Privacy Policy

LIPIDGROUP SDN. BHD. (“REMDII”, “we”, “us”) operates shop.remdii.my and is committed to protecting your privacy in accordance with the Personal Data Protection Act 2010 (Malaysia) (“PDPA”). This policy explains what data we collect when you browse and shop, how we use it, and your rights.

1. Information we collect

Identity and account. You can browse without an account. When you check out, sign-in is handled by our identity service, IMAAI-ID, using a one-time passcode. We receive a verified account identifier, your email, and any delivery addresses you choose to save.

Order information. The products you order, your delivery address and contact details, and your order history.

Payment information. Payments are processed by our third-party payment provider (iPay88). We do not collect or store your full card details.

Usage information. Collected automatically through cookies and analytics — pages viewed, device and browser type, and similar data.

2. How we use your information

We use your data to process, fulfil, and deliver your orders; to provide your order history and customer support; to operate, secure, and improve the shop and prevent fraud; to send service messages about your orders; and to comply with our legal and tax obligations.

3. Cookies and analytics

We use cookies and analytics tools to operate the shop and understand how it is used. You can control or delete cookies through your browser settings; some features may not work without them.

4. Disclosure and sharing

We do not sell your personal data. We share it only as needed to run the shop: with our identity service (IMAAI-ID), our commerce platform (IMAAI-AC) which processes orders, our payment provider (iPay88), and delivery couriers — each only with the data required to perform their role. We may also disclose data where required by law or to protect our rights.

5. Data retention

We keep order and transaction records for as long as required by Malaysian tax and company law. Other personal data is kept only as long as necessary for the purposes above, after which it is securely deleted or anonymised.

6. Security

We apply reasonable technical and organisational measures to protect your data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Your rights under the PDPA

Subject to the PDPA, you may request access to and correction of your personal data and withdraw your consent. Your saved delivery addresses are managed in your IMAAI-ID account. To exercise your rights, contact us using the details below.

8. Children

This shop is not directed at children under 18, and we do not knowingly collect their personal data.

9. International processing

Some service providers (for example cloud hosting) may process data on servers outside Malaysia. Where this happens, we take steps to ensure your data continues to receive an adequate level of protection.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the most recent revision.