Last updated: 24 October 2026
This Privacy Policy explains how Trinovate Lab Group Sdn. Bhd. (202501011105 / 1612519-X) (“T·Lab”, “we”, “us”) collects, uses and protects your personal data when you visit or buy from tlabhaircare.com, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
What we collect
- Order details: name, phone number, email, billing and delivery address, items bought and order history.
- Payment: payments are handled by our payment provider (CHIP). We don’t see or store your bank login or card details.
- Website use: device and browser information, IP address, pages viewed and cookies (see below).
- Messages: anything you send us by email or WhatsApp.
How we use it
- To process and deliver your order, and send order, payment and tracking updates by WhatsApp and email.
- To give you discounts you’ve earned, such as your first-order discount and personal 20% code.
- To provide customer service, handle returns, refunds and guarantee claims.
- To send product news and offers, only if you’ve agreed. You can opt out anytime by replying STOP on WhatsApp or using the unsubscribe link in emails.
- To improve our website and measure our advertising.
- To meet legal, tax and accounting requirements.
Who we share it with
We share only what’s needed with trusted service providers: our payment provider (CHIP), our logistics partner and couriers (for delivery), our messaging provider (for WhatsApp updates), our website hosting, and analytics and advertising partners such as Meta and Google. We don’t sell your personal data. We may disclose data if required by law.
Cookies and tracking
We use cookies to keep your cart working, remember your preferences, and understand how visitors use our site. We also use the Meta Pixel and Google tools to measure and improve our ads. You can block or delete cookies in your browser settings; some parts of the site, like the cart, may not work without them.
How long we keep it
We keep order records for as long as needed for your orders, guarantees and our legal obligations (generally up to 7 years for accounting records), then delete or anonymise them.
Keeping it safe
Our website uses a secure (HTTPS) connection, and access to customer data is limited to staff and providers who need it.
Your rights
Under the PDPA you can ask to access or correct your personal data, ask us to stop marketing messages, or withdraw your consent. Contact us using the details below and we’ll respond within 21 days.
Changes
We may update this policy from time to time. The latest version is always on this page.
Contact us
Email: trinovatelab@gmail.com · WhatsApp: +60 14-584 5044
Trinovate Lab Group Sdn. Bhd., F-0-10, Kedai PPR Batu Muda, Jalan 1/12, Kampung Batu Muda, 51100 Kuala Lumpur