Effective date: 24 December 2025
Website: thelapeau.com
Brand: La Peau
Business / Legal entity: La Peau Group
Support email: support@thelapeau.com
Business address:
This Privacy Policy explains how La Peau (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or purchase from our website.
1. What personal data we collect
We may collect the following types of information:
A) Information you provide
- Name, email, phone number
- Billing and shipping address
- Order details (items purchased, order history)
- Messages you send to us (support emails, contact form)
- Account information (username, password-stored securely)
B) Payment information
Payments are processed by third-party payment providers. We do not store full payment card details. We may receive limited payment-related information (e.g., payment status, transaction reference).
C) Information collected automatically
- Device and browser information
- IP address, approximate location (city/country)
- Site usage data (pages viewed, clicks)
- Cookies and similar technologies
2. Why we collect and use your data
We may collect, process, use, store, and disclose your personal data for purposes including, but not limited to, the following:
- to process, manage, fulfill, and deliver your orders, purchases, returns, refunds, and related transactions;
- to communicate with you regarding your orders, account activities, shipping updates, customer service inquiries, technical notices, and other operational or administrative matters relating to your use of the Site;
- to provide, maintain, and manage your account functionality, user authentication, and access to features or services available through the Site;
- to operate, evaluate, improve, personalize, and enhance our website, products, services, systems, marketing activities, and overall customer experience;
- to detect, investigate, prevent, mitigate, or address fraud, unauthorized activities, security incidents, violations of our policies, or any unlawful or potentially harmful conduct affecting the Site, our business, or our users; and
- subject to your consent where required under applicable law, to send you marketing communications, promotional materials, newsletters, product updates, special offers, and other information relating to our products, services, or events. You may opt out of receiving such marketing communications at any time by using the unsubscribe mechanism included in our communications or by contacting us directly.
3. Cookies & analytics
We use cookies to make the Site work properly and to understand how it is used.
Depending on your setup, we may use services like:
- Website analytics (e.g., Google Analytics)
- Advertising/retargeting pixels
4. Who we share your data with
We share personal data only as needed to run the business, such as with:
- Payment processors
- Shipping/courier companies
- Website hosting and security providers
- Email/SMS service providers (if you use them)
- Analytics and advertising providers (if enabled)
We do not sell your personal data.
5. International transfers
Your personal data may be transferred to, stored, processed, transmitted, or accessed in jurisdictions outside Malaysia where our affiliates, related companies, business partners, service providers, hosting providers, cloud infrastructure providers, payment processors, logistics providers, analytics providers, marketing platforms, customer support providers, or other third-party vendors operate or maintain facilities.
Such cross-border transfers may occur for purposes including, but not limited to, order fulfillment, payment processing, customer support, website hosting, data storage, analytics, fraud prevention, security monitoring, marketing communications, technical maintenance, and operational administration of the Site and our services.
By accessing or using our website and services, you acknowledge and understand that your personal data may be transferred to countries or jurisdictions that may have data protection laws differing from those in Malaysia. In certain circumstances, governmental authorities, courts, regulatory agencies, or law enforcement bodies in those jurisdictions may be entitled to access your personal data in accordance with their local laws.
Where we transfer personal data internationally, we will take reasonable and appropriate measures designed to ensure that such information remains protected in accordance with applicable data protection laws, this Privacy Policy, and commercially reasonable security standards. Such measures may include contractual safeguards, restricted access controls, encryption practices where appropriate, internal data protection policies, and working only with third parties that are contractually required to maintain reasonable standards of confidentiality, privacy, and data security.
However, while we take reasonable steps to safeguard your personal data during international transfers and processing, no method of electronic transmission, storage, or international data transfer can be guaranteed to be completely secure or risk-free. To the fullest extent permitted under applicable law, we disclaim liability for unauthorized access, loss, misuse, alteration, disclosure, or destruction of personal data arising from circumstances beyond our reasonable control.
6. Data retention
We retain your personal data only for as long as is reasonably necessary to fulfill the purposes for which such information was collected, including for the purposes of processing and fulfilling orders, providing customer support and after-sales services, maintaining your account, facilitating transactions, and operating our business and website.
Your personal data may also be retained for such additional periods as may be necessary or permitted under applicable laws, regulations, contractual obligations, industry practices, or legitimate business interests, including but not limited to:
- complying with legal, tax, accounting, audit, regulatory, and reporting requirements;
- maintaining appropriate business and transactional records;
- detecting, investigating, preventing, or addressing fraud, security incidents, unauthorized activities, or unlawful conduct;
- enforcing our Terms & Conditions, policies, contractual rights, and legal remedies;
- resolving disputes, claims, complaints, or legal proceedings;
- protecting the rights, property, safety, and security of La Peau, our affiliates, service providers, customers, or other third parties; and
- establishing, exercising, or defending legal claims.
The applicable retention period may vary depending on the nature of the personal data, the purpose for which it was collected, the sensitivity of the information, the existence of any ongoing legal or operational requirements, and applicable statutory limitation periods.
Once personal data is no longer required for the purposes described above, we may delete, destroy, anonymize, aggregate, archive, or otherwise dispose of such information in accordance with applicable laws, internal retention policies, and commercially reasonable data management practices.
Notwithstanding the foregoing, residual copies of personal data may remain in backup systems, archival records, disaster recovery systems, logs, or technical environments for a limited period of time where deletion is not immediately practicable, subject to reasonable security and confidentiality safeguards.
7. Security
We take the protection of your personal information seriously and implement reasonable administrative, technical, and organizational measures designed to safeguard your data and provide a secure shopping experience. This includes the use of secure technologies, encrypted communications where applicable, and restricted access to sensitive information.
However, while we strive to protect your information, no method of transmission over the Internet, electronic storage system, or online platform can be guaranteed to be completely secure or free from risk. As a result, we are unable to warrant or guarantee the absolute security, reliability, or uninterrupted availability of our website, servers, payment systems, or communications.
By accessing and using our website, you acknowledge and accept the inherent risks associated with online transactions, digital communications, and internet-based services. You are responsible for maintaining the confidentiality of your account credentials, passwords, and any devices used to access our services. Any activity conducted through your account using your login credentials shall be deemed authorized by you unless otherwise required by applicable law.
To the fullest extent permitted under applicable laws, La Peau shall not be held liable for any unauthorized access, interception, loss, theft, misuse, disclosure, alteration, or destruction of data arising from events, technologies, systems failures, cyberattacks, malicious software, third-party actions, force majeure events, or circumstances beyond our reasonable control.
This limitation includes, but is not limited to, any direct, indirect, incidental, consequential, punitive, or special damages resulting from:
- delays or interruptions in website availability,
- unauthorized access to customer accounts,
- transmission failures,
- security breaches involving third-party service providers,
- payment gateway failures,
- malware, viruses, or other harmful digital elements,
- or temporary unavailability of services, products, or transactions.
While we continuously review and improve our security practices, you acknowledge that the use of any online platform is undertaken at your own discretion and risk.
8. Your rights & choices
You can:
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion (where applicable)
- Opt out of marketing emails (unsubscribe link or email us)
To make a request, contact: about@thelapeau.com
9. Children’s privacy
Our Site is not intended for children under 18. We do not knowingly collect personal data from children.
10. Changes to this Privacy Policy
We may update this policy from time to time. The latest version will be posted with an updated effective date.
11. Contact
If you have questions about this Privacy Policy or your personal data, contact:
support@thelapeau.com