Privacy Policy

1.Who is responsible for your data

E Dimension Numerology Sdn Bhd (SSM Reg. No. 201501011883 (1139194-D); address: 9-3, Jalan Metro Perdana Barat 1, Taman Usahawan Kepong, Kepong Utara, 52100 Kuala Lumpur, Malaysia) is the data controller for personal data collected through this website, and handles it in accordance with the Personal Data Protection Act 2010 as amended (the “PDPA”).

2.What we collect

At checkout

• Your name, mobile number and email;
• If your order is posted: the delivery address (address, postcode, city and state);
• The items, amounts and any notes you add to the order;
• The payment result returned by Xendit: payment status, method and channel (for example the name of the card type, FPX bank or e-wallet). We never receive your card number or online banking password.

When you book a consultation or feng shui audit

• The service and how it takes place (at our centre, online or on site), and your preferred date and time;
• Your name, mobile number and, optionally, your email;
• The address for an on-site audit;
• The questions you would like to ask.

When you open a member account

• Your name, email, password and, optionally, your mobile number. Passwords are hashed before they are stored, so no one can read them;
• Sign-in records: sign-in time, IP address and browser type, used to keep you signed in and to protect your account;
• Your order and booking history.

When you contact us, attend a class or have a consultation

• Messages you send us by WhatsApp, phone or email;
• In a consultation or course you may give us details such as your date of birth, name or identity card number for analysis. We use them only to provide that service to you;
• Your bank account details, if a refund has to be made by bank transfer.

When you browse the website

• Our hosting provider records technical data such as IP address, browser type, pages requested and time of visit, to keep the website secure and to fix problems;
• To prevent abuse, sign-in, registration and booking limit repeated submissions by IP address or mobile number.

Our service records

To follow up on our services, our staff may add notes to your customer, order or booking records, such as class arrangements, an agreed appointment time or a courier tracking number.

Sensitive data

We do not ask for sensitive personal data such as your health or religious beliefs unless you choose to tell us. If you raise it in a consultation, we use it only as needed to provide that service.

Sources, and what you must provide

• Most of this data comes directly from you; payment results come from Xendit. If someone else orders or books for you (for example, sends you a gift), they give us your details and should tell you first.
• Fields marked as required are needed to process an order or booking or to open an account; without them we cannot process your request. Other details (such as order notes, email when booking, or mobile number when registering) are optional.

3.How we use it

• To process orders and payments, and to deliver products or arrange collection;
• To arrange your class dates and contact you about your course;
• To handle bookings, confirm the time and fee with you, and provide consultations or audits;
• To send messages about your transactions, such as payment receipts, booking confirmations, email verification and password reset emails;
• To answer enquiries and handle returns, refunds and complaints;
• To keep customer records so that we can serve you better in future;
• To prevent fraud and abuse and keep the website and accounts secure;
• To meet our legal, accounting and tax obligations.

We send news about courses or events only if you have agreed to receive it, and you can ask us to stop at any time.

4.Who we share it with

We never sell or rent your personal data. We share it only where needed with:

• Xendit (payment provider): your name, email, mobile number, order items and amounts, order notes and, for posted orders, the delivery address, to process payment and send your receipt;
• Courier companies: the recipient's name, phone number and delivery address, to deliver your parcel;
• Cloudflare (website hosting, database and file storage): this website and its database run on Cloudflare's infrastructure;
• Resend (email delivery): your email address and the message, to send booking confirmations, email verification and password reset emails, and to notify our staff of new bookings with the booking details;
• Our email provider: stores the emails you send us and the notifications of new bookings;
• WhatsApp: we contact you through WhatsApp, and those messages are also subject to WhatsApp's own terms and privacy policy;
• Our staff and course consultants, only as needed to serve you;
• Professional advisers such as accountants, auditors and lawyers, and government or law enforcement authorities where the law requires it.

5.Transfers outside Malaysia

Some of these providers (such as Cloudflare, Resend and Xendit) may store or process data outside Malaysia. We take reasonable steps, as the PDPA requires, to make sure your data remains properly protected there.

6.Cookies, browser storage and third-party content

Set by this website

• Sign-in cookie: when you sign in to a member account, we set a cookie to keep you signed in. It lasts up to 30 days and stops working when you sign out. It is strictly necessary and is not used for tracking.
• Cart: your cart is kept in your browser's local storage (localStorage) and is cleared after a successful payment. It is not sent to us until you check out.
• Checkout: during checkout, your order number is kept briefly in your browser's session storage (sessionStorage) and deleted when payment is completed or the tab is closed.
• Our hosting provider, Cloudflare, may set cookies that are necessary for website security.
• This website does not use any advertising, visitor analytics or social media tracking tools (such as Google Analytics or the Facebook Pixel).

Third-party content

• Google Fonts: fonts are loaded from Google's servers, so Google receives your IP address and browser information.
• Google Maps: pages that show our location embed a Google map, which loads when you scroll to it. Google may set cookies.
• YouTube, Facebook and Instagram videos: videos are first shown as cover images; YouTube cover images are loaded from YouTube's servers. The platform's player loads only when you press play. The YouTube player runs in privacy-enhanced mode (youtube-nocookie.com).
• Each of these services is governed by its own privacy policy.

7.How long we keep it

• Order and payment records: kept for 7 years to meet accounting and tax requirements.
• Member accounts: kept while the account exists. You may ask us to close your account; we then delete the account data, except order records we must keep by law.
• Booking records and messages: kept as long as needed to provide the service and follow up.
• Other data is kept only as long as needed for the purposes above, and is then deleted or anonymised.

8.Security

• The whole website is served over encrypted HTTPS connections.
• Passwords are hashed before they are stored.
• Card details are handled by Xendit, which complies with PCI DSS, and never pass through our servers.
• Only authorised staff can sign in to the website's back office, each with a personal account and access limited to their role.
• We take reasonable steps to protect your data, but no method of transmission or storage over the internet is completely secure.
• If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as the PDPA requires, and will also notify you if the breach is likely to cause you significant harm.

9.Your rights

Under the PDPA you have the right to:

• Access: ask for access to the personal data we hold about you and receive a copy.
• Correction: ask us to correct data that is inaccurate, incomplete, misleading or out of date. Members can also change their name and mobile number in the member area.
• Withdraw consent or limit processing: withdraw your consent at any time, or ask us to limit how we process your data, for example to stop sending you news. We may then be unable to provide services that need that data.
• Data portability: to the extent provided by the PDPA and where technically feasible, ask us to transmit the data you gave us to another data controller.
• Complain: if you are not satisfied with how we handle your data, you may complain to the Personal Data Protection Commissioner of Malaysia.

Please make requests using the contact details in section 12. To protect your data, we may need to verify your identity first. We respond within 21 days of receiving your request.

10.Minors

This website is not directed at people under 18. Anyone under 18 may give us personal data only with the consent of a parent or guardian.

11.Changes and language

• We may update this policy from time to time. The updated version is published on this page, with the date at the top updated.
• This policy is available in Chinese and English. If there is any inconsistency between the two versions, the English version prevails.

12.Contact us

To access or correct your data, withdraw consent, or ask a question or make a complaint about this policy, please contact us. When emailing, please put “Personal data” in the subject line.

Data controller

E Dimension Numerology Sdn Bhd (201501011883 (1139194-D))

Email

ed.sales413191@gmail.com

Tel / WhatsApp

019-374 3191

Postal address

9-3, Jalan Metro Perdana Barat 1, Taman Usahawan Kepong, Kepong Utara, 52100 Kuala Lumpur, Malaysia