Privacy Policy

This Privacy Policy describes how CartVault collects, uses, and protects your personal information. We are committed to safeguarding your privacy and ensuring transparency in how we handle your data when you use our e-commerce platform.

Information We Collect

We collect information in several ways to provide and improve our services:

• Account Information: When you register, we collect your name, email address, phone number, and password.
• Shipping Details: We gather delivery addresses and contact information to process your orders.
• Payment Information: Payment data is collected securely through our payment processors. We do not store full credit card details on our servers.
• Browsing Data: We track pages you visit, products you view, and time spent on our platform to understand user behavior.
• Device Information: We collect device type, operating system, browser type, and IP address for security and analytics purposes.
• Communication Records: We retain messages from customer support interactions and email correspondence.

How We Use Your Information

Your information enables us to deliver quality services and enhance your shopping experience. We use collected data for:

• Processing orders, payments, and shipments
• Sending order confirmations, updates, and delivery notifications
• Personalizing product recommendations based on browsing history
• Analyzing user behavior to improve our platform design and functionality
• Responding to customer inquiries and providing support
• Detecting and preventing fraudulent transactions and security threats
• Complying with legal obligations and regulations in Malaysia
• Sending promotional communications if you have opted in

Data Security and Protection

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, or disclosure. Our platform uses SSL encryption for all data transmitted between your browser and our servers. Access to customer data is restricted to authorized personnel only, and we regularly audit our security practices. However, no online transmission is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

You have several rights regarding your personal information. You can access, update, or delete your account data by logging into your profile settings. You may request a copy of all personal information we hold about you. You can opt out of promotional emails by clicking the unsubscribe link in any marketing message. You also have the right to withdraw consent for data processing at any time. To exercise these rights, please contact us using the details provided below.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and analyze site usage. Cookies are small files stored on your device that help us remember your preferences and shopping cart contents. We use both session cookies (temporary) and persistent cookies (long-term). Third-party analytics providers may also place cookies to track user behavior across our site. You can control cookie settings through your browser preferences, though disabling cookies may affect some website functionality. For detailed information about our cookie usage, please review our Cookie Policy.

Third-Party Sharing

We do not sell your personal information to third parties. However, we may share data with trusted service providers who assist in operations, including payment processors, shipping carriers, and analytics platforms. These partners are bound by confidentiality agreements and are permitted to use your information only to provide services to us. We may also disclose information if required by law or to protect our rights and safety. International transfers of data comply with applicable data protection regulations.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy. Account information is kept during your membership and for a reasonable period afterward for business and legal purposes. Transaction records are retained to comply with Malaysian financial regulations and tax requirements. You can request deletion of your account and associated data, though we may retain certain information as required by law. Deleted information is securely destroyed and cannot be recovered.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the “Last updated” date. Continued use of our platform following policy changes constitutes your acceptance of the revised terms. We encourage you to review this policy regularly to stay informed about how we protect your information.