Privacy Policy

LifeLab (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights in relation to it. We handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA).

Information we collect

• Contact & account details: name, email address, phone number, and delivery/billing address
• Order information: products purchased, order history, and payment status (we do not store full card details — payments are processed by secure third-party providers)
• Communications: messages you send us via phone, WhatsApp, email, or forms
• Technical data: IP address, browser type, and usage data collected through cookies and similar technologies

How we use your information

• To process, fulfil, and deliver your orders
• To communicate with you about orders, enquiries, and customer support
• To send updates, offers, or marketing — only where you have consented, and you may opt out at any time
• To improve our website, products, and services
• To comply with our legal and regulatory obligations

Consent & legal basis

By providing your personal data and placing an order, you consent to us processing it for the purposes described above. Where we rely on consent (for example, marketing messages), you may withdraw it at any time by contacting us.

Sharing & disclosure

We do not sell your personal data. We share it only with trusted parties who help us operate our business, such as:

• Courier and logistics providers, to deliver your orders
• Payment processors, to handle transactions securely
• Service providers who support our website and operations
• Authorities, where required by law

Cookies

Our website uses cookies to keep your session active, remember your preferences, and understand how the site is used. You can control or disable cookies through your browser settings, though some features may not function properly without them.

Data security & retention

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. We retain personal data only for as long as necessary to fulfil the purposes described here or to meet legal and accounting requirements.

Your rights under the PDPA

You have the right to access and correct your personal data, to withdraw consent, and to limit how we process it. To exercise any of these rights, please contact us using the details below.

Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with a revised “last updated” date.