Privacy policy

This Privacy Policy describes how Vinstella Official ("Vinstella," "we," "us," or "our") collects, uses, protects, and discloses your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By visiting our website (vinstella.com / vinstella.com.my), creating an account, participating in our unified omnichannel membership program, or interacting with us at our physical retail boutiques, you officially consent to the processing of your personal data as outlined in this policy.

1. Our Omnichannel Commitment (OMO)

Vinstella operates a modern Online-Merge-Offline (OMO) commerce network designed to provide a seamless, premium experience. To achieve this, our online storefront and physical boutiques share a centralized customer database.

This means your boutique purchase histories, ring sizes, member points, and online interactions are compiled into a single, unified customer profile. Disclosing this unified database processing ensures we remain fully compliant with Malaysian data protection laws while offering you personalized loyalty rewards and complimentary lifetime after-sales services at any channel you choose.

2. How We Collect Your Personal Data

We collect your personal data through various touchpoints across our digital channels and physical locations:

  • Digital Storefront Interactions: When you browse our website, register for an account, subscribe to our email or SMS newsletters, add items to your shopping cart, complete a purchase, or submit custom engraving text.

  • Physical Boutique Interactions: When you purchase jewelry at our retail outlets, register your lifetime warranty, check in with our staff using our POS tablets, sign up for membership via in-store QR codes, or submit a piece of jewelry for repair, polishing, or trade-in.

  • Customer Support Channels: When you reach out to our team via WhatsApp, live chat, email, or social media message to resolve order queries, track packages, or ask about jewelry specifications.

  • Technical Tracking Tools: Technical data is collected automatically when you visit our site, utilizing cookies, tracking pixels, and server logs to monitor device behavior and site performance.

3. The Personal Data We Collect

We only collect personal data that is necessary to fulfill your orders, manage our loyalty services, or optimize your browsing experience. This information includes:

  • Contact & Identity Information: Your full name, telephone number, email address, shipping address, billing address, and date of birth.

  • Transactional Records: Details of products you purchased, payment transaction statuses, choice of payment methods, selected installment options, and retail boutiques visited.

  • Jewelry & Styling Specifications: Your measured ring sizes, personal metal preferences, after-sales repair records, custom engraving details, and complimentary polishing history.

  • Digital Profile Behavior: Your device IP address, operating system, browser type, pages viewed, time spent on our store, and traffic referral sources.

4. How We Use Your Personal Data

Vinstella processes your personal data strictly for commercial, operational, and marketing purposes, including:

  • Fulfillment & Logistics: Processing your transactions, generating couriers air waybills, updating shipment tracking, and managing localized shop pickup arrangements.

  • Unified Loyalty & Membership Services: Powering your single-login membership, tracking your earned reward points across our web store and physical boutique counters, and validating after-sales lifetime warranty complimentary services.

  • Complimentary Customizations: Applying custom engraving to jewelry pieces according to your order instructions.

  • Personalized Communications: Triggering automated emails or SMS messages for abandoned carts, welcome gifts, anniversary specials, and tailored product recommendations based on your browsing behavior.

  • Store Improvement & Security: Auditing transaction records, tracking general category popularity, preventing fraudulent account sign-ups, and defending our digital server systems from cyber threats.

5. Web Cookies & Behavioral Tracking

Cookies are small data files placed on your device to help our platform remember your preferences and manage shopping workflows:

  • Essential Sessions: These cookies are mandatory to preserve the active items added to your shopping cart or the products you browse as you navigate between pages, and to maintain your logged-in member session during checkout.

  • Analytics & Performance: We use behavioral tracking cookies to study site load speeds and category page traffic, allowing our design team to refine our website structure for smoother mobile performance.

  • Marketing & Retargeting: Third-party pixels drop temporary marketing cookies. These track which jewelry pieces you view so we can display relevant promotional announcements on social media networks. By using our website, you officially consent to our use of these tracking mechanisms. You can disable cookies through your browser settings, though doing so will disable checkout and cart retention functions.

6. Information Sharing & Third-Party Processors

Vinstella will never sell, lease, or rent your personal data to third parties for independent marketing purposes. We share your personal data strictly with trusted service partners required to execute our business operations:

  • Logistics & Delivery Partners: Securely passing your name, shipping address, and telephone number to our integrated courier services to ensure accurate delivery of your packages.

  • Secure Payment Gateways: Transmitting transactional values and contact fields to PCI-compliant payment processors and FPX banking gateways to execute checkout charges safely.

  • Installment & Financing Providers: Sharing necessary order values with secure buy-now-pay-later (BNPL) services to assist with payment installations if selected at checkout.

  • System Integrators & CRM Hosts: Housing database fields in our secure commerce engines, cloud-based accounting systems, and marketing automation servers used to distribute transactional emails and automated newsletters.

7. Data Security & Retention Policies

We employ rigorous, industry-standard administrative, technical, and physical safeguards to lock down your personal data:

  • Server Safeguards: Our web storefront operates on secure, modern hosting frameworks utilizing SSL encryption to secure data in transit. Payment gateways handle financial credentials directly on encrypted payment screens.

  • Access Control: Omnichannel customer data is restricted to authorized personnel in our retail management, marketing, and accounting departments who require the details to serve you.

  • Data Retention Limits: We retain your personal data only as long as your customer account remains active, or as required by Malaysian corporate tax and auditing laws. For historical paper records and inactive database profiles, we maintain them in a secure offline archive file to prevent digital data leaks while protecting historic purchase verifications.

8. Your Legal Rights Under PDPA 2010

Under the Malaysian Personal Data Protection Act 2010, you hold complete control over your personal data. You are entitled to the following rights:

  • Right to Access: You may request a copy of your unified customer profile data held in our systems.

  • Right to Rectify: You have the right to correct any inaccurate, incomplete, or outdated personal data in our database at any time.

  • Right to Withdraw Consent: You can opt-out of marketing communications, email automation flows, or SMS newsletters by clicking the "Unsubscribe" link at the bottom of any campaign or by notifying our support desk.

  • Right to Restrict Processing: You may request that we temporarily or permanently stop processing your personal data, though this may prevent you from utilizing our omnichannel single-login benefits, boutique pickup options, and tracking after-sales lifetime warranty services.

9. Updates to This Policy

Vinstella reserves the right to modify or amend this Privacy Policy at any time to align with system upgrades, security adjustments, or updates to Malaysian statutory laws. Any modifications will be posted publicly to our website's footer and will take effect immediately. We recommend reviewing this page periodically to stay informed about how we safeguard your information.

10. How to Contact Us

If you would like to access, correct, or update your personal data, withdraw your marketing consent, or ask a question regarding our PDPA compliance, please contact our Data Protection Officer:

Thank you for trusting Vinstella with your precious moments. We are committed to protecting your privacy with the same care we use to craft our jewelry.