Privacy policy

Privacy Policy

Last updated: 28 August 2026

At The Seoulful Edit, we value the trust you place in us when you shop, browse or communicate with us.

This Privacy Policy explains how we collect, use, disclose, store and otherwise process your personal information when you visit or use our website, place an order, contact us or otherwise interact with The Seoulful Edit.

The Seoulful Edit is operated by Blue Whale Global, a business registered in Malaysia under SSM Registration No. 202603041787 (JM1040387-T).

Our online store is powered by Shopify, which provides the e-commerce technology that allows us to offer our products and services to you.

This Privacy Policy is intended to serve as our personal data protection notice under the Personal Data Protection Act 2010 (Act 709) of Malaysia, as amended from time to time, and other applicable data protection requirements.

By providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy.

 

1. Personal Information We Collect

The personal information we collect depends on how you interact with The Seoulful Edit.

It may include:

Contact Information

Such as:

  • your name;
  • billing and shipping address;
  • email address; and
  • telephone number.

Order & Transaction Information

Such as:

  • products you view or purchase;
  • items added to your cart;
  • order history;
  • order value;
  • returns, refunds or other order-related activity;
  • delivery information; and
  • transaction and payment status.

Payment Information

Payments are processed through Shopify and/or authorised third-party payment service providers.

Depending on the payment method you choose, payment providers may collect information such as card details, bank information or other payment credentials directly from you.

The Seoulful Edit may receive information necessary to confirm and manage your payment, such as the payment method, transaction reference, payment status and billing information.

We do not generally have access to your complete payment card details when these are processed directly by an authorised payment provider.

Account Information

If customer accounts are available, we may process information associated with your account, such as:

  • username;
  • account preferences;
  • saved addresses;
  • order history; and
  • account settings.

Passwords and other authentication information may be managed through Shopify or other authorised service providers.

Communications With Us

When you contact us, we may collect information contained in your communications, including customer-service enquiries, feedback, complaints and product-related enquiries.

If you voluntarily provide information relating to health, allergies, reactions or other sensitive matters when reporting a product concern, we will process that information only where reasonably necessary to review your enquiry and as permitted by applicable law.

Device & Usage Information

When you use our website, certain information may be collected automatically, including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • network information;
  • website activity;
  • pages viewed;
  • shopping and browsing activity; and
  • other technical identifiers.

This information may be collected through Shopify, cookies and similar technologies.

 

2. How We Collect Personal Information

We may collect personal information:

Directly From You

For example, when you:

  • place an order;
  • create or use an account;
  • subscribe to communications;
  • contact customer service;
  • participate in a promotion;
  • provide a review; or
  • otherwise provide information to us.

Automatically

Certain technical and usage information may be collected automatically when you visit or interact with our website through cookies, pixels and similar technologies.

From Service Providers

We may receive information from service providers that help us operate our business, including:

  • Shopify;
  • payment processors;
  • courier and logistics providers;
  • fulfilment providers;
  • marketing and analytics providers; and
  • technology service providers.

From Other Third Parties

Where permitted by law, we may receive information from other business partners, platforms or services you choose to interact with.

 

3. Why We Use Your Personal Information

We may process your personal information for the following purposes.

To Process & Fulfil Your Order

Including to:

  • process purchases;
  • confirm payments;
  • prepare and fulfil orders;
  • arrange delivery;
  • provide order updates;
  • manage returns, refunds or replacements where applicable; and
  • maintain transaction records.

To Provide Customer Support

Including to:

  • respond to questions;
  • resolve order issues;
  • investigate damaged, defective or incorrect products;
  • manage complaints; and
  • communicate with you about your order or our services.

To Operate & Improve The Seoulful Edit

Including to:

  • operate our website;
  • understand how customers use our store;
  • improve products, services and website functionality;
  • understand customer preferences;
  • analyse store performance; and
  • improve the overall shopping experience.

Marketing & Communications

Where permitted by applicable law, we may use your information to:

  • send promotional emails or messages;
  • share product launches and offers;
  • provide updates from The Seoulful Edit;
  • personalise marketing; and
  • measure the effectiveness of our advertising.

You may opt out of promotional communications at any time using the unsubscribe method provided or by contacting us.

Opting out of marketing will not prevent us from sending essential service communications relating to orders, payments or customer-support matters.

Security & Fraud Prevention

We may process information to:

  • verify transactions;
  • detect suspicious activity;
  • protect customer accounts;
  • prevent fraud or misuse;
  • maintain website security; and
  • protect The Seoulful Edit, our customers and our service providers.

Legal & Regulatory Requirements

We may process information where reasonably necessary to:

  • comply with applicable laws;
  • maintain accounting, tax or transaction records;
  • respond to lawful requests from authorities;
  • establish, exercise or defend legal rights; and
  • enforce our applicable terms and policies.
  •  

4. Is Providing Your Personal Information Mandatory?

Some personal information is necessary for us to provide our services.

For example, we need information such as your name, contact details, shipping address and appropriate payment information to process and deliver an order.

If you choose not to provide information that is required to complete a transaction, we may be unable to process or fulfil your order.

Information requested solely for marketing or other optional purposes is generally voluntary.

Where appropriate, you may choose not to provide such optional information or may withdraw your consent subject to applicable law.

 

5. How We Disclose Personal Information

We do not disclose personal information unnecessarily.

We may disclose information to third parties where reasonably required to operate our store, fulfil your order, provide services or comply with applicable law.

These parties may include:

Shopify

Our store is hosted and operated using Shopify's e-commerce platform.

Payment Service Providers

We may disclose or transmit information to authorised payment processors, banks and payment networks where necessary to process your selected payment method.

Delivery, Logistics & Fulfilment Providers

Information such as your name, telephone number and delivery address may be shared with courier, logistics or fulfilment providers so that your order can be delivered.

Technology & Business Service Providers

We may use third parties that support areas such as:

  • website hosting and functionality;
  • cloud services;
  • customer support;
  • data analytics;
  • fraud prevention;
  • email services; and
  • business administration.

Marketing & Advertising Providers

Where permitted by law, information may be processed through marketing, analytics or advertising services to help us understand website activity and communicate relevant offers.

Professional Advisers

Where necessary, information may be shared with accountants, auditors, legal advisers or other professional advisers.

Authorities & Legal Requirements

We may disclose personal information where required by applicable law, legal process, court order or lawful request from a regulator, government authority or law-enforcement agency.

We may also disclose information where reasonably necessary to protect our legal rights, customers or business.

 

6. Our Relationship With Shopify

The Seoulful Edit is powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of our store in order to provide its platform and related services.

Information submitted through our store may therefore be transmitted to and processed by Shopify and its authorised service providers.

Shopify may operate or use service providers in countries outside Malaysia.

Certain Shopify features may also use information about your interactions with our store together with information relating to interactions with other Shopify merchants in order to provide and improve Shopify services.

Where Shopify independently determines how personal information is processed for its own services or features, Shopify's own privacy terms and procedures may apply.

You may refer to Shopify's Consumer Privacy Policy and Shopify Privacy Portal for further information regarding Shopify's processing practices and available privacy controls.

 

7. Cookies & Similar Technologies

Our website and Shopify may use cookies, pixels and similar technologies.

These technologies may help us:

  • keep the website functioning;
  • remember preferences;
  • maintain shopping-cart functionality;
  • understand website usage;
  • improve performance;
  • prevent fraud; and
  • support analytics and advertising.

Some cookies are necessary for the website to operate, while others may relate to analytics, personalisation or marketing.

Depending on your browser, device and available privacy settings, you may be able to manage or restrict certain cookies.

Disabling some cookies may affect the functionality of the website or checkout experience.

 

8. Marketing & Your Choices

We may send marketing communications where permitted by applicable law.

You may ask us at any time to stop using your personal information for direct marketing.

You can:

  • use the unsubscribe link in our promotional emails where available; or
  • contact us using the details at the end of this Privacy Policy.

We will process your request within a reasonable period, subject to any communications we are required to retain or send for transactional, legal or operational purposes.

 

9. Third-Party Websites & Services

Our website may contain links to websites, social platforms or other services operated by third parties.

Once you leave our website or choose to interact directly with a third-party service, that third party's privacy practices may apply.

We do not control independently operated third-party websites and encourage you to review their privacy notices before providing personal information.

 

10. Security of Your Personal Information

We take reasonable steps to protect personal information against risks such as:

  • unauthorised access;
  • loss;
  • misuse;
  • disclosure;
  • alteration; and
  • destruction.

We also rely on Shopify and other authorised service providers to maintain appropriate technical and organisational security measures for information they process.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Please avoid sending highly sensitive payment or confidential information through ordinary email or other unsecured communication channels.

 

11. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by law.

Retention periods may depend on factors such as:

  • whether you maintain an account;
  • order and transaction history;
  • customer-service requirements;
  • accounting and tax obligations;
  • fraud-prevention requirements;
  • dispute resolution; and
  • legal or regulatory obligations.

When personal information is no longer reasonably required, we will take appropriate steps regarding its deletion, destruction or anonymisation in accordance with applicable requirements.

 

12. International Transfers of Personal Information

Because we use Shopify and other technology, payment, logistics and service providers, your personal information may be transferred to, stored in or processed in countries outside Malaysia.

Different countries may have different personal data protection laws.

Where personal information is transferred outside Malaysia, we will take reasonable steps to comply with applicable Malaysian data protection requirements relating to cross-border transfers and use appropriate safeguards or other legally permitted transfer mechanisms where required.

 

13. Your Privacy Rights

Subject to applicable law and any permitted exceptions, you may have rights in relation to your personal information.

These may include the right to:

Request Access

You may request information about personal information that we hold or process about you.

Request Correction

You may ask us to correct personal information that is inaccurate, incomplete or outdated.

Withdraw Consent

Where processing is based on your consent, you may withdraw that consent, subject to applicable legal or contractual restrictions and reasonable notice.

Withdrawal may affect our ability to provide certain services where the relevant information is necessary for those services.

Limit or Prevent Certain Processing

You may have the right to request that we limit certain processing in circumstances provided by applicable law.

Object to Direct Marketing

You may request that we stop processing your personal information for direct-marketing purposes.

Other Applicable Rights

Depending on applicable law and circumstances, additional rights may apply, including rights relating to data portability or certain automated processing.

To exercise a privacy right, please contact us using the details below.

We may need to verify your identity before processing a request.

We will respond within the timeframe required by applicable law.

 

14. Your Responsibility for Your Information

Please provide information that is accurate, complete and current where reasonably necessary for us to provide our services.

If your delivery address, telephone number, email address or other important information changes, please update it or contact us where necessary.

If you provide personal information about another person — for example, where an order is being delivered as a gift — please ensure that you are authorised to provide that information where required.

 

15. Children's Privacy

Our website and services are intended primarily for adults purchasing products for themselves or others.

We do not knowingly seek to collect personal information directly from children where this would not be permitted under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us so that we can review the matter.

 

16. Complaints

If you have a question or concern about how we process your personal information, please contact us first and we will review the matter.

If you are not satisfied with our response, you may have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or another relevant authority in accordance with applicable law.

 

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our business;
  • our services;
  • our technology or service providers;
  • our privacy practices; or
  • applicable legal or regulatory requirements.

When we make changes, we will publish the updated version on our website and revise the Last updated date.

 

18. Contact Us

For questions about this Privacy Policy, our privacy practices or your personal information, please contact:

The Seoulful Edit
Operated by Blue Whale Global
SSM Registration No.: 202603041787 (JM1040387-T)

Address: No. 2, Jalan TH 1/3, Fairfield Residences, Tropicana Heights, 43000 Kajang, Selangor, Malaysia
Email: ask.theseoulfuledit@gmail.com
Phone: +60 12-356 5708
Business Hours: Monday–Friday, 9:00 AM–6:00 PM (GMT+8)