Privacy Policy

About Us

The organisation responsible for your personal data is:

In this Privacy Policy, “SIMSO”, “we”, “us” and “our” refer to HARMONBIOCARE SDN. BHD.

Scope of This Policy

This policy applies when you interact with:

• The SIMSO website and related landing pages.
• Our online forms, consultation requests and customer-service channels.
• WhatsApp, email, telephone and social-media communications.
• Our authorised representatives or sales agents.
• Our analytics, advertising and marketing activities.

Personal Data We Collect

Contact and identity information

Your name, telephone number, WhatsApp number, email address, country, delivery address and other information you provide.

Order and transaction information

Products or packages selected, order details, delivery information, payment status, transaction references, refunds and related communications.

Payment card or online-banking information may be processed directly by the relevant payment provider. We do not intentionally store complete payment-card credentials unless this is clearly stated at the point of collection.

Consultation and wellness information

You may voluntarily provide information about your goals, lifestyle, dietary preferences, allergies, existing routines or other wellness-related matters.

Health-related information may be sensitive personal data. Please do not submit medical records or information that is unnecessary for your enquiry. Where express consent is required, we will process sensitive personal data only with that consent and for the stated purpose.

Communications

Messages, enquiries, feedback, complaints and correspondence sent through WhatsApp, email, website forms, telephone or social-media channels.

Website and technical information

• Internet Protocol address and general network-derived location.
• Browser, device and operating-system information.
• Referring pages, pages viewed and buttons selected.
• Date, time and duration of visits.
• Cookie, session and advertising identifiers.
• Website performance, security and error information.

Marketing preferences

Whether you agreed to receive promotional messages and whether you later unsubscribed or withdrew consent.

How We Collect Personal Data

• Directly from you when you submit a form, contact us or place an order.
• Through WhatsApp, email, telephone or social-media communications.
• Through authorised representatives or agents helping with an enquiry or order.
• Automatically through cookies, pixels and similar technologies.
• From payment, delivery, analytics, advertising and technical-service providers.
• From publicly available sources where permitted by law.

How We Use Personal Data

We may use personal data to:

• Respond to enquiries and consultation requests.
• Provide general product and routine guidance based on information you choose to share.
• Process, confirm and fulfil orders.
• Arrange delivery and provide order updates.
• Verify payments, prevent fraud and protect website security.
• Provide customer service and manage complaints, returns or refunds.
• Maintain business, transaction, tax and accounting records.
• Improve our website, products, services and customer experience.
• Measure website traffic and advertising performance.
• Display, optimise and evaluate advertising campaigns.
• Send promotional communications where permitted.
• Comply with legal and regulatory obligations.
• Establish, exercise or defend legal claims.

Legal Bases for Processing

Depending on your location and the circumstances, we may process personal data based on:

• Your consent.
• Steps you ask us to take before entering into a transaction.
• Performance of a contract with you.
• Compliance with legal obligations.
• Our legitimate business interests, where those interests do not override your rights.
• Protection of legal rights, safety and security.
• Other grounds allowed by applicable law.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Cookies and Similar Technologies

Cookies are small files or identifiers stored on a browser or device. We may use:

Strictly necessary cookies

Used for essential website functions, security, navigation and storage of consent preferences.

Analytics cookies

Used to understand website traffic, page performance and how visitors interact with the website.

Advertising and measurement cookies

Used to measure campaign performance, create advertising audiences, limit repeated advertisements and present more relevant advertising.

Where required by applicable law, non-essential analytics and advertising technologies will be activated only after the required consent has been obtained.

You may manage available preferences through our cookie banner or cookie-settings control. Browser settings may also be used to delete or block cookies, although some website functions may be affected.

Google Analytics

We may use Google Analytics to understand website traffic, visitor interactions and website performance.

Google Analytics may use cookies and similar technologies to collect pages viewed, approximate location, device information, session activity and identifiers linked to a browser or device. Google may process this information on our behalf under its own terms and privacy practices.

Visitors may reject analytics cookies through available cookie controls. We will not intentionally send names, telephone numbers, email addresses, consultation answers or other directly identifying customer information to Google Analytics through URLs, event names or event parameters.

Meta Pixel

We may use the Meta Pixel and related Meta Business Tools for advertising measurement, audience creation and campaign optimisation on platforms such as Facebook and Instagram.

The Meta Pixel may collect or receive information about website visits, pages viewed, buttons selected, product-interest events, consultation actions, purchases or conversions, and device, browser, cookie or network information.

Meta may combine this information with information associated with Meta products under Meta's own terms and privacy policy. Where required by law, Meta Pixel advertising functions will not be activated until the necessary consent has been provided.

Marketing Communications

We may send product information, promotions or follow-up messages when you request them, provide consent or when communication is otherwise permitted by law.

You may opt out at any time by using an unsubscribe option, replying “STOP” where applicable or emailing harmonbionutrition@gmail.com.

Opting out of marketing does not prevent us from sending essential communications about an enquiry, order, payment, delivery or customer-service matter.

Disclosure of Personal Data

We may disclose relevant personal data to:

• Authorised SIMSO representatives and agents.
• Website hosting, cloud, analytics, advertising and technical providers.
• Payment processors and financial-service providers.
• Warehouses, couriers and logistics providers.
• Customer-support and communication providers.
• Professional advisers, auditors and insurers.
• Regulators, courts, government authorities or law-enforcement bodies where legally required.
• A lawful buyer, investor or successor in connection with a business restructuring or transfer.

We do not sell personal data for money. Certain advertising technologies may nevertheless be treated as “sharing”, “targeted advertising” or a similar activity under some privacy laws. Where applicable, you may request to opt out.

International Data Transfers

The SIMSO website is available worldwide. Personal data may therefore be processed in Malaysia or in other countries where our providers, partners or advertising platforms operate.

Where required, we will take reasonable steps to use appropriate contractual, organisational or legal safeguards for international transfers.

Data Retention

We retain personal data only for as long as reasonably necessary to:

• Complete an enquiry, order, delivery, refund or customer-service matter.
• Maintain legally required transaction, tax and accounting records.
• Resolve disputes and prevent fraud.
• Protect our legal rights.
• Comply with applicable laws.

When personal data is no longer required, we will take reasonable steps to delete it, anonymise it or securely prevent further use.

Data Security

We use reasonable administrative, technical and organisational safeguards intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No website, transmission method or storage system is completely secure. Avoid sending unnecessary confidential, financial or medical information through ordinary email, website forms or messaging services.

Your Privacy Rights

Subject to applicable law and lawful exceptions, you may have the right to:

• Ask whether we process your personal data.
• Request access to personal data held about you.
• Request correction of incomplete or inaccurate information.
• Withdraw consent.
• Object to or restrict certain processing.
• Request deletion where the law provides this right.
• Request transfer of eligible data in a usable format where applicable.
• Object to direct marketing.
• Opt out of certain targeted advertising or data-sharing activities where applicable.
• Lodge a complaint with the relevant privacy or data-protection authority.

Some rights are not absolute. We may retain information required for legal, tax, fraud-prevention or dispute-resolution purposes.

How to Request Access, Correction or Deletion

Email harmonbionutrition@gmail.com with the subject line Privacy Request.

Please include:

• Your name.
• The telephone number or email used when communicating with us.
• The nature of your request.
• Enough information for us to identify the relevant records.

We may request reasonable proof of identity before processing a request to prevent unauthorised access to another person's information. We will respond within the period required by applicable law.

Children and Minors

The website and SIMSO product consultations are primarily intended for adults.

Individuals under 18 should use the website, submit personal information or purchase products only with the involvement and permission of a parent or legal guardian. We do not knowingly seek to collect personal data directly from young children without appropriate authorisation.

Third-Party Websites and Services

Our website may link to WhatsApp, social-media platforms, payment providers, courier services or other third-party services.

Those third parties operate under their own terms and privacy policies. We are not responsible for their independent privacy practices.

Changes to This Privacy Policy

We may update this policy to reflect changes in our operations, website technologies or legal obligations.

The updated version will be posted on the website with a revised “Last updated” date. Material changes may also be communicated through other reasonable means where required.

Contact Us

This policy is governed by the applicable laws of Malaysia, including the Personal Data Protection Act 2010 and applicable amendments, without limiting mandatory privacy rights that may apply to users in other jurisdictions.