Last updated: 14 September 2026
1. About this notice
This Privacy Policy explains how Stellaire Atelier Enterprise ("Stellaire Atelier", "we", "us" or "our") handles personal data in connection with our website, customer enquiries and orders. Our business is based in Penang, Malaysia and we handle personal data in accordance with applicable Malaysian data protection law, including the Personal Data Protection Act 2010 as amended from time to time. Additional privacy rights may apply depending on where a person is located and the services made available to them.
2. Personal data we may collect
Depending on how you interact with us, we may collect:
- name and contact information, such as email address, telephone number and billing or delivery address;
- order, transaction, refund and delivery information;
- messages, enquiries and customer-service correspondence;
- account and marketing preferences;
- technical information such as IP address, browser, device and website activity; and
- cookie, analytics or advertising information where the relevant services are enabled.
3. How we collect personal data
Personal data may be provided directly by you, collected through Shopify and our online store, generated when you use the website, or received from service providers involved in payments, delivery, security, analytics, marketing or customer support.
4. Why we use personal data
We may use personal data to process and fulfil orders, arrange delivery, provide customer service, respond to enquiries, maintain records, prevent fraud and misuse, operate and improve the website, send marketing communications where permitted, and meet legal, accounting, tax or regulatory obligations.
5. Shopify and other service providers
Our online store is hosted on Shopify. We also use payment service providers, delivery providers and other technology or business service providers as needed to operate the store.
Depending on the service and processing activity, a provider may process personal data on our behalf and/or for its own independent purposes, including security, fraud prevention, payment processing, regulatory compliance or service improvement. Their handling of personal data may also be governed by their own privacy notices and terms.
6. Payments
Payment methods available to you are shown at checkout. Payment information is handled through the relevant payment service provider and Shopify checkout environment. Stellaire Atelier does not intentionally collect or store full payment-card numbers on its own systems.
7. Cookies and similar technologies
Shopify and services connected to the store may use cookies, pixels, local storage or similar technologies. Some are necessary for functions such as security, checkout and account access. Others may support analytics, personalisation or marketing where those services are enabled.
Where consent or an opt-out mechanism is required, customer privacy controls may be presented according to the store's configuration, the technologies in use and the visitor's location. Browser settings can also be used to control some cookies, although disabling essential technologies may affect store functionality.
8. Sharing personal data
We may disclose personal data where reasonably necessary to Shopify, payment service providers, delivery and logistics providers, professional advisers, technology and security providers, analytics or marketing providers where enabled, and public authorities or other parties where required or permitted by law.
We do not sell customer lists or rent personal data to third parties for their own mailing lists.
9. International processing
Shopify and other service providers may process or store personal data outside Malaysia. Where this occurs, the processing is subject to the provider's applicable terms, privacy safeguards and legal obligations, together with any requirements that apply to us under Malaysian law.
10. Retention
We retain personal data for as long as reasonably necessary for the purposes described in this policy, including order administration, customer support, accounting, tax, dispute handling, fraud prevention and legal compliance. Retention periods can differ depending on the type of record and legal requirement.
11. Security
We take reasonable organisational and technical steps appropriate to our business to protect personal data. No online system or method of storage can be guaranteed to be completely secure.
12. Your choices and rights
Depending on applicable law, you may have rights relating to access, correction, withdrawal of consent, restriction, deletion, portability or objection to certain processing. To make a privacy request, contact us using the email below. We may need information to verify the request before acting on it.
13. Marketing
You may unsubscribe from marketing emails using the unsubscribe method provided in the communication or by contacting us. Service messages relating to an order or enquiry are not marketing messages.
14. Children
Our online store is not directed specifically at children. If you believe personal data has been provided to us in circumstances requiring parental or guardian involvement, please contact us.
15. Changes to this policy
We may update this Privacy Policy when our practices, service providers, store features or legal requirements change. The latest version will show its updated date.
16. Contact
Stellaire Atelier Enterprise
Penang, Malaysia
Email: stellaire_atelier@hotmail.com