Privacy Policy

Last updated: 7 October 2026

This policy explains how MYpeptides Malaysia collects and uses your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

What we collect

• Your name, email address and WhatsApp number.
• Your delivery address.
• Your order history, and any notes you add to an order.
• If you create an account, a securely hashed password (we never see or store your actual password).
• Basic technical data needed to run the site and protect it from abuse, such as your IP address at the time of an order.

Why we use it

• To confirm, process and deliver your orders, including contacting you on WhatsApp about them.
• To run your account, if you create one.
• To meet our legal and accounting obligations.
• To prevent fraud and misuse of the site.

We do not sell your personal data, and we do not use it for marketing without your consent.

Who we share it with

Only with the courier delivering your order, our hosting and email providers, and authorities where the law requires it.

How long we keep it

Order records are kept for seven years for accounting purposes. You may ask us to delete your account at any time.

Cookies

We use only the cookies needed to keep you signed in and to remember your cart and your age confirmation. We do not use advertising cookies.

Your rights

Under the PDPA you may ask to access or correct the personal data we hold about you, or withdraw consent to its use. Email orders@mypeptides.my and we will respond within 21 days.