1. Introduction

Farlin Malaysia (“Farlin”, “we”, “our”, or “us”) is committed to protecting the personal data of our customers, website visitors, and members in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia (“PDPA”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://farlin.com.my/ or register as a member. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our website.

This policy applies only to our online activities and does not cover information collected through offline channels.

2. Personal Data We Collect

Under the PDPA, “personal data” means information that relates directly or indirectly to you and by which you can be identified. We may collect the following categories of personal data:

2.1 Data You Provide Directly

• Full name
• Email address
• Phone number
• Delivery address
• Account login credentials
• Payment-related information (processed securely via third-party payment gateways)
• Messages or enquiries sent to us

2.2 Data Collected Automatically

• Internet Protocol (IP) address
• Browser type and version
• Internet Service Provider (ISP)
• Date and time of visit
• Pages visited and referring/exit pages
• Device and operating system information

3. Purpose of Processing Your Personal Data

We collect and process your personal data for the following purposes, in accordance with the Notice and Choice Principle under the PDPA:

• To create and manage your member account
• To process and fulfil your orders and deliver products to you
• To send order confirmations, receipts, and delivery updates
• To communicate promotional offers, discounts, and new product information (with your consent)
• To improve our website, services, and user experience
• To respond to your enquiries and provide customer support
• To detect and prevent fraud or unauthorised activity
• To comply with applicable laws and regulations in Malaysia

We will not process your personal data for any purpose other than those stated above without obtaining your prior consent, except as required by law.

4. Consent

By registering as a member, making a purchase, or submitting your personal data through our website, you hereby consent to the collection, use, and processing of your personal data as described in this Privacy Policy.

Where we rely on your consent, you have the right to withdraw it at any time by contacting us at the details provided in Section 10. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Disclosure of Personal Data

We do not sell, trade, or rent your personal data to third parties. We may share your personal data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating our website, processing payments, or delivering orders (e.g., logistics partners, payment processors). These parties are contractually obligated to keep your data confidential and use it solely for services provided to us.
• Legal Requirements: When required by Malaysian law, court order, or government authority, or as otherwise necessary to comply with our legal obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant party subject to equivalent data protection obligations.

Any transfer of personal data outside of Malaysia will only occur in accordance with the requirements of the PDPA, including ensuring adequate levels of data protection in the receiving country.

6. Security of Personal Data

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include secure servers, SSL encryption, and restricted access controls.

However, no method of transmission over the internet is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Retention of Personal Data

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Malaysian law. When your personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.

8. Cookies and Web Beacons

Our website uses cookies — small text files stored on your device — to enhance your browsing experience. Cookies allow us to remember your preferences, analyse website traffic, and personalise content.

Types of cookies we use:

• Essential Cookies: Required for the website to function properly (e.g., shopping cart, login session).
• Analytics Cookies: Help us understand how visitors interact with our website.
• Marketing Cookies: Used to deliver relevant advertisements and promotions.

You may disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of our website.

We may also use web beacons (small transparent images) in our marketing emails to track open rates and link clicks, helping us improve our communications.

9. Third-Party Links and Services

Our website may contain links to third-party websites or integrate third-party services (such as payment gateways and social media platforms). This Privacy Policy does not apply to those third-party sites. We encourage you to review their respective privacy policies.

We have no control over and assume no responsibility for the privacy practices or content of third-party websites.

10. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act 2010 (Act 709), you are entitled to the following rights:

• Right of Access: You may request access to the personal data we hold about you and information on how it is being processed.
• Right of Correction: You may request that we correct any inaccurate, incomplete, misleading, or outdated personal data.
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time, subject to legal or contractual restrictions.
• Right to Limit Processing: You may request that we cease or limit the processing of your personal data for direct marketing purposes.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 12. We will respond to your request within thirty (30) days as required under the PDPA.

11. Children’s Data

Our website is intended for use by adults (18 years and above). As a brand dedicated to baby and child products, we are especially committed to child safety online. We do not knowingly collect personal data from children under the age of 18 without verifiable parental or guardian consent.

If you are a parent or guardian and believe your child has provided personal data to us without your consent, please contact us immediately. We will take prompt steps to delete such information from our records.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact:

Data Protection Officer — Farlin Malaysia

Email: farlinbaby.my@gmail.com

Phone: +601120578328

Address: B-6-11, Blok B Ativo Plaza, Bandar Sri Damansara, 52200 Kuala Lumpur, Selangor Malaysia

Website: https://farlin.com.my/

13. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices or applicable laws. The revised policy will be posted on this page with an updated “Last Updated” date.

Continued use of our website after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (Act 709).