PRIVACY POLICY

Last Updated: 2026/02/25
 

1. INTRODUCTION
1.1. PEZRI is operated by Horien International Co., Ltd. ("PEZRI," "we," "us," or "our"), a company incorporated in Taiwan with its registered office at No. 485, Sec. 1, Zhangshui Rd., Anxi Vil., Xiushui Township, Changhua County 504007, Taiwan (R.O.C.) (Registration No. 28533935). For the purposes of the Personal Data Protection Act 2010 of Malaysia ("PDPA"), PEZRI acts as the Data User regarding your Personal Data collected through the Website and Services.
1.2. We are committed to protecting your privacy and handling your Personal Data in strict accordance with the PDPA and other applicable data protection laws.
1.3. This Privacy Policy explains how we collect, use, disclose, store, transfer, and process your Personal Data when you:
      (a) access or use our website at www.pezribeauty.my ("Website") or any related services ("Services");
      (b) interact with us via customer service, social media, or other channels; or
      (c) access our digital platforms through any internet-connected device.
1.4. We may update this Privacy Policy from time to time. It is your responsibility to review this Privacy Policy periodically. Any changes shall be effective immediately upon posting. Where any amendment materially affects the way we process your Personal Data, we shall use reasonable efforts to notify you (e.g., by posting a prominent notice on the Website or sending an email notification) prior to such changes taking effect. Your continued use of the Website or any part thereof after any amendment is posted shall constitute your acceptance of the revised Privacy Policy.

IMPORTANT CONSENT:
BY CLICKING "SIGN UP," "REGISTER," "LOG IN," "I AGREE," OR ANY SIMILAR BUTTONS ON THE WEBSITE, REGISTERING AN ACCOUNT, PLACING AN ORDER, MAKING PAYMENT, OR BY CONTINUING TO ACCESS OR USE THE WEBSITE OR SERVICES, YOU EXPLICITLY ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND UNCONDITIONALLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, STORAGE, TRANSFER, AND PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED HEREIN. Your consent to the use of cookies is subject to Section 4 of this Privacy Policy, and you may manage your cookie preferences as described therein. IF YOU DO NOT AGREE, PLEASE DISCONTINUE USE IMMEDIATELY.

2. DEFINITIONS
For the purposes of this Privacy Policy:
•    "Personal Data" means any information in respect of commercial transactions that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any Sensitive Personal Data and expression of opinion about the data subject, as defined in the PDPA.
•    "Sensitive Personal Data" means any personal data consisting of information as to the physical or mental health or condition of a data subject, political opinions, religious beliefs or other beliefs of a similar nature, or the commission or alleged commission of any offence, as defined under the PDPA.
•    "Website" means all applications, websites, and online platforms operated by PEZRI, including www.pezribeauty.my.
•    "Services" means all products, features, functions, and services provided by PEZRI from time to time through the Website.
•    "Third Party" means any entity other than PEZRI and you, including service providers, affiliates, business partners, and regulatory authorities.
•    "Business Day" shall have the meaning ascribed to it in the Terms and Conditions (available at www.pezribeauty.my/en/pages/terms).

3. PERSONAL DATA WE COLLECT
3.1. Data You Provide Directly
•    (a) Identity and Profile Data: Name, date of birth, gender, nationality, username and password, profile photograph, and profession.
•    (b) Contact Data: Billing address, delivery address, email address, and telephone numbers.
•    (c) Financial Data: Bank account details and payment card details (processed securely by third-party payment gateways; PEZRI does not store full payment card numbers on its servers).
•    (d) Transaction Data: Details of payments, orders, and products purchased through the Website.
•    (e) Marketing and Communications Data: Your interests, survey responses, preferences for receiving marketing materials, communication preferences, feedback, and correspondence history with us or our service providers.
•    (f) Skincare Profile Data: Skin type, skin concerns, skincare routine preferences, product usage history, and other information you voluntarily provide for the purpose of receiving personalised skincare recommendations.
3.2. Data Collected Automatically
•    (a) Technical Data: IP address, login data, device type and unique device identifiers, browser type and version, operating system, time zone settings, language preferences, and platform information.
•    (b) Usage Data: Information about how and when you use the Website and Services, including pages viewed, clickstreams, page interaction information, search queries, session duration, and referring websites.
•    (c) Location Data: GPS or approximate geographic location data (where permitted by your device settings) to facilitate delivery or location-based services.
3.3. Sources of Collection
We may collect Personal Data from you in the following circumstances:
•    (a) when you browse the Website;
•    (b) when you create or register an account;
•    (c) when you place an order or make a transaction;
•    (d) when you activate or use any payment-related functions;
•    (e) when you use any features or functions available on the Website or Services;
•    (f) when you subscribe to our publications or marketing materials;
•    (g) when you enter a competition, promotion, or survey;
•    (h) when you participate in any activity or campaign on the Website;
•    (i) when you log in via a third-party social media platform (e.g., Facebook or Google);
•    (j) when you contact our customer service;
•    (k) when you complete a skincare profile or skin assessment questionnaire; or
•    (l) when you otherwise interact with us or the Website.
3.4. Accuracy of Data
You represent and warrant that all Personal Data submitted to us is accurate, complete, not misleading, and up to date. You shall inform us promptly of any changes to your Personal Data.
3.5. Social Media Accounts
If you register or log in to the Website using a social media account, or link your PEZRI account to a social media account, we may access Personal Data that you have voluntarily provided to your social media provider in accordance with that provider's policies. Such Personal Data shall be managed in accordance with this Privacy Policy.
3.6. Voluntary Provision
Provision of Personal Data is generally voluntary. However, failure to provide certain data may limit your ability to use specific features of the Website or Services, including purchasing products, receiving personalised skincare recommendations, or accessing skin analysis tools.

4. COOKIES AND TRACKING TECHNOLOGIES
4.1. We and our authorised service providers use cookies, web beacons, and similar tracking technologies to enhance your experience on the Website and Services.
4.2. Cookies are small text files placed on your browser or device when you visit a website. Web beacons are small graphic images embedded in web pages or emails that enable us to track page views and user engagement.
4.3. We use the following types of cookies:

4.4. You may manage or delete cookies through your browser or device settings. However, disabling certain cookies may affect the functionality of the Website.
4.5. Your consent to cookies is provided on a category-specific basis. Strictly Necessary Cookies do not require your consent and cannot be disabled. For all other categories of cookies (Performance/Analytics, Functionality, and Marketing/Targeting), you may manage your preferences through the cookie settings panel on the Website or through your browser settings. Your use of the Website with cookies enabled shall constitute your consent to the use of those cookies. The general consent provided at the time of registration or account creation does not override your right to manage cookie preferences at any time.

5. USE OF PERSONAL DATA
5.1. We collect and process your Personal Data only for specific, lawful purposes. We shall only collect and process Personal Data that is necessary for the identified purposes (data minimisation).
(A) Core Business and Service Delivery
•    (a) to register and manage your account;
•    (b) to process your orders, payments, and deliveries;
•    (c) to update you on order and delivery status;
•    (d) to verify your identity and prevent fraud;
•    (e) to provide customer support, including processing returns, refunds, and complaints; and
•    (f) to verify and carry out payment transactions, which may require transfer of payment information to our payment service providers.
(B) Marketing and Personalisation
•    (g) to send you marketing or promotional materials about our products and services, or those of third-party sellers on the Website, subject to your right to opt out at any time (see Section 5.3);
•    (h) to provide personalised skincare recommendations based on your skin type, skincare concerns, usage preferences, and purchase history;
•    (i) to deliver relevant content and advertisements; and
•    (j) to measure the effectiveness of our marketing campaigns.
(C) Analytics, Research, and Improvement
•    (k) to use data analytics to improve the Website, products, Services, marketing, and user experience;
•    (l) to conduct research, including skincare efficacy studies and customer satisfaction surveys;
•    (m) to monitor and analyse usage and activity trends;
•    (n) to troubleshoot technical issues and maintain system security; and
•    (o) to develop new products, services, and features, including new skincare formulations.
(D) Legal and Compliance
•    (p) to comply with legal and regulatory obligations (including tax, accounting, cosmetics regulatory reporting, and adverse event reporting);
•    (q) to enforce our Terms and Conditions and this Privacy Policy;
•    (r) to prevent or investigate any actual or suspected violations of our policies or applicable laws;
•    (s) to perform due diligence checks;
•    (t) to protect the rights, property, life, health, or safety of PEZRI, our employees, customers, and the public;
•    (u) to process complaints, feedback, enforcement actions, and content take-down requests;
•    (v) to produce statistics and reports for internal and regulatory purposes; and
•    (w) to facilitate any proposed purchase, merger, acquisition, restructuring, or transfer of any part of our business.
(E) Other Purposes
•    (x) any other purpose for which your consent has been obtained, or as otherwise permitted or required by applicable law.
5.2. Data Minimisation. We shall only collect and process Personal Data that is necessary for the specific purposes identified above, and shall not retain such data longer than is necessary for those purposes.
5.3. Marketing Opt-Out. You may opt out of receiving marketing communications from us at any time by:
•    (a) clicking the "unsubscribe" link in any marketing email;
•    (b) adjusting your communication preferences in your account settings; or
•    (c) contacting us at pezribeauty@gmail.com
We shall cease sending marketing communications to you within fourteen (14) days  of receiving your opt-out request. Opting out of marketing communications does not affect transactional or service-related communications (such as order confirmations and delivery notifications).

6. DISCLOSURE AND SHARING OF PERSONAL DATA
6.1. We may share your Personal Data with the following categories of trusted third parties for the purposes set out in Section 5:
•    (a) Service Providers: Logistics partners (for delivery), payment gateways (for transactions), IT support providers, marketing agencies, data analytics firms, and customer service providers;
•    (b) Affiliates: Companies within the Horien International group for internal administration and business purposes;
•    (c) Third-Party Sellers: Where you purchase products from third-party sellers on the Website, your relevant Personal Data (including but not limited to your name, delivery address, and contact details) may be shared with such sellers solely for the purpose of fulfilling your order. In such cases, the contract for the purchase of the relevant products is formed directly between you and the third-party seller in accordance with Section 5.13 of the Terms and Conditions, and the sharing of your Personal Data is necessary for the performance of that contract. The relevant third-party seller shall act as an independent data user in respect of the Personal Data received and shall be responsible for its own compliance with applicable data protection laws;
•    (d) Professional Advisors: Lawyers, auditors, bankers, and insurers providing legal, financial, accounting, or insurance services to PEZRI;
•    (e) Regulatory and Government Authorities: Courts, tribunals, law enforcement agencies, cosmetics regulatory bodies (e.g., NPRA in Malaysia, if applicable), and governmental or regulatory authorities having jurisdiction over PEZRI, as required by law; and
•    (f) Business Transaction Counterparties: Potential buyers or partners in connection with any proposed purchase, merger, acquisition, or restructuring of PEZRI's business, provided that we satisfy the requirements of applicable data protection law when disclosing your Personal Data.
6.2. We require all third parties to:
•    (a) respect the security of your Personal Data and treat it in accordance with applicable law;
•    (b) process your Personal Data only for the purposes for which it was disclosed; and
•    (c) retain your Personal Data only for as long as necessary to achieve the disclosed purposes.
6.3. Where you accept or use third-party services offered in conjunction with the Website, the collection, use, and processing of your Personal Data by such third parties shall be subject to their own privacy policies. We encourage you to review the applicable privacy policies before using any third-party services.

7. INTERNATIONAL DATA TRANSFERS
7.1. Your Personal Data may be transferred to, stored in, or processed in Taiwan and other jurisdictions outside of Malaysia for any of the purposes set out in this Privacy Policy.
7.2. By providing your Personal Data, you expressly consent to such transfer.

8. DATA SECURITY
8.1. We have implemented strict administrative, physical, and technical security measures to safeguard your Personal Data from unauthorised access, collection, use, disclosure, copying, modification, disposal, loss, misuse, or similar risks.
8.2. Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for exercising caution when sharing personal information online. If you suspect any unauthorised access to your account or any breach involving your Personal Data, please notify us immediately in accordance with Section 3.4 of the Terms and Conditions.
8.3. Data Breach Notification
In the event of a Personal Data breach that is reasonably likely to result in significant harm to affected individuals, we shall:
•    (a) take immediate steps to contain the breach and mitigate any potential harm;
•    (b) notify the relevant data protection authority as required by applicable law; and
•    (c) notify affected individuals without undue delay where the breach is reasonably likely to result in significant harm to the affected individuals, providing information about the nature of the breach and recommended measures to mitigate potential harm.

9. YOUR RIGHTS
9.1. Under the PDPA and other applicable data protection laws, you have the following rights:
•    (a) Right of Access: The right to request a copy of the Personal Data we hold about you and information about how it has been processed;
•    (b) Right of Correction: The right to request correction of any Personal Data that is inaccurate, incomplete, misleading, or not up to date;
•    (c) Right to Withdraw Consent: The right to withdraw your consent to the processing of your Personal Data at any time, subject to legal and contractual restrictions;
•    (d) Right to Limit Processing: The right to request that we restrict the processing of your Personal Data in certain circumstances (e.g., for direct marketing); and
•    (e) Right to Complain: The right to lodge a complaint with the relevant data protection authority (in Malaysia, the Department of Personal Data Protection, JPDP) if you believe your rights have been infringed.
9.2. To exercise any of the above rights, please contact us using the details set out in Section 13. We shall respond to your request within twenty-one (21) days of receipt, or such other period as required by applicable law.
9.3. We may request additional information from you to verify your identity before processing your request. Where permitted by applicable law, we reserve the right to charge a reasonable administrative fee for processing access requests. We may also refuse correction requests if deemed vexatious or unreasonable. If a fee applies or a request is refused, we shall inform you of the reasons before processing your request.
9.4. Consequences of Withdrawal. Please note that the withdrawal of consent or exercise of certain rights may affect our ability to continue providing the Website and Services to you (including personalised skincare recommendations), or to perform any contract we have with you. We shall notify you of any such consequences at the time of your request. PEZRI shall not be liable in the event that it is unable to continue providing Services as a result of your withdrawal of consent.

10. DATA RETENTION
10.1. We shall retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law, including for the purposes of satisfying any legal, accounting, or reporting requirements.
10.2. In determining the appropriate retention period, we consider the nature and sensitivity of the data, the purposes for which it is processed, applicable legal and regulatory requirements, and whether the purposes can be achieved through other means.
10.3. Upon expiry of the applicable retention period, we shall securely dispose of your Personal Data or anonymise it such that it can no longer be associated with you.
10.4. In the event that your account is suspended or terminated in accordance with the Terms and Conditions, we may continue to retain your Personal Data to the extent necessary for: (a) compliance with legal or regulatory obligations; (b) the establishment, exercise, or defence of legal claims; or (c) legitimate business purposes such as fraud prevention. You may continue to exercise your rights under Section 9 in respect of any Personal Data retained after account suspension or termination. Any Personal Data that is no longer required for the above purposes shall be securely disposed of in accordance with Section 10.3.

11. CHILDREN'S PRIVACY
11.1. The Website and Services are not directed at individuals under eighteen (18) years of age (or the legal age of contractual capacity in your jurisdiction, whichever is higher). We do not knowingly collect Personal Data from children without the consent of a parent or legal guardian.
11.2. If you are a parent or legal guardian and become aware that your child has provided us with Personal Data without your consent, please contact us immediately at pezribeauty@gmail.com. Upon verification, we shall take reasonable steps to delete such Personal Data from our records.
11.3. Where a parent or legal guardian has consented to the collection of a minor's Personal Data in accordance with our Terms and Conditions, such parent or legal guardian shall be responsible for overseeing the minor's use of the Website and Services.

12. THIRD-PARTY WEBSITES
12.1. This Privacy Policy applies only to the Website and Services operated by PEZRI. The Website may contain links to websites operated by third parties, including business affiliates, merchants, and payment gateways. We have no control over, and are not responsible for, the privacy practices or content of such third-party websites.
12.2. You are advised to review the applicable privacy policies of any third-party websites before providing Personal Data to them. Your access to and use of such third-party websites is entirely at your own risk.

13. CONTACT US
If you have any questions, feedback, concerns, or complaints about this Privacy Policy or our data protection practices, or wish to exercise any of your rights under applicable law, please contact us:
Horien International Co., Ltd.
•    Email: pezribeauty@gmail.com
•    Telephone: +886-4-7695505, ext. 365
•    Mailing Address: No. 485, Sec. 1, Zhangshui Rd., Anxi Vil., Xiushui Township, Changhua County 504007, Taiwan (R.O.C.)
We shall endeavour to respond to all enquiries and requests within twenty-one (21) days of receipt. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia.

14. GOVERNING LAW AND DISPUTE RESOLUTION
14.1. This Privacy Policy shall be governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010, and shall be read together with our Terms and Conditions (available at www.pezribeauty.my/en/pages/terms)
14.2. Subject to your right to lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia under Section 9.1(e), any dispute, controversy, or claim arising out of or relating to this Privacy Policy shall be resolved in accordance with the dispute resolution provisions set out in Section 15 of the Terms and Conditions. For the avoidance of doubt, the right to lodge a complaint with JPDP is independent of, and shall not be affected by, the arbitration mechanism under the Terms and Conditions.