Effective date: 8 October 2026
This Privacy Policy explains how Aotracell Enterprise (“Aotracell”, “we”, “us”) collects, uses and protects your personal data when you visit aotracell.com, shop with us, or contact us. We follow Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended in 2024.
Who we are
Aotracell Enterprise (JR0193989-T) is a sole proprietorship registered in Malaysia. We work in microalgae culture, oyster hatchery production, trading and consultancy. We are responsible for the personal data described in this policy.
- Email: aotracell@gmail.com
- Address: Seri Kembangan, Selangor, Malaysia.
The personal data we collect
We collect personal data directly from you, automatically when you use our website, and occasionally from service providers that help us run the site.
- Enquiries: your name, email address and message when you use our “Drop us a message” form or email us.
- Orders and accounts: your name, billing and shipping address, email address, phone number, order history and account login details when you buy from our online shop or create an account.
- Payments: payments are processed by our payment providers. We receive confirmation of payment and limited transaction details, but we do not store your full card details.
- Business dealings: contact and invoicing details, and information you share with us during consultancy or trading work.
- Email updates: your email address and name if you choose to subscribe to our emails.
- Technical data: your IP address, browser and device type, pages visited, referring website and similar usage data, collected through cookies and similar technologies.
How we use your data
- To reply to your enquiries and provide quotes or consultancy.
- To process, deliver and support your orders, including returns and refunds.
- To run your customer account and our cart and checkout.
- To issue invoices and keep accounting and tax records.
- To protect our website and forms from spam, fraud and security threats.
- To understand how visitors use our website and improve it.
- To show our products in Google services and measure our advertising, where you have agreed to marketing cookies.
- To send you email updates, if you have subscribed.
- To meet our legal obligations.
Is providing your data required?
Fields marked as required, such as your name and email address on our enquiry form, or your billing and shipping details at checkout, are needed for us to respond to you or fulfil your order. If you do not provide them, we may not be able to reply, complete your purchase or deliver your goods. Other information, such as subscribing to emails or accepting analytics and marketing cookies, is optional and will not affect your ability to shop with us.
Who we share your data with
We do not sell your personal data. We share it only with parties who help us run our business, or where the law requires it:
- Hosting: Hostinger, which hosts our website and provides its content delivery network (CDN).
- Online shop and payments: Software that runs our shop and our payment providers.
- Delivery: courier and logistics partners, who receive the details needed to deliver your order.
- Google: Google Analytics (through Site Kit by Google), Google Merchant Center and Google Ads, and Gmail, which we use to send website emails.
- Website tools: Jetpack (site statistics and security), ActiveLayer Anti-Spam (checks form and comment submissions for spam) and Hostinger Reach (our email marketing service).
- Social sharing: if you use our share buttons, the social network you choose receives information under its own privacy policy.
- Professional advisers and authorities: accountants, lawyers, government bodies, regulators or courts where needed or required by law.
Transfers outside Malaysia
Some of our service providers, including Google and Hostinger, may store or process personal data on servers outside Malaysia. When this happens, we rely on these providers’ own safeguards and contractual terms, and we transfer data only as allowed under the PDPA.
Cookies
Cookies are small files stored on your device when you visit a website. We use:
- Essential cookies: needed for the site to work, such as keeping items in your cart, running checkout, keeping you logged in to your account, security, and page caching. These cannot be switched off through our cookie banner.
- Analytics cookies: help us understand how visitors use the site, for example Google Analytics cookies and Jetpack statistics.
- Marketing cookies: help measure and personalise advertising, for example Google Ads and Google Merchant Center tags.
Our cookie banner lets you accept or decline analytics and marketing cookies, and you can change your choice at any time through the cookie settings link on our website. We only set these cookies after you have agreed. You can also block or delete cookies in your browser settings, but blocking essential cookies may stop the cart, checkout or your account from working.
How long we keep your data
We keep personal data only for as long as we need it for the purposes above. Order, invoice and payment records are kept for as long as Malaysian tax and accounting laws require. Enquiries are kept for as long as needed to deal with them and any follow-up. Account data is kept while your account is active, and you can ask us to close it. Email subscription data is kept until you unsubscribe. When data is no longer needed, we delete or anonymise it.
How we protect your data
We take practical technical and organisational steps to protect your personal data from loss, misuse and unauthorised access. These include encrypted (HTTPS) connections on our website, restricting access to personal data, strong passwords and security tools. No method of transmission or storage is completely secure, but we work to keep your data safe.
Data breaches
If a personal data breach occurs, we will act promptly to contain it. Where required by the PDPA, we will notify the Personal Data Protection Commissioner and, where the breach is likely to cause you significant harm, we will tell you without unnecessary delay.
Your rights
Under the PDPA you have the right to:
- Access the personal data we hold about you.
- Correct personal data that is inaccurate, incomplete, misleading or out of date.
- Withdraw consent or ask us to limit how we use your data, including for direct marketing. You can unsubscribe from our emails at any time using the link in each email.
- Data portability: ask us to transmit your personal data to another data controller of your choice, where technically feasible and subject to the conditions set under the PDPA.
How to make a request or complaint
To make a request, ask a question or raise a complaint about your personal data, email us at aotracell@gmail.com. Please tell us what you are asking for. We may need to confirm your identity before acting on your request. We will respond within the time required by the PDPA. If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia.
Language
This policy is written in English. A Bahasa Malaysia version is available on request. Please email us at aotracell@gmail.com.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with its effective date shown at the top.