PRIVACY POLICY

Last Updated: 3 September 2026

Vapimall (“Vapimall”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, disclose, store and protect your personal data when you visit vapimall.com (the “Website”), create an account, purchase our products, subscribe to our communications, contact us, or otherwise interact with Vapimall.

We process personal data in accordance with applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (Act 709) (“PDPA”), as amended from time to time.

By accessing or using our Website and providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect personal data including, but not limited to:

Personal and Contact Information

Full name
Email address
Telephone or mobile number
Billing address
Shipping or delivery address
Account information

Order and Transaction Information

Products purchased
Order history
Transaction details
Delivery and fulfilment information
Returns, refunds and customer service records
Payment status and related transaction information

Payment card or payment account information may be processed directly by our authorised payment service providers. We may not directly store complete payment card details.

Account Information

If you create an account on our Website, we may collect information associated with your account, including your login details, preferences, purchase history and other information you provide.

Technical and Usage Information

When you use our Website, certain information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Website usage and browsing activity
Pages viewed
Referring URLs
Date and time of access
Cookie identifiers and similar technologies

Communications and Marketing Information

We may collect information you provide when you:

Subscribe to our email communications;
Participate in promotions or campaigns;
Contact our customer service team;
Submit an enquiry or feedback; or
Communicate with us through our Website or other communication channels.

Other Information

We may collect other information that you voluntarily provide to us or that is reasonably necessary for us to provide our products and services.

We ask that you do not provide sensitive personal data unless it is necessary for a specific service or interaction and you have been requested to provide it.

2. HOW WE COLLECT YOUR PERSONAL DATA

We may collect personal data:

Directly from you when you create an account, place an order, subscribe to our emails or contact us;
Automatically when you browse or interact with our Website;
Through cookies and similar technologies;
From payment processors, delivery providers and other service providers involved in fulfilling your transactions;
From marketing, advertising or analytics platforms where permitted by law; and
From other lawful sources where appropriate.

3. HOW WE USE YOUR PERSONAL DATA

We may collect, use and process your personal data for purposes including:

Processing and fulfilling your orders;
Arranging payment, delivery, returns and refunds;
Creating and managing your customer account;
Providing customer service and responding to enquiries;
Communicating with you regarding your orders, transactions or account;
Sending marketing and promotional communications where permitted;
Providing information regarding our products, promotions and services;
Personalising your experience on our Website;
Understanding how visitors use our Website;
Conducting analytics and improving our Website, products and services;
Managing promotions, discounts, campaigns and loyalty initiatives;
Preventing fraud, misuse, security incidents and unlawful activities;
Protecting our Website, customers, business and legal rights;
Maintaining business and transaction records;
Complying with applicable laws, regulations, court orders and regulatory requirements; and
Carrying out other purposes directly related to the above.

Where required by applicable law, we will obtain your consent before processing your personal data for a particular purpose.

4. MARKETING COMMUNICATIONS

Where you have subscribed to our communications or where otherwise permitted by applicable law, we may use your contact information to send you information about:

New products;
Promotions and discounts;
Special offers;
Events and campaigns;
Brand updates; and
Other information that may be relevant to you.

You may unsubscribe from marketing emails at any time by using the “Unsubscribe” link contained in our marketing emails or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending necessary transactional or service-related communications, such as order confirmations, delivery notifications or important account notices.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies, pixels, tags and similar technologies to operate and improve the Website.

These technologies may be used to:

Remember your preferences;
Maintain shopping cart functionality;
Keep you signed in where applicable;
Understand Website traffic and usage;
Measure Website performance;
Improve functionality and user experience;
Detect security issues and prevent fraud; and
Support advertising and marketing activities.

You may manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality or performance of the Website.

Where required by applicable law, we will obtain consent before placing non-essential cookies or similar technologies on your device.

6. DISCLOSURE OF PERSONAL DATA

We may disclose or provide access to your personal data to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These parties may include:

E-commerce and Website hosting providers;
Payment gateways and payment processors;
Banks and financial institutions;
Delivery, logistics and courier providers;
IT, cloud hosting and cybersecurity providers;
Customer service providers;
Marketing, advertising and analytics providers;
Professional advisers such as accountants, auditors and lawyers;
Business partners and contractors;
Government departments, regulators, law enforcement authorities and courts where required by law; and
Potential purchasers, investors or advisers in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business.

We require service providers handling personal data on our behalf to process such information appropriately and to implement reasonable security measures, subject to applicable contractual and legal requirements.

We do not sell your personal data to third parties for monetary consideration.

7. PAYMENT PROCESSING

Payments made through our Website may be processed by third-party payment service providers.

When you make a payment, certain personal and transaction information may be provided directly to the relevant payment provider for the purpose of processing and securing your transaction.

The processing of information by those providers may also be governed by their respective privacy policies and terms.

8. THIRD-PARTY SERVICES AND LINKS

Our Website may contain links to third-party websites, social media platforms, payment providers or other external services.

These third parties operate independently from Vapimall and may have their own privacy policies and practices.

We encourage you to review the privacy policies of any third-party websites or services before providing personal information to them.

Vapimall is not responsible for the privacy practices, content or security of third-party websites or services that we do not control.

9. INTERNATIONAL TRANSFERS

Some of our service providers, technology providers or business partners may operate or store information outside Malaysia.

As a result, your personal data may be transferred to, processed or stored in jurisdictions outside Malaysia.

Where personal data is transferred internationally, we will take reasonable steps to ensure that such transfers are made in accordance with applicable Malaysian data protection requirements and that appropriate safeguards are implemented where required.

10. DATA SECURITY

We take reasonable administrative, organisational and technical measures to protect personal data against:

Loss;
Misuse;
Unauthorised access;
Unauthorised disclosure;
Alteration;
Destruction; and
Other unauthorised processing.

However, no method of transmitting information over the Internet or storing information electronically is completely secure. Accordingly, while we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

You are responsible for keeping your account credentials and passwords confidential and should notify us if you believe your account has been accessed without authorisation.

11. RETENTION OF PERSONAL DATA

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, taxation, operational and regulatory requirements.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it in accordance with our retention practices and applicable law.

12. YOUR RIGHTS

Subject to the PDPA and other applicable laws, you may have the right to:

Request access to personal data we hold about you;
Request correction of inaccurate, incomplete or outdated personal data;
Withdraw consent to certain processing where processing is based on your consent;
Request that we cease or restrict certain processing where provided by law;
Opt out of direct marketing communications; and
Exercise any other rights available to you under applicable Malaysian data protection law.

Certain requests may be subject to legal exceptions, verification requirements or other limitations permitted under applicable law.

To exercise your rights, please contact us using the contact information provided below.

13. ACCURACY OF PERSONAL DATA

You are responsible for ensuring that personal data provided to us is accurate, complete and current.

If your information changes, please update your account information where available or contact us so that we may update our records.

14. CHILDREN’S PRIVACY

Our Website and products are not intended to knowingly collect personal data directly from children without appropriate consent from a parent or legal guardian where such consent is required by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal data to us without appropriate consent, please contact us so that we may review and take appropriate action.

15. DATA BREACHES

In the event of a personal data breach, we will take reasonable steps to investigate, contain and remediate the incident.

Where required under applicable Malaysian law, we will notify the relevant authorities and/or affected individuals in accordance with applicable data breach notification requirements.

16. CHANGES TO THIS PRIVACY POLICY

We may amend or update this Privacy Policy from time to time to reflect:

Changes to our business operations;
Changes to our Website or services;
Changes in technology;
Changes to our data-processing practices; or
Changes to applicable legal or regulatory requirements.

Any updated Privacy Policy will be published on this Website with a revised “Last Updated” date.

We encourage you to review this Privacy Policy periodically.

17. CONTACT US

If you have any questions, requests, concerns or complaints regarding this Privacy Policy or the way Lansidai Health handles your personal data, please contact us through the contact details provided on our Website.

Vapimall
Website: vapimall.com

For privacy-related enquiries, please include “Privacy Request” in the subject or heading of your communication so that we can process your request appropriately.

18. ACKNOWLEDGEMENT

By providing your personal data to Lansidai Health and using our Website, you acknowledge that you have read and understood this Privacy Policy and the manner in which your personal data may be collected, used, processed and disclosed as described above.

Where consent is required under applicable law, we will seek such consent through the appropriate mechanism.