Privacy policy

Privacy Policy

This Privacy Policy explains how DZH TRADE HUB, trading as NOCTRA ("NOCTRA", "we", "us" or "our"), collects, uses, discloses, stores and protects personal data when you visit www.noctrascent.com, communicate with us, create an account, subscribe to marketing or purchase our products.

We process personal data in connection with commercial transactions in accordance with applicable Malaysian data-protection law, including the Personal Data Protection Act 2010 and applicable amendments, regulations, standards and guidelines.

Data controller

The data controller responsible for the personal data described in this policy is:

Legal name: DZH TRADE HUB
Trading name: NOCTRA
SSM registration number: NS0311099-M
Business address: No 17, Jalan Bunga Matahari 2, Taman Maju Jaya Fasa 3, Cheras, 56100, WPKL
Email: support@noctrascent.com
Telephone: [PHONE NUMBER]

Personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact information

  • Name;
  • Billing and delivery address;
  • Email address;
  • Telephone number; and
  • Account or customer-profile information.

Order and transaction information

  • Products ordered;
  • Order number;
  • Order date and value;
  • Delivery and fulfilment status;
  • Returns, refunds and customer-service history; and
  • Information required to investigate a payment, delivery or product issue.

Payment information

Payments are processed by Shopify and the payment providers made available at checkout. We do not ordinarily receive or store your complete payment-card number. We may receive limited payment information, such as payment status, method, transaction reference and billing details.

Device and website information

  • Internet Protocol address;
  • Browser and device type;
  • Operating system;
  • Cookie and similar technology identifiers;
  • Pages viewed and actions taken;
  • Referring website or marketing source; and
  • Approximate location derived from technical information.

Communications and preferences

  • Emails, messages and enquiries sent to us;
  • Product feedback or reviews you submit;
  • Marketing subscription status;
  • Cookie and privacy choices; and
  • Records of consent, withdrawal or opt-out requests.

How we collect personal data

We may collect personal data:

  • Directly from you when you place an order, create an account, complete a form, subscribe, contact us or make a claim;
  • Automatically through cookies, pixels, logs and similar technologies when you use our website;
  • From Shopify, payment providers, delivery partners and service providers involved in your transaction;
  • From advertising, analytics or social-media partners where permitted and consistent with your settings; and
  • From public or lawful sources where reasonably necessary to prevent fraud, resolve disputes or comply with law.

Why we use personal data

We may use personal data to:

  • Process payments and fulfil orders;
  • Deliver products and provide tracking;
  • Create and manage customer accounts;
  • Provide customer service;
  • Handle cancellations, returns, replacements and refunds;
  • Communicate about an order or service request;
  • Maintain transaction and business records;
  • Detect, investigate and prevent fraud, abuse and security incidents;
  • Protect our customers, business, website and legal rights;
  • Improve our products, website and customer experience;
  • Measure website performance and understand customer interactions;
  • Send marketing communications where consent or another lawful basis exists;
  • Manage advertising in accordance with applicable law and your privacy choices;
  • Comply with tax, accounting, consumer-protection, data-protection and other legal obligations; and
  • Establish, exercise or defend legal claims.

Where consent is required, you may withdraw it, subject to applicable legal or contractual restrictions and reasonable notice. Withdrawal does not affect processing already lawfully carried out.

Disclosure of personal data

We may disclose personal data only where reasonably necessary to:

  • Shopify, which hosts and supports our online store;
  • Payment gateways, banks and fraud-prevention providers;
  • Couriers, fulfilment providers and delivery partners;
  • Information-technology, hosting, security and customer-support providers;
  • Email, analytics, advertising and marketing providers, subject to applicable consent and privacy controls;
  • Accountants, auditors, insurers, lawyers and professional advisers;
  • Regulators, courts, law-enforcement agencies or public authorities where required or permitted by law;
  • A purchaser, investor or successor in connection with a genuine business reorganisation, financing, merger or sale, subject to appropriate safeguards; and
  • Other persons where you have requested or consented to the disclosure.

We do not sell personal data as an independent commodity.

Cross-border processing

Shopify and some service providers may process or store personal data outside Malaysia. Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is permitted and that appropriate protection is applied in accordance with Malaysian law.

Cookies and similar technologies

Our website may use essential, functional, analytics and advertising cookies or similar technologies.

Essential technologies support functions such as secure checkout, cart contents, fraud prevention and account access. Optional analytics or advertising technologies may be controlled through the privacy or cookie settings made available on the website, where applicable.

You may also adjust your browser settings, although blocking essential cookies may prevent parts of the website from functioning correctly.

Marketing communications

We may send product news, launches and other marketing only where permitted. You may unsubscribe through the link in a marketing email or contact us at support@noctrascent.com.

Opting out of marketing does not prevent us from sending non-marketing communications required to process an order, provide customer service or comply with law.

Data retention

We retain personal data only for as long as reasonably required for the purposes described in this policy, including fulfilment, customer service, fraud prevention, legal claims and tax, accounting or regulatory obligations.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to lawful retention requirements and technical backup cycles.

Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction.

No internet transmission or storage system is completely secure. If a personal-data breach occurs, we will investigate and make notifications where required by applicable law.

Your rights

Subject to applicable law, you may have the right to:

  • Be informed whether we process your personal data;
  • Request access to personal data held about you;
  • Request correction of inaccurate, incomplete or outdated personal data;
  • Withdraw consent to processing where consent is relied upon;
  • Prevent processing likely to cause damage or distress, where the law provides;
  • Object to or prevent processing for direct marketing;
  • Request information about our processing practices; and
  • Make a complaint to the Personal Data Protection Commissioner of Malaysia.

We may need to verify your identity before completing a request. Certain requests may be subject to lawful exceptions, prescribed procedures or fees.

To exercise a right, contact support@noctrascent.com with the subject line Privacy Request.

Children's privacy

Our store is not directed to children. If you are under 18, use the website and make a purchase only with the involvement and permission of a parent or legal guardian.

Third-party websites

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices except where responsibility cannot lawfully be excluded.

Changes to this policy

We may update this Privacy Policy to reflect changes in our services, technology or legal obligations. The current version will be posted on this page with its updated date. Material changes may be communicated by an additional reasonable method where required.

Contact and complaints

For a privacy question, request or complaint, contact:

[DZH TRADE HUB] trading as NOCTRA
SSM registration number: [NS0311099-M]
Address: No 17, Jalan Bunga Matahari 2, Taman Maju Jaya Fasa 3, Cheras, 56100, WPKL
Email: support@noctrascent.com
Telephone: 011-28575714

If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia through the official channels published at www.pdp.gov.my.