Privacy Policy

Aura Semulajadi operates this online platform and provides various related services. This policy explains how we collect, use, disclose, and protect your information when you interact with our site or services, including natural soap making, bespoke skincare formulation, provision of ethically sourced raw materials, beauty workshops and classes, online and retail sales of handmade cosmetics, and private label manufacturing.

We are committed to protecting your privacy and handling your information in a responsible and transparent manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or device. This may include:

Information you provide to us directly:

• Contact details (such as your name, billing address, shipping address)
• Payment information (processed securely by third parties)
• Account login credentials
• Information related to your orders and purchases
• Communications with us (emails, messages)
• Information you provide when you sign up for workshops, classes, or our newsletter
• Information necessary for bespoke formulation services, which may include details about skin type, concerns, sensitivities, or allergies. This is considered sensitive personal data.

Information collected automatically:

• Usage details about your visit to our site (pages visited, time spent)
• Technical information (IP address, browser type, operating system)
• Information collected through cookies and similar tracking technologies.

How We Collect Your Information

We collect information:

• Directly from you when you place an order, create an account, sign up for a workshop, subscribe to a newsletter, contact us, or provide details for bespoke services.
• Automatically as you navigate through our site, using cookies and other tracking technologies.

How We Use Your Information

We use the information we collect for various purposes, including:

• To process and fulfil your orders and requests for services (e.g., online purchases, workshop registration, bespoke formulations).
• To process payments and manage billing.
• To communicate with you about your orders, services, and inquiries.
• To provide customer support.
• To send you marketing and promotional communications (if you have opted-in or where permitted by law, with option to unsubscribe).
• To improve our site, services, and product offerings.
• To conduct workshops and classes.
• To facilitate private label manufacturing services.
• To comply with legal obligations.
• To protect our rights and interests, and prevent fraud.

We rely on several legal bases for processing your information, including:

• The necessity of processing for the performance of a contract with you (e.g., fulfilling your order, providing a workshop).
• Your consent (e.g., for sending marketing communications or processing sensitive data for bespoke formulations).
• Our legitimate interests (e.g., improving our services, preventing fraud), provided these interests do not override your fundamental rights and freedoms.
• Compliance with a legal obligation.

For sensitive personal data collected for bespoke formulations, we will obtain your explicit consent before processing this information.

How We Share Your Information

We may share your information with third parties for specific purposes:

• Service providers who perform services on our behalf (e.g., payment processors, shipping companies, IT support, marketing platforms). These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
• Legal authorities if required by law or in response to a valid legal process (e.g., court order, subpoena).
• In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.
• With your consent.

We do not sell your personal information to third parties.

Data Retention

We retain your information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your information is no longer needed, we will securely dispose of it.

Data Security

We implement reasonable technical and organizational measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction. However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your information transmitted over the internet.

Your Rights

Depending on applicable data protection laws, including the GDPR, you may have certain rights regarding your information, including:

• The right to access the information we hold about you.
• The right to request rectification of inaccurate or incomplete information.
• The right to request erasure of your information.
• The right to restrict the processing of your information.
• The right to object to the processing of your information.
• The right to data portability (receiving your information in a structured, commonly used, and machine-readable format).
• The right to withdraw consent at any time, where processing is based on consent.

To exercise these rights, please contact us using the address provided below. We may need to verify your identity before processing your request.

International Data Transfers

As we operate globally and use service providers worldwide, your information may be transferred to and stored in countries outside of your own, including countries outside the European Economic Area (EEA) or Malaysia, which may have different data protection laws than your country. Where we transfer information to countries that do not provide an adequate level of protection, we implement appropriate safeguards, such as standard contractual clauses, to ensure your information is protected in accordance with applicable law.

Cookies and Tracking Technologies

Our site uses cookies and similar technologies to function effectively, analyze site usage, and for marketing purposes. Cookies are small text files stored on your device. You can manage your cookie preferences through your browser settings or potentially through a cookie banner/tool on our site.

Third-Party Links

Our site may contain links to third-party websites. This policy does not apply to those third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

Children's Privacy

Our site and services are not intended for individuals under the age of 16. We do not knowingly collect information from children under 16. If we become aware that we have inadvertently collected information from a child under 16, we will take steps to delete it.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our site.

Contact Us

If you have any questions about this policy or our data practices, or to exercise your rights, please contact us in writing at the following address:

Aura Semulajadi
28 Jalan PJU 5/20
The Strand
Kota Damansara, Selangor, 47810
Malaysia