Privacy Policy

1. Introduction

TJean ("we", "our", "us" or "TJean") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, mobile app (if any), purchase products, or communicate with us. This policy applies to all personal information collected through TJean's standalone website, email, SMS, referral program, and membership program.

This Privacy Policy complies with the following legal frameworks: Malaysia's Personal Data Protection Act 2010 (PDPA), EU General Data Protection Regulation (GDPR), US California Consumer Privacy Act (CCPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable data protection laws.

By using our website or engaging in any transaction with us, you agree to the data practices described in this Privacy Policy. If you do not agree, please stop using our website.

2. Personal Information We Collect

We collect different types of personal information depending on how you interact with us and your location.

2.1 Information You Provide

When you create an account, make a purchase, subscribe to email lists, opt into SMS marketing, join our referral program or membership program, we collect information you provide, including but not limited to:

• Basic contact information (name, email address, phone number)
• Shipping and billing addresses
• Account credentials (username, password, security question answers)
• Transaction information (products browsed, added to cart or purchased, order history, return/exchange records)
• Payment information (we process payments via PayPal and do not store your credit card information directly)
• Communications data (your communications with us via customer service email, live chat, or other channels, feedback, survey responses)
• Refer-a-friend information (if you participate in our referral program, we collect the referred person's information)
• Membership preferences (membership tier, points, redemption history)
• Special information (if you subscribe to SMS marketing, we collect your phone number and consent record)

2.2 Information We Automatically Collect

When you visit our website or use our services, we automatically collect the following technical and behavioral information:

• Network information (your IP address, ISP, browser type and version, operating system and platform)
• Access data (pages you visit, time and date of visit, time spent on each page, search keywords, referring and exit URLs)
• Device information (device type, device ID, unique identifiers for mobile devices, OS version)
• Cookies and tracking technology data (we use Cookies to save login status, cart contents, and user preferences; web beacons and pixels to analyze site usage; third parties such as Google and Facebook may also set Cookies for analytics and advertising)
• Behavioral data (how you interact with the site, click paths, shopping habits)

You can refuse Cookies via your browser settings or configure them on our privacy settings page, but some website features may not work properly.

2.3 Information from Third Parties

We may collect additional information about you from the following sources:

• Payment processor PayPal (transaction information and account verification data)
• Logistics providers (shipping address verification, delivery status)
• Analytics and marketing providers (usage data collected by Google Analytics, Facebook Pixel)
• Social media platforms (if you log in via social media links)
• Refer-a-friend program participants (referrer information)
• Public sources (publicly available information for verification and fraud prevention)

3. How We Use Your Personal Information

We use your personal information for the following purposes:

Provide and Improve Services

• Process and fulfill your orders
• Manage your account
• Provide customer support (via email, phone, or live chat)
• Process returns, exchanges, or warranty claims
• Improve website functionality and user experience
• Develop new products and services
• Make product recommendations

Marketing and Communications

• Send order confirmations and shipping notifications
• Send marketing and promotional emails (only to users who have consented)
• Send SMS marketing messages (only to users who have expressly consented)
• Display personalized ads and targeted marketing
• Recommend relevant products and services
• Manage referral program and membership program rewards

Security and Fraud Prevention

• Detect and prevent fraud, abuse, and malicious activity
• Verify your identity
• Protect the security of our services, network, and users

Legal and Compliance

• Comply with applicable legal obligations (e.g., tax and accounting record retention)
• Respond to lawful requests from law enforcement and government agencies, court orders, or legal processes
• Resolve disputes and enforce our Terms of Service and Privacy Policy

Analytics and Improvement

• Conduct website traffic analysis
• Understand user behavior and preferences
• Improve marketing strategies
• Test and optimize website features
• Generate statistics and service intelligence

Purposes based on your explicit consent 

• Any other processing based on your specific consent.

4. How We Share Your Personal Information

4.1 Service Providers

We share your information with the following third-party service providers to operate our business. These providers only process your data on our instructions and are bound by confidentiality and data processing agreements：

• Payment processor PayPal (payment processing, transaction verification)
• Logistics partners (product delivery, tracking information)
• Website hosting and technical service providers (site maintenance, technical troubleshooting)
• CRM systems and customer service tools (customer support)
• Email marketing providers (sending subscription emails and notifications)
• SMS service providers (sending marketing messages)
• Analytics provider Google (Google Analytics for website usage analysis)
• Ad networks (Facebook Pixel for tracking and targeted advertising)
• Data security and fraud prevention service providers

4.2 Legal Disclosure

We may disclose your personal information in the following circumstances:

• Required by law or lawful requests from government agencies, courts, or law enforcement
• To protect public safety
• To protect our rights, property, or safety
• To prevent fraud or illegal activity

4.3 Business Transfer

If TJean is involved in a merger, acquisition, bankruptcy, liquidation, or asset sale, your personal information may be transferred as part of that transaction. We will notify you of such an event.

4.4 Your Consent

We may share your information with other third parties with your explicit consent.

4.5 Aggregated and Anonymized Data

We may share anonymized or aggregated data that does not identify you personally for marketing, analytics, and business improvement.

4.6 We Do Not Sell Your Personal Information

TJean does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. However, under CCPA and other data protection laws, certain data sharing with ad networks and analytics providers for targeted advertising and analytics may be considered a "sale" or "sharing". If you are a resident of the US, California, or other applicable regions, you have the right to opt out of such data sharing.

5. Cookies and Online Tracking Technologies

We and our service providers use Cookies, web beacons, pixel tags, and other tracking technologies to collect information about your activity on our website and other websites. These technologies are used for:

• Maintaining your login status and shopping cart
• Remembering your preferences
• Analyzing website usage
• Detecting and preventing fraud
• Providing personalized content and targeted advertising
• Improving website functionality

Types of Cookies

• Session Cookies: Used for basic website functionality, deleted when you close your browser
• Persistent Cookies: Used to remember your preferences and login information
• Third-party Cookies: Set by Google Analytics and Facebook Pixel for analytics and ad tracking

You can refuse all Cookies or be alerted when specific Cookies are being sent via your browser settings. However, refusing Cookies may affect the use of some website features.

If you are in the EU or other regions requiring consent for Cookies, we will display a Cookie banner on your first visit, allowing you to accept or reject non-essential Cookies.

5.1 Google Analytics

We use Google Analytics to analyze website traffic and usage. Google may use this data according to its Privacy Policy. You can opt out by:

• Downloading the Google Analytics opt-out browser extension
• Enabling the "Do Not Track" signal in your browser
• For more information: https://policies.google.com/privacy

5.2 Facebook Pixel and Targeted Advertising

We use Facebook Pixel to display targeted ads on Facebook and Instagram. This collects data about your browsing activity. You can manage ad preferences or opt out via your Facebook ad settings.

For more information: https://www.facebook.com/privacy/explanation

5.3 Global Privacy Control (GPC)

If your browser or device sends a Global Privacy Control (GPC) signal, we will automatically treat this as an opt-out of targeted advertising and data sales.

6. Data Security

We use industry-standard administrative, physical, and technical security measures to protect your personal information, including:

• SSL/TLS encryption to protect data transmission
• Secure servers and databases
• Employee access controls and confidentiality agreements
• Regular security audits and vulnerability scans
• Payment information processed by PayPal, which is PCI-DSS compliant

However, no transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you suspect your account has been compromised or information has been accessed without authorization, please contact us immediately at tjeanvip@gmail.com

7. Data Retention

We retain your personal information for periods depending on the type of information and purpose of use:

• Purchase and order data: Retained for 5 years to comply with tax and accounting regulations, then deleted or anonymized.
• Email subscription data: Active subscriber data retained until you unsubscribe, then deleted within 30 days.
• SMS marketing data: Stopped immediately upon opt-out, retention records for compliance up to 2 years.
• Account information: Active accounts retained to provide services; deleted within 30 days of deletion request, unless legal retention required.
• Website usage data and Cookies: Generally retained for 12 months; Google Analytics data automatically deleted per Google's retention policy.
• Referral and membership program data: Retained until program ends or for 3 years to handle rewards and disputes.
• Legal and fraud prevention data: Retained as required by law or to prevent fraud and protect security.

8. International Data Transfers

TJean's servers and certain service providers (e.g., PayPal, Google, Facebook) may be located in Malaysia, the United States, or other countries. This means your personal information may be transferred to, stored on, or processed by servers in these countries. The data protection laws of these countries may differ from those in your country.

By using our website or providing us with information, you consent to such international data transfers. We are committed to taking appropriate security measures to ensure your data is adequately protected. For EU and UK data transfers, we rely on Standard Contractual Clauses or other GDPR-recognized transfer mechanisms. For other regions, we ensure service providers take adequate security measures.

9. Your Privacy Rights

Under applicable data protection laws, you may have the following rights. Rights may vary by region, but we are committed to respecting them to the fullest extent possible:

9.1 Right of Access and Information 

You have the right to request information about all personal information we hold about you, including the purposes of collection, use, and sharing, as well as the categories of data sources and recipients.

9.2 Right to Rectification 

You have the right to request correction of any inaccurate or incomplete personal information we maintain about you.

9.3 Right to Erasure (Right to be Forgotten) 

You have the right to request deletion of your personal information in certain circumstances, such as when you withdraw consent, the information is no longer necessary, or you object. However, we may not be able to delete if legal retention (e.g., tax records) or legitimate defense applies.

9.4 Right to Data Portability

You have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit that information to another controller.

9.5 Right to Object

You have the right to object to our processing of your personal information based on legitimate interests, including objection to marketing and targeted advertising. You can opt out of marketing communications immediately by clicking the "unsubscribe" link in any marketing email.

9.6 Right to Restrict Processing

In certain circumstances (e.g., when you contest the accuracy of information), you have the right to request restriction of processing of your personal information.

9.7 Right to Withdraw Consent

If we process your information based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Object to Automated Decision-Making

You have the right to object to decisions based solely on automated processing (including profiling) that have significant legal or similar effects on you.

9.9 Right to Lodge a Complaint

If you believe we have violated applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority.

9.10 Exercising Your Rights

To exercise any of the above rights, please send a written request to tjeanvip@gmail.com including: the specific right you wish to exercise, your full name and account information, and any specific information supporting your request. We will require identity verification. We will respond within the time period required by applicable law (typically 30-45 days).

10. SMS Marketing and Referral Program

10.1 SMS Marketing

If you opt into our SMS marketing program, you expressly consent to receive marketing messages from us via text message. You can opt out by replying "STOP", "END", "CANCEL", or "UNSUBSCRIBE" to any text message.

10.2 Referral Program

If you participate in our referral program, you may receive discount codes or other rewards. We collect information about the referrer and the referred person.

10.3 Membership Program

If you join our membership program, we collect and maintain your membership tier, point balance, transaction history, and redemption records.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 16, we will take steps to delete it promptly. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately at: tjeanvip@gmail.com.

12. Third-Party Websites and Links

Our website may contain links to third-party websites that we do not own or control. This Privacy Policy applies only to our website. We are not responsible for the privacy practices, security, or content of third-party websites.

13. Payment Information

We process all payments through PayPal. We do not directly store, process, or maintain your credit or debit card numbers. All payment information is provided directly to PayPal, whose data processing is governed by its Privacy Policy. PayPal complies with the Payment Card Industry Data Security Standard (PCI-DSS), managed by brands such as Visa, Mastercard, American Express, and Discover. 

For more information about PayPal's privacy practices, please visit: https://www.paypal.com/webapps/mpp/ua/privacy-full. We use SSL encryption to protect all payment transmissions.

14. Marketing Communication Choices

14.1 Email Communications

You can opt out of marketing emails by clicking the "unsubscribe" link at the bottom of any marketing email. Even if you opt out of marketing emails, we may still send you transactional emails related to your account, orders, or warranty.

14.2 SMS Marketing

We only send SMS marketing messages to users who have expressly consented. You can unsubscribe by replying "STOP", "END", or "CANCEL" to any text message.

14.3 Targeted Advertising Choices

You can manage your targeted advertising preferences by:

• Visiting your Facebook and Google account settings
• Enabling the "Do Not Track" signal in your browser
• Downloading the Digital Advertising Alliance's AppChoices tool
• Using the Network Advertising Initiative's opt-out tool at http://optout.networkadvertising.org

15. Security Notifications and Vulnerability Disclosure

If a security breach affects your personal information, we will notify you as required by applicable law. We will act promptly to limit damage and protect your information.

16. Policy Updates and Changes

We may update this Privacy Policy from time to time. Changes are effective immediately upon posting, and we will update the "Last Updated" date on this page. For material changes, we will notify you by email or via a prominent notice on our website before they become effective.

17. "Do Not Track" Signals

We do not support "Do Not Track" browser signals. However, we support the Global Privacy Control (GPC) signal – if you enable GPC, we will treat it as an opt-out of data sales and targeted advertising.

18. Accessibility and Obtaining This Privacy Policy

If you have a disability and cannot effectively access this Privacy Policy online, please contact us to obtain a copy in an alternative format.

19. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, have concerns about our data practices, or want to report a privacy violation, please contact us at: Email: tjeanvip@gmail.com

20. Privacy Rights by Region

20.1 EU/EEA (GDPR)

If you are a resident of the EU or EEA, the GDPR grants you the rights described in Section 9 of this policy.

20.2 California (CCPA) and other US states

If you are a resident of California or other applicable US states, you have the right to know what data we collect, delete data, and opt out of sale/sharing of data. You have the right to opt out via our privacy choices page.

20.3 Canada (PIPEDA)

If you are a Canadian resident, PIPEDA grants you the right to access, correct, and request deletion of your personal information.

20.4 Malaysia (PDPA)

If you are a Malaysian resident, we comply with the Personal Data Protection Act 2010. You have the right to access, correct, and delete your personal information.

20.5 Other Southeast Asian regions

We comply with all applicable Southeast Asian data protection laws, including Thailand's Personal Data Protection Act, Singapore's Personal Data Protection Act, Vietnam's Law on Information Technology, and the Philippines' Data Privacy Act.

21. Last Updated

Last Updated: April 2025. 

This Privacy Policy is effective as of the date above. Any prior versions of this policy are superseded by this version.