Privacy Policy

1. Who is responsible for your data

TAZA Commerce is operated by TAZASCENT RESOURCES (Registration No. 202503030303 (003694319-K)). TAZASCENT RESOURCES is the data controller for personal data processed through this storefront. Registered business address: BLOK A-2-9 APARTMENT 5R3, JALAN P5/7, PRESINT 5, 62200 PUTRAJAYA, W.P. PUTRAJAYA, MALAYSIA. TAZA Innovative Tech is an umbrella brand and is not, by itself, the data controller.

2. Data we may collect

• Identity and contact details: name, telephone number and, where you provide it, email address.
• Delivery address, kept as an immutable snapshot on the order for fulfilment and audit.
• Order data: bundle, prices, shipping choice, shipping benefit, order and payment references.
• Payment-related references only (for example a provider payment or transaction ID) where online payment is enabled. We do not store card numbers or payment credentials.
• Shipping and tracking references: shipping-platform order number, AWB / tracking number, courier, service and status events.
• Support interactions on WhatsApp, including the order number and evidence you send us (photos or unboxing videos).
• Technical logs: IP address, browser and device information, request timestamps and security events.
• An affiliate attribution cookie ("taza_aff") when you arrive through an affiliate link: it holds only the affiliate code, click ID, landing path and expiry (30 days), and no personal data.
• COD anti-abuse records, where COD is enabled: the originating order, courier event and reason, review outcome and a minimal matching identifier.

3. Why we use it

• To accept, fulfil, ship and track your order.
• To provide customer support and handle refunds, returns and claims.
• To prevent fraud and abuse, including false claims and confirmed unjustified COD refusals.
• To process payment where online payment is enabled.
• To meet legal, tax and accounting obligations and to keep auditable order records.
• To keep the site secure and to measure how it performs operationally.

4. Who we share it with (where enabled)

We share only what each party needs for its role. None of the services below is a live integration until we enable it:

• Payment provider (Curlec), where online payment is enabled, to process and verify your payment.
• Shipping platform (EasyParcel) and the participating courier that carries your parcel, where shipping is enabled, to book, deliver, track and, where applicable, collect COD.
• Hosting and infrastructure providers that run the website.
• Analytics or security providers, only where actually used, limited to technical and aggregate data.
• Authorities or courts where the law requires it.

We do not sell personal data.

5. Affiliate attribution

Affiliate attribution records only referral metadata. Affiliates never receive your home address, telephone number or payment information.

6. How long we keep data

We keep personal data only for as long as it is needed for the purpose it was collected for, then for the period required by Malaysian tax, accounting and consumer law for order, payment and refund records, after which it is deleted or anonymised.

We apply data minimisation. Support evidence such as unboxing videos is kept only while the claim and any courier claim are open and for a reasonable period afterwards. A COD anti-abuse record is limited to the minimum needed to enforce the ordering restriction; the commercial restriction being permanent does not mean raw personal data is retained indefinitely. Technical logs are kept for a limited period for security and troubleshooting.

7. Security

We use HTTPS, restricted access to order and anti-abuse records, server-side verification of every price and payment result, and we never store payment card credentials. No system is perfectly secure; please do not send payment card details over chat.

8. Your rights

Subject to the Personal Data Protection Act 2010, you may ask to access or correct the personal data we hold about you, withdraw consent where processing relies on it, or ask us to limit processing. Contact us using the details below with your order number so that we can verify the request. We will respond within a reasonable time and tell you if a request cannot be met because the data must be kept for a legal or audit reason.

9. Children

The storefront is intended for adults. We do not knowingly collect personal data from children.

10. Changes

We may update this policy as services are enabled or the law changes. The effective date is shown at the top of this page.

11. Contact

Privacy requests and questions: WhatsApp +60 18-347 2205 (https://wa.me/60183472205), or in writing to TAZASCENT RESOURCES at the registered business address above.