Effective Date: 25 October 2026
Last Updated: 25 October 2026
1. INTRODUCTION
Welcome to Heartna.my (the “Website”), operated by [Heartna Enterprise]. We at Heartna, we respect your privacy and are committed to handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our Website, place an order, contact our customer service team or otherwise interact with us through Heartna.my.
This Privacy Policy should be read together with our Terms & Conditions and Delivery & Returns Policy.
We handle personal data in accordance with applicable Malaysian personal data protection laws, including the Personal Data Protection Act 2010 and its applicable amendments.
By using our Website or providing your personal data, you acknowledge that you have been informed of the practices described in this Privacy Policy. Where consent is legally required, we will seek your consent as appropriate.
2. PERSONAL DATA WE COLLECT
Depending on how you interact with Heartna.my, we may collect the following categories of personal data.
2.1. Personal identification and contact information
This may include:
Full name;
Email address;
Telephone or mobile number;
Billing address;
Delivery address; and
Other contact information you voluntarily provide.
2.2. Order and transaction information
This may include:
Products purchased;
Order number and purchase history;
Order value and applicable discounts;
Payment status and transaction references;
Delivery and tracking information;
Return, exchange and refund requests; and
Communications relating to your orders.
2.3. Payment information
Payments made through Heartna.my may be processed by third-party payment service providers.
Depending on the payment method, we may receive payment confirmations, transaction references and other information needed to verify and manage your order.
Your payment card or banking credentials may be collected and processed directly by the relevant payment provider. Heartna does not intend to collect or retain full payment card details unless expressly stated and handled through an appropriate, secure payment arrangement.
2.4. Customer service and communication information
When you contact us by email, WhatsApp or other customer service channels, we may collect the information you provide, including enquiries, complaints, photographs, videos and supporting documents relating to your order.
2.5. Website usage and technical information
When you visit our Website, certain information may be collected automatically, depending on the Website's configuration. This may include:
Internet Protocol (IP) address;
Browser type and device information;
Pages visited and interactions with the Website;
Date, time and duration of visits;
Referral information; and
Cookie identifiers and related technical data.
3. HOW WE COLLECT PERSONAL DATA
We may collect personal data through the following methods:
3.1. Directly from you when you place an order, complete a checkout form, contact us, submit a return request or voluntarily provide information.
3.2. Automatically through our Website, server logs, cookies and similar technologies, where enabled.
3.3. From payment service providers and delivery partners when necessary to process payments, verify transactions or fulfil orders.
3.4. From service providers supporting our Website, customer service and business operations, where lawfully permitted.
3.5. From other sources where you have authorised the disclosure or where collection is otherwise permitted by applicable law.
4. PURPOSES FOR COLLECTING AND PROCESSING PERSONAL DATA
Heartna may collect, use and process your personal data for the following purposes:
4.1. To receive, confirm, process and fulfil your orders.
4.2. To arrange payment verification, packing, shipping, delivery and order tracking.
4.3. To manage returns, exchanges, refunds, cancellations and product-related complaints.
4.4. To respond to enquiries and provide customer service.
4.5. To communicate important updates concerning orders, deliveries, Website operations and policy changes.
4.6. To maintain business records, accounting records and transaction histories.
4.7. To operate, maintain, troubleshoot and improve the Website and customer shopping experience.
4.8. To detect, investigate and prevent fraud, unauthorised transactions, security incidents and other unlawful activities.
4.9. To comply with applicable laws, regulatory requirements and lawful requests from relevant authorities.
4.10. To send marketing communications, promotional announcements, new collection updates and special offers where permitted by law and, where required, with your consent.
4.11. To carry out other purposes that are directly related to the purposes described above and permitted by applicable law.
Where personal data is necessary to process an order or fulfil a legal obligation, failure to provide the required information may prevent us from completing the relevant transaction or service.
5. DISCLOSURE OF PERSONAL DATA
Heartna does not sell customers' personal data to third parties as a business practice.
We may disclose personal data to the following categories of recipients where necessary for the purposes described in this Privacy Policy and as permitted by law.
5.1. Payment service providers
To facilitate payment processing, transaction verification, refunds and fraud prevention.
5.2. Delivery and courier partners
To arrange delivery, provide tracking information, investigate delivery issues and process returns.
5.3. Website and technology service providers
To support website hosting, e-commerce functionality, technical maintenance, security and related operations.
5.4. Business and professional service providers
To support accounting, auditing, legal advice, customer service and other legitimate business functions.
5.5. Government authorities and regulatory bodies
Where disclosure is required by law, court order, regulatory requirements or another lawful process.
5.6. Other parties
Where you have consented to the disclosure or where disclosure is otherwise permitted or required by applicable law.
We take reasonable steps to ensure that service providers handling personal data on our behalf are subject to appropriate confidentiality and data protection obligations.
6. INTERNATIONAL DATA TRANSFERS
Heartna serves customers in Malaysia and selected international destinations.
Some of our service providers, website systems or business partners may process or store personal data outside Malaysia, depending on the services used.
Where personal data is transferred outside Malaysia, Heartna will take the steps required under applicable law, including applicable requirements governing cross-border transfers and the protection of personal data.
The safeguards applied may depend on the destination, the service provider and the nature of the information involved.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our Website may use cookies and similar technologies, depending on the features and services enabled.
Cookies are small data files stored on your device that may help a website remember information, maintain shopping functionality and understand how visitors use the Website.
These technologies may be used for the following purposes:
Essential functionality: Supporting shopping cart, checkout, security and other core Website features.
Preferences: Remembering certain settings or preferences.
Analytics: Understanding Website traffic and usage to help improve our services.
Marketing: Supporting advertising measurement or personalised marketing, where applicable.
You may be able to manage cookies through your browser settings or any cookie preference controls made available on the Website.
Disabling certain cookies may affect the functionality of the Website, including shopping cart or checkout features.
Where required by applicable law, we will seek consent before using non-essential cookies or similar technologies.
8. MARKETING AND PROMOTIONAL COMMUNICATIONS
Heartna may use your contact information to send updates about new collections, promotions, special offers and other relevant brand announcements, subject to applicable law and any required consent.
Where marketing consent is required, we will obtain it through an appropriate method.
You may opt out of marketing communications at any time by:
Following the unsubscribe instructions in an email, where available;
Contacting us at heartnahijab@gmail.com; or
Contacting us through our official WhatsApp channel at +60194817710.
Please note that opting out of marketing communications will not prevent us from sending essential service messages relating to an existing order, transaction, security matter or other legitimate operational requirement.
9. DATA SECURITY
Heartna takes reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.
Depending on our Website setup and service providers, these measures may include access restrictions, secure transmission methods, authentication controls and appropriate confidentiality arrangements.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
In the event of a personal data breach, Heartna will assess the incident and take the notification and other steps required by applicable law.
10. RETENTION OF PERSONAL DATA
Heartna retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, customer service, business recordkeeping, dispute resolution and compliance with legal obligations.
The applicable retention period will depend on the type of information, the purpose of processing and any legal or regulatory requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, where appropriate and permitted by law.
Some information may need to be retained for longer periods where required by law or necessary to establish, exercise or defend legal claims.
11. YOUR RIGHTS
Subject to applicable law and any relevant conditions or exceptions, you may have the right to:
11.1. Request access to personal data that Heartna holds about you.
11.2. Request correction of personal data that is inaccurate, incomplete or outdated.
11.3. Withdraw consent to processing where the processing is based on consent, subject to applicable legal requirements and consequences.
11.4. Request that we cease or do not begin processing personal data for direct marketing, where applicable.
11.5. Exercise any other applicable rights available under Malaysian personal data protection law, including data portability where the relevant legal requirements apply.
Requests will be assessed in accordance with applicable law. We may need to verify your identity before responding.
Please note that withdrawing consent or requesting deletion may affect our ability to provide certain services or complete an order where the relevant information is necessary for that purpose or must be retained by law.
To exercise your rights, please contact us using the details in Section 15.
12. CHILDREN'S PRIVACY
Heartna.my is intended for general retail customers and is not specifically directed at children.
Where personal data is collected from a child, we will handle that information in accordance with applicable law and any consent requirements that apply.
If you believe that a child has provided personal data to us in circumstances that are inappropriate or unlawful, please contact us so that we can review the matter and take appropriate action.
13. THIRD-PARTY WEBSITES AND SERVICES
Our Website may contain links to third-party websites, payment providers, social media platforms or other external services.
These third parties may operate under their own privacy policies and practices.
Heartna does not control the privacy practices of independent third-party websites. We encourage you to review their privacy policies before providing personal data to them.
This section does not exclude any responsibility Heartna may have under applicable law.
14. CHANGES TO THIS PRIVACY POLICY
Heartna may update this Privacy Policy from time to time to reflect changes in our business operations, Website features, service providers or applicable legal requirements.
The latest version will be published on Heartna.my with the revised “Last Updated” date.
Where required by law, Heartna will provide additional notice or obtain consent for material changes to the way personal data is processed.
We encourage customers to review this page periodically.
15. CONTACT US
If you have questions, requests or complaints regarding this Privacy Policy or the handling of your personal data, please contact us:
Brand: HEARTNA
Website: https://heartna.my
Registered Business Name: Heartna Enterprise
Business Registration Number: 202303314783
Business Address: A-7-22A, V-Residensi 2, Jalan Budiman 22/1 Seksyen 22, 40300 Shah Alam, Selangor, Malaysia.
Email: heartnahijab@gmail.com
WhatsApp: +60194817710
Email: heartnahijab@gmail.com
WhatsApp: +60194817710
Operating Hours: 9:00 AM – 5:00 PM
Please include sufficient information about your request so that we can identify the relevant records and respond appropriately.
Thank you for trusting Heartna with your personal information.
