Lau & Tan Pharmacy Sdn. Bhd. ("L&T Pharmacy SB", "we", "us", "our") is committed to protecting your privacy. When we acquire any information about you during your usage of this site, how and when we use that information is covered in this Privacy Policy.
This Privacy Policy will explain:
- What personal information we collect
- How we collect and use the personal information
- Who we share the personal information with
- Your rights under the Personal Data Protection Act (PDPA) 2010 and its Amendment 2024
- Who you may contact to find out more about the personal information collected
There may be links on this website that lead to sites other than www.lautanezbuy.farmasilautan.com. This Privacy Policy does not apply to any of these other sites. By using this site, you accept this Privacy Policy. You are not authorised to use this site if you do not agree to this Privacy Policy.
This policy is issued in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and its Amendment 2024.
1. Who we are
L&T Pharmacy SB is a community pharmacy chain registered in Malaysia, operating the website www.lautanezbuy.farmasilautan.com and 52 outlets across Terengganu and Kelantan since 1985. Our online store sells health supplements and rehabilitation products, and offers medical equipment rental services through Farmasi Lautan and Lautan Sihat Mobility.
2. Collection of personal data
When you subscribe to www.lautanezbuy.farmasilautan.com (the "Site") either by joining our mailing list, creating an account, or purchasing a product or service, we may collect the following categories of personal information, including but not limited to:
2.1 Information you provide directly
- Identification: Full name; identification number (IC / passport)
- Contact information: Address, telephone number, email
- Demographic data: Date of birth, gender, nationality, marital status, race, delivery address
- Account details: Username, password (stored using industry-standard hashing)
- Transactional & loyalty data: Purchase history, order details, loyalty program participation
- Payment information: Processed securely via our payment gateway (we do not store full credit card numbers)
- Health-related information: Collected only with your explicit consent (e.g. for digital health consultations or rental of medical equipment)
- Biometric data: Collected only with your explicit consent — e.g. fingerprints, facial recognition (classified as sensitive personal data under PDPA Amendment 2024)
- Communication records: WhatsApp messages, emails, phone enquiries, customer support conversations
- Return request information: Photos, reasons for return
2.2 Personal data of minors
Personal data of individuals under 18 is only collected with verified parental or guardian consent. Our online store is not intended for use by individuals under 18 without such consent.
2.3 Information collected automatically
- Device and browser information: IP address, browser type, device type, operating system
- Usage data: Pages visited, time spent, items viewed, referral source
- Cookies and similar technologies (see the Cookie Policy section below)
2.4 Information from third parties
- Payment processors: Transaction confirmations from our payment gateway provider
- Delivery partners: Delivery status from couriers
- Social media: If you sign in or interact via Facebook, Google, or other platforms
It is important that you provide us with complete personal information in the required fields on our Site to enjoy our products and services.
3. Purpose of collection and how we use the information
The personal information gathered will be used for one or more of the following purposes:
- To verify your identity and facilitate account creation and registration
- To deliver our pharmacy, supplement, rehabilitation, and digital health services, including the fulfilment of orders and consultations
- To process and fulfil your purchases, contest entries, and refunds
- To communicate with you and respond to your enquiries and complaints
- To provide promotions, rewards, and updates, subject to your consent
- To keep you updated about selected third-party partners that may be of interest to you (via SMS, phone, email, social media, or other appropriate channels), subject to your consent
- To process and analyse your personal data, individually or collectively
- To share your personal data with third parties strictly necessary for fulfilling your purchase, order, enquiry, or complaint (e.g. payment gateway providers, delivery couriers)
- To maintain and improve customer relationships
- To maintain and update internal record-keeping and administration
- For audit and risk management purposes
- For detecting, investigating, and preventing fraudulent, prohibited, or illegal activities
- For meeting any applicable legal or regulatory requirements, including disclosures required under any law, regulation, court order, by-law, guideline, circular, or code applicable to L&T Pharmacy SB
- To enforce or defend L&T Pharmacy SB's rights and your rights, and to comply with our obligations under applicable laws
- To analyse website usage and improve the Site, products, and services
- For internal improvement and analysis
- For other purposes required to operate and maintain L&T Pharmacy SB's business
4. Legal basis for processing
We process your personal data based on:
- Your consent (e.g. signing up for marketing communications, providing health or biometric data)
- Contractual necessity (e.g. fulfilling your order)
- Legal obligation (e.g. tax records, regulatory compliance)
- Legitimate interests (e.g. fraud prevention, service improvement)
5. Nature of consent
We only process your personal data with your clear and explicit consent, particularly for sensitive categories such as health-related and biometric data.
You can withdraw your consent at any time by contacting us at lautanezbuy@gmail.com or farmasilautan@gmail.com. Please note that withdrawing consent may affect your ability to receive certain services.
6. Disclosure of personal data
With your consent, L&T Pharmacy SB may disclose your personal data to:
- Regulatory authorities: As required by law (e.g. Ministry of Health Malaysia, Lembaga Farmasi Malaysia, Inland Revenue Board (LHDN))
- Subsidiaries and affiliates: For purposes consistent with this Policy (e.g. Farmasi Lautan, Lautan Sihat Mobility)
- Service providers and data processors: Including cloud hosting, IT, and communication providers, who are contractually bound to comply with PDPA Amendment 2024 standards
- Marketing and delivery partners: When you have provided your consent
- Payment processors: To handle transactions securely
- Delivery partners: Couriers given access to your mailing information solely to deliver your order
All payment data is stored via our payment gateway partners. Their privacy policies may be found on their respective websites.
L&T Pharmacy SB does not and will never sell, rent, or share your personal information — including your email address — with any third parties for their own marketing purposes without your express permission.
We reserve the right to disclose information in order to comply with a subpoena, court order, administrative or governmental order, or any other requirement of law, or when we, in our sole discretion, believe it is necessary in order to protect our rights or the rights of others, to prevent harm to persons or property, or to fight fraud and reduce credit risk.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. You will be notified of any such change.
7. Account information and security
Your transaction data will be available in your account page after you have logged in. By creating an account, you acknowledge this Privacy Policy. You must protect your own password — L&T Pharmacy SB will not be liable for any unauthorised use of our website resulting from your failure to keep your credentials secure.
If you provide feedback or use any of the forms on the Site, the information you have submitted will only be used to fulfil your request.
Anything you submit on our Site or any of our social media properties — such as Facebook, Instagram, TikTok, Spotify, and Pinterest — may be displayed publicly.
8. Data retention
We retain your personal data only as long as necessary for the purposes outlined in this Policy:
- Order and transaction records: At least 7 years (as required by Malaysian tax law)
- Account information: As long as your account is active, plus 2 years after closure
- Marketing data: Until you unsubscribe or withdraw consent
- Return and refund records: 3 years from the date of resolution
- Support communications: 2 years from the date of last interaction
- Health and biometric data: Retained only for as long as the service requiring such data is active, then securely deleted
After these periods, your data will be securely deleted or anonymised.
9. Data security
We take reasonable technical and organisational measures to protect your personal data, including:
- SSL encryption for all data transmitted through our website
- Secure password storage using industry-standard hashing
- Restricted access to personal data on a need-to-know basis
- Regular security reviews and updates
- Secure payment processing through PCI-DSS compliant gateways
- Heightened security measures for biometric and health-related data, in accordance with PDPA Amendment 2024
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your rights under PDPA
Under the Personal Data Protection Act 2010 and its Amendment 2024, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent for data processing (where consent is the legal basis)
- Limit processing of your data in certain circumstances
- Request deletion of your data, subject to our legal retention obligations
- Data portability (where applicable under PDPA Amendment 2024)
- Lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi)
To exercise any of these rights, contact us using the details in the "Contact us" section below. We will respond within 21 days as required by PDPA.
11. Marketing communications
We may send you marketing messages via email and/or WhatsApp only, if you have opted in.
You can opt out at any time by:
- Clicking the "unsubscribe" link in any email
- Replying "STOP" to a WhatsApp message
- Updating your preferences in your account settings
- Contacting us directly
Opting out of marketing does not affect transactional messages such as order confirmations or delivery updates.
12. Children's privacy
Our website and services are intended for users aged 18 and above. Personal data of minors is only collected with verified parental or guardian consent. If we discover that a child has provided us with personal data without such consent, we will delete it immediately.
If you believe a child has submitted information to us, please contact us.
13. International data transfers
Your data is primarily stored on servers located in Malaysia or other countries with adequate data protection standards. If we transfer your data internationally, we will ensure it is protected to the same standard as required under PDPA.
15. Privacy Policy changes
Any changes to this Privacy Policy will be posted here so that you have immediate access to the updates. Your continued use of the Site indicates your assent to the Privacy Policy as posted.
For significant changes, we will notify you via email or a prominent notice on our website.
16. Contact us
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:
- Email: lautanezbuy@gmail.com (online store) / farmasilautan@gmail.com (general)
- WhatsApp: +6011-6793 6386
- Operations Office: No. 20, Pusat Komersial Cabang Tiga, 21200 Kuala Terengganu, Terengganu
This Privacy Policy is governed by the laws of Malaysia.