Privacy Policy / 隐私权政策

Zheng Qiang Herbal Remedies Sdn Bhd (200101021788 (557546K))

Welcome to Qiang Yi Tang (qiangyitang.com), operated by Zheng Qiang Herbal Remedies Sdn Bhd ("Company", "we", "us", or "our"). We deeply respect your privacy and are committed to protecting all Personal Data entrusted to us.

This Privacy Policy serves as a Notice issued pursuant to the Malaysian Personal Data Protection Act 2010 (PDPA). It explains how we collect, use, process, store, disclose, and safeguard your personal information when you visit our website, register an account, purchase products, or interact with our Traditional Chinese Medicine (TCM) services.

Our Commitment: We strictly guarantee that your personal data will never be sold, rented, or commercialized to third parties for marketing purposes.

1. Categories of Personal Data We Collect

Depending on your interaction with our website and services, we may collect the following types of personal data:

Identity Data: Full name, gender, date of birth, identity card (NRIC) or passport number (where required for customized TCM prescriptions or clinical records).
Contact Data: Billing address, shipping address, email address, mobile phone number, and WhatsApp contact details.
Transaction & Order Data: Details of products ordered, purchase history, delivery preferences, invoice details, and customer support queries. (Note: Financial credit card and banking details are processed directly via secure payment gateways and are not stored on our servers.)
Technical Data: IP address, browser type, operating system, device identifiers, referring website addresses, and browsing activities captured via cookies.
Health & Wellness Data (Voluntary): Body constitution notes, health concerns, allergies, or prescription history voluntarily provided by you when requesting customized herbal decoctions, dietary consultations, or customer care advice.

2. Purpose of Collecting & Processing Personal Data

We process your Personal Data strictly for legitimate business purposes, including but not limited to:

Order Processing & Fulfillment: Processing your purchases, verifying payments, packing items, and dispatching parcels via domestic courier partners.
Customer Care & Service: Sending order updates, shipment tracking info (via Email or WhatsApp), answering inquiries, and handling return/refund requests.
TCM Customization & Dispensing: Preparing customized herbal decoctions, specialized formulas, or dosage guidelines based on your specific requirements.
Account Management & Loyalty Rewards: Managing your member registration, reward points, promotional coupons, and purchase history.
Marketing Communications (Opt-In): Sending newsletter updates, health Column articles, seasonal promotions, and special discounts (you may opt out at any time).
Legal & Regulatory Compliance: Fulfilling accounting, auditing, tax filing obligations, and complying with health regulatory requirements under Malaysian law.

3. Source of Personal Data

We collect your personal information directly from you when you:

Browse or navigate through our website (qiangyitang.com);
Register a member account or subscribe to our newsletter;
Place an order or purchase products online;
Contact us via Email, WhatsApp, social media, or phone;
Submit feedback, review forms, or participate in promotional campaigns.

4. Disclosure of Personal Data to Third Parties

Your Personal Data is kept strictly confidential. We only disclose your data to trusted third-party service providers who assist us in operating our e-commerce business, bound by strict confidentiality agreements:

Logistics & Courier Partners: Courier service providers (e.g., City-Link Express, Pos Laju) to deliver your orders to your designated shipping address.
Payment Gateways & Financial Institutions: Payment processors (e.g., FPX, Credit Card Processors, E-Wallets) to securely authorize transaction payments.
IT & Website Hosting Providers: Cloud servers, IT infrastructure, and website maintenance partners who support site operations.
Legal Authorities: Regulatory bodies, law enforcement agencies, or courts when required by Malaysian law or official legal directives.

5. Protection & Security Measures

We implement appropriate technical, administrative, and physical security measures to safeguard your Personal Data against unauthorized access, alteration, disclosure, loss, or destruction. Online transactions use standard Secure Socket Layer (SSL) encryption to protect sensitive data transmission.

6. Data Retention Policy

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal, accounting, and tax retention periods (typically up to 7 years under Malaysian tax laws). Once no longer required, your data will be securely deleted or anonymized.

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember shopping cart items, analyze web traffic, and optimize site performance. You may modify your web browser settings to decline cookies, though some features of our website may not function properly as a result.

8. Your Rights under the Malaysian PDPA 2010

Under the Malaysian Personal Data Protection Act 2010, you hold the following rights regarding your Personal Data:

Right of Access: You may request access to the Personal Data we hold about you.
Right to Correction: You may request to correct or update inaccurate, incomplete, or outdated Personal Data.
Right to Withdraw Consent: You may withdraw your consent for direct marketing or specific data processing at any time.
Right to Limit Processing: You may request to limit the scope of how your Personal Data is processed.

To exercise any of these rights, please submit a written request to our Data Protection Officer at admin@qiangyitang.com.

9. Protection of Minors

Our website is intended for individuals aged 18 and above. We do not knowingly collect Personal Data from children under 18 without verified consent from a parent or legal guardian.

10. Third-Party Website Links

Our website may contain links to third-party sites or independent practitioner directories. Please note that this Privacy Policy applies solely to qiangyitang.com. We are not responsible for the privacy practices or content of external third-party websites.

11. Amendments to This Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Revised versions will be published on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Us / Data Protection Officer

If you have any questions, complaints, or data access requests regarding this Privacy Policy, please contact our Data Protection Administrator:

Company Name: Zheng Qiang Herbal Remedies Sdn Bhd (200101021788 (557546K))

Email: admin@qiangyitang.com

Official Website: https://www.qiangyitang.com

HQ Address: 19 Jalan Pinhorn, Jelutong, 11600 Pulau Pinang, Malaysia

Operating Hours: Monday – Saturday (9:30 AM – 6:00 PM)

欢迎访问 强益堂 官方网店（qiangyitang.com），本网站由 (Zheng Qiang Herbal Remedies Sdn Bhd)（以下简称“本公司”或“我们”）全权营运。我们高度重视阁下的隐私权，并致力于妥善保护所有交付给我们的个人资料。

本《隐私权政策》系根据 马来西亚《2010年个人资料保护法》（PDPA） 所颁布之法定告示。本政策旨在说明我们如何收集、使用、处理、储存、披露及保护您在浏览本网站、注册账户、购买产品或使用中医药服务时所提供的个人资料。

我们的承诺： 本公司严正保证，绝不会出于商业营销目的将您的个人资料出售、出租或转让给任何无关联的第三方。

一、我们收集的个人资料类别

根据您与我们网站及服务的互动方式，我们可能收集以下类别的个人资料：

身份识别资料： 姓名、性别、出生日期、身份证号码或护照号码（仅在定制中药处方或设立临床档案需要时提供）。
联系方式资料： 账单地址、配送地址、电子邮箱、手机号码及 WhatsApp 联系电话。
交易与订单资料： 所购商品明细、购买历史记录、配送偏好、发货单据及客服沟通记录。（注：信用卡及银行支付敏感信息直接由第三方安全支付网关处理，本公司服务器不留存任何卡号信息。）
技术与浏览数据： IP 地址、浏览器类型、操作系统、设备识别码、来源网址及通过 Cookie 记录的浏览行为数据。
健康与养生资料（自愿提供）： 您在咨询中药配剂、代煎茶饮或养生建议时自愿提供的体质说明、健康诉求、过敏史或用药记录。

二、收集与处理个人资料的目的

我们严格在合法且必要的业务范围内处理您的个人资料，主要目的包括：

订单处理与货品配送： 处理订单、核对付款、包装商品，并通过本地合作快递公司安排包裹派送。
客户服务与通知： 发送订单状态更新、快递单号追踪（通过电邮或 WhatsApp）、解答问题及处理退换货或退款申请。
中药调配与定制服务： 根据您的个人体质或具体需求，配制个人化中药材、煎煮药液或提供服用指引。
会员账户与积分管理： 管理您的注册账户、会员积分累计、优惠券发放及购买历史记录。
营销与资讯推荐（须经同意）： 向您发送养生专栏文章、最新产品资讯、节日优惠活动（您可随时选择退订）。
法律与合规义务： 履行会计、审计、报税职责，以及遵守马来西亚现行相关卫生与法律法规要求。

三、个人资料的来源

我们主要通过以下直接途径收集您的个人资料：

当您访问或浏览强益堂官方网店（qiangyitang.com）；
当您注册会员账户或订阅我们的电子报；
当您在线上提交订单并完成商品购买；
当您通过电邮、WhatsApp、社交媒体或电话与我们联络；
当您填写反馈表单、评价商品或参与营销活动。

四、个人资料向第三方披露与共享

您的个人资料将被严格保密。仅在运行电商平台与完成服务所必需的情况下，我们才会向受保密协议约束的第三方服务商披露必要的资料：

物流与快递承运商： 本地专业快递公司（如 City-Link Express、Pos Laju 等），用于将包裹送达您指定的收件地址。
支付网关与金融机构： 认证支付处理商（如 FPX 网上银行、信用卡结算网关、电子钱包），用于完成安全支付验证。
IT 与网站托管服务商： 云端服务器、技术支持及网站维护服务商，用于保障网店稳定运行。
法定与监管机构： 在马来西亚法律法规要求或司法机构依法下达指令时，向相关政府机关进行法定披露。

五、个人资料的安全与保护措施

我们采用行业标准的安全技术、管理措施及物理防护来保障您的个人资料安全，防止未经授权的访问、泄漏、修改、损坏或丢失。线上交易过程均采用 SSL 安全加密技术以保护敏感数据的传输。

六、资料保存期限

我们仅在实现本政策所述目的所需的期限内保留您的个人资料，或根据马来西亚税务及商业法律要求的法定保留期限（通常为最长 7 年）进行保存。超过保存期限后，相关的个人资料将被安全销毁或进行匿名化处理。

七、 Cookie 及追踪技术的应用

本网站使用 Cookie 及类似追踪技术来提升您的浏览体验、记忆购物车商品、分析网站流量及优化网店性能。您可以通过修改浏览器的设置拒绝 Cookie，但这可能会导致您无法正常使用本网站的部分功能。

八、您在马来西亚 PDPA 法律下的法定权利

根据马来西亚《2010年个人资料保护法》（PDPA），您享有以下法定权利：

查阅权 (Right of Access)： 您有权要求查阅我们所持有的关于您的个人资料。
更正权 (Right to Correction)： 您有权要求更正或更新不准确、不完整或已过期的个人资料。
撤回同意权 (Right to Withdraw Consent)： 您有权随时撤回对直接营销或特定资料处理的同意。
限制处理权 (Right to Limit Processing)： 您有权要求限制我们处理您个人资料的范围与方式。

如需行使上述任何权利，请通过书面电邮方式联系我们的个人资料保护主管：admin@qiangyitang.com。

九、未成年人隐私保护

本网站主要面向 18 周岁及以上的成年用户。若未获得父母或法定监护人的明示同意，我们不会故意收集 18 周岁以下未成年人的个人资料。

十、第三方网站链接免责

本网站可能包含指向第三方网站或独立医师名录的链接。本《隐私权政策》仅适用于 qiangyitang.com。我们不对任何外部第三方网站的隐私做法或内容承担连带责任。

十一、隐私权政策的修改与更新

强益堂保留随时根据法律法规变更或业务调整修改本政策的权利。更新后的版本将实时公布于本页面并注明生效日期。建议您定期查阅本政策以了解最新的隐私保护措施。

十二、联系我们 / 个人资料保护主管

如对本隐私权政策有任何疑问、建议、投诉或资料查阅请求，请通过以下方式联系我们的个人资料保护负责人：

公司实体： Zheng Qiang Herbal Remedies Sdn Bhd

公司注册号： 200101021788 (557546K)

联系邮箱： admin@qiangyitang.com

官方网站： https://www.qiangyitang.com

总店地址： 19 Jalan Pinhorn, Jelutong, 11600 Pulau Pinang, Malaysia

服务时间： 星期一至星期六（09:30 AM – 06:00 PM）

Privacy Policy / 隐私权政策

1. Categories of Personal Data We Collect

2. Purpose of Collecting & Processing Personal Data

3. Source of Personal Data

4. Disclosure of Personal Data to Third Parties

5. Protection & Security Measures

6. Data Retention Policy

7. Cookies & Tracking Technologies

8. Your Rights under the Malaysian PDPA 2010

9. Protection of Minors

10. Third-Party Website Links

11. Amendments to This Privacy Policy

12. Contact Us / Data Protection Officer

一、 我们收集的个人资料类别

二、 收集与处理个人资料的目的

三、 个人资料的来源

四、 个人资料向第三方披露与共享

五、 个人资料的安全与保护措施

六、 资料保存期限