Privacy Policy

Lumina Health Brand is fully owned by Be Quinn Global Sdn Bhd (“Be Quinn Global”, “we”, “us” or “our”) respects your privacy and is committed to protecting your Personal Data.

This Privacy Notice explains how we collect, use, disclose, process, store, retain and protect your Personal Data when you access or use our website, online store, mobile applications, social media channels, or other services operated by us (collectively, the “Platform”), or when you purchase or enquire about our Products and Services.

This Privacy Notice is intended to comply with the Personal Data Protection Act 2010 (Act 709) (“PDPA”), as amended from time to time, and other applicable Malaysian data protection requirements.

By accessing or using our Platform, registering an Account, placing an Order, submitting information to us, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Notice.

1. WHO WE ARE

Lumina Health Brand is fully owned by
Be Quinn Global Sdn Bhd – Company No.: 202001007325

Website:
https://luminahealthbrand.com

Privacy / Customer Service Email:
customerservice@luminahealthbrand.com

For the purposes of applicable data protection laws, Be Quinn Global is responsible for the processing of Personal Data described in this Privacy Notice.

2. WHAT IS PERSONAL DATA?

For the purposes of this Privacy Notice, “Personal Data” means information relating directly or indirectly to an identifiable individual, whether the individual can be identified from that information alone or together with other information in our possession or control.

Depending on how you interact with us, Personal Data may include:

2.1 Identity Information

  • Full name;

  • Date of birth, where required;

  • Identification information where required for verification; and

  • Other information necessary to verify your identity.

2.2 Contact Information

  • Email address;

  • Telephone or mobile number;

  • Billing address;

  • Delivery address; and

  • Other contact details you provide to us.

2.3 Account Information

  • Username;

  • Account details;

  • Password;

  • Account balance or credit information, where applicable;

  • Membership information; and

  • Rewards, commission or referral information, where applicable.

2.4 Transaction Information

  • Order details;

  • Products purchased;

  • Purchase history;

  • Payment status;

  • Refund and exchange information;

  • Invoice information; and

  • Transaction records.

2.5 Technical Information

When you use our Platform, we may collect certain technical information, including:

  • IP address;

  • Device type;

  • Browser type and version;

  • Operating system;

  • Login information;

  • Date and time of access;

  • Pages visited;

  • Referring website;

  • General location information derived from technical information; and

  • Other technical information generated through your use of the Platform.

2.6 Communication Information

This may include:

  • Enquiries;

  • Customer service communications;

  • Feedback;

  • Reviews;

  • Survey responses;

  • Complaints;

  • Promotion or campaign participation; and

  • Other communications you voluntarily provide to us.

We will not intentionally collect more Personal Data than is reasonably necessary for the purposes stated in this Privacy Notice, unless otherwise permitted or required by law.

3. HOW WE COLLECT YOUR PERSONAL DATA

We may collect your Personal Data directly from you or through other lawful sources.

We may collect Personal Data when you:

  1. Create or register an Account;

  2. Place an Order;

  3. Purchase our Products;

  4. Make or attempt to make a payment;

  5. Request a refund, return or exchange;

  6. Contact our Customer Service Team;

  7. Submit an enquiry or complaint;

  8. Subscribe to our newsletters or marketing communications;

  9. Participate in a promotion, competition, campaign or survey;

  10. Submit a review, testimonial or feedback;

  11. Contact or interact with us through social media;

  12. Visit or browse our Platform;

  13. Use our mobile application or other digital services;

  14. Participate in our referral, membership, agent or commission programmes, where applicable; or

  15. Otherwise voluntarily provide information to us.

We may also receive relevant Personal Data from third parties, including:

  • Payment service providers;

  • Banks or financial institutions;

  • Courier and logistics providers;

  • Technology and hosting providers;

  • Marketing service providers;

  • Business partners;

  • Fraud prevention providers; and

  • Other service providers acting on our behalf.

Where Personal Data is obtained from a third party, we will process it in accordance with applicable law and this Privacy Notice.

4. PURPOSES FOR COLLECTING AND PROCESSING PERSONAL DATA

We may collect, use and process your Personal Data for the following purposes.

4.1 Processing Orders

We may use your Personal Data to:

  • Receive and process Orders;

  • Confirm Orders;

  • Process payments;

  • Verify transactions;

  • Arrange delivery;

  • Provide delivery updates;

  • Process refunds, returns and exchanges;

  • Issue invoices and receipts;

  • Maintain purchase records; and

  • Provide after-sales support.

4.2 Managing Your Account

We may use your Personal Data to:

  • Create and manage your Account;

  • Verify your identity;

  • Maintain your Account information;

  • Manage membership status;

  • Manage rewards, referrals or commissions where applicable;

  • Maintain Account credit information; and

  • Provide Platform functions and services.

4.3 Customer Service

We may use your Personal Data to:

  • Respond to enquiries;

  • Handle complaints;

  • Investigate disputes;

  • Provide technical assistance;

  • Process warranty, return or exchange requests;

  • Provide after-sales support; and

  • Communicate with you regarding your Orders or Account.

4.4 Business and Platform Operations

We may use Personal Data to:

  • Operate and maintain our Platform;

  • Improve our Products and Services;

  • Improve customer experience;

  • Conduct internal analysis;

  • Conduct research and statistical analysis;

  • Understand customer preferences;

  • Monitor Platform performance;

  • Detect and prevent fraud, abuse or unauthorized activity;

  • Protect the security of our systems; and

  • Manage our business operations.

4.5 Marketing and Promotions

Where permitted by applicable law and subject to your preferences, we may use your Personal Data to provide information about:

  • Products;

  • Promotions;

  • Discounts;

  • Special offers;

  • New launches;

  • Events;

  • Campaigns;

  • Membership benefits; and

  • Other products or services offered by Be Quinn Global or selected business partners.

You may opt out of marketing communications at any time.

4.6 Legal and Regulatory Purposes

We may collect, use or disclose Personal Data where reasonably necessary to:

  • Comply with applicable laws and regulations;

  • Comply with lawful requests from government or regulatory authorities;

  • Prevent or investigate fraud;

  • Prevent unlawful activities;

  • Protect our rights and property;

  • Protect the safety of our customers, employees or other persons;

  • Establish, exercise or defend legal claims; or

  • Fulfil contractual, accounting, tax, audit or other legal obligations.

5. NOTICE AND CHOICE

We will provide appropriate notice regarding the purposes for which your Personal Data is collected, used, disclosed or otherwise processed.

Where consent is required under applicable law, we will obtain the appropriate consent before processing your Personal Data for the relevant purpose.

Where permitted by applicable law, Personal Data may also be processed where another lawful basis or statutory exception applies.

You may choose not to provide certain Personal Data.

However, if the information is necessary for us to:

  • Process your Order;

  • Process payment;

  • Deliver your Products;

  • Manage your Account;

  • Provide customer support; or

  • Comply with legal requirements,

we may be unable to provide the relevant Product or Service if you do not provide the required information.

6. DISCLOSURE OF PERSONAL DATA

We may disclose or provide access to your Personal Data to third parties where reasonably necessary for the purposes described in this Privacy Notice.

These parties may include:

  • Payment gateways;

  • Payment service providers;

  • Banks and financial institutions;

  • Courier and logistics companies;

  • Warehousing and fulfilment providers;

  • Website and hosting providers;

  • Cloud service providers;

  • IT and software service providers;

  • Customer service providers;

  • Accounting and auditing service providers;

  • Legal and professional advisers;

  • Marketing and advertising service providers;

  • Analytics providers;

  • Fraud prevention and security providers;

  • Business partners and contractors;

  • Related companies or affiliates, where applicable; and

  • Government, regulatory or law enforcement authorities where required or permitted by law.

We will take reasonable steps to ensure that third parties receiving your Personal Data provide an appropriate level of protection and process the information only for authorized purposes.

Where a third party processes Personal Data on our behalf, we may require that party to implement appropriate confidentiality and security measures.

7. PAYMENT INFORMATION

Payments made through our Platform may be processed by third-party payment service providers.

Where appropriate, payment information may be transmitted directly to the relevant payment provider rather than being stored by us.

We may retain transaction information such as:

  • Payment status;

  • Transaction reference;

  • Payment method;

  • Amount paid; and

  • Date and time of payment,

for purposes including order processing, accounting, auditing, refunds, dispute resolution, fraud prevention and legal compliance.

We do not intend to collect or store complete payment card information where such information is handled directly by an authorized payment service provider.

You should also review the privacy policy of the relevant payment service provider.

8. MARKETING AND DIRECT COMMUNICATIONS

Subject to applicable law and your preferences, we may contact you through:

  • Email;

  • SMS;

  • Telephone;

  • WhatsApp;

  • Push notifications;

  • Social media or messaging platforms; or

  • Other communication channels.

Marketing communications may contain information about our Products, promotions, campaigns, events, membership benefits and services.

You may opt out of receiving marketing communications at any time by:

  1. Using the unsubscribe function provided in the relevant communication; or

  2. Contacting us at customerservice@luminahealthbrand.com

Opting out of marketing communications will not prevent us from sending essential service-related communications, including:

  • Order confirmations;

  • Payment notifications;

  • Delivery updates;

  • Refund or return updates;

  • Account security notices; or

  • Other communications necessary to provide the Services or fulfil our contractual obligations.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our Platform may use cookies and similar technologies.

Cookies may be used to:

  • Remember your preferences;

  • Maintain login sessions;

  • Improve Platform functionality;

  • Understand how visitors use our Platform;

  • Analyze Platform performance;

  • Improve customer experience;

  • Support security functions; and

  • Support marketing and advertising activities, where applicable.

You may manage or disable cookies through your browser or device settings.

However, disabling certain cookies may affect the functionality or availability of some features of our Platform.

10. AUTOMATICALLY COLLECTED TECHNICAL INFORMATION

When you access our Platform, certain technical information may be automatically collected.

This may include:

  • IP address;

  • Device information;

  • Browser information;

  • Operating system;

  • Pages visited;

  • Date and time of access;

  • Referring website;

  • General usage information; and

  • Other technical information generated through your interaction with our Platform.

We may use this information for:

  • Security;

  • Fraud prevention;

  • Troubleshooting;

  • Website analytics;

  • Performance monitoring;

  • System administration; and

  • Improving our Platform and Services.

11. DATA SECURITY

We take reasonable and appropriate administrative, technical and physical measures to protect Personal Data against unauthorized access, collection, use, disclosure, alteration, loss, misuse or destruction.

Depending on the circumstances, these measures may include:

  • Access controls;

  • Password protection;

  • Restricted access to Personal Data;

  • Secure systems and networks;

  • Encryption or other appropriate security technologies;

  • Staff confidentiality obligations;

  • Security monitoring; and

  • Appropriate data handling procedures.

However, no method of electronic transmission, storage or security can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect your Personal Data, we cannot guarantee that your Personal Data will be completely secure from every possible security threat.

12. YOUR ACCOUNT SECURITY

Where you create an Account with us, you are responsible for maintaining the confidentiality of your:

  • Username;

  • Password; and

  • Other Account credentials.

You should:

  • Use a strong and unique password;

  • Avoid sharing your password;

  • Log out after using a shared device; and

  • Notify us immediately if you suspect unauthorized access to your Account.

We will not normally ask you to disclose your Account password through unsolicited communications.

Where unauthorized activity occurs due to your failure to safeguard your Account credentials, we may not be responsible to the extent permitted by applicable law.

13. DATA RETENTION

We will retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.

The retention period may depend on:

  • The purpose for which the information was collected;

  • The nature of the Personal Data;

  • Our legal and regulatory obligations;

  • Accounting and tax requirements;

  • Contractual requirements;

  • Fraud prevention;

  • Dispute resolution; and

  • Other legitimate business requirements.

When Personal Data is no longer required, we will take reasonable steps to delete, destroy or anonymize it, where appropriate.

Deletion may not be immediate where the information is required to be retained by law or for legitimate legal, regulatory or business purposes.

14. DATA ACCURACY AND INTEGRITY

We rely on you to provide accurate, complete and up-to-date Personal Data.

You should notify us if any information you have provided to us changes.

Where reasonably necessary, we may take steps to verify, update or correct Personal Data to ensure that it remains accurate and suitable for the purpose for which it is processed.

We may not be responsible for losses resulting from inaccurate or incomplete information provided by you, except where otherwise required by applicable law.

15. ACCESS TO AND CORRECTION OF PERSONAL DATA

Subject to applicable law, you may request:

  • Access to Personal Data held by us about you; and/or

  • Correction of Personal Data that is inaccurate, incomplete, misleading or outdated.

Requests should be sent to:

customerservice@luminahealthbrand.com

We may require sufficient information to verify your identity before processing your request.

Where permitted by applicable law, we may charge a reasonable administrative fee for processing an access request. Any applicable fee will be communicated to you before the request is processed.

We will respond to requests within the period required by applicable law or within a reasonable period.

We may refuse or limit a request where permitted or required by applicable law.

Where we are unable to comply with a request, we may provide an explanation where required by law.

16. WITHDRAWAL OF CONSENT

Where our processing of your Personal Data is based on your consent, you may withdraw your consent by contacting:

customerservice@luminahealthbrand.com

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Withdrawal of consent may also affect our ability to provide certain Products, Services or Platform functions.

Withdrawal of consent does not automatically require us to delete all Personal Data.

We may continue to retain or process Personal Data where:

  • Required by law;

  • Necessary to fulfil a legal obligation;

  • Necessary for accounting or tax purposes;

  • Necessary to establish, exercise or defend legal claims;

  • Necessary for fraud prevention or security purposes; or

  • Otherwise permitted by applicable law.

17. CROSS-BORDER TRANSFER OF PERSONAL DATA

Some of our service providers, technology providers, payment providers, cloud providers, business partners or affiliates may be located outside Malaysia.

Where necessary, your Personal Data may therefore be transferred, stored or processed outside Malaysia.

Where Personal Data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is carried out in accordance with applicable Malaysian data protection requirements and that appropriate safeguards are applied.

By using our Platform and providing your Personal Data, you acknowledge that such transfers may occur where reasonably necessary for the purposes described in this Privacy Notice and permitted by applicable law.

18. THIRD-PARTY SERVICE PROVIDERS

We may use third-party service providers to operate our business and Platform.

These may include providers for:

  • Website hosting;

  • Cloud storage;

  • Payment processing;

  • Courier and delivery;

  • Customer service;

  • Accounting;

  • Marketing;

  • Analytics;

  • Security;

  • IT support; and

  • Other business functions.

These service providers may process Personal Data on our behalf.

We will take reasonable steps to ensure that such providers handle Personal Data appropriately and implement reasonable security measures.

19. THIRD-PARTY WEBSITES AND LINKS

Our Platform may contain links to websites, applications, payment gateways, social media platforms or other services operated by third parties.

These third parties may have their own privacy policies and terms.

Be Quinn Global is not responsible for the privacy practices, content, security or handling of Personal Data by third-party websites or services.

You should review the applicable privacy notice or policy before submitting Personal Data to any third party.

20. DATA BREACHES

We maintain reasonable security measures designed to protect your Personal Data.

If we become aware of a Personal Data breach, we will assess the incident and take reasonable steps to:

  • Contain and investigate the incident;

  • Mitigate potential harm;

  • Restore affected systems where appropriate;

  • Comply with applicable data-breach notification requirements; and

  • Notify the relevant authorities and/or affected individuals where required by applicable law.

Any notification will be made in accordance with the requirements and timelines applicable to the particular incident.

21. DATA PROTECTION OFFICER

Where Be Quinn Global is required under applicable law or regulatory requirements to appoint a Data Protection Officer (“DPO”), the relevant DPO information will be made available through our Platform or this Privacy Notice.

For privacy-related enquiries, requests or complaints, you may contact:

Lumina Health Brand
Email: support@luminahealthbrand.com

We may update this section when a designated DPO is appointed or where our regulatory obligations change.

22. CHILDREN AND PERSONS UNDER 18

Our Platform is not intended for independent use by persons under 18 years of age.

If you are under 18, you may only use our Platform with the involvement and supervision of a parent or legal guardian.

We do not knowingly seek to collect Personal Data from children for independent purchases or Account registration.

If you believe that a child has provided Personal Data to us without appropriate consent or authorization, please contact us at:

customerservice@luminahealthbrand.com

We will take reasonable steps to address the matter in accordance with applicable law.

23. DISCLOSURE TO AUTHORITIES

We may disclose Personal Data to government, regulatory, law enforcement, tax, judicial or other authorized authorities where:

  • Required by law;

  • Required pursuant to a valid legal process;

  • Necessary to comply with a lawful request;

  • Necessary to prevent or investigate suspected unlawful activity;

  • Necessary to protect our rights or property; or

  • Otherwise permitted by applicable law.

We will not disclose Personal Data for unrelated purposes unless permitted or required by applicable law.

24. BUSINESS TRANSFERS

In the event of a merger, acquisition, restructuring, sale of assets, financing, corporate reorganization or other business transaction involving Be Quinn Global, Personal Data may be transferred to relevant parties where reasonably necessary and permitted by applicable law.

Any such transfer will remain subject to applicable data protection requirements.

25. CUSTOMER-PROVIDED THIRD-PARTY INFORMATION

If you provide Personal Data belonging to another individual to us, you represent that you have the necessary authority or consent to provide that information to us and permit us to process it for the relevant purposes.

For example, this may apply where you provide another person’s:

  • Name;

  • Telephone number;

  • Email address;

  • Delivery address; or

  • Other Personal Data

for the purpose of completing an Order or providing a Service.

You should not provide another person’s Personal Data to us unless you are authorized to do so.

26. DIRECT MARKETING AND YOUR CHOICES

We respect your right to control marketing communications.

Where applicable, you may choose not to receive marketing communications from us.

However, we may continue to process your Personal Data for legitimate operational purposes, including:

  • Order processing;

  • Delivery;

  • Payment;

  • Refunds;

  • Account administration;

  • Security;

  • Customer service;

  • Legal compliance; and

  • Other necessary service-related purposes.

Opting out of marketing does not mean that your Account or Order information will automatically be deleted.

27. YOUR RESPONSIBILITIES

To help protect your Personal Data, you should:

  • Provide accurate information;

  • Keep your Account information updated;

  • Protect your Account password;

  • Avoid sharing confidential Account information;

  • Notify us of suspected unauthorized access;

  • Use secure devices and internet connections where possible; and

  • Take reasonable precautions when providing Personal Data online.

Be Quinn Global shall not be responsible for losses resulting from information that you voluntarily disclose publicly or from your failure to take reasonable steps to protect your Account credentials, except where otherwise required by applicable law.

28. PRIVACY NOTICE IN OTHER LANGUAGES

This Privacy Notice may be made available in English and Bahasa Malaysia.

Where there is any discrepancy between language versions, the applicable version will be interpreted in accordance with applicable Malaysian law.

29. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect changes in:

  • Applicable laws and regulations;

  • Regulatory requirements;

  • Our business operations;

  • Our Products and Services;

  • Technology;

  • Data processing practices; or

  • Security measures.

The updated Privacy Notice will be published on our Platform with a revised “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

You are encouraged to review this Privacy Notice periodically.

30. GOVERNING LAW

This Privacy Notice shall be governed by and interpreted in accordance with the laws of Malaysia.

Any dispute relating to this Privacy Notice shall be subject to the applicable laws and jurisdiction of Malaysia, subject to any mandatory rights or remedies available to individuals under applicable law.

31. CONTACT US

If you have any questions, requests, complaints or concerns regarding:

  • Your Personal Data;

  • This Privacy Notice;

  • Access or correction requests;

  • Withdrawal of consent;

  • Marketing communications;

  • Data security; or

  • Our handling of Personal Data,

please contact us:

Lumina Health Brand
Fully owned by Be Quinn Global Sdn Bhd
25A, Jalan Jintan, Taman Supreme,
56100 Kuala Lumpur, Malaysia

Privacy / Customer Service Email:
customerservice@luminahealthbrand.com

We will make reasonable efforts to address your enquiry in accordance with applicable Malaysian data protection requirements.