PERSONAL DATA PROTECTION NOTICE
Factory Eyewear Sdn Bhd together with its subsidiaries, related corporations, affiliated companies and entities under its control or common control (collectively referred to as “we”, “us”, “our”) operates retail optical stores and an e-commerce platform for the sale of spectacles, lenses, and related optical products and services.
This Personal Data Protection PDPA Notice (“PDPA Notice”) is issued pursuant to the Personal Data Protection Act 2010 (“PDPA”) of Malaysia.
1. COLLECTION OF PERSONAL DATA
We may collect and process the following categories of personal data (“Personal Data”):
1.1. Personal Identification Data
(a) Name
(b) National Registration Identity Card (NRIC) / Passport number (where required)
(c) Date of birth (where applicable)
(d) Gender (where applicable)
1.2. Contact Information
(a) Telephone number
(b) Email address
(c) Billing address
(d) Delivery address
1.3. Account and Transaction Data
(a) Online account credentials
(b) Purchase history (online and in-store)
(c) Payment information (Note: full card details are not stored by us and are processed via secure third-party payment gateways)
(d) Refund and return records
1.4. Optical and Vision-Related Data (Sensitive Personal Data)
(a) Eye prescription details (including lens power, astigmatism, pupillary distance)
(b) Eye examination results (if conducted by us or our authorised optometrists/partners)
(c) Frame and lens preferences
(d) Optical fitting and adjustment records
1.5. Technical and Usage Data
(a) IP address
(b) Browser type and version
(c) Device identifiers
(d) Cookies, tracking pixels, and website interaction data
1.6. Closed-Circuit Television (CCTV)
Our retail premises may be monitored by closed-circuit television (CCTV) for the purposes of security, crime prevention, protection of our employees and customers, investigation of incidents, and safeguarding our property. CCTV recordings may be accessed or disclosed where necessary for such purposes or as required by law.
2. PERSONAL DATA OF MINORS
2.1. Our products and services may be provided to individuals under the age of eighteen (18) years. Where we collect or process the personal data (including eye examination records, vision prescriptions or other related information) of an individual under the age of eighteen (18) years, such personal data must be provided by, or with the prior consent or authorisation of, the individual's parent, legal guardian or other person having lawful authority to provide such consent or authorisation.
2.2. By providing the personal data of a minor to us, the parent, legal guardian or authorised person represents and warrants that he or she has the legal authority to do so and consents to our collection, use, disclosure and processing of such personal data in accordance with this PDPA Notice.
2.3. Where we become aware that personal data of a minor has been collected without the appropriate consent, we reserve the right to request the necessary consent or to cease processing and delete such personal data where appropriate.
3. PERSONAL DATA OF THIRD PARTIES
Where you provide us with the personal data of another individual (including your child, spouse, family member or other authorised person), you represent and warrant that you have obtained all necessary consent and authority to disclose such personal data to us and for us to process such personal data in accordance with this PDPA Notice.
4. PURPOSE OF PROCESSING
We process your personal data for the following purposes:
4.1. to process, confirm, and fulfil your orders (online and in-store)
4.2. to manufacture and supply prescription spectacles and lenses
4.3. to provide optometry and eye examination services
4.4. to manage customer accounts and authentication
4.5. to process payments, refunds, and billing
4.6. to arrange delivery and logistics services
4.7. to provide customer support and after-sales services
4.8. to improve our products, services, and website experience
4.9. to perform analytics, statistics, and business improvement
4.10. to conduct marketing, advertising, and promotional activities (subject to consent)
4.11. to comply with applicable laws, regulations, and regulatory requirements
5. CONSENT
5.1. By providing your Personal Data, you consent to its processing in accordance with this PDPA Notice.
5.2. Where required under PDPA, particularly for sensitive Personal Data (including eye prescription and optometry data), we will obtain your explicit consent prior to processing.
5.3. You may withdraw your consent at any time by contacting us in writing. However, withdrawal may affect our ability to provide certain products or services.
6. SOURCE OF PERSONAL DATA
6.1. Your Personal Data may be collected:
(a) directly from you via our website, mobile platform, or physical stores;
(b) through eye examinations conducted by us or our authorised optometrists;
(c) through your interactions with our customer service channels;
(d) from cookies, tracking technologies, and analytics tools; or
(e) from third-party service providers (e.g. payment processors, logistics providers).
7. DISCLOSURE OF PERSONAL DATA
7.1. We may disclose your Personal Data to the following parties, where necessary:
(a) payment gateway providers and financial institutions;
(b) logistics and delivery service providers;
(c) IT service providers, cloud hosting providers, and data storage providers;
(d) marketing, advertising, and analytics service providers (e.g. Meta, Google, TikTok platforms);
(e) professional advisers, auditors, consultants, and legal advisors; or
(f) regulatory authorities, enforcement agencies, or courts as required by law.
7.2. All third-party service providers are contractually required to maintain confidentiality and implement appropriate data protection measures.
8. TRANSFER OF PERSONAL DATA OUTSIDE MALAYSIA
8.1. Your Personal Data may be transferred, stored, or processed outside Malaysia, including through cloud-based systems and international service providers.
8.2. Where such transfer occurs, we will take reasonable steps to ensure that your personal data is afforded a level of protection that is comparable to PDPA requirements.
9. USE OF COOKIES AND TRACKING TECHNOLOGIES
9.1. Our website uses cookies, tracking pixels, and similar technologies to:
(a) improve website functionality and user experience;
(b) analyse website traffic and user behaviour;
(c) personalise content and advertising; and
(d) measure advertising effectiveness.
9.2. This may include tools such as Google Analytics, Meta Pixel, and other advertising technologies.
9.3. You may manage or disable cookies via your browser settings; however, certain features may not function properly if cookies are disabled.
10. DATA SECURITY
10.1. We implement reasonable administrative, technical, and physical safeguards to protect your Personal Data against:
(a) loss or misuse;
(b) unauthorized access or disclosure; and
(c) alteration or destruction.
10.2. Access to Personal Data is restricted to authorised personnel only.
11. RETENTION OF PERSONAL DATA
11.1. We retain Personal Data only for as long as is necessary to fulfil the purposes set out in this PDPA Notice, or as required under applicable laws (including accounting, tax, and regulatory obligations).
12. ACCESS AND CORRECTION RIGHTS
12.1. You have the right to:
(a) request access to your Personal Data;
(b) request correction or update of your Personal Data; or
(c) inquire about the use of your Personal Data.
12.2. Requests may be submitted in writing to our contact details provided below.
12.3. We may charge a reasonable fee for processing access requests, as permitted under PDPA.
13. MARKETING AND PROMOTIONAL COMMUNICATIONS
13.1. We may use your Personal Data to send you marketing and promotional communications via email, SMS, or other electronic channels.
13.2. You may opt out at any time by:
(a) clicking the “unsubscribe” link in our communications, or
(b) contacting us directly.
14. THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for the privacy practices of such websites and encourage you to review their privacy policies separately.
15. CHANGES TO THIS PDPA NOTICE
We reserve the right to update or amend this PDPA Notice from time to time. Any changes will be published on our website with the updated effective date.
16. CONTACT DETAILS
For any inquiries, complaints, or requests relating to your Personal Data, please contact:
