Essencetial Herbs

Privacy Policy

How Essencetial Herbs collects, uses and protects your personal data, under Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated 6 November 2026.

Seller details

Trading name
Essencetial Herbs
Website
essencetialherbs.com
WhatsApp
+60 17-947 0328
Pigeon chat
In the shop, from the pigeon button

What we collect

When you order: your name, phone number, email, delivery address and any note you add.

When you make an account: your email and password (we cannot read your password), your name, your saved addresses, your Spices and your basket.

When you use the shop: your reviews, your pigeon chat messages, stock alerts you ask for, and your order history.

On your device we keep small settings so the shop works: your sign-in, your basket, your language and sound choice, and a note that you have seen the garden guide. We do not use advertising or tracking cookies, and we do not run analytics that follow you around the web.

What we do not collect

We never see or store your card or bank details. Payment is handled by Stripe.

Why we use it

To take and deliver your order, take payment, keep you updated on it, give After-sales help, run your account and Spices, show reviews from real buyers, prevent fraud and misuse, keep our accounting records, and improve the shop. We do not sell your personal data.

Who we share it with

Only those who need it to serve you: Stripe (payment); courier companies and EasyParcel, the delivery service we use to book couriers, who need your name, phone number and address to deliver; and our technology providers who run the shop for us: Supabase (database and sign-in, hosted in Singapore) and Cloudflare (website hosting). They may only use your data to provide their service to us. We may also share data where the law requires it.

Where it is kept and for how long

Your data is stored on our database provider's servers in Singapore, with access limited by sign-in rules. We keep order and payment records as long as accounting and tax rules require (normally seven years). We keep account data until you ask us to delete the account. Chat messages and other data are deleted when no longer needed.

Keeping it safe

Connections are encrypted, passwords are stored securely, and only the shop owner can see orders and customer details. No system is perfectly safe. If a breach affects you, we will tell you and the authorities as the law requires.

Your rights

You may ask to see the personal data we hold about you, to correct it, or to withdraw your consent, and you may ask us to delete your account. Some records (for example orders) must be kept by law. Please contact us using the details below and we will reply within 21 days.

Children

The shop is for adults. If you are under 18, please ask a parent or guardian to order for you.

Language

This notice is given in English and Bahasa Malaysia. If they differ, please ask us to explain.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

Send a pigeon to the herbalist from the shop, or message us on WhatsApp, for anything about your data.