Privacy Policy
Please read and review this Policy, which will inform you how we collect, use, process and disclose your Personal Data.
HOW DO WE COLLECT COLLECT YOUR DATA
During our relationship with you, we may collect Personal Data from you. Examples of the types of Personal Data we may collect include your name, contact details, mailing/delivery addresses and email address.
By (1) submitting your Personal Data to us when signing up for an account on the Website, (2) browsing our Website, or (3) purchasing any of our products, you are agreeing to the terms of this Policy of our website.
We usually do not collect your credit card details, whether to process your payment or for customer service purposes. Your credit card details are collected, processed and stored directly by our third-party payment processors pursuant to their terms of use and privacy policies. None of your credit card details is stored with us. However, we may collect your bank account details to process refunds.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
HOW DO WE USE YOUR DATA
Do note that the personal information provided to us will only be used to;
- Complete your transaction
- Process your order for our products
- Process or collect your payment for the order;
- Deliver or perform the products or services you purchased, including our couriers calling or messaging you to obtain your delivery instructions;
- Process your returns or refunds in accordance with our Terms of Service;
- Personalise and improve your customer experience
In addition, we may use and disclose your Personal Data for the following purposes, to:
- Send you marketing communications in relation to our sales, products and promotions (email marketing)
- Enable businesses to deliver ads which are related to their products and services which may be of interest to you
- Process your participation in our promotions, lucky draws, initiatives or any request for additional Personal Data such as customer surveys
WHO YOUR PERSONAL DATA WILL BE SHARED WITH
- Owners of SAMORA
- Employees of SAMORA
- Payment processors, who process your payment on the Website logistics providers, such as courier services which will deliver your order to you;
- Business partners or vendors in connection with the processing of any promotion, event or service organised by us
- Any other party whom you authorize us to disclose your Personal Data to.
We may also disclose your Personal Data if we are required by law to do so or if you violate our Terms of Service.
CHILDREN’S PRIVACY (AGE OF CONSENT)
We do not and do not intend to, transact with anyone under the age of 18. If you are under the age of 18, you should use the Website only with the involvement of a parent or a guardian and should not be submitting any personal data to us. By providing any Personal Data to us, you declare that you are over the age of 18.
REQUEST TO WITHDRAW CONSENT
At any time if you wish to withdraw your consent for us to contact you or to send you sales, marketing or promotional information, please inform us as by contacting us at samorashoes@gmail.com from 10.00 a.m to 5.00 p.m (Monday to Friday).
COOKIES
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- "Log Files" track actionsoccuring on the Site, and collect data including your IP address, browser type, Internet Service Provider, referring/exit pages, and date/time stamps.
- "Web beacons, "tags", and "pixels" are eleectronic files used to record information about how you browse the Site.
THIRD PARTY SERVICES
Be assured that the third-party providers used by us will only disclose your personal information out of the necessity to perform what is required. Payment gateway and other payment transaction processors have their own privacy policies hence we are required to provide them with all your purchase-related transactions. To further understand how your personal information will be handled by them, we would suggest reading up on their privacy policies for further understanding.
GOOGLE ANALYTICS
We use Google Analytics to track social shares made at our website. Google automatically collect and store certain information in their server logs which includes device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL, cookies that may uniquely identify your browser or your Google Account, in accordance with their data privacy policy: https://policies.google.com/privacy. For more information on Google Analytics, visit Google’s information page.
SHOPIFY
SAMORA is hosted on Shopify Inc., a reputable online e-commerce platform that allows our products to reach you. All your personal data are securely stored behind a firewall in Shopify’s databases
After making a translation through the payment gateway, Shopify will then securely store your credit card data. Your data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS protect payment systems from breaches and theft of cardholder data whilst implementing standards for creating secure payment solutions.
SECURITY
Shopify is certified Level 1 PCI DSS compliant. The Payment Card Industry Data Security Standard (PCI DSS) is a security standard for organizations that handle credit and debit card information. The standard was created to increase controls around payment data to reduce fraud. This compliance extends by default to all stores powered by Shopify. Please be assured that SAMORA is compliant with the PC1 DSS and we take safety precautionary method very seriously.
All your credit card information provided are encrypted at rest with AES-256. Decryption keys are stored on separate machines and this would mean that none of Stripe’s internal servers and daemons is able to obtain your card numbers.
GOVERNING LAW
This Policy and your use of this website shall be governed in all respects by the laws of Malaysia (Malaysia’s Personal Data Protection Act 2010).
UPDATES ON DATA PROTECTION POLICY
As part of our efforts to ensure that we properly manage, protect and process your Personal Data, we will be reviewing our policies, procedures and processes from time to time to ensure it is consistent with regulatory requirements. We reserve the right to modify the terms of policy and any clarifications will be immediately effective.
Subject to your rights at law, you agree to be bound by the prevailing terms of the Policy as updated from time to time on our Website. By continuing to use our website after the Policy has been amended, you hereby agree to be bound by the terms of such amended Policy. To always be well-informed on this topic, it is advisable that you visit our Website from time to time to ensure that you are up to date with our latest policies in relation to Personal Data protection.