Privacy Policy
Yes Crystal Wholesale · Last updated 12 August 2026
Yes Crystal Wholesale (“we”, “us”) operates this store from Klang, Selangor, Malaysia. This policy explains what we collect when you create an account or place a live order, why we hold it, and the rights you have under the Personal Data Protection Act 2010 (PDPA).
1. Who we are
Yes Crystal Wholesale, Bandar Bukit Tinggi, Klang, Selangor. For anything in this policy, message us on WhatsApp or email hello@yescrystal.my.
2. What we collect
Your name, WhatsApp number, email address and delivery address. When you place a live order we also record the source platform, your live username, live item code, the agreed price you enter, the quantity and the date and time. We do not collect or store card or bank details — payment is completed on the payment provider’s own page.
3. Why we collect it
To link the live purchase to your Crystal account, pack and deliver it, send payment and delivery updates, and handle exchanges or complaints. Your live order is identified by the item selected in the active live session and your Crystal account details.
4. Legal basis and consent
We process your data with your consent, given when you tick the box at sign-up, and where it is necessary to fulfil the order you asked for. You may withdraw consent at any time, though we may be unable to complete an order in progress.
5. Who we share it with
Only with parties needed to complete your order: our delivery partners (name, phone and address), our payment provider (name, phone and email) and our messaging tools. We never sell your data and we do not share it with other sellers.
6. How long we keep it
Account details are kept while your account is active. Order records are kept for seven years to meet Malaysian tax and accounting requirements. After that they are deleted or anonymised.
7. Security
Data is held in access-controlled systems and only staff who pack, deliver or support orders can see it. No online system is perfectly secure, but we will notify you without undue delay if a breach affects your data.
8. Your rights
You may ask us for a copy of the data we hold on you, correct anything inaccurate, ask us to stop using it for marketing, or request deletion where we are not required to retain it. Write to us and we will respond within 21 days.
9. Marketing messages
We only send restock and promotion messages if you opted in. Every message includes a way to stop, and stopping never affects your ability to order.
10. Cookies and analytics
This site uses essential cookies to keep your session and basic analytics to understand which pages are used. Analytics data is aggregated and cannot identify you personally.
11. Children
This store is intended for buyers aged 18 and above. We do not knowingly collect data from children.
12. Changes to this policy
If we change how we use your data we will update the date at the top of this policy and, for significant changes, notify you before the change takes effect.