Privacy Policy

Effective date: 1st August 2025

Who We Are

Nizu Enterprise (“Nizu”, “we”, “our”) operates an online fashion store serving customers in Malaysia. We are the data controller for personal data we collect through our website, checkout, support channels, and marketing tools.

• Business Name: Nizu Enterprise
• SSM Registration No.: 003721632-W
• Address: 10, Jalan Flora 3B/5, Bandar Rimbayu, 42500 Telok Panglima Garang, Selangor, Malaysia.
• Phone/WhatsApp: +60 11 1035 6553
• Emails: Orders & tracking orders@bynizu.com · General hello@bynizu.com

What This Policy Covers

This policy explains how we collect, use, disclose, store, and protect personal data in line with the Personal Data Protection Act 2010 (PDPA) and its principles.

Personal Data We Collect

• Identity & contact: name, email, phone, shipping and billing addresses.
• Order & support: items purchased, order notes, messages you send us.
• Payment: payment method details processed by our payment providers. We do not store full card numbers.
• Device & usage: IP address, device type, browser, pages viewed, and interaction data collected via cookies or similar technologies.
• Marketing preferences: your choices for email, WhatsApp, and push notifications.

How We Collect Data

• Directly from you at checkout, account creation, forms, or support chats.
• Automatically through cookies and similar technologies on our site.
• From service providers that help us process payments, ship orders, send notifications, or provide analytics.

How We Use Personal Data

• To process orders, payments, delivery, and returns.
• To provide customer service and respond to enquiries.
• To operate, maintain, and improve our website, products, and services.
• To send transactional updates (order confirmations, shipping updates).
• To send marketing communications when you opt in, with easy opt-out at any time.
• To prevent fraud, enforce our terms, and comply with law.

Marketing Communications

With your consent, we may send promotions or product updates by email, WhatsApp, or web push. You can opt out at any time using the unsubscribe link, by replying “STOP”, or by contacting us.

Cookies & Similar Technologies

We use cookies and similar technologies to make the site work, remember your preferences, measure performance, and improve shopping experience. You can manage cookies in your browser settings. Some features may not function if certain cookies are disabled.

Disclosure of Personal Data

We share personal data with trusted service providers only as needed to perform services on our behalf, such as:

• Payment processors.
• Shipping and logistics partners.
• Customer support and communications platforms (e.g., email, WhatsApp, push notifications).
• Analytics, security, and hosting providers.

We require these providers to safeguard personal data and use it only for our instructions. We do not sell personal data.

Cross-Border Transfers

Some providers may process personal data outside Malaysia. Where we do so, we rely on conditions permitted under Section 129 of the PDPA and the Cross-Border Personal Data Transfer Guidelines (2025), including your consent, contractual necessity, or taking reasonable precautions and due diligence to ensure a level of protection comparable to the PDPA.

Data Retention

We keep personal data only as long as necessary for the purposes described above, and to meet legal, tax, or accounting requirements. When no longer needed, we take steps to delete or anonymise it.

Security

We apply administrative, technical, and physical safeguards appropriate to the nature of the data we process. No method of transmission or storage is fully secure, but we work to protect your data and review safeguards regularly.

Your Rights

Subject to PDPA and applicable law, you may:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent for marketing at any time.
• Request deletion where we have no legal reason to keep the data.

To exercise these rights, contact us using the details above. We may need to verify your identity.

Children

Our site is not directed to children under 13. If you believe a child has provided personal data, please contact us so we can take appropriate action.

Third-Party Links

Our site may link to third-party sites. Their privacy practices are governed by their own policies.

Updates to This Policy

We may update this policy to reflect changes to our practices or legal requirements. If we make material changes, we will post a notice on our site and update the effective date.

Questions or Complaints

If you have questions about this policy or how we handle personal data, contact us using the details above. You may also lodge a complaint with the Personal Data Protection Commissioner in Malaysia.

This policy is intended as general information for customers and is not legal advice.