your order; to send you a confirmation and let you know when it ships; to answer your questions; and to keep the business records Malaysian law requires us to keep. We do not use your details for marketing unless you have asked us to, and we do not profile you or make automated decisions about you.

Who else sees it

CHIP (chip-in.asia) processes your payment. When you pay, you are taken to CHIP’s own checkout, where you enter your card or online banking details directly with them. We pass CHIP your name, email address and phone number, and the amount to charge. CHIP tells us whether the payment succeeded — nothing more.

Our courier receives the name, delivery address and phone number needed to deliver your parcel.

Our email provider handles sending your order confirmation and shipping notice, and therefore processes your email address and the contents of those messages.

Our hosting and database providers store this site and the order records on our behalf, under contract and on our instructions.

The specific courier is to be confirmed by the client and named here.

We do not sell personal data, and we do not share it with anyone else except where the law requires it.

How long we keep it

Order records are kept for seven years, which is the period Malaysian tax and business record-keeping rules require. Enquiries that do not become orders are deleted once the matter is closed.

We also keep a log of the payment notifications our provider sends us, so that a disputed or duplicated payment can be traced. Those records hold order and payment details, never card details, and are kept for the same period.

The seven-year retention period should be confirmed by the client’s adviser.

Your rights under the PDPA

Malaysia’s Personal Data Protection Act 2010 gives you the right to ask what personal data we hold about you, to have inaccurate data corrected, to limit how we process it, and to withdraw consent. Write to nutrivale.enterprise@gmail.com and we will respond within the period the Act allows.

You can ask us to erase your details from an order. Where no legal retention obligation stops us, we remove your name, contact details and delivery address, and keep only the order number, amounts and dates — the accounting record we are obliged to retain, which no longer identifies you. Once erased, you will not be able to look that order up on this site, because there is no longer an email address to match against.

Checking on an order

You can check an order’s status with your order number and the email address you used at checkout. We ask for both together so that an order number on its own — which might be forwarded, printed or overheard — is not enough to reveal someone’s address.

Changes

If this policy changes, the updated version appears on this page with a new date below.

Last updated: 15 August 2026. Questions about this page go to nutrivale.enterprise@gmail.com.