Privacy Policy

Last Updated: 17 August 2026

At ZS Vital, we respect your privacy and are committed to protecting the personal data that you provide to us.

This Privacy Policy explains how we collect, use, process, disclose, store and protect your personal data when you visit www.zsvital.com, create an account, communicate with us or purchase products through our Website.

This Privacy Policy should be read together with our Terms & Conditions and any other applicable notices provided on the Website.

For the purposes of this Privacy Policy, “ZS Vital”, “we”, “us” and “our” refer to [FULL REGISTERED COMPANY NAME].

1. About Us

The Website is operated by:

Company Name: [FULL REGISTERED COMPANY NAME]
Business Registration No.: [SSM REGISTRATION NUMBER]
Business Address: [REGISTERED / BUSINESS ADDRESS]
Email: [CUSTOMER SERVICE / PRIVACY EMAIL]
Telephone / WhatsApp: [CONTACT NUMBER]
Website: www.zsvital.com

2. Personal Data We May Collect

Depending on how you interact with us, we may collect personal data including:

Personal Identification Information

  • full name;
  • username or account name;
  • billing name; and
  • other identification information voluntarily provided by you.

Contact Information

  • email address;
  • telephone or mobile number;
  • billing address;
  • delivery or shipping address; and
  • other contact details.

Order and Transaction Information

When you purchase from us, we may collect information relating to:

  • products purchased;
  • quantity ordered;
  • order date;
  • order number;
  • order status;
  • billing information;
  • shipping information;
  • payment status;
  • transaction reference;
  • discounts or promotional codes used;
  • refunds, returns or replacements; and
  • communication relating to your order.

Payment Information

Payments made through our Website may be processed by independent payment gateway providers.

Depending on the payment method selected, information processed may include:

  • payment method;
  • transaction reference;
  • payment status;
  • bank or payment provider information; and
  • other information necessary to complete or verify payment.

Where payment information is entered directly into a third-party payment gateway, ZS Vital may not receive or store your complete debit card or credit card details.

Payment providers may process your information according to their own privacy policies and security standards.

3. Information Collected Automatically

When you visit our Website, certain technical information may be collected automatically.

This may include:

  • Internet Protocol (IP) address;
  • browser type;
  • operating system;
  • device type;
  • referring website;
  • pages viewed;
  • date and time of access;
  • session information;
  • interaction with Website features;
  • approximate location derived from IP information; and
  • cookies or similar technologies.

This information may be used to operate, secure and improve the Website and understand how visitors interact with our services.

4. Customer Accounts

If you create an account on our Website, we may store information such as:

  • your name;
  • username;
  • email address;
  • billing address;
  • shipping address;
  • telephone number;
  • account preferences; and
  • order history.

This information may be used to make future purchases and account management more convenient.

You are responsible for keeping your login details confidential.

5. How We Collect Personal Data

We may collect personal data when you:

  • visit or browse our Website;
  • create or update a customer account;
  • purchase a product;
  • complete the checkout process;
  • submit a form;
  • subscribe to communications;
  • contact us through email, WhatsApp, telephone or another communication channel;
  • participate in a promotion or campaign;
  • submit feedback, enquiries or complaints;
  • request a refund, return or replacement; or
  • otherwise voluntarily provide information to us.

We may also receive information from service providers assisting us with payment processing, website hosting, order fulfilment, delivery, analytics or other business functions.

6. Purposes for Processing Your Personal Data

We may process your personal data for purposes including:

  • processing and confirming orders;
  • processing payments;
  • arranging product delivery;
  • communicating order status;
  • providing customer service;
  • managing customer accounts;
  • processing returns, refunds, replacements and complaints;
  • verifying transactions;
  • detecting and preventing fraud;
  • administering promotions or discount programmes;
  • responding to enquiries;
  • improving our products and Website;
  • analysing Website usage and performance;
  • maintaining Website security;
  • maintaining business and transaction records;
  • complying with legal, regulatory and accounting obligations;
  • enforcing our Terms & Conditions;
  • protecting the rights, property and safety of ZS Vital, customers and third parties; and
  • carrying out other purposes reasonably connected to the above.

7. Marketing Communications

Where permitted by applicable law and where required consent has been obtained, we may use your contact information to send you communications regarding:

  • ZS Vital products;
  • promotions;
  • special offers;
  • product launches;
  • educational information;
  • campaigns;
  • events; and
  • other relevant updates.

You may opt out of marketing communications at any time by:

  • using the unsubscribe function provided in the relevant communication;
  • contacting us at [CUSTOMER SERVICE / PRIVACY EMAIL]; or
  • contacting us through [CONTACT NUMBER / WHATSAPP].

Opting out of marketing communications will not affect transactional communications necessary to process or manage your orders.

8. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

Cookies are small files stored on your device that assist with Website operation and functionality.

Cookies may be used for purposes including:

  • keeping products in your shopping cart;
  • maintaining login sessions;
  • remembering customer preferences;
  • improving Website functionality;
  • analysing Website traffic;
  • measuring Website performance;
  • detecting security threats;
  • preventing fraud; and
  • supporting advertising or marketing functions where applicable.

Some cookies may be essential for the Website and WooCommerce store to function correctly.

Other cookies, including analytics or marketing cookies, may depend on the tools and services implemented on the Website.

You may control or delete cookies through your browser settings. However, disabling certain cookies may affect Website functionality.

9. WooCommerce

Our Website may use WooCommerce to operate our online store.

When you interact with our online store, information may be collected and processed to:

  • display products;
  • maintain your shopping cart;
  • process checkout;
  • create customer accounts;
  • manage orders;
  • calculate shipping;
  • process refunds;
  • maintain transaction records; and
  • support store administration.

Information stored by the Website may include customer account information, order information, billing details, shipping information and transaction-related information.

10. Payment Gateway Providers

We may share necessary information with payment gateway providers to process payments and manage transactions.

Information shared may include:

  • your name;
  • billing details;
  • contact information;
  • order amount;
  • transaction information;
  • payment method; and
  • other information required to authorise or verify payment.

Payment gateway providers operate under their respective privacy and security policies.

We recommend reviewing the privacy policy of the payment provider made available during checkout.

11. Shipping and Courier Providers

To fulfil your order, we may disclose necessary information to courier, logistics or delivery service providers.

This may include:

  • customer name;
  • delivery address;
  • telephone number;
  • order reference;
  • package details; and
  • other information reasonably necessary to deliver and track your order.

These service providers may process this information solely for purposes connected with order fulfilment and delivery, subject to their own legal obligations.

12. Service Providers

We may engage third-party service providers to assist with the operation of our business.

These may include providers of:

  • website hosting;
  • website development;
  • WooCommerce services;
  • payment processing;
  • shipping and logistics;
  • email communications;
  • cloud storage;
  • cybersecurity;
  • analytics;
  • marketing services;
  • customer support;
  • accounting;
  • professional advisory services; and
  • other technical or operational services.

Where personal data is provided to service providers, we will take reasonable steps to ensure that it is used only for appropriate purposes and handled in accordance with applicable requirements.

13. Analytics

We may use Website analytics tools to understand how visitors use our Website.

These services may collect information including:

  • IP address;
  • browser;
  • device information;
  • Website activity;
  • pages visited;
  • referral source;
  • session duration; and
  • interaction with Website features.

Analytics information helps us improve Website performance, usability and customer experience.

Where required, analytics technologies will be subject to applicable cookie or consent controls.

14. Disclosure of Personal Data

We do not sell your personal data to third parties.

However, personal data may be disclosed where reasonably necessary to:

  • payment processors;
  • financial institutions;
  • courier and logistics companies;
  • Website and hosting providers;
  • professional advisers;
  • contractors and authorised service providers;
  • regulatory authorities;
  • government agencies;
  • law enforcement agencies;
  • courts or tribunals; or
  • other parties where disclosure is required or permitted by applicable law.

We may also disclose information where reasonably necessary to prevent fraud, enforce our rights, protect customers or investigate suspected unlawful activity.

15. Business Transfers

If ZS Vital or the business operating the Website undergoes a merger, acquisition, restructuring, sale, transfer of business or similar corporate transaction, personal data may form part of the assets transferred.

Where applicable, reasonable steps will be taken to ensure that personal data continues to receive appropriate protection.

16. Retention of Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy legal, regulatory, accounting, taxation, operational or dispute-resolution requirements.

Retention periods may vary depending on the type of information.

For example, order and transaction information may need to be retained for accounting, tax, warranty, consumer protection or legal purposes even after the transaction has been completed.

When personal data is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable legal requirements.

17. Protection and Security of Personal Data

We take reasonable organisational and technical measures to protect personal data against:

  • unauthorised access;
  • misuse;
  • loss;
  • alteration;
  • disclosure;
  • destruction; and
  • other unauthorised processing.

Security measures may include:

  • access controls;
  • password protection;
  • encrypted connections;
  • security monitoring;
  • restricted administrative access;
  • backups;
  • server and Website security controls; and
  • other measures reasonably appropriate to the nature of the information.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

18. Personal Data Breaches

Where we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable Malaysian data protection requirements.

Where required by law, the relevant regulatory authority and affected individuals may be notified.

19. Cross-Border Processing

Some technology, hosting, cloud, payment, analytics or service providers used by us may process or store data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that such transfer is carried out in accordance with applicable Malaysian personal data protection requirements.

20. Your Rights

Subject to applicable law, you may have rights in relation to your personal data, including the right to:

  • request access to personal data held about you;
  • request correction of inaccurate, incomplete or outdated personal data;
  • withdraw consent where processing is based on consent;
  • request information concerning the processing of your personal data;
  • object to or opt out of direct marketing communications; and
  • exercise other rights available under applicable Malaysian data protection law.

Certain requests may be subject to legal limitations or exemptions.

We may also need to verify your identity before processing a request relating to personal data.

21. Access and Correction Requests

If you wish to request access to or correction of your personal data, please contact:

Email: [CUSTOMER SERVICE / PRIVACY EMAIL]

Please provide sufficient details for us to identify you and understand your request.

We may request additional information where reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.

22. Withdrawal of Consent

Where we rely on your consent to process personal data, you may withdraw your consent by contacting us.

Withdrawal of consent will not affect processing already carried out lawfully before withdrawal.

Please note that withdrawing consent for information necessary to process orders or provide requested services may affect our ability to provide those services.

23. Data Relating to Health Enquiries

If you voluntarily provide information concerning your health, medical condition, fertility, reproductive health, medication or other sensitive matters when communicating with us, such information may constitute sensitive personal data.

Please provide health-related information only where reasonably necessary.

Where such information is processed, we will handle it with additional care and in accordance with applicable legal requirements.

ZS Vital customer service communications are not a substitute for professional medical consultation, diagnosis or treatment.

24. Children’s Personal Data

Our Website and products are not intended to knowingly collect personal data directly from children without appropriate parental or guardian involvement where required.

If you believe that personal data relating to a child has been submitted to us improperly, please contact us.

We will review the matter and take appropriate action where necessary.

25. Third-Party Websites

Our Website may contain links to third-party websites, social media platforms or external services.

This Privacy Policy applies only to ZS Vital and our Website.

We are not responsible for the privacy practices or content of independent third-party websites.

We encourage users to review the applicable privacy policies before providing personal information to external services.

26. Social Media

If you communicate or interact with ZS Vital through social media platforms, information may also be processed by the relevant social media provider according to its own terms and privacy policy.

Information that you make publicly available through social media may be visible to other users.

27. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • applicable laws or regulations;
  • Website functionality;
  • WooCommerce configuration;
  • payment providers;
  • technology;
  • business practices; or
  • the way we process personal data.

The latest version will be published on www.zsvital.com together with the relevant updated date.

We encourage users to review this Privacy Policy periodically.

28. Governing Law

This Privacy Policy shall be governed by the laws of Malaysia, including applicable personal data protection legislation.

29. Contact Us

If you have questions, concerns or requests relating to your personal data or this Privacy Policy, please contact:

[FULL REGISTERED COMPANY NAME]
[BUSINESS ADDRESS]

Email: [CUSTOMER SERVICE / PRIVACY EMAIL]
Telephone / WhatsApp: [CONTACT NUMBER]
Website: www.zsvital.com