Personal Data Protection Notice

 

1. Introduction

NUWELL GLOBAL SDN. BHD. ("NGH", "Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia ("PDPA"), including all regulations, orders, standards, and guidelines issued thereunder.

This Personal Data Protection Notice ("Notice") explains how the Company collects, processes, uses, stores, discloses, transfers, and protects personal data obtained through our websites, e-commerce platforms, Shopify store, TikTok Shop, Shopee, Lazada, social media channels, customer support services, marketing activities, and other business operations. This Notice is intended to help you understand your rights and our responsibilities regarding the handling of your personal data.

2. Collection of Personal Data

The Company may collect personal data directly from you when you create an account, place an order, subscribe to our newsletter, participate in promotions or campaigns, submit enquiries, register for warranty services, contact customer support, or otherwise interact with our products, services, websites, and business operations.

The personal data collected may include your name, identification details where required, contact information, billing and delivery addresses, payment-related information, transaction history, product preferences, communication records, website usage information, device information, IP address, cookies, and other information relevant to providing our products and services. Where necessary and permitted by law, the Company may also collect health-related, wellness-related, veterinary-related, or other sensitive personal data voluntarily provided by you in connection with product enquiries, adverse event reporting, warranty claims, customer support, or regulatory compliance activities.

3. Purpose of Processing

The personal data collected by the Company may be processed for various legitimate business purposes, including but not limited to processing and fulfilling orders, delivering products, administering customer accounts, handling warranty registrations and claims, providing customer service, managing returns and refunds, improving customer experience, conducting market research, complying with regulatory obligations, managing product safety matters, responding to product complaints, facilitating product recalls where necessary, preventing fraud, maintaining website security, conducting internal audits, and supporting business continuity activities.

Where you have consented to receive marketing communications, the Company may also use your personal data to provide information regarding product launches, promotions, educational content, newsletters, loyalty programmes, events, surveys, and other marketing initiatives that may be relevant to you.

4. Disclosure of Personal Data

In the course of conducting our business operations, the Company may disclose your personal data to carefully selected third parties where necessary to achieve the purposes described in this Notice.

Such parties may include companies within the KWNG Group, Shopify and e-commerce service providers, payment gateway providers, courier and logistics companies, warehouse and fulfilment partners, information technology service providers, cloud hosting providers, digital marketing agencies, insurers, auditors, professional advisers, legal consultants, regulatory authorities, government agencies, law enforcement authorities, and other parties where disclosure is required or permitted by applicable laws.

The Company takes reasonable steps to ensure that any third parties receiving personal data are subject to appropriate confidentiality and data protection obligations.

5. Cross-Border Transfers

As part of modern e-commerce operations, some of our systems, service providers, and technology platforms may be located outside Malaysia. Accordingly, your personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia, including through Shopify infrastructure, cloud hosting services, payment processing systems, analytics platforms, and customer engagement tools.

Where such transfers occur, the Company will take reasonable steps to ensure that personal data remains adequately protected and that such processing is carried out in accordance with the PDPA and applicable legal requirements.

6. Cookies and Website Technologies

The Company may use cookies, pixels, analytics tools, and similar technologies to improve website performance, understand user behaviour, enhance user experience, provide security monitoring, personalise content, and measure the effectiveness of marketing activities.

These technologies help us maintain and improve the functionality of our website and digital platforms. Users may choose to manage cookie preferences through their browser settings, although disabling certain cookies may affect the functionality of the website.

7. Data Security and Retention

The Company is committed to maintaining appropriate administrative, technical, physical, and organisational safeguards to protect personal data against accidental loss, unauthorised access, misuse, disclosure, alteration, or destruction.

Personal data will be retained only for as long as is reasonably necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements, to manage business relationships, or to protect the legitimate interests of the Company. Once personal data is no longer required, it will be securely deleted, anonymised, archived, or disposed of in accordance with the Company's internal policies and applicable legal requirements.

8. Right of Data Subjects

Subject to the provisions of the PDPA, you may have the right to request access to your personal data, request correction of inaccurate or incomplete information, withdraw consent for certain processing activities, request clarification regarding how your personal data is being processed, and submit complaints regarding the Company's handling of your personal data.

The Company reserves the right to verify your identity and may impose reasonable administrative fees where permitted under applicable law before responding to such requests.

9. Personal Data Breach Management

The Company maintains internal procedures designed to identify, assess, contain, investigate, and manage personal data breaches. In the event of a data breach involving personal data under our control, the Company will take appropriate remedial actions and, where required by law, notify the relevant authorities and affected individuals in accordance with applicable regulatory requirements.

10. Marketing Communication

Where consent has been provided, the Company may send newsletters, product information, promotional offers, event invitations, educational materials, customer surveys, and other marketing communications. You may withdraw your consent or unsubscribe from receiving such communications at any time by following the unsubscribe instructions included in our communications or by contacting us directly.

11. Contact Information

If you have any questions regarding this Notice or wish to exercise your rights relating to personal data, you may contact:

Data Protection Officer/ Person in Charge
NUWELL GLOBAL SDN. BHD.
Email: info@kwnggroup.com

12. Amendments to this Notice

The Company reserves the right to amend, revise, or update this Notice from time to time to reflect changes in legal requirements, business practices, operational processes, or regulatory expectations. The latest version of this Notice will be published on the Company's website and shall take effect upon publication.

13. Government Law

This Notice shall be governed by and construed in accordance with the laws of Malaysia.

Effective Date: 01 August 2026
Issued By: NUWELL GLOBAL SDN. BHD.