Privacy policy

Last updated: 8 September 2026

Délice Empire Enterprise (Business Registration No. 202303184741 / SSM 003514018-A), trading as Délice Pistachios, operates this store and website, including all related information, content, features, tools, products, and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in respect of the collection, processing, and disclosure of your personal information.

Please read this policy carefully. By using or accessing the Services, you acknowledge that you have read it and understand how your information is collected, used, and disclosed.

Personal information we collect or process

By "personal information" we mean information that identifies you or can reasonably be linked to you. It does not include information collected anonymously or de-identified so that it can no longer be linked to you. Depending on how you interact with the Services and where you live, we may collect or process:

  • Contact details — your name, billing address, delivery address, phone number, and email address.
  • Payment information — payment method, transaction details, and payment confirmation. Full card numbers are handled by our payment providers and are not stored by us.
  • Account information — your username, password, preferences, and settings.
  • Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your order history.
  • Communications with us — the content of your messages to us, including customer support enquiries, WhatsApp messages, emails, and enquiries submitted through our contact form or social media.
  • Business and trade information — where you enquire as a business, wholesale, or export customer, we may also collect your company name, registration details, tax or import registration numbers, and the contact details of your representatives.
  • Device information — your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information — how and when you interact with and navigate the Services.

Where we collect it from

  • Directly from you — when you create an account, place an order, contact us by email, phone, or WhatsApp, subscribe to our mailing list, or otherwise provide information to us.
  • Automatically through the Services — from your device when you visit our website, including through cookies and similar technologies.
  • From our service providers — where we engage them to provide technology or to process information on our behalf.
  • From our partners or other third parties.

How we use your personal information

  • To provide and improve the Services. To perform our contract with you, process payments, fulfil and deliver orders, arrange shipping, handle returns and exchanges, manage your account, remember your preferences, send you notifications about your order, and improve the experience we offer.
  • Marketing and advertising. To send you marketing and promotional messages by email or, where you have provided a number and consented, by WhatsApp or text message, and to show you online advertising. You can opt out at any time — see "Your rights and choices" below.
  • Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, and detect, investigate, or act on fraudulent, illegal, or malicious activity. If you register an account, you are responsible for keeping your credentials safe, and you should not share them with anyone.
  • Communicating with you. To provide customer support, respond to your enquiries, handle wholesale and export enquiries, and maintain our business relationship with you.
  • Legal reasons. To comply with applicable law, respond to valid legal process or requests from law enforcement or government agencies, meet customs and export documentation requirements, participate in litigation or civil discovery, and enforce or investigate potential breaches of our terms or policies.

How we disclose personal information

We may disclose your personal information to third parties for legitimate purposes, subject to this policy. This may include:

  • Shopify, and vendors and other third parties who perform services on our behalf — for example IT management, payment processing (including our Malaysian payment gateway), data analytics, customer support, cloud storage, fulfilment, and delivery.
  • Courier and logistics providers, including Pos Laju and Lalamove, so that your order can be delivered, and freight forwarders and customs agents for international shipments.
  • Business and marketing partners, to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. These partners use your information in accordance with their own privacy notices. Depending on where you live, you may have a right to tell us not to share information about you for that purpose.
  • Third parties where you direct, request, or consent to the disclosure — for example to ship products to you, or through your use of social media widgets or login integrations.
  • In connection with a business transaction such as a merger, sale, or insolvency; to comply with legal obligations, including responding to subpoenas, warrants, and similar requests; to enforce our terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information.

Cookies and similar technologies

Our website uses cookies and similar technologies to keep your shopping cart working, remember your preferences, keep you signed in, secure the site, measure how the site is used, and support advertising.

Most browsers let you refuse or delete cookies through their settings. Please note that if you block essential cookies, parts of the store — including the cart and checkout — may not work correctly.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify, and with third parties that may be located in countries other than where you reside.

To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data obtained from your interactions with our store, with other merchants, and with Shopify. In these circumstances Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over its use for those purposes. To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites or platforms operated by third parties. If you follow those links, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, or for the accuracy, completeness, or reliability of information found on them. Information you post in public or semi-public venues, including third-party social platforms, may be viewable by others without limitation on its use. Our inclusion of a link does not by itself imply endorsement.

Children's data

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction — 18 years in Malaysia. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we will delete it. As at the date of this policy, we do not have actual knowledge that we share or sell the personal information of anyone under 16 years of age.

Security and retention

We take reasonable steps to protect the personal information we hold. However, no security measure is perfect or impenetrable, and information you send to us may not be secure in transit. Please do not use unsecured channels to send us sensitive or confidential information.

How long we keep your personal information depends on why we hold it — for example, whether we still need it to maintain your account, provide the Services, comply with tax, accounting, customs, and other legal obligations, resolve disputes, or enforce our agreements and policies. Where we no longer have a purpose for holding your information, we delete it or de-identify it.

Your rights and choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute, may only apply in certain circumstances, and in some cases we may decline a request as permitted by law.

  • Right to access or know. You may request access to the personal information we hold about you.
  • Right to delete. You may request that we delete personal information we hold about you.
  • Right to correct. You may request that we correct inaccurate personal information.
  • Right to portability. In certain circumstances, you may request a copy of your personal information or ask us to transfer it to a third party.
  • Right to limit processing and disclosure. You may ask us to limit how we process or disclose your personal information.
  • Managing communication preferences. You can opt out of promotional emails at any time using the unsubscribe link in our emails, or by replying "STOP" to promotional WhatsApp messages. If you opt out, we may still send you non-promotional messages about your account or orders.

You can exercise these rights by contacting us using the details below. To learn more about how Shopify uses your personal information and any rights you may have in relation to data processed by Shopify, see privacy.shopify.com.

We will not discriminate against you for exercising these rights. We may need to verify your identity before processing a request, as permitted or required by law. You may appoint an authorised agent to make a request on your behalf, but we will require proof of that authorisation and may need to verify your identity directly. We will respond within the time required by applicable law.

Malaysian Personal Data Protection Act 2010

Where we process personal data in Malaysia, we do so in accordance with the Personal Data Protection Act 2010 (PDPA).

  • We process personal data for the purposes described in this policy, and only where we have a lawful basis to do so — including where processing is necessary to perform our contract with you, to comply with a legal obligation, or where you have given consent.
  • Providing your name, contact details, delivery address, and payment information is necessary for us to accept and fulfil an order. If you do not provide it, we will not be able to process your order.
  • Providing information for marketing purposes is optional, and you may withdraw your consent at any time.
  • You have the right to request access to, and correction of, the personal data we hold about you, to limit its processing, and to withdraw consent to processing, subject to the exceptions permitted under the PDPA.
  • To make a request, or to raise a concern about how we handle your personal data, contact us at info@delicepistachios.com. We may ask you to verify your identity before we act on a request.

If you are located in Singapore, we handle your personal data in accordance with the Singapore Personal Data Protection Act 2012 where it applies to us. You may make an access or correction request, or withdraw consent to the use of your personal data for marketing, by contacting us at the address below, and you may lodge a complaint with the Personal Data Protection Commission of Singapore.

Both the English and any translated version of this policy are provided for your convenience. Where a translation is provided and there is any inconsistency, the English version applies.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below and we will look into it. Depending on where you live, you may also have the right to appeal our decision, or to lodge a complaint with your local data protection authority — in Malaysia, the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi).

International transfers

We may transfer, store, and process your personal information outside the country you live in, including in countries where our service providers, suppliers, and logistics partners operate.

Where we transfer personal data out of Malaysia, we take reasonable steps to ensure it is afforded a comparable level of protection. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent UK authority, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and provide notice where required by law.

Contact us

If you have questions about our privacy practices or this Privacy Policy, or you would like to exercise any of your rights, please contact us:

Délice Empire Enterprise (trading as Délice Pistachios)
C-17-1, Jalan Serai Wangi L, Seksyen 16, Alam Avenue 2, 40000 Shah Alam, Selangor, Malaysia
Email: info@delicepistachios.com
Phone / WhatsApp: +60 17-390 5167
Office hours: Monday to Friday, 9:00 AM – 6:00 PM (MYT)
Business Registration No.: 202303184741 (SSM 003514018-A)