Privacy policy

Privacy Policy

Last Updated: September 13, 2026

OAG Worldwide Sdn Bhd (“OAG Worldwide”, “we”, “us”, or “our”) operates this website and online store, including the products, services, content, features, and tools available through the website.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, place an order, make a purchase, contact us, or otherwise interact with our services.

This Privacy Policy is intended to comply with the Personal Data Protection Act 2010 (Act 709) of Malaysia, as applicable to our processing of personal data in connection with commercial transactions.

By using our website or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

Depending on how you interact with us, we may collect and process the following types of personal data:

Contact and Customer Information

Full name
Billing address
Shipping or delivery address
Telephone or mobile number
Email address
Other contact information that you voluntarily provide to us

Order and Transaction Information

Products purchased or considered for purchase
Order details and order history
Returns, refunds, exchanges, and cancellations
Payment status and transaction information
Delivery and shipping information

Payment Information

Payments made through our website may be processed by third-party payment service providers.

We may receive information such as payment status, transaction reference, payment method, and other information necessary to process and verify your transaction.

We generally do not store your complete credit card or debit card number on our own systems.

Account Information

If you create an account with us, we may collect:

Username or account details
Password or authentication information
Account preferences
Saved addresses and other account settings

Communications

When you contact us through email, WhatsApp, telephone, contact forms, or other communication channels, we may collect the information you provide, including the contents of your communication.

Technical and Usage Information

When you visit our website, certain technical information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Network information
Website pages visited
Date and time of visits
Referring website
Other technical or usage information collected through cookies and similar technologies

2. How We Collect Personal Data

We may collect personal data from:

Directly from you, when you place an order, create an account, contact us, subscribe to marketing communications, or provide information through our website;
Automatically, when you browse or interact with our website through cookies and similar technologies;
Our service providers, such as payment providers, delivery companies, website technology providers, and other service providers that assist us in operating our business; and
Other third parties, where permitted by applicable law and where reasonably necessary for the purposes described in this Privacy Policy.

3. Purposes of Collecting and Using Personal Data

We may collect, use, and process your personal data for the following purposes:

Processing Orders and Transactions

We use your personal data to:

Process and fulfil your orders;
Process payments;
Arrange delivery and shipping;
Process returns, refunds, exchanges, and cancellations;
Provide order confirmations and updates; and
Provide customer service relating to your purchases.

Providing and Improving Our Services

We may use your personal data to:

Operate and maintain our website;
Improve our products, services, and customer experience;
Personalise your shopping experience;
Understand customer preferences and website usage;
Maintain customer accounts; and
Improve website functionality and performance.

Communication and Customer Support

We may use your personal data to:

Respond to enquiries;
Provide customer support;
Communicate with you regarding your orders;
Notify you about changes to our services; and
Respond to requests relating to your personal data.

Marketing

Where permitted by applicable law and where appropriate, we may use your contact information to send promotional communications about our products, services, offers, or promotions.

You may opt out of receiving promotional communications by following the unsubscribe instructions in the relevant communication or by contacting us.

You will continue to receive necessary non-promotional communications relating to your orders, transactions, or account where required.

Security and Fraud Prevention

We may process personal data to:

Protect our website and systems;
Detect and prevent fraudulent or unauthorised transactions;
Investigate suspicious or unlawful activity;
Maintain the security of our services; and
Protect the rights and safety of our customers and business.

Legal and Regulatory Requirements

We may collect, use, or disclose personal data where reasonably necessary to:

Comply with applicable Malaysian laws and regulations;
Respond to lawful requests from government authorities or law enforcement agencies;
Establish, exercise, or defend legal claims;
Resolve disputes; or
Enforce our Terms of Service and other applicable policies.

4. Disclosure of Personal Data

We may disclose or provide access to your personal data to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These parties may include:

Shopify, which provides the platform used to operate our online store;
Payment processors and payment service providers;
Courier and delivery companies;
IT, website hosting, cloud storage, and technology service providers;
Customer service and communication service providers;
Accounting, auditing, legal, and professional advisers;
Marketing and advertising service providers, where applicable;
Government authorities, regulators, law enforcement agencies, or other parties where required or permitted by law; and
Other service providers or third parties where you have provided consent or where disclosure is otherwise permitted by applicable law.

We require relevant service providers to handle personal data appropriately and only for legitimate business purposes.

5. Shopify

Our online store is powered by Shopify.

Shopify provides the technology and infrastructure that enables us to operate our online store, process transactions, and provide certain website functions.

Personal data submitted through our website may be processed by Shopify and its relevant service providers in accordance with their applicable privacy practices.

For more information about how Shopify handles personal data, please refer to Shopify's privacy information:

Shopify Privacy Policy

6. Cookies and Similar Technologies

We may use cookies and similar technologies to operate and improve our website.

Cookies may be used to:

Keep items in your shopping cart;
Remember your preferences;
Maintain website functionality;
Understand how visitors use our website;
Improve website performance;
Provide relevant content or advertising where applicable; and
Analyse website traffic and usage.

You may configure your browser to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website.

7. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, social media platforms, payment providers, or other services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services.

We recommend that you review the privacy policies of those third parties before providing them with your personal data.

8. International Transfer of Personal Data

Some of our service providers, including technology and payment service providers, may process or store personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer and processing are carried out in accordance with applicable Malaysian data protection requirements.

This may include transferring personal data to service providers located in countries where our technology, payment, hosting, shipping, or other business services are operated.

9. Retention of Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

Complete transactions;
Provide our services;
Maintain business and transaction records;
Comply with legal and regulatory requirements;
Resolve disputes; and
Protect our legal rights and interests.

When personal data is no longer required, we will take reasonable steps to delete, destroy, or anonymise it, subject to applicable legal and business requirements.

10. Security of Personal Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, alteration, loss, or destruction.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

You should avoid sending sensitive or confidential information through unsecured communication channels.

11. Your Rights

Subject to applicable law and any applicable limitations, you may have rights in relation to your personal data, including:

Requesting access to personal data that we hold about you;
Requesting correction of inaccurate or incomplete personal data;
Requesting that we stop processing your personal data for direct marketing purposes;
Withdrawing consent where processing is based on consent, subject to applicable legal or contractual restrictions; and
Making enquiries or complaints regarding our processing of your personal data.

Under Malaysia's PDPA framework, individuals have rights relating to their personal data, subject to the conditions and exceptions provided by law.

We may need to verify your identity before processing certain requests.

To exercise your rights or make an enquiry, please contact us using the details provided in the Contact Us section below.

12. Children's Privacy

Our website and services are intended for general consumers and are not specifically directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can review and take appropriate action.

13. Complaints

If you have any questions, concerns, or complaints regarding our collection or processing of your personal data, please contact us first using the details below.

We will review and respond to your complaint within a reasonable period.

Where applicable, you may also contact the relevant Malaysian personal data protection authority in accordance with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functions, technology, applicable laws, or regulatory requirements.

Any updated Privacy Policy will be published on this website, and the “Last Updated” date at the top of this page will be revised accordingly.

We encourage you to review this Privacy Policy periodically.