Privacy Policy (PDPA Compliant)

Last Updated: August 20, 2026

O Tresor des Plantes Sdn. Bhd. ("we", "our", or "us") operates the website otresordesplantes.com. We are committed to protecting the privacy of your personal data in accordance with the Personal Data Protection Act (PDPA) 2010 of Malaysia.

1. Data Controller (Operator Info)

The data controller responsible for your personal data is O Tresor des Plantes Sdn. Bhd., a company registered in Malaysia with Registration No. 202601012345 (1234567-X). Our physical headquarters is located at Level 28, Menara Binjai, No. 2 Jalan Binjai, 50450 Kuala Lumpur, Malaysia. For inquiries, contact our Data Protection Officer (DPO) at dpo@otresordesplantes.com.

2. Personal Data We Collect

We collect and process personal data that you voluntarily provide through our contact and inquiry forms:

  • Full Name (for identification and correspondence);
  • Corporate or Personal Email Address (to send quotes and updates);
  • Phone Number (to arrange wellness consultation calls);
  • Inquiry theme and corporate order requirements.

3. Purpose of Processing Personal Data

Your personal data is collected and processed solely for the following purposes:

  • To reply to your wholesale, spa partnership, or wellness concierge inquiries;
  • To process domestic and international deliveries via local logistics carriers;
  • To comply with regulatory tax requirements in Malaysia;
  • To send digital updates or newsletter alerts, provided you have opted in.

4. Disclosure to Third Parties

We do not sell, trade, or transfer your personal data to external parties. This excludes trusted logistics partners (such as Pos Laju, DHL Malaysia, or J&T Express) who assist us in delivering our organic tea selections, or cloud storage providers that maintain our secure databases, subject to confidentiality agreements.

5. Security and Retention of Personal Data

We implement strict technical and organizational security measures, including SSL encryption on all form fields, to prevent unauthorized access. In compliance with the PDPA 2010, we retain your data only for as long as necessary to fulfill the commercial or legal purposes for which it was gathered.

6. Your Rights Under PDPA 2010

You have the following statutory rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we store;
  • Right of Correction: Request immediate correction of incomplete or outdated data;
  • Right of Erasure ("Right to be Forgotten"): Request deletion of your personal records;
  • Withdrawal of Consent: Withdraw your consent to receive future commercial emails at any time by contacting our DPO.