Last updated: 17 July 2026
At The Skin Lovers, we care about your privacy as much as we care about your skin. This Privacy Policy explains what personal data we collect when you create an account, shop, or take part in Glow Points or our referral program, how we use it, and your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy is issued by The Skin Lovers ("we", "us" or "our") and applies to personal data we handle through theskinlovers.com and its member/admin areas.
We use your data to create and secure your account, process and fulfil orders, calculate and pay out Glow Points and referral rewards, send order and shipping updates, respond to enquiries, and improve our products and service. We only use your personal data for these purposes or purposes closely related to them.
We use cookies for essential functions (keeping you signed in, remembering your bag, tracking a single first-touch referral link for up to 30 days) and analytics (to understand how the site is used). You can control cookies through your browser settings; blocking essential cookies may prevent checkout from working.
We do not sell your personal data. We share information only where needed to run the business:
If you share a referral link, we record which account it belongs to and attach a single "first-touch" attribution cookie to whoever clicks it, so we can pay out the correct referral rewards. Reward calculations and ledgers are visible to you in your account and to our team for review — never sold or shared beyond what's needed to run the program.
We take reasonable technical and organisational measures to protect your data, including password hashing, access controls, and encrypted connections. No method of transmission or storage is completely secure, but we work to keep your data safe and limit access to people who need it.
We keep account and order data for as long as your account is active and for as long as we need it to meet legal, tax and accounting obligations. Glow Points ledgers are kept per our published expiry rules. When you request account deletion, we remove or anonymise personal data except where we're legally required to retain it (e.g. financial records).
Our services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we'll take reasonable steps to delete it.
We may update this Privacy Policy from time to time. Material changes will be posted here with a revised "last updated" date.
This Privacy Policy works alongside our Terms & Conditions and Refund Policy. Questions? Email [email protected].