隐私声明 Privacy Notice
生效日期：2026 年 9 月 12 日 Effective date: 12 September 2026
本网站由 XT GLOBAL ONLINE SDN. BHD.（公司注册号 202601016058 / 1678155-D，以下称「XT WELLNESS」、「我们」）运营。我们承诺依据马来西亚《2010 年个人资料保护法》(PDPA) 保护你的个人资料。使用本网站及我们的服务，即表示你同意本声明。 This website is operated by XT GLOBAL ONLINE SDN. BHD. (Registration No. 202601016058 / 1678155-D, referred to as “XT WELLNESS”, “we” or “us”). We are committed to protecting your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA). By using this site and our services, you agree to this notice.
1. 什么是个人资料 1. What is Personal Data
指任何可直接或间接识别你身份的资料，包括姓名、联系方式、地址等。敏感个人资料（如健康状况）仅在你明确同意或法律允许的情况下处理。 Any data that can identify you directly or indirectly, such as your name, contact details and address. Sensitive personal data (such as health information) is processed only with your explicit consent or where the law allows.
2. 我们收集哪些资料 2. What We Collect
· 你主动提供的：通过 WhatsApp 咨询或下单时提供的姓名、电话、收货地址；订阅新品通知时提供的电邮；咨询时你自愿告知的健康状况与保养需求（仅用于推荐合适的产品）
· 使用网站时产生的：浏览页面等使用记录；Cookie 与类似技术（包括用于衡量与优化广告投放的 Meta Pixel）；设备与浏览器类型
· 来自第三方的：你在 Wellous 官方平台（eStore / WellFam）下单或注册时，由 Wellous 依其隐私声明处理的订单与会员资料
我们不会有意收集 13 岁以下儿童的个人资料。 · Provided by you: your name, phone number and delivery address when you enquire or order via WhatsApp; your email when you subscribe to updates; health conditions and care needs you volunteer during consultation (used only to recommend suitable products)
· Generated on this site: usage records such as pages viewed; cookies and similar technologies, including the Meta Pixel used to measure and improve our advertising; device and browser type
· From third parties: order and membership data processed by Wellous under its own Privacy Notice when you order or register on the official Wellous platform (eStore / WellFam)
We do not knowingly collect personal data from children under 13.
3. 收集目的 3. Purposes of Collection
处理与配送订单；回复咨询并提供产品建议；发送新品与优惠通知（你可随时要求停止）；改善网站与广告投放效果；内部记录；履行法律与监管要求。 Processing and delivering orders; responding to enquiries and recommending products; sending new-arrival and offer updates (you may opt out at any time); improving our site and advertising; internal record keeping; and meeting legal and regulatory requirements.
4. 不提供资料的后果 4. If You Do Not Provide Data
我们可能无法处理你的订单、回复你的咨询，或向你发送产品资讯。 We may be unable to process your order, respond to your enquiry or send you product updates.
5. 披露对象 5. Disclosure
在必要范围内，你的资料可能提供给：Wellous（完成下单、会员注册与产品验证）；快递与物流服务商；支付服务商；我们的会计师、律师等专业顾问；依法要求的政府机构、监管单位或法院。我们不会出售你的个人资料。 Where necessary, your data may be shared with: Wellous (to complete orders, membership registration and product verification); courier and logistics providers; payment providers; our professional advisers such as accountants and lawyers; and government agencies, regulators or courts where required by law. We never sell your personal data.
6. 安全措施 6. Security
我们采取合理的行政与技术措施保护你的资料，防止未经授权的访问、遗失或滥用。 We apply reasonable administrative and technical safeguards to protect your data against unauthorised access, loss or misuse.
7. 查阅与更正 7. Access and Correction
你有权查阅及更正我们持有的你的个人资料。请以电邮书面提出，我们将在收到通知后 7 个工作日内处理。 You may request access to and correction of your personal data held by us. Please write to us by email; we will respond within 7 working days of receiving your notice.
8. 保存期限 8. Retention
资料仅在实现上述目的所需的期间内保存，之后将删除或匿名化处理。 Data is kept only as long as needed for the purposes above, and is then deleted or anonymised.
9. 资料准确性 9. Data Integrity
我们会采取合理步骤，确保所持资料准确、完整并保持更新。 We take reasonable steps to keep the data we hold accurate, complete and up to date.
10. 语言版本 10. Language
本声明备有中英文版本，如有歧义，以英文版为准。 This notice is available in Chinese and English. In case of any conflict, the English version prevails.
下单与会员注册在 Wellous 官方平台完成，同时适用 Wellous 隐私声明： Orders and membership registration are completed on the official Wellous platform, where the Wellous Privacy Notice also applies:
Wellous 隐私声明 · 内容摘要 Wellous Privacy Notice · Summary
· 收集的资料：账户与联系资料（姓名、电邮、电话、地址、付款信息、身份证件）、交易记录、定位（经你允许）、使用记录与 Cookie、设备信息；也可能从合作方等其他来源取得
· 用途：产品配送与营销、处理付款、客户管理、内部记录、履行法律要求、向你发送产品资讯
· 不提供的后果：可能无法提供所需服务或向你更新资讯
· 披露对象：依法要求的执法与政府监管机构、审计师律师等专业顾问、必要的服务商；涉及查案、追税或法庭命令时可依法披露
· 敏感资料与儿童：敏感个人资料仅在明确同意或法律允许时处理；不有意收集 13 岁以下儿童资料
· 安全与保存：采取合理措施保护资料，用途完成后即删除或销毁
· 查阅与更正：提前 7 天书面通知即可查阅、更正资料
· 语言版本：中英文如有冲突，以英文版为准
· Wellous 隐私询问：dpo@wellous.com
以上为方便阅读的摘要，完整内容以下方 PDF 为准。 · Data collected: account and contact details (name, email, phone, address, payment information, ID documents), transaction records, location (with your permission), usage records and cookies, and device data; data may also come from partners and other sources
· Purposes: delivery and marketing, payment processing, customer management, internal records, legal compliance, and sending you product updates
· If not provided: services or updates may not be available to you
· Disclosure: law enforcement, government and regulators where required; professional advisers such as auditors and lawyers; necessary service providers; disclosure may also be made for investigations, tax matters or court orders
· Sensitive data & children: sensitive personal data is processed only with explicit consent or where the law allows; no data is knowingly collected from children under 13
· Security & retention: reasonable safeguards are applied, and data is deleted once its purpose is fulfilled
· Access & correction: available upon 7 days’ written notice
· Language: the English version prevails in case of conflict
· Wellous privacy enquiries: dpo@wellous.com
This summary is for easy reading — the PDF below is the full, authoritative text.
Wellous 隐私声明全文（英文） Wellous Privacy Notice — Full Text
PRIVACY NOTICE
WELLOUS group (individually and collectively referred to as “WELLOUS”, “The Company”, “we”, “us” or “our”) is committed to safeguard your privacy as the service provider of the WELLOUS’s website and/or platform (“Site”). This Privacy Policy (the “Policy”) describes WELLOUS Site’s policies and procedures regarding the collection, use and disclosure of the information collected through WELLOUS’s services, and other affiliated websites owned and operated by WELLOUS (collectively referred to as the “Services”). By using our Services, you agree to the terms of this Policy.
1. What is Personal Data
In the course of engaging for our Services, we will request that you provide data and information about yourself and/or your organisation (“Personal Data”) to enable us to enter into transaction with you or to deliver the necessary services and/or deliverables in connection with our business.
Personal data means any data relating directly or indirectly to a data subject, who is identified or identifiable from that information, including any sensitive personal data and expression of opinion about the data subject. Pursuant to the Personal Data Protection Act 2010, sensitive personal data means any personal data consisting of information as to the physical or mental health or condition of a data subject, his political opinions, his religious beliefs or other beliefs of a similar nature, or the commission or alleged commission of any offence. We will not process your Sensitive Personal Data unless you have given your explicit consent or where the processing is necessary for legal proceedings, obtaining legal advice, establishing or defending legal rights, or other purposes such as promotional campaigns or sales events.
We do not intentionally gather Personal Data from visitors under the age of 13. If you believe we might hold any Personal Data from a child under 13, please contact us.
Data collected by or on behalf of WELLOUS includes:
· Data provided by users — name, email, phone number, username and password, address, profile picture, payment or banking information, government identification documents, emergency contact information, user settings, demographic data and user content submitted to customer support.
· Data created during use of our Services — location data (where enabled), transaction information, usage data collected via cookies, pixels, tags and similar technologies, and device data such as hardware model, IP address, operating system and unique identifiers.
· Data from other sources — user feedback, account owners requesting services on behalf of others, business partners, identity-verification providers, insurers, publicly available sources and marketing service providers.
2. Purpose of Collection of Personal Data
Personal Data will be processed for, amongst others: shipping and delivery of products and services and marketing thereof; facilitating payment; user or client relationship management; internal record keeping; meeting legal or regulatory requirements; and sending you information about products and services that may interest you.
3. Effects Arising from Failure to Provide Personal Data
Failure to supply such Personal Data may result in us being unable to provide the services requested, or to update you on legal developments, our Services and/or launches.
4. Disclosure
Personal Data will generally be kept confidential, but you consent to disclosure to: any person to whom we are compelled by law, regulator or court order; government agencies, statutory authorities and industry regulators; our auditors, consultants, accountants, insurers, lawyers or other professional advisers; and our sub-contractors or third-party service or product providers. Certain processing is excluded from the Disclosure Principle, including processing for crime prevention or detection, prosecution of offenders, tax assessment or collection, statistics or research (anonymised), court orders or judgments, regulatory functions, or journalistic, literary or artistic purposes.
5. Security Measures
We keep and process Personal Data in a secure manner, implementing appropriate administrative and security safeguards in accordance with applicable laws, having regard to the nature of the data, where it is stored, the security measures of the equipment, the reliability and competence of personnel with access, and the secure transfer of the data.
6. Rights of Access and Correction
You have the right to request access to and correction of Personal Data held by us, subject to 7 days’ prior written notice, and may check whether we hold such data, request correction of inaccurate, incomplete or out-of-date data, and request that we explain our policies and procedures in relation to data handling.
7. Retention of Personal Data
We will not keep Personal Data longer than necessary for the fulfilment of the stated purposes, and will take all reasonable steps to ensure Personal Data is destroyed or permanently deleted when no longer required.
8. Data Integrity
We take reasonable steps to ensure Personal Data is accurate, complete, not misleading and kept up-to-date, having regard to the purpose for which it is collected.
9. Language of this Policy
This Policy may be prepared in different language versions. In the event of any conflicts in interpretation, the English version will prevail.
依 Wellous 声明第 9 条，全文以英文版为准。 Per clause 9 of the Wellous notice, the English version prevails.
隐私相关询问请电邮： For privacy enquiries please email: customer-service@xtwellness.com
XT GLOBAL ONLINE SDN. BHD. · No. 42-01/02 & 40-01/02, Jalan Setia Tropika 1/18, Taman Setia Tropika, 81200 Johor Bahru, Johor, Malaysia