Who we are

AJ Herbs (“we,” “us,” “our”) is a family-operated herbal wellness business based in Gunung Lang, Ipoh, Perak, Malaysia, operating online at AJHerbs.com. This policy explains how we handle personal data belonging to visitors and customers of our website, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

What we collect

We only collect what we need to process your order and communicate with you:

• Contact details — name, phone number, email address, and delivery address, provided when you order, message us on WhatsApp, or use our contact form.
• Order details — products, quantities, and pricing discussed for your order.
• Basic website usage data — standard technical data such as browser type and pages visited, which most websites collect automatically through their hosting or analytics tools, to help us understand how the site is used.

We do not collect payment card details directly — payments are handled through the payment method you and we agree on (e.g. bank transfer, online banking), and we do not store your banking credentials.

How we use it

• To process, pack, and arrange delivery or pickup of your order
• To communicate with you about your order, including via WhatsApp
• To respond to questions sent through our contact form or social channels
• To improve our website and product offering

We do not use your personal data for unrelated marketing without your consent, and we do not sell your personal data to third parties.

Who we share it with

We share the minimum necessary information with:

• Courier partners (Grab Express, Lalamove, or similar) — your name, phone number, and delivery address, so they can complete delivery.
• Payment or banking channels you choose to use to pay us — we do not control how these third parties handle your data, and recommend reviewing their own privacy terms.

We do not share your data with advertisers or data brokers.

How long we keep it

We keep order-related information for as long as needed to fulfil your order, handle any after-sales questions, and meet our own bookkeeping obligations. If you contact us with a general enquiry that doesn’t lead to an order, we keep that conversation only as long as reasonably needed to respond to you.

Your rights

Under the PDPA, you have the right to:

• Ask what personal data we hold about you
• Ask us to correct inaccurate personal data
• Withdraw consent to future contact from us
• Ask us to delete your personal data, where we’re not required to keep it for legal or operational reasons (e.g. active order fulfilment)

To exercise any of these rights, contact us using the details below.

Cookies and website analytics

Like most WordPress websites, AJHerbs.com may use standard cookies or analytics tools to understand site traffic and improve the browsing experience. These do not identify you personally beyond general usage patterns. You can disable cookies through your browser settings at any time.

Children

Our products and website are intended for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time as our business or the law changes. The “Last updated” date at the top of this page will reflect the most recent revision.