This policy explains what we collect when you use luqua.life, why we collect it, who we share it with, and what you can ask us to do about it.
Who we are
LUQUA is the women’s wellness brand of PlantBio Research Sdn. Bhd., which is the data controller for this website.
PlantBio Research Sdn. Bhd. (199201001095 / 232599-X)
No. 14, Lorong PK 4, Jalan Stesen Perusahaan Kamunting, 34600 Kamunting, Perak, Malaysia
[email protected]
What we collect
| Information | When we collect it | Why |
|---|---|---|
| Name, email, phone, delivery and billing address | When you place an order | To take payment, ship your order and give you support |
| Order history | When you buy | To handle returns, answer questions and meet our tax and accounting duties |
| Email address | When you join the LUQUA circle or a product waitlist | To send you the emails you asked for |
| Messages you send us | When you contact us | To reply to you |
| Device, browser, pages viewed and referring site | Automatically, when you browse | To keep the site working and understand how it is used |
We do not collect or store your card details. Payments are handled entirely by our payment provider. We receive only a confirmation that payment succeeded and the last digits of the card.
We do not ask for health information and you should not send us any. If you have a question about your health or your medication, please speak to your doctor.
Our legal grounds
Where the UK or EU General Data Protection Regulation applies to you, we rely on these grounds:
- Performance of a contract, to process and deliver your order
- Consent, for marketing emails and for non-essential cookies, which you can withdraw at any time
- Legitimate interests, to keep the site secure, prevent fraud and improve what we offer
- Legal obligation, to keep records that tax and company law require us to keep
Who we share it with
We do not sell your personal information, and we never have. We share it only with the service providers we need to run the store, and only the information each one needs to do its job:
| Who | What they do |
|---|---|
| Our payment processor | Takes card payments. Your payment and billing details go to them directly, not to us. |
| Our email providers | Send order and shipping confirmations, and the newsletters you asked for. |
| Our hosting and security providers | Run the website, keep it available and protect it from attack. |
| Delivery carriers | Receive your name, address and phone number so they can deliver your parcel. |
| Advertising platforms | Show and measure our ads, if you accept advertising cookies. See Advertising below. |
Each provider is bound by contract to protect your information and to use it only for the purpose we engaged them for. If you would like to know exactly which companies we use for a given purpose, email [email protected] and we will tell you.
We may also disclose information where the law requires it, or to establish or defend a legal claim.
Where your information goes
We are based in Malaysia and some of our providers are based outside it, including in the United States and the European Union. Where information is transferred out of the UK or the European Economic Area, that transfer is covered by the safeguards those providers have in place, such as Standard Contractual Clauses.
Cookies
Cookies are small files a website stores on your device. We use three kinds:
- Essential cookies, which make the site work. They remember your cart, keep your session and let you check out securely. The site cannot function without them, so they are always on.
- Analytics cookies, which tell us how the site is used so we can improve it. These are optional.
- Advertising cookies, which let us show and measure our ads on other platforms. These are optional, and the section below explains them in full.
When you first visit, we ask whether you accept the optional cookies. You can decline, and you can change your mind later from the cookie settings link in the footer. Declining does not limit your ability to browse or buy.
You can also block or delete cookies in your browser settings, though blocking essential cookies will stop checkout from working.
Advertising
We advertise LUQUA on social media and search platforms, including Meta (Facebook and Instagram), Google and TikTok. To do that we use advertising and measurement tools provided by those platforms, which place cookies or similar identifiers on your device.
These tools let us:
- Show our ads to people who are likely to be interested in them
- Show you a reminder of something you looked at but did not buy, which is usually called retargeting
- Measure how many people who saw an ad went on to visit the site or place an order, so we know which advertising is worth running
For this we may share a limited set of information with those platforms, such as the pages you viewed, the items you added to your cart, whether you completed an order, and in some cases a scrambled version of your email address so the platform can recognise an existing account without us handing over the address itself. We do not share your name, your full address, your payment details, or anything about your health.
None of this runs unless you accept advertising cookies. If you decline, or simply never accept, the tools are not loaded and no advertising information leaves the site. You can change your choice at any time from the cookie settings link in the footer.
You can also control ad personalisation directly with each platform, which affects the ads you see everywhere and not only ours:
- Meta: Settings, then Ads, in your Facebook or Instagram account
- Google: the Ads Settings page in your Google account
- TikTok: Settings, then Privacy, then Personalised ads
Where a platform decides for itself how it uses the information it receives, it acts as an independent controller and its own privacy policy governs that use. If we add or change advertising partners we will update this section.
How long we keep it
- Order and payment records: seven years, which is the retention period Malaysian tax law requires.
- Marketing contacts: until you unsubscribe, after which we keep a minimal record so we do not email you again by mistake.
- Support messages: up to two years after your question is resolved.
- Website analytics: up to two years.
Your rights
Wherever you live, you can ask us to:
- Give you a copy of the information we hold about you
- Correct anything that is wrong
- Delete your information, where we are not required to keep it
- Stop sending you marketing, which you can also do from the unsubscribe link in any email
- Restrict or object to how we use it
- Receive it in a portable format
These rights come from the Personal Data Protection Act 2010 in Malaysia and, if you are in the UK or the EU, from the General Data Protection Regulation. Email [email protected] and we will respond within 30 days.
If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner in Malaysia, or to your national data protection authority if you are in the UK or the EU.
Children
This site and our products are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.
Security
The site runs over an encrypted connection, payments are handled by a certified payment provider, and access to customer information is limited to the people who need it to do their work. No system is perfectly secure, but we take this seriously and will tell you and the relevant authority promptly if a breach affects you.
Changes
If we change this policy we will update the date at the top of this page. If the change is significant we will tell you by email.
Contact
Questions about your information, or about this policy, go to [email protected].