隐私政策
Privacy Policy

关于本政策 / About This Policy

Growzlift 尊重您的隐私。本政策说明我们在您浏览网站、填写表格、 联系 WhatsApp、接收 Email/SMS、购买产品、参与成长计划或使用其他 Growzlift 服务时，如何收集、使用、披露、储存及保护个人资料。

Growzlift respects your privacy. This Policy explains how we collect, use, disclose, store and protect personal data when you browse our website, submit a form, contact us through WhatsApp, receive email/SMS, purchase products, participate in a growth programme or otherwise use Growzlift services.

Growzlift 由 Herbhaven Sdn. Bhd.（注册号：1609225-A）经营， 营业地址为 33-3A, Jln SS23/15, Taman Sea, 47400 Petaling Jaya, Selangor, Malaysia。我们依据适用的马来西亚《个人资料保护法令2010》 （PDPA）及其他适用法律处理个人资料。

Growzlift is operated by Herbhaven Sdn. Bhd. (Registration No. 1609225-A), with its business address at 33-3A, Jln SS23/15, Taman Sea, 47400 Petaling Jaya, Selangor, Malaysia. We process personal data in accordance with the applicable Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable laws.

我们收集的资料 / Personal Data We Collect

视您与 Growzlift 的互动方式而定，我们可能收集：

• 家长或购买人资料： 姓名、电话号码、Email、账单及配送地址；
• 儿童成长资料： 由家长或法定监护人提交的儿童姓名、年龄、生日、性别、身高、 体重、成长追踪记录、问卷答案及相关照片；
• 订单资料： 购买产品、金额、折扣、付款状态、配送及退换货记录；
• 付款资料： 付款方式、交易编号及付款确认资料；完整银行卡资料由 Stripe 等付款服务商处理；
• 沟通资料： WhatsApp、Email、SMS、客服咨询、反馈、评价及售后记录；
• 技术及使用资料： IP 地址、浏览器、装置、操作系统、访问页面、点击、表格来源、 Cookies及类似技术产生的资料；
• 营销资料： 广告互动、来源参数、Email开启及点击记录、偏好与同意状态。

Depending on how you interact with Growzlift, we may collect:

• Parent or purchaser data: name, telephone number, email, billing address and delivery address;
• Child growth data: a child's name, age, date of birth, gender, height, weight, growth-tracking records, questionnaire responses and related photographs submitted by a parent or legal guardian;
• Order data: products purchased, amounts, discounts, payment status, delivery, returns and refund records;
• Payment data: payment method, transaction reference and payment confirmation; full card details are handled by payment providers such as Stripe;
• Communication data: WhatsApp, email, SMS, support enquiries, feedback, reviews and after-sales records;
• Technical and usage data: IP address, browser, device, operating system, pages visited, clicks, form source, cookies and similar technologies; and
• Marketing data: advertising interactions, attribution parameters, email opens and clicks, preferences and consent status.

儿童资料 / Children's Personal Data

成长记录或照片仅用于提供计划、客服、进度追踪、验证成长保证及 改善服务。除非另行取得家长或监护人的明确授权，我们不会把可识别 儿童身份的照片、记录或故事用于广告、见证分享或公开宣传。

Growth records and photographs are used to provide the programme, customer support, progress tracking, Growth Guarantee verification and service improvement. We will not use identifiable child photographs, records or stories in advertising, testimonials or public promotions unless we separately obtain the parent or guardian's express permission.

我们如何使用资料 / How We Use Personal Data

我们可能为以下目的处理个人资料：

• 处理订单、付款、COD、配送、退款、更换及成长保证申请；
• 提供产品使用指导、成长计划、追踪报告、客服及售后服务；
• 核实身份、订单、付款、配送地址及申请资格；
• 通过 WhatsApp、Email、SMS 或电话发送订单及服务通知；
• 在取得所需同意或法律允许时发送优惠、内容及营销信息；
• 分析网站及广告表现、衡量转化、进行再营销并改善用户体验；
• 预防欺诈、滥用、安全事件及未经授权的交易；
• 遵守会计、税务、监管、执法及其他法律义务；
• 建立、行使或维护我们的法律权利。

We may process personal data to:

• process orders, payments, COD, delivery, refunds, replacements and Growth Guarantee claims;
• provide product guidance, growth programmes, tracking reports, support and after-sales service;
• verify identity, orders, payments, delivery addresses and claim eligibility;
• send order and service notices through WhatsApp, email, SMS or telephone;
• send offers, content and marketing messages where required consent has been obtained or the law permits;
• analyse website and advertising performance, measure conversions, conduct remarketing and improve user experience;
• prevent fraud, misuse, security incidents and unauthorised transactions;
• comply with accounting, tax, regulatory, law-enforcement and other legal obligations; and
• establish, exercise or defend our legal rights.

资料来源 / Sources of Personal Data

资料可能来自您本人、代表儿童提交资料的家长或监护人、 我们的网页及表格、WhatsApp/Email/SMS 对话、付款和配送服务商、 广告及分析平台，或法律允许的其他来源。

Data may come from you, a parent or guardian submitting data for a child, our websites and forms, WhatsApp/email/SMS conversations, payment and delivery providers, advertising and analytics platforms, or other sources permitted by law.

您应确保所提供资料准确、完整及最新，并且有权向我们提供任何 第三方或儿童资料。

You should ensure that submitted data is accurate, complete and current, and that you have authority to provide any third-party or child data to us.

资料披露与服务商 / Disclosure & Service Providers

我们不会出售个人资料。为经营业务，我们可能在必要范围内向以下 类别的服务商披露资料：

• GoHighLevel 等客户关系管理、表格、自动化及沟通平台；
• Stripe、银行及其他付款处理服务商；
• WhatsApp、Email、SMS及电信服务商；
• 快递、仓储、履约及配送服务商；
• Meta Pixel、Conversions API、Google Analytics及Google Ads 等广告与分析服务；
• 云端托管、资讯科技、安全、会计、专业顾问及法律服务商；
• 监管机构、法院、执法机关或依法有权取得资料的其他单位。

We do not sell personal data. To operate our business, we may disclose data as necessary to:

• CRM, form, automation and communications platforms such as GoHighLevel;
• Stripe, banks and other payment processors;
• WhatsApp, email, SMS and telecommunications providers;
• courier, warehousing, fulfilment and delivery providers;
• advertising and analytics services such as Meta Pixel, Conversions API, Google Analytics and Google Ads;
• cloud-hosting, IT, security, accounting, professional-advisory and legal providers; and
• regulators, courts, law-enforcement authorities or others legally entitled to receive the data.

若业务重组、合并、融资或出售发生，我们也可能在保密及适用法律 约束下向相关方转移资料。

If our business is reorganised, merged, financed or sold, data may also be transferred to relevant parties subject to confidentiality and applicable law.

Cookies、分析与广告 / Cookies, Analytics & Advertising

我们的网站可能使用必要、功能、分析及广告 Cookies、Pixels、 服务器端事件及类似技术，以维持网页运作、记住偏好、了解访问行为、 衡量广告效果及显示相关广告。

Our website may use necessary, functional, analytics and advertising cookies, pixels, server-side events and similar technologies to operate the site, remember preferences, understand visits, measure advertising and display relevant ads.

这些技术可能由 Meta、Google、GoHighLevel 或其他服务商设置。 您可通过浏览器设定删除或限制 Cookies，也可通过相关平台的广告 设定管理个性化广告。限制 Cookies 可能影响部分网页功能。

These technologies may be set by Meta, Google, GoHighLevel or other providers. You can delete or restrict cookies through your browser and manage personalised advertising through the relevant platform's ad settings. Restricting cookies may affect certain website functions.

营销信息 / Marketing Communications

如您已同意或法律允许，我们可能通过 WhatsApp、Email 或 SMS 向您发送产品资讯、成长内容及优惠。您可随时点击 Email 中的退订 链接、回复“STOP/停止”，或直接联系我们取消营销信息。 服务及订单必要通知不属于营销信息。

Where you have consented or the law permits, we may send product information, growth content and offers by WhatsApp, email or SMS. You may opt out at any time by using an email unsubscribe link, replying “STOP”, or contacting us. Essential service and order notices are not marketing messages.

向新加坡号码发送营销信息时，我们会在适用范围内遵守新加坡 Do Not Call 相关规定。

When sending marketing messages to Singapore numbers, we will comply with applicable Singapore Do Not Call requirements.

跨境资料传输 / Cross-Border Transfers

部分服务商可能在马来西亚或新加坡以外处理或储存资料。 我们会采取合理措施，要求接收方依据适用法律、合约或其他适当 保障保护资料。

Some service providers may process or store data outside Malaysia or Singapore. We will take reasonable steps to require recipients to protect the data through applicable law, contract or other appropriate safeguards.

保存期限 / Data Retention

我们仅在实现收集目的、提供服务、处理争议及履行法律、税务、 会计或监管义务所需期间保存资料。资料不再需要时，我们会采取 合理措施删除、销毁或匿名化。

We retain data only for as long as needed to fulfil the collection purpose, provide services, handle disputes and meet legal, tax, accounting or regulatory obligations. When data is no longer required, we take reasonable steps to delete, destroy or anonymise it.

资料安全 / Data Security

我们采取合理的行政、技术及实体保障措施，以防资料遭未经授权 访问、使用、披露、修改、遗失或破坏。但任何互联网传输或储存 方式均无法保证绝对安全。若发生依法需要通知的资料外泄事件， 我们会按照适用法律采取行动。

We use reasonable administrative, technical and physical safeguards against unauthorised access, use, disclosure, alteration, loss or destruction. However, no internet transmission or storage method is completely secure. If a data breach occurs that requires notification, we will act in accordance with applicable law.

您的权利 / Your Privacy Rights

在适用法律及例外规定下，您可联系我们：

• 查询或要求取得我们持有的个人资料；
• 更正不准确、不完整或过时的资料；
• 撤回同意或停止接收直接营销；
• 要求删除、限制处理或移转资料（如适用）；
• 就个人资料处理方式提出疑问或投诉。

Subject to applicable law and exceptions, you may contact us to:

• enquire about or request access to personal data we hold;
• correct inaccurate, incomplete or outdated data;
• withdraw consent or opt out of direct marketing;
• request deletion, restriction or portability where applicable; and
• raise questions or complaints about our handling of personal data.

为保护资料，我们可能在处理请求前核实您的身份及家长/监护人权限。 撤回同意不影响撤回前处理行为的合法性，但可能使我们无法继续提供 部分服务。

To protect the data, we may verify your identity and parental/guardian authority before acting on a request. Withdrawal of consent does not affect processing that occurred before withdrawal, but may prevent us from continuing certain services.

政策更新 / Changes to This Policy

我们可能不时更新本政策。更新版本会发布在本页面，并注明 “最后更新”日期。重大变更时，我们可能通过合理方式另行通知。

We may update this Policy from time to time. The revised version will be posted on this page with a new “Last updated” date. We may provide additional notice where a change is material.