Nonaria is officially here! Shop our first collection
Nonaria

Privacy

PRIVACY POLICY & PERSONAL DATA PROTECTION NOTICE This Privacy Policy and Personal Data Protection Notice explains how Nonaria, operated by AS APPARELS SDN BHD (Registration No. 202401037455 (1583302-K)), collects, uses, processes, stores, discloses and protects your personal data when you visit, register, communicate with us or make a purchase through nonaria.my. nonaria.my operates using TIKO, our ecommerce platform used to manage our online store, customer accounts, orders and related ecommerce activities. For the purposes of applicable Malaysian personal data protection laws, AS APPARELS SDN BHD is the data controller responsible for personal data processed in connection with Nonaria and nonaria.my. We process personal data in accordance with applicable Malaysian laws, including the Personal Data Protection Act 2010 [Act 709], as amended from time to time. The Malaysian PDPA framework uses the term data controller following the 2024 amendments. 1. PERSONAL DATA WE MAY COLLECT When you visit or shop at nonaria.my, we may collect personal data including: Full name Email address Mobile or telephone number Billing address Shipping or delivery address Customer account information Order and purchase history Payment and transaction information Refund, exchange and return information Communications with our customer service team Product reviews, feedback or survey responses IP address Device and browser information Website activity and interaction information Cookie identifiers and similar online identifiers Marketing and communication preferences We generally do not require sensitive personal data to complete an ordinary ecommerce transaction. Please do not provide sensitive personal information unless it is specifically requested and reasonably required for a particular purpose. 2. HOW WE COLLECT YOUR PERSONAL DATA We may collect personal data: Directly from you when you register an account When you place an order When you contact our customer service team When you subscribe to marketing communications When you participate in promotions, campaigns, surveys or events When you submit reviews or feedback Automatically when you browse or interact with nonaria.my Through cookies and similar technologies Through TIKO and systems connected to our ecommerce operations Through payment service providers Through courier and logistics partners Through customer service and communication platforms Through advertising and analytics platforms Through social media platforms when you interact with Nonaria Through other service providers involved in providing our services The type of information collected depends on the service or feature you use. 3. HOW WE USE YOUR PERSONAL DATA We may use personal data to: Create and maintain your customer account Process and confirm your orders Process payments Arrange shipping and delivery Provide order and delivery updates Process exchanges, returns and refunds Respond to enquiries Provide customer support Verify transactions Detect and prevent fraud or unauthorised activity Secure our website and ecommerce systems Maintain customer and transaction records Improve our products and services Improve nonaria.my and TIKO Diagnose technical issues Understand how customers interact with our website Conduct sales and business analysis Prepare internal reports Measure marketing performance Personalise your experience where applicable Send marketing communications where permitted Manage promotions, campaigns or loyalty activities Comply with legal, accounting, regulatory and tax requirements Protect our legal rights and those of our customers Malaysia's privacy notice framework requires customers to be informed about the purposes for which their personal data is collected, used, disclosed or otherwise processed. 4. INFORMATION REQUIRED TO COMPLETE A PURCHASE Certain personal information is required for us to complete your transaction. For example, you may need to provide your: Name Contact details Delivery address Billing information Information required by the selected payment method Providing personal information is generally voluntary. However, if you do not provide information necessary to fulfil a particular service, we may be unable to: Accept or process your order Process your payment Deliver your purchase Contact you concerning your order Process a return, exchange or refund Provide certain customer services You are not required to subscribe to promotional or marketing messages in order to purchase from Nonaria. 5. TIKO ECOMMERCE PLATFORM nonaria.my is operated using TIKO, our ecommerce platform. TIKO may process and store information necessary to operate the Nonaria online store, including information relating to: Customer accounts Customer profiles Shopping carts Orders Product purchases Addresses Promotions and discounts Payment status Fulfilment Returns and refunds Customer service Website activity Administrative reporting Because TIKO forms part of our ecommerce operations, information processed through TIKO is handled on behalf of and under the responsibility of AS APPARELS SDN BHD, subject to the roles of any third-party providers integrated with the platform. Access to administrative areas of TIKO should be restricted to authorised personnel and service providers who reasonably require access for their duties. 6. PAYMENT INFORMATION Payments made through nonaria.my may be processed using external banks, payment gateways or payment service providers integrated with TIKO. Depending on the payment method selected, payment information may be submitted directly to the relevant provider. Nonaria does not necessarily receive or retain your complete: Credit or debit card number CVV or card security code Online banking password Bank login credentials One-time passwords Other authentication credentials We may receive and retain transaction information such as: Payment status Payment amount Payment method Transaction reference Billing information Refund status Each payment provider may also process information under its own terms and privacy practices. 7. DELIVERY AND LOGISTICS To deliver purchases, we may disclose information to our courier, delivery, fulfilment or logistics partners. The information provided may include: Customer name Contact number Delivery address Order or parcel number Parcel information Delivery instructions Such information is provided where reasonably necessary to arrange, manage, track or complete delivery and to resolve delivery-related issues. 8. THIRD-PARTY SERVICES CONNECTED TO TIKO Although TIKO is operated in-house, some functions of nonaria.my may depend on third-party systems or service providers. These may include providers of: Payment processing Banking services Shipping and logistics Cloud hosting Server infrastructure Content delivery networks Email services SMS or messaging services Customer support tools Website analytics Advertising Fraud prevention Product reviews Business reporting Accounting Security and monitoring services These providers may receive or process personal information where reasonably necessary to provide their services. We may change service providers or technical integrations from time to time as our ecommerce operations develop. 9. MARKETING COMMUNICATIONS Where you have consented, or where otherwise permitted under applicable law, we may use your contact information to send communications about: New products Collections Product launches Restocks Promotions Campaigns Events Nonaria news and updates The Malaysian Personal Data Protection Commissioner's published guidance states that promotional communications require appropriate customer consent. You may opt out of marketing communications at any time using the unsubscribe mechanism available in the communication or by contacting us. Opting out of marketing does not prevent us from sending non-promotional service communications, such as: Order confirmations Payment confirmations Delivery information Refund notifications Security notices Responses to customer enquiries 10. COOKIES AND SIMILAR TECHNOLOGIES nonaria.my may use cookies, pixels, local storage and similar technologies. These may be used to: Keep the website functioning correctly Remember your shopping cart Maintain login sessions Remember selected preferences Improve website performance Analyse website traffic Understand how customers use nonaria.my Identify technical errors Protect the website against misuse Detect potentially fraudulent activity Measure marketing performance Support advertising and personalisation where applicable Some technologies may be essential for the operation of the website, while others may relate to analytics, marketing or advertising. Where appropriate, nonaria.my may provide controls allowing you to manage certain cookie or tracking preferences. You may also control cookies through your browser settings. Blocking certain cookies may affect website functionality. 11. ANALYTICS AND ADVERTISING We may use third-party analytics and advertising services to understand how nonaria.my performs and to measure the effectiveness of our marketing activities. Depending on the services implemented on TIKO, these services may collect or receive information about: Website visits Pages viewed Product interactions Cart activity Purchases Device information Browser information Advertising interactions Such information may be collected through cookies, pixels or similar technologies. Where required by applicable law, these technologies will be operated subject to appropriate privacy choices or consent. We do not sell customer personal data for monetary consideration. 12. DISCLOSURE OF PERSONAL DATA We may disclose personal data where reasonably necessary to: Payment providers Banks or financial institutions Courier and logistics providers Cloud and hosting providers Technology service providers Email and messaging providers Customer service providers Analytics providers Marketing and advertising providers Fraud prevention providers Accountants and auditors Legal advisers Insurers Government authorities Regulators Law enforcement agencies The PDPA's Notice and Choice Principle requires organisations to inform data subjects about how information is used and the classes of third parties to whom it may be disclosed. We may also disclose information where required by law or where reasonably necessary to protect our legal rights, customers, employees or systems. 13. CROSS-BORDER DATA PROCESSING TIKO may be operated by AS APPARELS SDN BHD, but some infrastructure or third-party services integrated with the platform may be located outside Malaysia. For example, cloud hosting, email, analytics, payment or advertising service providers may process information in other jurisdictions. Where personal data is transferred outside Malaysia, we will take reasonable measures to comply with applicable Malaysian requirements governing cross-border transfers. Malaysia's amended PDPA contains requirements applicable to transfers of personal data outside Malaysia, including considerations relating to the protections available in the destination jurisdiction and applicable statutory conditions. 14. DATA SECURITY We take reasonable technical, administrative and organisational measures designed to protect personal data against: Unauthorised access Accidental loss Misuse Unauthorised disclosure Modification Destruction Measures may include, where appropriate: Restricted administrative access Authentication controls Access permissions Secure connections Logging and monitoring Data backup Security updates Staff access controls Malaysia's PDPA includes a Security Principle requiring appropriate steps to safeguard personal data against misuse, modification, unauthorised access or disclosure. However, no online system or electronic transmission can be guaranteed to be completely secure. Customers are responsible for keeping their login credentials confidential. 15. DATA RETENTION We retain personal data for only as long as reasonably necessary for the purpose for which it was collected or where continued retention is necessary for: Order records Customer service Returns and refunds Accounting Taxation Fraud prevention Legal claims Regulatory compliance Business recordkeeping Where information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable operational and legal requirements. The Storage Principle under Malaysia's PDPA provides that personal data should not be retained longer than necessary for the relevant purpose. 16. ACCURACY OF INFORMATION We take reasonable steps to maintain personal data that is accurate, complete and up to date where necessary. You should update your information when relevant details change, including your: Email address Telephone number Delivery address Account details Where available, registered users may update certain details directly through their Nonaria account. 17. YOUR PERSONAL DATA RIGHTS Subject to applicable Malaysian law, you may have rights relating to your personal data, including rights to: Request access to personal data held about you Request correction of inaccurate information Update information Withdraw consent where applicable Limit certain types of processing where permitted Opt out of direct marketing communications Ask how your personal data is being processed Raise concerns or complaints regarding our handling of your information Exercise other rights available under applicable personal data protection laws Malaysia's PDPA includes access and correction principles, alongside obligations concerning data integrity, security and retention. We may need to verify your identity before acting on certain requests. Some information may continue to be retained where reasonably necessary or legally required, such as records relating to completed transactions, tax, accounting, fraud prevention or disputes. 18. CHILDREN'S PERSONAL DATA nonaria.my is a general ecommerce website and is not intended primarily for children. Where a person is not legally able to independently enter into a transaction, use of the website and purchases should take place with the involvement of a parent or legal guardian. We do not knowingly seek to collect children's personal information for purposes unrelated to providing our products or services. 19. THIRD-PARTY WEBSITES AND SERVICES nonaria.my may contain links to third-party websites or services. Once you leave nonaria.my, those third parties may process your information under their own privacy policies. AS APPARELS SDN BHD is not responsible for the privacy or security practices of external services that it does not control. We recommend reviewing the relevant provider's privacy terms before supplying personal information. 20. SOCIAL MEDIA Nonaria may maintain accounts on platforms such as Instagram, TikTok, Facebook or other social networks. When you use these services, the platform may independently collect or process personal information under its own privacy practices. Information you send directly to Nonaria through a social media account may also be processed by us to: Respond to enquiries Provide customer support Resolve order issues Communicate with you Administer promotions or campaigns where applicable 21. CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy and Personal Data Protection Notice from time to time to reflect changes in: Our business operations TIKO nonaria.my Ecommerce functionality Third-party integrations Data processing practices Security practices Applicable laws or regulatory requirements The latest version will be made available on nonaria.my, together with the latest revision date. Where appropriate, we may provide additional notice regarding material changes.