Privacy Policy
Effective date: 14th September 2026
Borneo Asli respects your privacy. This policy explains how we collect, use, disclose and protect personal information when you visit www.borneoasli.com, create an account, purchase our products or communicate with us.
Borneo Asli is operated by CNP Resources Sdn Bhd, registration number 202401039479, based in Sarawak, Malaysia. We are responsible for the personal information we process for our business.
1. Information we collect
Depending on how you interact with us, we may collect:
Contact details: your name, email address, telephone number, billing address and delivery address.
Account information: customer account details, preferred language and account preferences.
Order information: products purchased, quantities, transaction references, payment status, delivery records and refund details.
Customer-service information: enquiries, feedback, complaints, photographs and information provided for returns or product-quality investigations.
Marketing preferences: whether you wish to receive promotions and any product interests you voluntarily provide.
Technical information: IP address, browser and device information, website activity, and cookie or similar technology identifiers, depending on the services enabled on our website.
Payments are handled through the payment services offered at checkout. Please do not send us full payment-card details, passwords or verification codes through email, WhatsApp or contact forms.
2. Where information comes from
We collect information directly from you when you register, order, complete a form, submit a review or contact us.
We may also receive information from:
EasyStore, which supports our online store and customer accounts.
Payment providers confirming payments, refunds or suspected fraudulent transactions.
Delivery providers supplying shipment updates and delivery confirmations.
Shopee or Lazada when you purchase through our official marketplace stores.
Someone placing an order for you, such as a gift purchaser.
If you provide another person’s information, please ensure you are authorised to do so and direct them to this policy.
3. How we use information
We use personal information to:
Create and manage customer accounts.
Process orders, payments, deliveries, cancellations and refunds.
Respond to enquiries, suggestions and complaints.
Investigate product-quality concerns and manage product recalls.
Maintain transaction, accounting and business records.
Protect our customers and business against fraud and misuse.
Understand customer feedback and improve our products and services.
Send promotional communications where you have chosen to receive them.
Meet applicable legal obligations and respond to lawful requests.
Where practical, we use aggregated information that does not identify individual customers when reviewing sales trends and product demand.
We will explain any materially different purpose and obtain consent where required before using information for that purpose.
4. Required and optional information
Some information is necessary to fulfil your request. For example, we need delivery details to ship an order and contact information to respond to an enquiry.
Required fields will be identified where information is collected. If you do not provide the necessary details, we may be unable to create your account, complete your order or resolve your request.
Marketing subscriptions, optional preferences and public reviews are voluntary. Choosing not to subscribe to marketing will not prevent you from making a purchase.
5. Marketing choices
Account registration and marketing subscriptions are separate choices.
Where you opt in, we may send product news, seasonal offers and promotions through the channels you select. You may withdraw your marketing consent at any time by using the unsubscribe option provided or contacting us.
We may still send necessary service messages, such as order confirmations, delivery updates, account-security notices and product-recall information.
We do not automatically add marketplace customers to our independent marketing lists.
6. Who we share information with
We share relevant information with parties that help us operate our business, including:
EasyStore: store hosting, customer accounts and order management.
Payment providers: [Insert providers used].
Delivery and fulfilment providers: [Insert providers used].
Email, messaging and customer-support providers: [Insert providers used].
Website analytics or advertising providers, if enabled: [Insert providers or state “None”].
Professional advisers, such as accountants or legal advisers, where needed.
Authorities or other parties where disclosure is required or permitted by law.
We limit disclosures to information relevant to the purpose. Service providers are expected to protect information and handle it consistently with their responsibilities.
We do not sell or rent customer personal information.
7. Processing outside Malaysia
Some service providers may store or process personal information outside Malaysia.
Where information is transferred overseas, we will take steps required by applicable Malaysian law to assess the transfer and provide appropriate protection. These may include reviewing the destination’s protections and the provider’s contractual and security arrangements.
You may contact us for information about the overseas processing arrangements relevant to your personal information.
8. Cookies and similar technologies
Our website and its service providers may use cookies or similar technologies to maintain your shopping session, support account access, remember preferences and operate security features.
Cookies and services currently enabled:
Our website uses cookies and similar technologies to support shopping sessions, customer-account access, checkout and security. Some are temporary session cookies; others remain on your device until they expire or are deleted.
You can delete or block cookies through your browser settings. Blocking essential cookies may prevent parts of the website, including login and checkout, from working correctly.
Where optional analytics or advertising technologies require consent, we will obtain it before enabling them.
You can manage cookies through your browser and any cookie controls provided on our website. Blocking essential cookies may affect account access, shopping-bag functions or checkout.
9. Videos and external services
Our website may include videos or links provided by services such as YouTube, WhatsApp, Shopee and Lazada.
When embedded content loads or you interact with an external service, that provider may receive information such as your IP address and browser details. Its own privacy policy also applies.
The use of external services does not remove our responsibility for personal information under our control.
10. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and dispute-resolution requirements.
Order and payment records may need to be retained after an account is closed. Enquiries, marketing records and technical logs are reviewed according to their purpose and our retention schedule.
When information is no longer required, we will securely delete it or anonymise it, subject to necessary backup and record-retention arrangements.
11. Protecting information
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure and alteration.
Access should be limited to authorised personnel and service providers who need the information for their work. No internet service or storage system can be guaranteed completely secure.
If a personal-data breach occurs, we will investigate, take appropriate action and notify the relevant authority and affected individuals where required by law.
12. Your rights and requests
Subject to applicable law and any relevant conditions, you may contact us to:
Request access to your personal information.
Request correction of inaccurate or incomplete information.
Withdraw consent for processing that depends on your consent.
Stop the use of your information for direct marketing.
Request prevention of processing likely to cause unwarranted substantial damage or distress.
Request data portability where applicable.
Ask to close your account or delete information that we no longer need to retain.
Account closure or a deletion request does not necessarily require us to erase records we must retain for lawful purposes.
We may request reasonable information to verify your identity before acting. We will explain any applicable lawful fee, restriction or reason we cannot fully comply, and respond within the period required by law.
Withdrawing consent may affect services that depend on the relevant information. We will explain the consequences where applicable.
13. Children’s information
Our store is intended for people able to make purchases lawfully. Children should use it with a parent’s or guardian’s supervision.
We do not request children’s personal information for marketing. If you believe a child has provided information without appropriate permission, contact us so we can review and address it.
14. Reviews and sensitive information
Reviews submitted for publication may display your chosen name and review content. Avoid including addresses, telephone numbers, order details or other private information in public reviews.
Please do not provide identity documents or medical information unless specifically needed for a legitimate request and requested through an appropriate channel. If sensitive information is necessary, we will explain why and obtain consent where required.
15. Changes to this policy
We may update this policy when our services, practices or legal obligations change. The revised version will show a new effective date.
For material changes, we will provide an appropriate notice and seek fresh consent where required. An update does not automatically authorise unrelated uses of information previously collected.
16. Contact and complaints
For privacy questions or requests, contact:
Privacy Contact — Borneo Asli
Operated by: CNP Resources Sdn Bhd
Company registration number: 202401039479
Email: cnp.resources.sb@gmail.com
Telephone/WhatsApp: [Business number]
Address: Setia Commercial Centre, 1st Floor, Sublot 15826, Jalan Setia Raja, 93350 Kuching, Sarawak, Malaysia.
If you are dissatisfied with our response, you may contact Malaysia’s Department of Personal Data Protection through www.pdp.gov.my.