Privacy policy

Last updated: 11 September 2026

SHENGYAN (升妍), operated at https://myshengyan.shop ("we", "us"), respects and protects the privacy of everyone who uses our website. This policy is written in line with Malaysia's Personal Data Protection Act 2010 (PDPA), Singapore's Personal Data Protection Act 2012 and other applicable law, and applies wherever we serve customers in Malaysia, Singapore and the wider Southeast Asia region. It explains what we collect when you browse, register, order and request after-sales support, how we use and protect that information, and the rights you have.

1. What we collect

1. Account data — the name, email address, phone number, delivery address and password you provide when registering or ordering. Passwords are stored in hashed form and cannot be read by us
2. Order data — the products purchased, order value, order time, delivery status and after-sales records
3. Payment data — payments are handled by third-party providers (such as PayPal, when activated). We never store your full card number or payment password, only the payment status and transaction reference
4. Device and browsing data — IP address, browser type, visit times, pages viewed and referral source, used to improve the experience and manage risk
5. Cookies and similar technologies — used for sign-in state, cart contents and language preference; see our Cookie Policy for details
6. Support conversations — the content of messages you send us through the message centre, email or an order, used to resolve your issue

2. How we use it

• To process orders, arrange dispatch and provide delivery tracking
• To provide account services, after-sales support and refunds
• To send necessary transactional messages such as order confirmations and delivery updates
• To send promotions and product news with your consent, which you can withdraw at any time
• To improve our website, product range and user experience
• For risk control, including detecting and preventing fraud and abusive ordering

3. Sharing

We never sell your personal data. We share the minimum information necessary with:

If we are involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction. We will notify you by site notice or email before that happens.

4. Storage and cross-border transfers

• Your information is stored on the cloud servers and databases we use
• Because our warehousing, logistics and payment partners operate across Malaysia, Singapore and nearby markets, necessary information may be transferred across borders to fulfil your order. We transfer only the minimum required and require recipients to protect it to a standard no lower than this policy
• Order and transaction records are kept for 7 years from completion, to meet tax, accounting and consumer dispute requirements
• Data kept beyond that period is deleted or anonymised

5. Security

We protect your information with HTTPS encryption across the site, hashed password storage, tiered access permissions and activity logging. No method of transmission over the internet is completely secure, but if a security incident occurs that may affect your rights, we will notify you and take remedial action as required by law.

6. Your rights

1. Access and correction — review or correct your account and order information yourself, or ask support to do it
2. Deletion — ask us to delete your account and personal data, except where we are legally required to keep it
3. Withdraw consent — unsubscribe from marketing or withdraw consent you previously gave
4. Complain — raise an objection or complaint about how we handle your personal data

We respond to requests within 15 business days. To protect you from impersonation, we may ask you to send the request from your registered email address.

7. Under 18s

Our products are for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with information, contact us and we will delete it as quickly as possible.

8. Changes to this policy

We may update this policy from time to time. When a change is significant we will post a notice on the site and update the "Last updated" date at the top of this page. Continuing to use the site means you accept the updated policy.

9. Contact us

For questions, comments or complaints about this policy:

• Support email: myshengyan@qq.com (please mark the subject "Privacy request")
• Support hours: Monday to Friday, 9:00–18:00 (GMT+8)
• Legal entity: 【To be added: registered company name】

PayPal payment supplement — 2026-10-14

When PayPal is available, necessary order, transaction, account and delivery data may be shared with PayPal for payment, risk checks and disputes. We keep transaction references and the accepted payment terms version/time, not PayPal passwords or full card numbers. PayPal processes data under its applicable privacy statement. See Payment information for the workflow and official regional agreements.