Privacy Policy

1. Introduction

FHSEmpire, operated by Faris Helmet Store ("we", "us", "our"), is committed to protecting your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, store, and protect your information.

2. Information We Collect

When you make a purchase or interact with our services, we may collect:

Personal Information

• Full Name: For order processing and delivery
• Email Address: For order confirmation and updates
• Phone Number (WhatsApp): For delivery coordination and winner notification
• Delivery Address: For shipping your order

Order Information

• Order ID and transaction details
• Product selection (size, quantity)
• Payment reference (via ToyyibPay)
• Lucky Draw entry numbers

Technical Information

• IP address and browser type
• Device information
• Access timestamps

3. How We Use Your Information

Your personal data is used for the following purposes:

• Order Fulfillment: Processing and delivering your purchase
• Lucky Draw Administration: Managing entries and notifying winners
• Customer Support: Responding to inquiries and resolving issues
• Communication: Sending order updates, shipping notifications, and campaign announcements
• Legal Compliance: Meeting regulatory requirements

4. Data Sharing

We may share your information with:

• Payment Processor (ToyyibPay): To process your payment securely
• Courier Services: For order delivery (name, address, phone)
• Authorized Agents: Sales agents who referred your order (limited info: name, order status)

5. Data Retention

We retain your personal data for as long as necessary to:

• Complete the Lucky Draw campaign (until prize distribution is complete)
• Fulfill legal and accounting requirements (typically 7 years)
• Resolve any disputes or claims

After the retention period, your data will be securely deleted or anonymized.

6. Data Security

We implement appropriate security measures to protect your data:

• SSL/TLS encryption for all data transmission
• Secure payment processing via ToyyibPay (PCI-DSS compliant)
• Access controls and authentication for admin systems
• Regular security reviews and updates

7. Your Rights (Under PDPA)

As a data subject under Malaysia's PDPA, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request corrections to inaccurate data
• Withdrawal: Withdraw consent for marketing communications
• Inquiries: Ask questions about how we handle your data

To exercise these rights, contact us via WhatsApp at +60 11-2622 6110. We will respond within 21 days as required by PDPA.

8. Cookies

Our website uses essential cookies for:

• Session management
• Security and fraud prevention
• Basic analytics (anonymized)

You can control cookies through your browser settings.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions about this Privacy Policy or your personal data: