1. Introduction

This Privacy Policy applies to personal information collected through Xandraco's website and related online services.

By using our website, creating an account, submitting information, placing an order, or contacting us, you acknowledge that your information may be collected and processed as described in this Privacy Policy.

We encourage you to review this policy carefully before providing personal information through our website.

2. Information We May Collect

Depending on how you interact with Xandraco, we may collect information including:

• Full name
• Billing and delivery address
• Email address
• Telephone or WhatsApp number
• Account login information
• Order and purchase history
• Products viewed, added to cart or purchased
• Payment status and transaction-related information
• Customer service enquiries and communications
• Device, browser and website usage information
• IP address and general technical information
• Marketing or communication preferences

3. Information Provided When You Place an Order

When you place an order, we may collect information necessary to process and deliver your purchase, including your name, contact details, billing information, shipping address and order details.

This information may be required to:

• Confirm your order
• Process payment
• Prepare and pack your products
• Arrange delivery
• Provide tracking information
• Handle returns, refunds or order enquiries
• Maintain transaction and accounting records

4. Payment Information

Payments may be processed through third-party payment gateways, banks or payment service providers.

Depending on the payment method selected, payment information may be collected and processed directly by the relevant payment provider.

Xandraco may receive information confirming whether a payment was successful, pending, cancelled or refunded, but we do not necessarily receive or store complete payment card or banking credentials.

If you choose bank transfer, we may retain payment confirmation information where necessary for order verification and accounting purposes.

5. How We Use Personal Information

We may use personal information for purposes including:

• Processing and fulfilling orders
• Managing customer accounts
• Providing customer support
• Responding to enquiries
• Processing payments, refunds and returns
• Preventing fraud or unauthorised transactions
• Improving our website and shopping experience
• Maintaining business and accounting records
• Complying with legal and regulatory requirements
• Communicating important order or service information
• Sending promotional communications where permitted

6. Customer Accounts

If you create an account on our website, we may store information associated with your account, including your name, contact details, delivery addresses, order history and account preferences.

You are responsible for keeping your login credentials confidential and for preventing unauthorised access to your account.

Please contact us if you believe your account has been accessed without your permission.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions and improve your browsing experience.

Cookies may be used for purposes such as:

• Keeping products in your shopping cart
• Remembering login sessions
• Remembering language or website preferences
• Supporting checkout functions
• Measuring website performance
• Understanding how visitors use our website
• Improving website security

Some cookies are necessary for the operation of the website and cannot be disabled without affecting certain functions.

8. Analytics and Website Performance

We may use analytics or website monitoring tools to understand how visitors interact with our website.

These tools may collect technical and usage information such as pages visited, approximate location, device type, browser type, session duration and referring website.

This information helps us improve website performance, usability and customer experience.

9. Sharing Information With Service Providers

Xandraco may share limited personal information with trusted third-party service providers where necessary to operate our business.

These may include:

• Courier and delivery companies
• Payment gateways and financial institutions
• Website hosting providers
• Cloud and data storage providers
• Email or communication service providers
• Security and fraud-prevention services
• Accounting, legal or professional service providers

We only provide information reasonably necessary for the relevant service.

10. Courier and Delivery Information

In order to deliver your order, we may provide your name, delivery address, telephone number and other necessary delivery information to courier or logistics providers.

Courier companies may contact you directly regarding delivery arrangements, tracking updates or failed delivery attempts.

11. Marketing Communications

Where permitted, we may use your contact information to send you updates about products, promotions, offers or Xandraco news.

You may opt out of marketing communications at any time by using any unsubscribe option provided or by contacting us.

Important transactional communications relating to your orders, account, payments, refunds or delivery may still be sent even if you opt out of marketing messages.

12. WhatsApp and Other Communication Channels

If you contact Xandraco through WhatsApp, social media, email or another communication channel, the information you provide may be retained for customer service, order support, dispute resolution or business record purposes.

Your use of third-party communication platforms may also be subject to the privacy policies of those platforms.

13. Data Security

We take reasonable administrative and technical measures to protect personal information from unauthorised access, misuse, loss, alteration or disclosure.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also take reasonable precautions, including protecting their passwords and avoiding sharing sensitive information through unsecured channels.

14. Data Retention

We may retain personal information for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy.

Certain order, payment, accounting and transaction records may need to be retained for longer periods where required for legal, tax, accounting, dispute-resolution or business record purposes.

15. Accessing or Correcting Your Information

If you have an account, you may be able to update certain personal information directly through your account settings.

You may also contact us if you believe the personal information we hold about you is incorrect, incomplete or outdated.

We may need to verify your identity before processing certain requests.

16. Requests to Delete Personal Information

You may contact us to request deletion of certain personal information where appropriate.

Please note that we may need to retain some information where required for legal, accounting, tax, fraud-prevention, transaction record or dispute resolution purposes.

Deleting information may also affect our ability to maintain your account, provide certain services or verify previous transactions.

17. Children's Privacy

Xandraco's online store is intended for customers who are legally able to enter into purchases and transactions.

We do not knowingly collect personal information from young children for marketing purposes.

If a parent or guardian believes that a child has provided personal information without appropriate permission, please contact us.

18. Third-Party Websites

Our website may contain links to third-party websites or services.

Xandraco is not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

19. International Data Processing

Some website, hosting, cloud, payment or communication service providers may process or store information outside Malaysia.

Where third-party services are used, information may be handled according to the provider's infrastructure, security measures and applicable laws.

20. Legal and Regulatory Disclosure

We may disclose personal information where reasonably necessary to comply with applicable laws, legal processes, regulatory requirements, court orders, law-enforcement requests, or to protect the rights, safety and security of Xandraco, our customers or others.

21. Changes to This Privacy Policy

Xandraco may update or amend this Privacy Policy from time to time to reflect changes in our business practices, website features, service providers, technology or applicable requirements.

The latest version will be published on this page together with the applicable update date.

22. Contact Us

If you have questions about this Privacy Policy, your personal information, or a privacy-related request, please contact Xandraco.