Privacy Policy
ERISTA JEWEL BOX ENTERPRISE | Effective Date: 6 July 2026
Introduction
ERISTA JEWEL BOX ENTERPRISE ("Erista Jewel Box", "we", "our", or "us") operates the e-commerce website at eristajewelbox.com. We are committed to safeguarding the privacy and personal data of our customers, visitors, and users. This Privacy Policy describes what data we collect, why we collect it, how it is used, and your rights as a data subject under Malaysian law.
Data We Collect
We may collect and process the following categories of personal data:
- Full name, email address, phone number, and delivery address when placing an order or contacting us.
- Payment-related details submitted through our payment gateway (CHIP). Please note: we do not store your card or banking credentials. All payment data is processed securely by CHIP.
- Communications you send us via email or enquiry forms.
- Browser type, IP address, device type, and pages visited on our website.
- Cookies and similar tracking technologies used to improve your browsing experience.
- Order history and transaction data.
How We Use Your Data
- To process and fulfil your orders, including delivery coordination.
- To communicate with you about your order status, enquiries, or complaints.
- To process payments securely via our payment gateway (CHIP), which supports FPX, debit cards, credit cards, and major Malaysian e-wallets.
- To improve our website, products, and services.
- To comply with legal obligations under Malaysian law
- To send you promotional updates and offers, if you have opted in to receive such communications.
Payment Gateway and Financial Data
All payment transactions on eristajewelbox.com are processed through CHIP, a licensed payment gateway in Malaysia. CHIP supports the following payment methods:
- FPX (Financial Process Exchange) – direct bank transfer
- Debit Card and Credit Card (Visa / Mastercard)
- Major Malaysian e-wallets (including Touch 'n Go eWallet, GrabPay, Boost, and others as supported by CHIP)
- Buy Now Pay Later facilities (provided by Grab PayLater and Atome)
Erista Jewel Box does not collect, store, or process your full card numbers, banking credentials, or e-wallet login details. All sensitive payment data is handled directly and securely by CHIP in compliance with applicable payment security standards. In some instances, only the last 4 digits of your payment cards may be stored for order references.
Disclosure of Your Data
We do not sell, rent, or trade your personal data. We may share your data only with:
- Service providers who assist in operating our website and fulfilling orders (e.g. courier/delivery partners), bound by confidentiality obligations.
- CHIP and its affiliated payment infrastructure, solely for processing your transaction.
- Relevant authorities if required to do so by law, court order, or regulatory directive.
Cookies
Our website uses cookies to enhance your user experience. Cookies are small data files stored on your browser that help us remember your preferences and analyze site usage. You may disable cookies through your browser settings; however, some features of the website may not function optimally as a result.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. Order records are typically retained for a minimum of 7 years for accounting and legal compliance purposes. You may request deletion of your personal data at any time, subject to applicable legal retention requirements at eristajewelbox@gmail.com
Your Rights Under the PDPA
As a data subject under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw consent for the processing of your personal data for direct marketing purposes.
- Request the deletion of your personal data, subject to legal retention requirements
To exercise any of the above rights, please contact us at eristajewelbox@gmail.com . We will respond to your request within 21 days, as required under the PDPA.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, disclosure, or destruction. These include secure HTTPS connections on our website and use of a certified third-party payment gateway. However, no method of transmission over the internet is 100% secure, and we encourage you to take appropriate precautions when sharing personal information online.
Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.
Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be reflected on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:
Business Name: ERISTA JEWEL BOX ENTERPRISE
Website: www.eristajewelbox.com
Email: eristajewelbox@gmail.com
Contact number: +60149664822 / +60103565522
Address: A 19 06, PJ Pinnacle, Lorong Utara C, PJS 52, 46200 Petaling Jaya, Selangor Darul Ehsan, MALAYSIA
We are committed to handling your personal data responsibly and transparently, in full compliance with the Personal Data Protection Act 2010 (Malaysia).