Privacy Notice

Meridian Trade Group (M) Sdn. Bhd. (registration no. 202501054499 (1655905-X)) is the organisation responsible for personal information collected through AISHA BEAUTY in Malaysia. Our business address and contact channels appear below.

This notice applies to customers, prospective customers, website visitors and people who contact us. Staff-account information is handled separately for workforce administration and security.

Orders and fulfilment: your name, email address, telephone number, delivery address, order notes, products and quantities, order value, delivery charge, order reference, payment status, refund status, courier, tracking number, dispatch details and order-status history.

Payments: Stripe collects payment-card details in its secure checkout. AISHA BEAUTY does not receive or store your full card number or security code. We receive transaction identifiers, payment status, amount, currency, refund information and limited payment-related details needed to reconcile and support your order.

Enquiries, complaints and returns: your contact details, message, complaint or return reference, order reference, photographs or other evidence you choose to provide, our response and the outcome.

AI Ritual: the preferences and free-text notes you submit to produce a cosmetic routine suggestion. Please do not include health records or other sensitive personal information. Ritual answers are not attached to your order or used for marketing.

Technical and security information: IP-derived rate-limit identifiers, checkout session identifiers, timestamps, error and security events, and staff access records. Raw IP addresses used for Ritual rate limiting are converted into a one-way identifier before storage.

We use order and payment information to take payment, fulfil and track orders, communicate order updates, manage backorders, process cancellations, returns and refunds, prevent duplicate transactions, reconcile payments and maintain business records.

We use enquiry and complaint information to respond, investigate, provide customer care and preserve a history of the issue. We use technical and security information to keep the website reliable, limit abuse, diagnose failures and protect staff and customer records.

We process information where it is needed to provide a service you requested, where you have given consent, where it supports legitimate business administration and security, or where Malaysian law requires or permits us to keep or disclose it. We do not sell personal information and do not use order, enquiry or Ritual information for behavioural advertising.

Stripe processes secure card checkout, payment confirmation and refunds. Lovable Cloud provides website hosting, authentication, database and private file storage. Lovable's transactional email service sends order, dispatch, backorder, refund and staff-notification messages. Lovable AI Gateway processes AI Ritual inputs solely to return the requested suggestion; the configured request instructs the provider not to store model inputs or outputs.

We disclose the delivery name, address, telephone number and necessary order details to the courier selected to deliver your order. The courier name and tracking information are recorded with the order when available.

If you choose to contact or follow us through WhatsApp or Instagram, Meta and the relevant service process that interaction under their own terms and privacy policies. We may also disclose information to professional advisers, regulators, law-enforcement bodies or other parties where required or permitted by law, or to protect legal rights and prevent fraud.

Some providers may process information outside Malaysia. Their own contractual terms and privacy notices govern their processing locations. We disclose only the information reasonably required for the relevant service.

We retain order, payment-reference, delivery, refund, enquiry, complaint, failed-checkout, security, staff activity and claim-evidence records for two years from the later of the relevant transaction, closure of the matter or last recorded activity.

AI Ritual answers are used to generate the response and are not saved in the AISHA BEAUTY customer database. The AI service may keep limited operational records under its own terms. Payment-card credentials remain with Stripe and are retained under Stripe's own requirements.

At the end of the applicable period, records are deleted or anonymised where reasonably practicable. We may retain a record for longer where Malaysian law requires it, a dispute or investigation is continuing, or it is needed to establish, exercise or defend legal rights.

We use access controls, restricted staff permissions, audit records and secure service providers intended to protect personal information. No internet transmission or storage system can be guaranteed completely secure, so please avoid sending unnecessary sensitive information through forms, WhatsApp or order notes.

You may ask whether we hold your personal information and request access to or correction of it. You may withdraw consent or object to a use based on consent, subject to legal and operational limits. You may also raise a privacy complaint through the contact form on this website, WhatsApp +60 12-211 3079 or telephone +60 3-5020 6296. We may need to verify your identity before acting on a request.

You may choose not to provide optional information. Information marked or described as required is needed to complete the relevant order or request; without it, we may be unable to provide that service.

This website is not directed to children, and orders should be placed by an adult with legal capacity to enter into the purchase. External links, including WhatsApp and Instagram, are governed by the destination service's privacy practices.

We may update this notice when our services or legal obligations change. The date above identifies the current version. Material changes apply from publication and do not reduce rights that already apply to information collected earlier.