Privacy Policy

Last updated: 16 May 2026

This policy explains how THREE LUPINES SDN BHD (operating as Navicare) collects, uses, and protects your personal data when you visit navicare.my or buy from us. We comply with the Malaysian Personal Data Protection Act 2010 (PDPA).

What we collect

Identity & contact: name, email, phone, shipping & billing address.
Order data: items purchased, prices, payment status, tracking number.
Technical: IP address, browser type, cookies needed for cart & checkout.
Marketing: only if you opt in (newsletter, WhatsApp messages).

Why we collect it

To process and ship your order.
To send transactional emails (order confirmation, shipping notification).
To handle returns, refunds, and customer support.
To comply with legal and tax obligations.
With your consent, to send marketing communications.

Third parties

We share data only with the third parties needed to deliver our service:

Hostinger — hosts the website.
Revenue Monster — processes payments (FPX, card, e-wallet). We do not store your full card details.
NinjaVan — delivers your orders.

How long we keep it

Order records are kept for 7 years to comply with Malaysian tax law. Marketing data is kept until you unsubscribe.

Your rights

Under the PDPA you can request access to, correction of, or deletion of your personal data, and withdraw marketing consent at any time. Email navicaretiktok@gmail.com with your request.

Cookies

We use essential cookies for cart and checkout to work. We may use analytics or Facebook Pixel cookies once enabled, with your consent.

Contact

For any data privacy question: navicaretiktok@gmail.com.