Privacy Policy

Last Updated: January 6, 2026 1. Introduction Welcome to Lumiizen ("we," "us," or "our"). We are committed to protecting your personal data and privacy in accordance with the Personal Data Protection Act 2010 (Malaysia) and the Personal Data Protection Act 2012 (Singapore). This Privacy Policy explains how we collect, use, and disclose your personal data when you visit our website www.lumiizen.com (the "Site") or utilize our services. By accessing our Site or communicating with us, you consent to the practices described in this policy. 2. Information We Collect We collect personal data that is necessary for us to provide our services and improve your experience. This includes: Personal Identification Information: Name, email address, phone number (mobile/home), and mailing/billing address. Payment Information: While we facilitate payments, we do not store your credit card details directly. Payment transactions are processed via secure third-party gateways (Billplz and Razer Merchant Services). Technical Data: IP address, browser type, time zone setting, and operating system, collected via cookies and analytics tools. Note: We do not collect National Registration Identity Card (NRIC) or Singapore NRIC/FIN numbers unless legally required for a specific transaction where verification is mandatory, in strict compliance with PDPA guidelines. 3. How We Use Your Information We use your data for the following purposes: To Provide Services: Processing your inquiries, orders, and delivering products/services. To Process Payments: Facilitating secure transactions via Billplz or Razer Merchant Services. Customer Communication: To contact you via voice call or messaging platforms (such as WhatsApp) regarding your inquiries, order status, delivery updates, or urgent account matters. To Improve Our Website: Using analytics to understand how visitors interact with our Site. Marketing (With Consent): To send you updates, newsletters, or promotional materials if you have opted in. 4. Third-Party Services & Cookies We use trusted third-party service providers to help us operate our business. These providers may have access to your data solely for performing these tasks on our behalf: A. Payment Gateways We use Billplz and Razer Merchant Services to process payments. When you make a transaction, your payment details are processed directly by these providers in accordance with their own privacy policies and security standards (e.g., PCI-DSS). B. Tracking & Analytics We use Google Analytics and Facebook Pixel to analyze traffic and improve our marketing. Cookies: These tools use "cookies" (text files placed on your device) to track visitor behavior. Opt-Out: You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You can manage Facebook ad preferences in your Facebook account settings. 5. Marketing, Communication & DNC Registry In compliance with Singapore’s Personal Data Protection Act 2012 (PDPA) and the Do Not Call (DNC) Registry provisions, as well as Malaysian laws: Consent to Contact: By voluntarily providing your telephone number to us via our website forms or inquiries, you explicitly agree that we may contact you via voice call or text message (including WhatsApp) regarding your specific inquiries, orders, or service fulfillment. Marketing Messages: We will only send you promotional or marketing messages via WhatsApp or Email if you have explicitly opted-in to receive them. Withdrawal: You may withdraw your consent for us to contact you at any time by replying "STOP" or "UNSUBSCRIBE" to our messages, or by contacting our Data Protection Officer. 6. Data Security We implement appropriate technical and organizational security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or alteration. However, please note that no method of transmission over the Internet is 100% secure. 7. Your Rights (Access, Correction & Withdrawal) Depending on your location (Malaysia or Singapore), you have the right to: Access: Request a copy of the personal data we hold about you. Correction: Request that we correct any inaccurate or incomplete data. Withdraw Consent: Withdraw your consent for us to use your data for specific purposes (e.g., marketing or WhatsApp communication). To exercise these rights, please contact our Data Protection Officer (DPO) using the contact details below. 8. Contact Us If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: Lumiizen Data Protection Officer Email: info@lumiizen.com Website: www.lumiizen.com 9. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.

Privacy Policy