Privacy Policy

AURA ONLINE SDN BHD (“Company”, “We”, “Us”, or “Our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit, access, browse, register an account, place an order, make a purchase, or otherwise use our website.

Our website is operated by AURA ONLINE SDN BHD and is accessible at https://auraonline.live/.

By accessing or using our Website, You acknowledge that You have read and understood this Privacy Policy. Where required by applicable law, We will obtain your consent before collecting or processing your personal information for the relevant purposes.

Definitions

For the purposes of this Privacy Policy:

“Company” (referred to as either “the Company”, “We”, “Us” or “Our”) refers to AURA ONLINE SDN BHD.
“Goods” refers to the food products, beverages, snacks, and other items offered for sale on the Service.
“Orders” means a request by You to purchase Goods from Us.
“Service” refers to the AURA ONLINE SDN BHD website, accessible from https://auraonline.live/.
“You” means the individual accessing the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
“Website” means the online platform operated by the Company at https://auraonline.live/.
“Personal Data” means information relating directly or indirectly to an identifiable individual.
“Personal Information” refers to Personal Data and other information that may be associated with You.
“Third-Party Service Providers” means external companies, organisations, platforms, payment providers, courier providers, technology providers, or other service providers that assist Us in operating our business and Website.

1. Scope of This Privacy Policy

This Privacy Policy applies to Personal Data collected through or in connection with:

our Website;
customer accounts;
online Orders;
purchases;
payment transactions;
delivery arrangements;
customer service communications;
enquiries and complaints;
promotional activities;
marketing communications;
cookies and similar technologies; and
other interactions between You and AURA ONLINE SDN BHD.

This Privacy Policy does not necessarily apply to third-party websites or services that may be accessed through links on our Website.

Where You access a third-party website or service, You should review that third party’s privacy policy separately.

2. Information We Collect

We may collect Personal Data and other information that You voluntarily provide to Us or that is generated through Your use of our Website.

Depending on how You interact with Us, information we may collect includes:

Personal and Contact Information

This may include:

full name;
email address;
telephone or mobile number;
billing information;
delivery address;
postal code;
city;
state;
country; and
other contact details provided by You.

Order Information

When You place an Order, we may collect information such as:

Order number;
Goods purchased;
quantity purchased;
purchase date;
order value;
delivery information;
Order status;
transaction information; and
information relating to returns, refunds, exchanges, or complaints.

Account Information

If You create an account on our Website, we may collect:

username;
email address;
password or authentication information;
account preferences;
Order history; and
other information associated with Your account.

We do not intend to collect more Personal Data than reasonably necessary for the relevant purpose.

3. Payment Information

When You make a purchase, payment may be processed through third-party payment service providers.

Depending on the payment method selected, the payment provider may collect and process payment information such as card details, banking information, transaction information, or other payment credentials.

Where payment is processed by a third-party payment provider, We may receive limited information necessary to confirm the transaction, such as:

payment status;
transaction reference;
payment method;
transaction date; and
amount paid.

We generally do not store complete credit card numbers or other sensitive payment credentials on our own systems unless expressly required and lawfully permitted.

Your use of a third-party payment provider may also be subject to that provider’s own terms and privacy policy.

4. Delivery Information

To fulfil and deliver Your Orders, We may collect and use information including:

recipient name;
delivery address;
contact number;
postal code;
city;
state; and
delivery instructions.

We may share necessary delivery information with courier companies, logistics providers, fulfilment partners, or other service providers responsible for delivering Your Order.

We only intend to provide the information reasonably necessary for the delivery and fulfilment process.

5. Information Collected Automatically

When You visit or use our Website, certain technical information may be collected automatically.

This may include:

IP address;
browser type;
device type;
operating system;
screen resolution;
language preferences;
approximate location information derived from IP address;
pages visited;
time spent on pages;
referring website;
date and time of access;
website interactions; and
other technical or usage information.

This information may be collected through cookies, server logs, analytics tools, and similar technologies.

6. Cookies

Our Website may use cookies and similar technologies to improve Website functionality and user experience.

Cookies are small files or pieces of information stored on Your device when You visit a website.

Cookies may be used for purposes including:

enabling Website functionality;
remembering preferences;
maintaining shopping cart information;
keeping You signed in;
improving Website performance;
understanding Website usage;
analysing visitor behaviour;
improving our products and services;
providing relevant content; and
supporting marketing activities where applicable.

You may be able to control or disable cookies through Your browser settings.

However, disabling certain cookies may affect the functionality or availability of some features of the Website.

7. How We Use Your Personal Data

We may collect, use, process, and disclose Personal Data for purposes including:

processing and fulfilling Orders;
processing payments;
arranging delivery;
communicating with You regarding Your Orders;
providing customer support;
responding to enquiries and complaints;
creating and managing customer accounts;
maintaining transaction records;
processing returns, refunds, and exchanges;
verifying transactions;
preventing fraud and unauthorised activity;
improving our Website;
improving products and services;
analysing Website usage;
maintaining Website security;
troubleshooting technical issues;
administering promotions and campaigns;
sending marketing communications where permitted;
complying with legal and regulatory requirements;
protecting our rights and property; and
other purposes reasonably related to operating our business.

8. Marketing Communications

Where permitted by applicable law and, where required, with your consent, We may use Your contact information to send marketing communications.

These communications may include:

new product announcements;
special offers;
promotions;
discounts;
campaigns;
product recommendations;
seasonal promotions;
company updates; and
other information relating to AURA ONLINE SDN BHD.

You may opt out of receiving promotional communications by following the unsubscribe instructions included in the relevant communication or by contacting Us directly.

Please note that even if You opt out of marketing communications, We may still send non-promotional communications necessary for Your Orders or account, such as Order confirmations, payment notifications, delivery updates, or important service notices.

9. Legal Basis for Processing

Where applicable, We may process Your Personal Data on the basis that:

You have provided consent;
processing is necessary to fulfil a contract or Order with You;
processing is necessary to provide services requested by You;
processing is necessary for our legitimate business interests;
processing is necessary to comply with a legal or regulatory obligation; or
another lawful basis is available under applicable law.

Where We rely on consent, You may withdraw Your consent where permitted by law.

Withdrawal of consent does not affect the lawfulness of processing carried out before Your withdrawal.

10. Disclosure of Personal Data

We may disclose or provide access to Personal Data to third parties where reasonably necessary to operate our business and provide the Service.

These parties may include:

payment service providers;
banks and financial institutions;
courier and logistics companies;
hosting providers;
website service providers;
IT and technology providers;
analytics providers;
customer support providers;
marketing service providers;
professional advisers;
auditors;
insurers;
legal advisers;
government authorities;
regulators; and
other service providers engaged by the Company.

We will take reasonable steps to ensure that Personal Data disclosed to third parties is handled appropriately and only for relevant purposes.

11. Third-Party Service Providers

We may rely on third-party service providers to operate certain parts of our Website and business.

These providers may process Personal Data on our behalf.

Examples include providers responsible for:

website hosting;
payment processing;
email services;
order management;
delivery and logistics;
analytics;
cybersecurity;
customer support; and
marketing.

Third-party providers may have their own privacy policies and terms. We encourage You to review the privacy policies of relevant third-party services where appropriate.

12. Third-Party Websites

Our Website may contain links to third-party websites, social media platforms, payment services, or other external websites.

We are not responsible for the privacy practices, security, content, or policies of those third-party websites.

If You click on a third-party link, You will leave our Website and Your information may be processed according to the third party’s own privacy policy.

You should review the applicable third-party privacy policy before providing Personal Data to that third party.

13. Data Security

We take reasonable administrative, technical, and organisational measures to protect Personal Data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include:

access controls;
account authentication;
secure communication technologies;
system monitoring;
security updates;
restricted access to Personal Data; and
other reasonable security practices.

However, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure.

Therefore, while We take reasonable steps to protect Personal Data, We cannot guarantee absolute security.

14. Retention of Personal Data

We will retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by applicable law.

The retention period may depend on:

the purpose for which the information was collected;
the nature of the information;
whether You maintain an account;
whether there is an ongoing business relationship;
legal and regulatory requirements;
accounting and record-keeping obligations;
dispute resolution requirements; and
legitimate business needs.

When Personal Data is no longer required, We may securely delete, destroy, anonymise, or otherwise dispose of it in accordance with applicable requirements.

15. Your Rights

Subject to applicable law, You may have rights relating to Your Personal Data.

These may include the right to:

request access to Personal Data held about You;
request correction of inaccurate or incomplete Personal Data;
request that certain Personal Data be updated;
withdraw consent where processing is based on consent;
request information regarding how Your Personal Data is processed; and
raise a complaint or concern regarding our handling of Your Personal Data.

Some requests may be subject to applicable legal requirements, exceptions, or verification procedures.

We may need to verify Your identity before processing certain requests.

16. Access to Personal Data

If You wish to request access to Personal Data that We hold about You, You may contact Us using the contact details provided in this Privacy Policy.

We will consider and respond to reasonable requests in accordance with applicable law.

We may charge a reasonable fee where permitted by applicable law or refuse a request where legally permitted or required.

17. Correction of Personal Data

You should ensure that the Personal Data You provide to Us is accurate, complete, and up to date.

If You believe that information We hold about You is inaccurate or incomplete, You may contact Us and request that the relevant information be corrected.

We may request reasonable supporting information before making changes to Personal Data.

18. Withdrawal of Consent

Where We process Your Personal Data based on Your consent, You may withdraw Your consent by contacting Us.

However, withdrawing consent may affect our ability to provide certain services.

For example, if You withdraw consent to the processing of information necessary to fulfil an Order, We may be unable to process or deliver that Order.

Withdrawal of consent does not affect processing that occurred before the withdrawal.

19. Children’s Privacy

Our Website is intended for general consumers and is not specifically directed toward children.

We do not knowingly collect Personal Data from children in circumstances where such collection is prohibited by applicable law.

If You believe that a child has provided Personal Data to Us without appropriate permission or where such collection is not permitted, please contact Us.

Where required, We will take reasonable steps to delete or otherwise handle such information appropriately.

20. Data Transfers

Depending on the services and technology used to operate our Website, Personal Data may be processed or stored by service providers located in Malaysia or other jurisdictions.

Where Personal Data is transferred outside Malaysia, We will take reasonable steps to ensure that the transfer and processing are conducted in accordance with applicable data protection requirements.

Third-party service providers may also be subject to the laws and regulations applicable in the jurisdictions in which they operate.

21. Data Breaches

In the event of a suspected or confirmed Personal Data breach, We will take reasonable steps to investigate, contain, and address the incident.

Where required by applicable law, We may notify affected individuals, regulators, or other relevant parties.

The notification may include information regarding the nature of the incident and recommended steps that affected individuals may take.

22. Business Transactions

If AURA ONLINE SDN BHD is involved in a merger, acquisition, restructuring, sale of assets, transfer of business, or similar transaction, Personal Data may be transferred as part of that transaction where permitted by law.

Any such transfer will be handled in accordance with applicable legal requirements.

Where appropriate, We will take reasonable steps to ensure that Personal Data remains protected following the transaction.

23. Fraud Prevention and Security

We may collect and use Personal Data to detect, investigate, prevent, and address:

fraudulent transactions;
suspicious Orders;
unauthorised account activity;
payment abuse;
misuse of promotional offers;
security incidents;
Website abuse; and
other unlawful or harmful activities.

We may disclose relevant information to payment providers, financial institutions, law enforcement agencies, regulators, professional advisers, or other relevant parties where reasonably necessary and permitted or required by law.

24. Compliance With Laws

We may collect, use, retain, or disclose Personal Data where necessary to comply with applicable laws, regulations, court orders, legal processes, government requests, or regulatory requirements.

We may also disclose information where reasonably necessary to protect the rights, property, safety, or legitimate interests of the Company, our customers, employees, service providers, or other persons.

25. Changes to This Privacy Policy

We reserve the right to update, amend, or modify this Privacy Policy from time to time.

Changes may be made to reflect:

changes in our business practices;
changes to our Website;
changes in technology;
changes in applicable laws or regulations;
changes to our service providers; or
other operational or legal requirements.

Any updated Privacy Policy will be published on this page with a revised “Last Updated” date.

You are encouraged to review this Privacy Policy periodically.

Your continued use of the Website after an updated Privacy Policy has been published constitutes acknowledgement of the updated policy, subject to any consent requirements under applicable law.

26. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Malaysia.

Any dispute arising out of or relating to this Privacy Policy or our handling of Personal Data shall be subject to the applicable laws and jurisdiction of the courts of Malaysia, subject to any mandatory rights available to You under applicable law.

27. Contact Us

If You have questions, requests, complaints, or concerns regarding this Privacy Policy or the way We handle Your Personal Data, You may contact Us using the information below:

AURA ONLINE SDN BHD
NO 1, JALAN 4/9,
TAMAN TASEK TAMBAHAN,
68000 AMPANG, SELANGOR,
MALAYSIA

Email: aura-online@outlook.com
Contact Number: +601127898621
Website: https://auraonline.live/

When contacting Us regarding Personal Data, please provide sufficient information for Us to understand Your request. We may request verification of Your identity before processing certain requests.

28. Acknowledgement

By accessing or using the Website, You acknowledge that You have read and understood this Privacy Policy.

You understand that We may collect, use, disclose, and process Your Personal Data for the purposes described in this Privacy Policy and in accordance with applicable Malaysian laws and regulations.

If You do not agree with the applicable terms of this Privacy Policy, You should discontinue use of the Website and refrain from providing Personal Data to Us, subject to any information that We may be legally required or permitted to retain.