Privacy Policy
Information we collect
We collect your name, email address and phone number during checkout or account registration, together with account information such as order history and download status. For account security, we also record the IP address and browser information of your sessions.
Reviews and media
If you submit a review, we store the display name you choose, rating, title, review text, photos or video and moderation status. The display name, approved review and its media may be shown publicly on the product page. Do not include your own or anyone else’s personal details, especially a child’s, in the text or media. Support staff may review, reject or hide reviews and media.
How we use information
Your information is used to process orders and payments, provide download links, support customers, protect accounts and the service, and meet legal obligations under the Personal Data Protection Act 2010 (PDPA).
Payment information
We do not store your bank account or card details. All payments are processed directly by licensed payment gateways. We keep transaction records such as the order number, amount, status and payment reference for accounting and dispute purposes.
Data retention
We keep personal data only for as long as needed for the purposes above. Order, payment, refund and audit records may be kept longer for accounting, tax, fraud prevention and dispute purposes. When they are no longer needed, some data may be deleted or anonymised, subject to legal retention requirements.
Your data requests
You may request access to, correction of, or deletion of your personal data by contacting sokongan@skorlah.my. We will verify your identity before disclosing or deleting data. We aim to acknowledge receipt within 3 business days and complete valid requests within 21 days, subject to identity verification and legal requirements. For guest orders, provide your order number and order link. Some order and payment records may need to be retained as described above.
Third-party processors
We use service providers to handle data on our behalf: Cloudflare (hosting, network and security), ToyyibPay and Billplz (payment processing), and Brevo and Resend (transactional email). These providers process data under their own terms and privacy policies.