Privacy Policy

This Privacy Policy explains how Isle of Moss handles your personal data when you visit theisleofmoss.com, place an order, or contact us. We keep it plain and honest: we only collect what we need to make and deliver your sea moss gel, and to run a small, trustworthy shop. We serve customers in Malaysia and Singapore, and we aim to meet the practical requirements of the Malaysian Personal Data Protection Act (PDPA 2010) and the Singapore Personal Data Protection Act (PDPA 2012).

Who we are

Isle of Moss is a small e-commerce brand selling wildcrafted sea moss gel, made fresh to order. For the purposes of data protection law, we are the party responsible for your personal data (the “data controller”). You can reach us any time at isleofmoss@gmail.com or by WhatsApp using the number in our site footer.

What data we collect

You can browse and check out without creating an account. The data we collect is limited to what a purchase and good support require:

• Order and delivery details — your name, email address, phone number, and shipping address.
• Order data — the items you bought, order value, subscription cadence (weekly, biweekly, or monthly if you choose one), and order history.
• Payment status — confirmation that a payment succeeded or failed, handled through our payment provider. We do not receive or store full card numbers.
• Newsletter and marketing — your email address if you opt in to updates or offers.
• Support messages — the contents of messages you send us by email, WhatsApp, on-site chat, or social media, so we can help you.
• Technical data — basic information your browser sends (such as IP address, device and browser type) and the small amount of storage needed to run the site, like your cart and cookie choice. See our Cookie Policy for details.

How we collect it

We collect data directly from you when you fill in the checkout form, subscribe to our newsletter, or message us by email, WhatsApp, on-site chat, or social media. We also collect a small amount of technical data automatically through cookies and local storage in your browser when you use the site.

Why we use your data

We only use your data for clear, specific reasons, and we tell you the basis for each:

• To fulfil your order — making, packing, and shipping your gel, taking payment, and sending order confirmations and delivery updates. This is necessary to perform our contract with you.
• To provide support — answering your questions and resolving issues. This is in our legitimate interest in running a helpful shop.
• To run and improve the site — keeping the shop secure, working, and reliable. This is in our legitimate interest.
• To send marketing — newsletters, offers, and product news, only where you have opted in. This is based on your consent, which you can withdraw at any time.
• To meet legal obligations — such as keeping tax and transaction records.

Who we share it with

We do not sell your personal data. We share it only with the service providers we rely on to run the shop, and only as far as each needs to do its job:

• HitPay — our payment provider, which securely processes payments (FPX, GrabPay, Touch 'n Go, PayNow SG, and cards as supported), including recurring charges for subscriptions. HitPay handles your card and payment details directly under its own privacy policy.
• Bavimail — our email provider, used to send transactional order and delivery emails (for example, from an address such as orders@theisleofmoss.com).
• Shipping and delivery carriers — who receive your name, address, and phone number to deliver your order.
• Our website hosting and infrastructure providers — who store and serve the site and its data on our behalf.

We may also disclose data if required by law, or to protect our rights, safety, and property.

International transfers

Some of our service providers operate outside Malaysia and Singapore, so your data may be processed overseas. Where that happens, we take reasonable steps to ensure your data continues to be protected to a standard consistent with the PDPA. Google Fonts, which the site may use to load typefaces, could expose your IP address to Google as part of serving those fonts.

How long we keep it

We keep personal data only as long as we reasonably need it. Order and transaction records are kept for the period required for accounting, tax, and warranty or dispute purposes (generally up to seven years). Newsletter data is kept until you unsubscribe. Support messages are kept as long as needed to handle your query and any follow-up. When data is no longer needed, we delete or anonymise it.

Security

We take reasonable measures to protect your data, including using reputable providers, encrypted connections (HTTPS), and limiting access to the information we hold. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep your data safe and to act quickly if something goes wrong.

Your rights

Under Malaysian and Singapore data protection law you have the right to ask us to:

• access the personal data we hold about you;
• correct data that is inaccurate or out of date;
• delete data where we no longer have a reason to keep it;
• withdraw your consent to marketing at any time, either by clicking “unsubscribe” in any email or by emailing us.

To exercise any of these rights, email isleofmoss@gmail.com. We may need to verify your identity before we act, and we will respond within a reasonable time.

Children

Our shop is intended for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 13. Purchases should be made by someone aged 18 or over, or with the consent and supervision of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

Cookies

We use a small number of cookies and local storage items to run the cart, remember your cookie choice, and keep the site working. If you allow Analytics in the cookie banner, we also load Google Analytics 4 and our self-hosted PostHog instance so we can understand shop traffic, popular pages, and completed orders. We do not sell this data, and we do not use it for advertising networks. For the full list and how to manage your preferences, see our Cookie Policy.

Changes to this policy

We may update this policy as our shop grows or the law changes. When we do, we will revise the “Last updated” date at the top of this page. If we start using new tools that change how your data is handled — such as analytics or advertising — we will update this policy and our cookie banner first.

Contact

Questions about your privacy or this policy? Email isleofmoss@gmail.com or message us on WhatsApp — we're happy to help.