Privacy Policy

Operator: Masdora Jewellery (Malaysia) Sdn. Bhd. (Registration No. 202101040778 (1441078-U)) ("Masdora", "we", "us" or "our")

Website: www.masdora.com (the "Website")

Last updated: 09 June 2026

1. Status and Scope of this Privacy Policy

1.1 This privacy policy (this "Privacy Policy") explains how Masdora collects, records, holds, stores, uses, discloses, transfers, retains and otherwise processes your personal data when you access or use the Website, register an account, place an order, purchase any Goods, communicate with us, participate in any promotion, request any return, exchange or refund, or otherwise interact with us.

1.2 This Privacy Policy forms part of our Website Policies and must be read together with:

  • (a) our Terms and Conditions (the "Terms");
  • (b) our Refund, Return and Exchange Policy (the "Return Policy");
  • (c) our Buy-Back and Trade-In Policy (the "Buy-Back Policy"); and
  • (d) any other policy, notice or terms published on the Website or referred to in the Terms from time to time.

1.3 Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the Terms (including "Bullion Products", "Confirmed Price", "Dispatch Confirmation", "Fulfilment Error", "Goods", "Order", "Order Confirmation" and "Working Day") or, where the term is defined only in the Return Policy, in the Return Policy (including "Care Schedule", "Fair Wear and Tear", "Faulty Item", "Manufacturing Defect" and "Proof of Purchase").

1.4 This Privacy Policy is issued pursuant to the Personal Data Protection Act 2010 ("PDPA") and explains the matters required to be notified to you under the PDPA. It is intended to serve as our full personal data protection notice for Website users and customers.

1.5 In the event of any conflict between this Privacy Policy and Clause 13 (Privacy and Personal Data) of the Terms, this Privacy Policy prevails in respect of the collection, use, disclosure, transfer, retention and protection of personal data. In the event of any conflict between this Privacy Policy and the Terms or Return Policy on non-privacy matters, the Terms and Return Policy prevail, as applicable.

2. Data Controller and Contact Details

2.1 Masdora Jewellery (Malaysia) Sdn. Bhd. is the data controller responsible for the personal data processed under this Privacy Policy.

2.2 Our contact details for personal data matters are as follows:

  • Masdora Jewellery (Malaysia) Sdn. Bhd.
  • Address: 133, Tingkat 1, Jalan Merbau, Pusat Perniagaan Oren, 13000 Butterworth, Penang
  • Email: sales@emasyou.com
  • Telephone: +604 - 313 5137
  • Data protection contact/privacy officer: sales@emasyou.com

2.3 If we are required by law, regulation, guideline or direction of the Personal Data Protection Commissioner to appoint a data protection officer, we will update this Privacy Policy or otherwise make the relevant contact details available in accordance with applicable requirements.

3. Personal Data We Collect

3.1 The personal data we collect depends on how you interact with us. The categories of personal data may include:

  • (a) identity data, including your full name, username, account name, identification card number, passport number, nationality, date of birth, photograph or image of identity document, signature, and any other identity information required for account registration, order verification, tax e-invoicing, anti-money laundering, counter-terrorism financing, sanctions screening, fraud prevention or customer due diligence purposes;
  • (b) contact data, including your billing address, delivery address, email address, telephone number, WhatsApp or other messaging contact, and other contact details provided by you;
  • (c) account data, including your account registration details, login credentials, password or authentication information, account preferences, saved addresses, communication preferences and account security records;
  • (d) order and transaction data, including details of Goods purchased or enquired about, Order details, Order Confirmation, Confirmed Price, Dispatch Confirmation, invoices, receipts, payment status, delivery records, refund, return or exchange records, Proof of Purchase, customer service records and complaints history;
  • (e) payment-related data, including payment method, bank transfer record, payment reference, transaction ID, partial payment card information, e-wallet or payment gateway reference, refund details, chargeback or payment dispute information and fraud-screening results. For card payments, full card details are ordinarily processed by our payment service provider and not stored by us;
  • (f) delivery and fulfilment data, including recipient name, delivery address, recipient contact number, courier tracking information, proof of delivery, signature on delivery, identity verification at delivery or collection where applicable, and delivery issue records;
  • (g) compliance and customer due diligence data, including information and documents reasonably required to verify your identity, address, source of funds, source of wealth, beneficial ownership, transaction purpose, occupation or business background, sanctions status, politically exposed person status, adverse media screening result, risk classification and other information required or permitted under applicable anti-money laundering, counter-terrorism financing, sanctions and related compliance laws;
  • (h) return, exchange and claim data, including photographs or videos of Goods (including recordings we make when we receive, unbox, inspect, assay, weigh or dispatch items), description of alleged defects or discrepancies, authenticity disputes, assay or assessment records, manufacturer or supplier assessment, independent assessor records, return authorisation records, exchange records and related correspondence;
  • (i) communication data, including emails, messages, call records, chat records, customer support tickets, complaints, feedback, reviews, survey responses and any other correspondence between you and us;
  • (j) marketing and preference data, including your consent status, subscription preferences, communication preferences, participation in promotions, wish lists, abandoned cart information, product interests and responses to marketing communications;
  • (k) technical and usage data, including internet protocol (IP) address, device identifier, browser type and version, operating system, time zone setting, location data derived from IP address, login data, access times, pages viewed, links clicked, referral source, browsing behaviour on the Website, error logs and other diagnostic data;
  • (l) cookies and similar technology data, including data collected through cookies, pixels, tags, scripts, analytics tools and similar technologies used on the Website; and
  • (m) user submission data, including product reviews, comments, photographs, images, feedback, suggestions or other materials submitted by you to us or through the Website, subject always to this Privacy Policy in respect of personal data.

3.2 We do not intentionally collect sensitive personal data unless it is necessary or appropriate for a specific purpose permitted by law, or unless you voluntarily provide such information to us. If you provide sensitive personal data to us, we may process it only to the extent reasonably necessary for the purpose for which it was provided, to manage your request, to comply with law, or as otherwise permitted under the PDPA.

4. Sources of Personal Data

4.1 We may collect personal data from the following sources:

  • (a) directly from you when you register an account, place an Order, make payment, contact us, submit documents, request customer support, request a return or exchange, subscribe to marketing, complete a form or otherwise communicate with us;
  • (b) from your use of the Website, including through cookies, analytics tools, server logs and similar technologies;
  • (c) from payment processors, banks, card issuers, e-wallet providers, payment gateways and fraud-prevention service providers;
  • (d) from courier, logistics, insurance or delivery service providers in connection with fulfilment, delivery, proof of delivery, in-transit loss or delivery claims;
  • (e) from identity verification, AML/sanctions, politically exposed person, adverse media, fraud-screening or customer due diligence service providers;
  • (f) from manufacturers, suppliers, assayers, gemmologists, valuers or other independent assessors in connection with authenticity, quality, specification, defect, warranty, return, exchange or refund claims;
  • (g) from publicly available sources, official registers, regulatory databases, sanctions lists, court records, corporate records, social media or other lawful sources, where relevant for verification, anti-money laundering and counter-terrorism financing checks, fraud prevention, legal claims or compliance purposes;
  • (h) from your authorised representatives, agents, family members, corporate representatives, gift recipients or persons who communicate with us on your behalf or receive Goods at the delivery address specified in your Order; and
  • (i) from regulators, law enforcement agencies, courts, tribunals, governmental authorities, professional advisers or other persons where required or permitted by law.

5. Purposes of Processing Personal Data

5.1 We may process your personal data for the following purposes:

  • (a) to provide, operate, maintain, administer, secure and improve the Website;
  • (b) to register, manage, authenticate, secure, suspend or terminate your account;
  • (c) to receive, process, verify, accept, decline, cancel, fulfil, deliver and administer Orders;
  • (d) to issue payment records, Order Confirmations, Dispatch Confirmations, invoices, receipts, tax invoices, e-invoices, delivery updates, refund updates and other transactional communications;
  • (e) to process payments, verify payment status, detect payment errors, handle refunds, respond to chargebacks and manage payment disputes;
  • (f) to arrange delivery, proof of delivery, insured delivery, replacement, exchange, return, collection or other fulfilment matters;
  • (g) to administer the Return Policy, including return authorisations, exchanges, Faulty Item claims, Fulfilment Error claims, Bullion Product authenticity disputes, assessments, repairs, replacements and refunds required by applicable law;
  • (h) to operate and administer our buy-back and trade-in programme under our Buy-Back Policy, including verifying ownership, title and the source of items and funds, assessing, weighing, authenticating, photographing and video-recording items, and effecting payment;
  • (i) to verify your identity, address, payment method, source of funds, source of wealth, transaction purpose, beneficial ownership, sanctions status, politically exposed person status and other customer due diligence information;
  • (j) to comply with applicable anti-money laundering, counter-terrorism financing, sanctions, fraud-prevention, tax, e-invoicing, accounting, audit, record-keeping, consumer protection, e-commerce, customs, regulatory and other legal obligations;
  • (k) to detect, prevent, investigate and respond to fraud, unauthorised transactions, suspicious transactions, money laundering, terrorism financing, misuse of payment methods, chargebacks, abusive returns, cyber incidents, breach of the Terms or breach of law;
  • (l) to conduct risk management, internal compliance, legal review, audit, accounting, record-keeping, reconciliation and internal reporting;
  • (m) to respond to enquiries, complaints, feedback, requests, disputes, claims, notices, regulatory enquiries, law enforcement requests, court processes, tribunal proceedings or legal proceedings;
  • (n) to communicate with you on customer service, product information, safety, certificates, care requirements, warranties, recalls, operational updates and changes to our Website Policies;
  • (o) to send marketing, promotional and customer relationship communications where you have consented to receive them, or where permitted by applicable law;
  • (p) to manage your marketing preferences, unsubscribe requests, consent records and communication preferences;
  • (q) to personalise your Website experience, remember your preferences, maintain wish lists, improve product recommendations, understand customer behaviour and improve our Goods and services;
  • (r) to conduct analytics, research, testing, troubleshooting, product development, service improvement, business planning and Website performance monitoring;
  • (s) to protect the safety, security, rights, property and legitimate business interests of Masdora, our customers, Website users, staff, service providers and other persons;
  • (t) to facilitate business transactions involving Masdora, including merger, acquisition, restructuring, financing, sale, transfer or reorganisation of all or part of our business or assets; and
  • (u) for any other purpose that is directly related or incidental to the above purposes, notified to you at the time of collection, or permitted by law.

6. Compliance, Identity Verification and Fraud Prevention

6.1 Masdora is required to comply with applicable Malaysian anti-money laundering, counter-terrorism financing, sanctions, customer due diligence, record-keeping and reporting obligations, and with related sectoral compliance requirements applicable to our business.

6.2 We may request additional information or documents from you before accepting, processing, fulfilling, releasing, exchanging, refunding or otherwise dealing with an Order or transaction. This may include identity documents, address verification, payment evidence, source of funds or source of wealth information, corporate or beneficial ownership information, or any other document reasonably required for anti-money laundering, counter-terrorism financing, sanctions, fraud prevention, payment verification or legal compliance purposes.

6.3 We may process your personal data for anti-money laundering and counter-terrorism financing checks, sanctions screening, politically exposed person screening, adverse media screening, suspicious transaction monitoring, fraud detection, payment verification, chargeback management, internal risk scoring and regulatory reporting.

6.4 If you fail to provide information reasonably required for anti-money laundering, counter-terrorism financing, sanctions, fraud prevention, payment verification or legal compliance purposes, we may suspend, decline, cancel, delay or refuse to process an Order, account, delivery, return, exchange, refund or other request, without prejudice to our rights under the Terms, the Return Policy and applicable law.

6.5 Where we are required or permitted by law to do so, we may disclose personal data, transaction data, customer due diligence information and related records to regulators, law enforcement agencies, governmental authorities, courts, tribunals, auditors, professional advisers, banks, payment providers and other competent authorities or relevant persons.

6.6 We may not be able to inform you of certain screening, monitoring, reporting, disclosure or compliance activities where doing so would breach applicable anti-money laundering, sanctions, regulatory, law enforcement, court order or confidentiality requirements.

7. Mandatory and Voluntary Personal Data

7.1 Certain personal data is mandatory because it is necessary for us to provide the Website, process Orders, receive payment, deliver Goods, administer returns and exchanges, comply with law, perform customer due diligence, verify identity, prevent fraud, maintain records or communicate with you.

7.2 Mandatory personal data may include your name, contact details, delivery address, billing details, payment-related information, Proof of Purchase, identity verification information, customer due diligence information and other information marked as mandatory at the time of collection.

7.3 Personal data requested for optional purposes, such as marketing communications, promotional updates, surveys, product preferences or certain analytics preferences, is voluntary unless otherwise stated.

7.4 If you do not provide mandatory personal data, or if you withdraw consent for us to process mandatory personal data, we may be unable to register your account, accept or fulfil your Order, process payment, deliver Goods, administer a return or exchange, verify your identity, comply with law, provide customer support or continue providing certain services to you.

8. Disclosure of Personal Data to Third Parties

8.1 We may disclose your personal data to the following classes of third parties, whether located in Malaysia or overseas, for the purposes set out in this Privacy Policy:

  • (a) payment processors, payment gateways, acquiring banks, card schemes, banks, e-wallet providers, financial institutions, payment verification providers and chargeback handling providers;
  • (b) courier companies, logistics providers, delivery providers, warehouse operators, fulfilment providers, insurers and delivery claims handlers;
  • (c) identity verification, anti-money laundering and counter-terrorism financing screening, sanctions screening, politically exposed person screening, adverse media screening, fraud prevention, cybersecurity, risk management and customer due diligence service providers;
  • (d) cloud hosting providers, website hosting providers, software providers, IT support providers, CRM platforms, customer support platforms, email delivery providers, SMS or messaging providers, analytics providers, cookie-management providers and other technology service providers;
  • (e) manufacturers, suppliers, authorised jewellers, repairers, assayers, gemmologists, valuers, independent assessors and other technical experts for product verification, authenticity disputes, defect assessment, repairs, replacements, exchanges or warranty-related matters;
  • (f) marketing, advertising, campaign, design, analytics, market research, loyalty, promotional or customer relationship service providers, subject to your marketing preferences and applicable law;
  • (g) professional advisers, including lawyers, auditors, accountants, tax advisers, consultants, insurers and bankers;
  • (h) regulators, law enforcement agencies, courts, tribunals, governmental authorities and other competent authorities (including, in respect of data protection matters, the Personal Data Protection Commissioner);
  • (i) persons at the delivery address specified in your Order, gift recipients, authorised representatives, family members, agents or persons who communicate with us on your behalf, to the extent reasonably necessary for the relevant transaction or request;
  • (j) any actual or proposed purchaser, investor, assignee, transferee, financier, successor, professional adviser or other relevant person in connection with any merger, acquisition, restructuring, financing, sale, transfer, reorganisation or disposal of all or part of our business or assets; and
  • (k) any other person to whom disclosure is required or permitted by law, or to whom you have consented to disclosure.

8.2 We require our service providers to process personal data only for authorised purposes and to implement appropriate security measures, subject to the nature of the service and applicable law. We do not sell your personal data to third parties for their own independent marketing purposes.

9. Cross-Border Transfers

9.1 Some of our service providers, technology platforms, cloud infrastructure, payment processors, analytics providers, customer support tools, AML/sanctions screening providers or professional advisers may be located outside Malaysia, or may store or process personal data outside Malaysia.

9.2 Where we transfer personal data outside Malaysia, we will take reasonable steps to ensure that the personal data is protected to a standard consistent with the PDPA and applicable legal requirements. These steps may include contractual safeguards, vendor due diligence, access controls, security measures or other measures considered appropriate having regard to the nature of the personal data and the processing involved.

9.3 You acknowledge that cross-border transfer of personal data may be necessary for the purposes stated in this Privacy Policy, including order processing, payment processing, website hosting, analytics, AML/sanctions screening, fraud prevention, customer support and business administration.

10. Cookies, Analytics and Similar Technologies

10.1 The Website uses cookies, pixels, tags, scripts, software development kits, local storage and similar technologies (collectively, "Cookies") to operate, secure, analyse, personalise and improve the Website.

10.2 We may use the following categories of Cookies:

  • (a) strictly necessary Cookies, which are required for the Website to function, including account login, shopping cart, checkout, payment, security and fraud-prevention features;
  • (b) functionality Cookies, which remember your preferences, saved settings and account-related choices;
  • (c) analytics Cookies, which help us understand how users access and use the Website, diagnose errors, improve performance and develop better products and services;
  • (d) security and fraud-prevention Cookies, which help us detect suspicious activity, protect accounts, prevent abuse and maintain Website security; and
  • (e) marketing or advertising Cookies, which may be used to measure campaign performance, personalise advertisements or understand customer interests, where applicable and subject to your preferences and applicable law.

10.3 You may manage or disable Cookies through your browser settings or any cookie preference tool made available on the Website. If you disable certain Cookies, some parts of the Website may not function properly, and you may not be able to complete certain transactions.

10.4 Third-party platforms used on the Website may set their own Cookies or process technical data in accordance with their own terms and privacy notices. We recommend that you review the privacy notices of those third-party platforms where relevant.

11. Marketing Communications

11.1 We will send marketing, promotional, event, product launch, loyalty, collection, offer or similar communications to you only where you have consented to receive such communications, where you have not opted out, or where otherwise permitted by applicable law.

11.2 You may withdraw your consent or opt out of marketing communications at any time by:

  • (a) clicking the unsubscribe link in our marketing emails, where available;
  • (b) adjusting your account or communication preferences, where available; or
  • (c) contacting us at sales@emasyou.com or +604-313 5137.

11.3 Withdrawal of consent for marketing communications does not affect our ability to send you transactional, operational, service, legal, security, account, order, payment, delivery, refund, return, exchange, customer due diligence or policy-update communications.

11.4 We may retain a suppression record after you unsubscribe, so that we can ensure you do not receive further marketing communications from us unless you later resubscribe or otherwise consent.

12. Retention of Personal Data

12.1 We will retain personal data for as long as reasonably necessary to fulfil the purposes for which it was collected, including to provide the Website, manage accounts, process Orders, administer returns and exchanges, comply with applicable anti-money laundering and counter-terrorism financing obligations, comply with tax, accounting, audit and legal obligations, resolve disputes, enforce the Terms, prevent fraud and protect our legal rights.

12.2 The retention period may differ depending on the category of personal data and the applicable purpose. For example:

  • (a) account data may be retained for as long as your account remains active and for a reasonable period after closure;
  • (b) order, payment, delivery, tax invoice, refund, return and exchange records may be retained for the period required or advisable for accounting, tax, audit, consumer protection, dispute management and legal limitation purposes;
  • (c) customer due diligence and related compliance records may be retained for the period required under applicable anti-money laundering and counter-terrorism financing laws, related regulatory requirements and our internal compliance policies;
  • (d) customer service, complaints and dispute records may be retained for as long as reasonably necessary to manage the relevant matter and protect our legal rights;
  • (e) marketing preference records may be retained for as long as necessary to manage your consent, opt-out or suppression status; and
  • (f) technical logs and analytics records may be retained for shorter operational periods unless required for security, fraud prevention, legal or compliance purposes.

12.3 When personal data is no longer required, we will take reasonable steps to delete, destroy, anonymise or otherwise securely dispose of it in accordance with applicable law and our internal retention practices.

13. Security of Personal Data

13.1 We take reasonable practical steps to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction, having regard to the nature of the personal data and the risks associated with the processing.

13.2 Our security measures may include administrative, technical and physical safeguards such as access controls, password controls, staff confidentiality obligations, vendor due diligence, encryption where appropriate, secure payment processing through payment service providers, system monitoring, malware protection, backup procedures and internal policies.

13.3 No method of transmission over the internet, electronic storage or online payment processing is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

13.4 You are responsible for keeping your account credentials confidential, using strong passwords, logging out after use and notifying us immediately if you suspect unauthorised access to your account.

13.5 Where required by applicable law, regulation, guideline or direction, we will take appropriate steps in relation to personal data breaches, including assessment, containment, notification and remediation.

14. Your Rights

14.1 Subject to the PDPA and applicable law, you may have the right to:

  • (a) request access to your personal data held by us;
  • (b) request correction of personal data that is inaccurate, incomplete, misleading or not up to date;
  • (c) withdraw consent to the processing of personal data, where the processing is based on consent;
  • (d) request that we limit or cease processing personal data for a specified purpose or in a specified manner, subject to legal and contractual limitations;
  • (e) opt out of direct marketing communications;
  • (f) make enquiries or complaints regarding our processing of your personal data; and
  • (g) exercise any other right available to you under the PDPA or applicable law.

14.2 Requests must be made in writing to sales@emasyou.com or +604 - 313 5137. We may request information to verify your identity before processing your request.

14.3 We will respond to your request within the timeframe prescribed by law. Where permitted by law, we may charge a prescribed fee for processing data access requests.

14.4 Your rights are subject to limitations and exemptions under the PDPA and other applicable laws. For example, we may be unable to comply with a request where doing so would breach applicable anti-money laundering or counter-terrorism financing laws, regulatory obligations, legal privilege, confidentiality obligations, court orders, law enforcement requirements, our legal rights, the rights of another person, or any other applicable legal requirement.

15. Withdrawal of Consent and Consequences

15.1 You may withdraw consent to the processing of your personal data by contacting us in writing. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

15.2 If you withdraw consent for processing that is necessary for us to provide the Website, manage your account, process Orders, receive payment, deliver Goods, administer returns or exchanges, verify your identity, comply with applicable anti-money laundering or counter-terrorism financing obligations, prevent fraud, maintain records, respond to claims or comply with law, we may be unable to continue providing the relevant product, service, account, transaction, return, exchange, refund or support to you.

15.3 We may continue to process personal data after withdrawal of consent where the processing is required or permitted by law, necessary for legal claims, necessary for compliance with applicable anti-money laundering or counter-terrorism financing obligations, necessary for fraud prevention, necessary to protect our rights, or otherwise permitted under the PDPA.

16. Accuracy of Personal Data

16.1 You must ensure that all personal data you provide to us is accurate, complete and up to date. You must notify us promptly of any change to your personal data, including changes to your contact details, delivery address, billing address, identity information or other relevant information.

16.2 We may take reasonable steps to verify personal data where required for order processing, delivery, customer due diligence, fraud prevention, payment verification, account security, return or exchange processing, legal compliance or other legitimate business purposes.

16.3 We are not responsible for losses, delays, failed deliveries, failed refunds, account issues or other consequences caused by inaccurate, incomplete or outdated information provided by you.

17. Minors

17.1 The Website and Goods are intended for persons who are at least eighteen (18) years of age and have legal capacity to enter into binding contracts. You must not register an account or place an Order if you are under eighteen (18) years of age.

17.2 We do not knowingly collect personal data from minors for account registration or Orders. If we become aware that personal data of a minor has been collected without appropriate consent or legal basis, we may take reasonable steps to delete the data, restrict the account, cancel the Order or take such other action as may be appropriate.

18. Third-Party Websites and Platforms

18.1 The Website may contain links to third-party websites, payment pages, social media pages, logistics tracking pages or other third-party platforms. We are not responsible for the privacy practices, security, content or personal data processing activities of those third parties.

18.2 You should review the relevant third party’s privacy notice or policy before providing personal data to that third party.

19. Business Transfers

19.1 If Masdora is involved in a merger, acquisition, restructuring, financing, sale, transfer, assignment, reorganisation or disposal of all or part of its business or assets, your personal data may be disclosed or transferred to the relevant purchaser, investor, assignee, transferee, successor, financier, adviser or other relevant person, subject to confidentiality and applicable law.

19.2 Any such disclosure or transfer will be made only to the extent reasonably necessary for the relevant transaction, due diligence, business continuity, legal compliance or post-completion administration.

20. Bahasa Malaysia and Other Language Versions

20.1 This Privacy Policy should be made available in both the national language (Bahasa Malaysia) and the English language where required by the PDPA. Any other translation may also be provided for convenience.

20.2 If there is any inconsistency between the English version and any translation of this Privacy Policy, the English version prevails, except to the extent that applicable law requires otherwise.

20.3 Any consent mechanism, opt-out mechanism, personal data access or correction request channel, or other choice made available to you should be clear and readily accessible in the required language versions, where required by law.

21. Changes to this Privacy Policy

21.1 We may amend this Privacy Policy from time to time by posting the updated version on the Website. The updated version takes effect when posted, unless otherwise stated.

21.2 Where any amendment materially affects how we process your personal data, we may take reasonable steps to notify you, such as by posting a notice on the Website, sending an email, displaying an account notification or using any other appropriate method.

21.3 You should review this Privacy Policy each time before using the Website or placing an Order.

22. Contact, Requests and Complaints

22.1 If you have any question, request or complaint regarding this Privacy Policy or our processing of your personal data, please contact us at:

  • Masdora Jewellery (Malaysia) Sdn. Bhd.
  • Address: 133, Tingkat 1, Jalan Merbau, Pusat Perniagaan Oren, 13000 Butterworth, Penang
  • Email: sales@emasyou.com
  • Telephone: +604 - 313 5137
  • Data protection contact / privacy officer: sales@emasyou.com

22.2 Please provide sufficient information for us to identify you and understand your request. We may request additional information or documents to verify your identity before responding.

22.3 If you are dissatisfied with our response, you may have the right to lodge a complaint with the Personal Data Protection Commissioner or other relevant authority in accordance with applicable law.