PRIVACY POLICY

Maple Leaf Organic Products Sdn Bhd


1. Introduction

Maple Leaf Organic Products Sdn Bhd ("Bio Tree Wellness", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.biotreewellness.com, make a purchase, or receive communications from us, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using our website or services, you agree to the terms of this Privacy Policy. Please read it carefully.


2. Personal Data We Collect

We collect the following personal data when you register an account, make a purchase, or interact with our website:

  • Full name
  • Email address
  • Phone number
  • Delivery address (including city, state, post-code, and country)
  • Date of birth (if provided)
  • Gender (if provided)
  • Purchase history and order details
  • Loyalty points and credit balance
  • Login method (email, Facebook, Apple)
  • IP address and browser/device information (collected automatically)

We only collect information that is necessary for the purposes outlined in this policy. All information is voluntarily provided by you during account registration or at checkout.


3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Managing your account and loyalty programme
  • Sending order confirmations, shipping updates, and customer support
  • Sending marketing communications including product updates, promotions, wellness tips, and company news (see Section 5)
  • Improving our website, products, and services
  • Complying with legal and regulatory obligations
  • Preventing fraud and ensuring security
  • Personalizing your shopping experience


4. Legal Basis for Processing

Under Malaysia's PDPA 2010, we process your personal data on the following grounds:

  • Contractual necessity — to fulfil orders you have placed with us
  • Legitimate interest — to manage our customer relationship, improve our services, and communicate relevant product information to existing customers
  • Consent — for marketing communications where you have opted in
  • Legal obligation — where required by Malaysian law


5. Email Marketing

Bio Tree Wellness uses MailerLite (email marketing platform) to send marketing emails to our customers. These emails may include:

  • New product announcements and launches
  • Promotions, discount codes, and exclusive offers
  • Wellness tips, recipes, and educational content
  • Order follow-ups and re-engagement messages
  • Birthday greetings and personalized offers

You may unsubscribe from marketing emails at any time by:

  • Clicking the "Unsubscribe" link at the bottom of any marketing email
  • Emailing us at biotreewellness@gmail.com with the subject "Unsubscribe"

Please note that even after unsubscribing from marketing emails, you may still receive transactional emails relating to your orders or account.


6. Third-Party Data Processors

We use trusted third-party service providers to operate our business. These providers are authorised to process your data only as necessary to provide services to us:

  • EasyStore — our e-commerce platform that stores customer accounts and order data
  • MailerLite — our email marketing platform used to manage subscriber lists and send campaigns
  • Cloudflare — DNS and website security provider
  • Payment gateways — for secure payment processing (we do not store credit card details)

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.


7. Data Retention

We retain your personal data for as long as your account is active or as needed to fulfil the purposes outlined in this policy. Specifically:

  • Account data is retained for the duration of your account and for up to 3 years after account closure
  • Order and transaction data is retained for 7 years for tax and legal compliance
  • Marketing consent records are retained for as long as you remain a subscriber
  • Email marketing data is removed from our active lists within 30 days of unsubscribing


8. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that we correct any inaccurate or incomplete data
  • Withdrawal of consent — withdraw consent for marketing communications at any time
  • Limit processing — request that we restrict processing of your data in certain circumstances
  • Data portability — request a copy of your data in a structured, readable format

To exercise any of these rights, please contact us at biotreewellness@gmail.com. We will respond within 21 days as required under PDPA.


9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

  • SSL/TLS encryption for all data transmitted via our website
  • Secure access controls limiting who can access customer data internally
  • Regular security reviews of our systems and third-party processors

However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.


10. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalise content. Cookies are small text files stored on your device. You may disable cookies through your browser settings, though this may affect certain functionality of our website.


11. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.


12. Changes to This Privacy Policy

Bio Tree BioTechnology Sdn Bhd reserves the right to update or amend this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.


13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Maple Leaf Organic Products Sdn Bhd

Email: biotreewellness@gmail.com

Website: www.biotreewellness.com

WhatsApp: +60 12-683 6323

Address: Melaka, Malaysia

This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any disputes shall be subject to the jurisdiction of Malaysian courts.