Privacy policy
Last updated: February 10, 2026
Eltean Incorporated Sdn. Berhad or any of its subsidiaries, affiliates or any related companies or any of its authorised personnel, representatives, appointed distributors, or any other relevant third party (hereinafter referred to as âElteanâ) observes and complies with the Personal Data Protection Act 2010 (âPDPAâ).
Eltean is committed to ensuring that the Personal Data (as defined in Section 4 of the PDPA) disclosed to and obtained by us are protected and used within the scope of consent provided by the Data Subjects and/or as permitted by law.
In this Privacy Policy, the term âweâ, âusâ and âourâ refers to Eltean who is the collector, processor and user of Personal Data (hereinafter, referred to as âData Userâ) and the term âyouâ and âyourâ refers to the Data Subject(s) (as defined below).
This Privacy Policy mainly sets out the manner in which Eltean deals with your Personal Data including the manner in which we collect, process, use, disclose, transfer and store your Personal Data.
Eltean reserves the right to amend, update, revise and/or revoke and republish this Privacy Policy at any time and from time to time. The version of this Privacy Policy and/or any Supplemental Privacy Policy (to be read in conjunction with this Privacy Policy) being published on our website (www.eltean.com) shall be treated as the current version applicable and in force. We strongly advise you as a Data Subject to periodically review our Privacy Policy from time to time to stay informed and updated of the processing, usage, disclosure, transfer and storage of your Personal Data and your rights and protection accorded under the PDPA.
SECTION 1 : APPLICABILITY
1.1 This Privacy Policy (and any subsequent amendments, variations or alterations thereof which may be made and published from time to time) outlines and explains the policies and principles pertaining to the Personal Data that we collect from you (whether in person, online or any other manner whatsoever), as our valued customers, our landlords or tenants, consultants / advisors, vendors, suppliers, service providers, authorized distributors or any such party which Eltean deals, transacts, corresponds and in any way conducts its business with (collectively referred to as âPartiesâ) and employees of Parties and/or any such person whose Personal Data is required to be collected by us by reason of, or incidental to, the provision of our products and services or in the ordinary course of our business (collectively, referred to as âData Subject(s)â).
1.2 This Privacy Policy applies to our day-to-day business operations including visitors to our website (https://www.dermally.com.my) (âWebsiteâ), our official social media pages on Facebook (www.facebook.com/dermally.my) and Instagram (www.instagram.com/dermally.my) and our Dermally Malaysia official e-stores hosted on, including but not limited to, Shopee Malaysia (www.shopee.com.my/dermally.my), Lazada Malaysia and TikTok (collectively referred to as âEltean Websitesâ).
SECTION 2 : PRIVACY POLICY TO CONSTITUTE WRITTEN NOTICE TO DATA SUBJECTS
2.1 This Privacy Policy shall constitute written notice to you, as a Data Subject, in accordance with the Data Protection Principles under the PDPA.
2.2 By your dealings, interactions, communications, correspondence, transactions and/or any form of dealing with us in the usual course of our business or otherwise, usage and continuous usage of our Eltean Websites and/or by submitting your Personal Data to us, you have agreed to be bound by this Privacy Policy whereby we shall have the right to process your Personal Data in accordance with this Privacy Policy.
2.3 Eltean reserves the right to revise and/or amend this Privacy Policy at any time and from time to time. The latest and applicable version of this Privacy Policy and/or any supplemental Privacy Policy shall be posted at our Website. Kindly review this Privacy Policy on a periodic basis to stay informed of your rights, your consent status, the Personal Data we collect or have collected from you, requests for revision / amendment of your Personal Data retained by us or any other issues or enquiries you would like to make in relation of your Personal Data that is collected, processed and retained by us.
SECTION 3 : CONSENT TO THE COLLECTION OF PERSONAL DATA
3.1 We collect your Personal Data when you interact with us via online or offline channels including, but not limited to, your name, contact number, e-mail address, residential address, age, skin, hair and scalp conditions, etc.
3.2 In this regard, by providing, informing and/or submitting your Personal Data to us by any means, whether written or otherwise, and by using and continuing to use our Website, it is deemed that you have given your consent for us to use and process your Personal Data in accordance with this Privacy Policy. Your failure, refusal or omission to consent to the above may result in our inability to provide our goods and services to you, wherever applicable.
3.3 For any other individual whose data is required to be collected by us to facilitate various business transactions, contractual arrangements, engagements, etc., it is deemed that you have consented to our collection of you Personal Data as far as is necessary to enable the performance of such business transactions, contractual arrangements, engagements, etc. between Eltean and you.
3.4 You may, at any time, choose not to provide your Personal Data to us, or revoke your prior consent for us to process or use your Personal Data by writing to us at the address shown at Clause [*] below. In any event, you are deemed to be aware that your failure to consent to our processing and usage of your Personal Data may result in our inability to provide you with our goods and services, or properly perform any business transactions, contractual arrangements, engagements in the usual manner.
SECTION 4 - METHOD & EXTENT OF COLLECTION OF PERSONAL DATA
4.1 We collect your Personal Data by means of in-person interaction data collection or your digital interactions with us via any of Eltean Websites and third-party software utilized during your participation in any sales and marketing offline events organized by us.
4.2 We generally collect the following information, including but not limited to,: -
a) Contact Information: Name, Contact Number, E-mail Address;
b) Order Information: Billing Address, Shipping Address, Payment Information;
c) Skin / Scalp Type Information;
c) Purchase Data: Product Purchased, Quantity Purchased, Date of Purchase
SECTION 5 - PURPOSE OF COLLECTION PERSONAL DATA
5.1 We collect your Personal Data for primarily for the purposes, including but not limited, to the following (hereinafter, referred to as âPurposesâ): -
a) for individual and/or corporate customers, processing your Account Opening Application Form and Credit Application Form to purchase any of Elteanâs product(s) or service(s);
b) promotional and marketing of Elteanâs product(s) or service(s) and sending any advertising and/or promotional material to you via telephone calls, emails or instantaneous communication message (including but not limited to Short Message Service (SMS), WhatsApp, Facebook Messenger, Viber, Line, etc.), where you have expressly consented to the receipt of such materials.
c) marketing of product(s)or service(s) and sending any advertising and/or promotional material to you via telephone calls, emails or short message services if you have expressly provided your consent for us to do so;
d) notifying you of special offers, promotions, current and future product launches, special invitations that we consider might be of interest to you and for similar updates and promotion reasons via newsletters, electronic direct mailers, direct mailers, etc;
e) for individuals who have previously shared any personal information through third-party software, such as your hair and scalp condition, skin condition, to continue to progressively monitor your skin, hair and scalp condition when you engage in our Services, including but not limited to, skin, hair and scalp assessments, from time to time;
f) performing analysis of your skin, hair, scalp and other characteristics for customer relationship management purposes, such as providing a suitable range of products for your personal needs; and
g) any other purpose in connection with Elteanâs operation, administration, business development and the enhancement of its business.
SECTION 6 - DISCLOSURE OF PERSONAL DATA
6.1 In conducting our business, we will/may need to use, process, disclose and/or transfer your Personal Data to our third-party service providers, agents and/or our affiliates or related corporations, and/or other third-parties, which may be located in Malaysia or outside of Malaysia, for one or more of the above-stated Purposes. Such third party service providers, agents and/or affiliates or related corporations and/or other third parties would be processing your Personal Data either on our behalf or otherwise, for one or more of the above-stated Purposes. We endeavour to ensure that the third parties and our affiliates keep your Personal Data secure from unauthorised access, collection, use, disclosure, processing or similar risks and retain your Personal Data only for as long as your Personal Data is needed for the above-mentioned Purposes. Such third parties include, without limitation:
a) our subsidiaries, affiliates and related corporations;
b) contractors, agents, service providers and other third parties we use to support our business. These include but are not limited to those parties which provide administrative or other services to us such as mailing houses, logistics service providers, financial services providers, advertising and marketing partners, telecommunication companies, information technology companies, and data centres;
c) governmental or regulatory authorities having jurisdiction over Eltean;
d) a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Elteanâs assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which Personal Data held by Eltean is among the assets
transferred; or to a counterparty in a business asset transaction that Eltean or any of its affiliates or related corporations is involved in; and
e) third parties to whom disclosure by us is for one or more of the Purposes and such third parties would in turn be collecting and processing your Personal Data for one or more of the Purposes.
6.2 We may share information relating to Data Subject(s), including statistical and demographic information, about and information about their use of the Services with advertising partners and third party suppliers of advertisements, remarketing, and/or other programming.
6.3 For the avoidance of doubt, in the event that privacy laws or other applicable laws in Malaysia (collectively, referred to as âPrivacy Lawsâ) permit an organisation such as ours to collect, use or disclose your Personal Data without your consent, such permission granted by such Privacy Laws shall prevail and continue to apply. Consistent with the foregoing and subject to applicable law, we may use your Personal Data for recognized legal grounds including to comply with our legal obligations, to perform our contract with you, to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights, or where necessary in connection with a legal claim.
6.4 Third parties may unlawfully intercept or access Personal Data transmitted to or contained on the site, technologies may malfunction or not work as anticipated, or someone might access, abuse or misuse information through no fault of ours. We will nevertheless deploy reasonable security arrangements to protect your Personal Data as required by the Privacy Laws; however there can inevitably be no guarantee of absolute security such as but not limited to when unauthorised disclosure arises from malicious and sophisticated hacking by malcontents through no fault of ours.
6.5 Data User(s) (including any employees, agents, representatives, or any other person acting for the Data User(s) or on such Data Userâs behalf) in possession of a Data Subject(s)â or another Data Userâs Personal Data through the use of or interaction with Eltean on the Website (hereinafter, the âReceiving Partyâ) hereby agree that, they will
(i) comply with all applicable Privacy Laws with respect to any such data, including any collection, processing, storage or transfer of such data;
(ii) allow Eltean or the Data Subject or the Data User whose Personal Data the Receiving Party has collected (the âDisclosing Partyâ) to remove his or her data so collected from the Receiving Partyâs database; and
(iii) allow Eltean or the Disclosing Party to review what information has been collected about them by the Receiving Party, in each case of (ii) and (iii) above, in compliance with and where required by applicable laws.
SECTION 7 - SECURITY AND PROTECTION OF PERSONAL DATA
7.1 All reasonable and practicable efforts and steps are taken to ensure that your Personal Data held by us are kept and protected to our best ability against data theft, unauthorized access, use, copying, disclosure or modification.
7.2 We maintain strict policies and guidelines regarding our internal personnelâs authority to access records of your Personal Data. All our personnel are bound by a commitment of confidentiality to ensure that your Personal Data is being kept and maintained private and confidential, save and except for usage and disclosure of your Personal Data in accordance with the Privacy Policy.
SECTION 8 - RETENTION OF PERSONAL DATA
We will retain Personal Data in accordance with the Privacy Laws and/or other applicable laws. That is, we will destroy or anonymize your Personal Data when we have reasonably determined that (i) the purpose for which that Personal Data was collected is no longer being served by the retention of such Personal Data; (ii) retention is no longer necessary for any legal or business purposes; and (iii) no other legitimate interests warrant further retention of such Personal Data. If you cease using the Website, we may continue storing, using and/or disclosing your Personal Data in accordance with this Privacy Policy and our obligations under the Privacy Laws. Subject to applicable law, we may securely dispose of your Personal Data without prior notice to you.
SECTION 9 - REVOCATION OF CONSENT TO PROCESS, USE, DISCLOSE & RETAIN PERSONAL DATA & REQUEST TO UPDATE YOUR PERSONAL DATA PROVIDED TO US
9.1 Revocation of Consent You may withdraw your consent for the collection, use and/or disclosure and/or request deletion of your Personal Data in our possession or under our control by sending an email to our Personal Data Protection Officer at dermally@eltean.com, and we will process such requests in accordance with this Privacy Policy and our obligations under the Privacy Laws and other applicable law. However, your withdrawal of consent may mean that we will not be able to continue providing the Services to you and we may need to terminate your existing relationship and/or the contract you have with us.
9.2 Requesting Access to or Correction of Personal Data
a) You may submit your written request by sending an email to our Personal Data Protection Officer at dermally@eltean.com stating your intention to request access to or correction of your Personal Data that have been submitted to us in the course of your usage of our Services.
b) We reserve the right to refuse to correct your Personal Data in accordance with the provisions as set out in Privacy Laws, where they require and/or entitle an organisation to refuse to correct Personal Data in stated circumstances.
SECTION 10 - UPDATES & AMENDMENTS TO THIS PRIVACY POLICY
The Privacy Policy found on our Website shall be regarded as the latest, prevailing version of our privacy practices. Any updates or amendments to this Privacy Policy shall be uploaded on our Website to take effect.
If you have any questions or concerns regarding our Privacy Policy, you are welcome to contact us at dermally@eltean.com.
