Privacy Policy
1. Who We Are
BEEBIYOO is a brand owned and operated by Covalent Forge Sdn. Bhd., a company registered in Malaysia. When this policy refers to "BEEBIYOO", "we", "us", or "our", it means Covalent Forge Sdn. Bhd.
We are the data controller responsible for your personal data collected through beebiyoo.com and any related channels (such as our social media pages and e-commerce storefronts on Shopee and Lazada).
Contact us: hello@beebiyoo.com
2. What Personal Data We Collect
We only collect data that is necessary for a specific, legitimate purpose. Here is a clear breakdown:
What we don't collect
We never collect payment card numbers — all payment processing is handled securely by Shopify Payments
We do not collect sensitive personal data such as identification card numbers, medical information, or financial account details
We do not knowingly collect data from children under 13 years of age.
3. How We Collect Your Data
Directly from you
• When you place an order on our website
• When you create an account or sign up for our newsletter
• When you contact us via email, WhatsApp, or a contact form
• When you submit a review or enter a competition
AutomaticallyWhen you visit beebiyoo.com, we collect certain technical data automatically through cookies and similar tracking technologies (see Section 7 for details)
From third parties
• From Shopify, our e-commerce platform, when you place an order
• From Meta (Facebook/Instagram) if you interact with our paid ads or social content
• From Google Analytics, which helps us understand how visitors use our website
4. Why We Use Your Data (and Our Legal Basis)
Under the PDPA, we are required to have a lawful reason for processing your personal data. Here is what we use your data for and why we are entitled to do so:
5. Who We Share Your Data With
We do not sell your personal data to anyone. We only share it with trusted partners who help us run our business, and only to the extent necessary for those purposes:Shopify
Our e-commerce platform. Shopify processes your order information and payment data on our behalf. Shopify is GDPR-compliant and maintains strict data security standards. See Shopify's privacy policy at shopify.com/legal/privacy.
Shopify Payments
Handles all payment processing. We never see or store your full card number. Payment data is encrypted and handled in accordance with PCI-DSS standards.
Delivery / courier partners
We share your name, delivery address, and contact number with our appointed courier(s) to fulfil your order.
Meta (Facebook & Instagram)
We use Meta's advertising platform to run targeted ads. The Meta Pixel on our website helps us measure ad performance and build audiences. Meta processes this data under its own privacy policy. You can manage your ad preferences at facebook.com/ads/preferences.
Google Analytics
We use Google Analytics to understand how visitors use our website. This data is anonymised and aggregated — it does not identify you personally. You can opt out via Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Email marketing platform We use this platform to send you marketing communications where you have consented to receive them.
All third-party service providers we work with are contractually required to keep your data secure and to use it only for the purposes we specify. They are not permitted to sell or share your data with others.
6. How Long We Keep Your Data
We do not keep your personal data longer than we need to. Here is our general approach:
Order and transaction records: retained for 7 years to comply with Malaysian accounting and tax obligations
Customer service communications: retained for 2 years after your last interaction with us
Marketing data (email lists): retained until you unsubscribe, after which we remove you within 30 days
Website analytics data: retained in anonymised form for up to 26 months
Inactive accounts: we may delete accounts that have had no activity for 3 or more years, with prior noticeWhen data is no longer needed, we securely delete or anonymise it so it can no longer be linked back to you.
7. Cookies & Tracking Technologies
Our website uses cookies — small text files placed on your device — to help us run the site, remember your preferences, and understand how people use it.
Types of cookies we use
• Essential cookies — Essential cookies — necessary for the website to function (e.g. keeping items in your cart, maintaining your session). These cannot be turned off.
• Analytics cookies — Analytics cookies — help us understand how visitors navigate our site so we can improve it (e.g. Google Analytics). These collect anonymised data.
• Marketing cookies — Marketing cookies — used to track the performance of our advertising and to show you relevant ads on other platforms (e.g. Meta Pixel, Google Ads).
• Preference cookies — Preference cookies — remember your settings and choices to improve your experience on return visits.
You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect how parts of our website function.
For more information, please refer to your browser's help section or visit allaboutcookies.org.
8. Your Rights Under the PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
• Right to access — Right to access — you
can request a copy of the personal data we hold about you
• Right to correction — Right to correction — you can ask us to correct any inaccurate or incomplete data
• Right to withdraw consent — Right to withdraw consent — where processing is based on your consent (e.g. marketing emails), you can withdraw that consent at any time. This won't affect anything we've already done based on your earlier consent.
• Right to limit processing — Right to limit processing — in certain circumstances, you can ask us to stop using your data for specific purposes
• Right to be informed — Right to be informed — you have the right to know what data we hold and how we use it, which is what this policy is forTo exercise any of these rights, please contact us at hello@beebiyoo.com. We will respond within 21 days. We may need to verify your identity before processing your request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at pdp.gov.my.
9. How We Protect Your Data
We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, misuse, or disclosure. These include:
• Secure HTTPS encryption on our website
• Payment data handled exclusively by Shopify Payments, which is PCI-DSS compliant
• Access to customer data restricted to authorised staff only, on a need-to-know basis
• Regular review of our data handling practices
No method of data transmission over the internet is 100% secure. While we do everything reasonably practical to protect your data, we cannot guarantee absolute security. If you have reason to believe your interaction with us has been compromised, please contact us immediately at hello@beebiyoo.com.
10. International Data Transfers
Some of our service providers (such as Shopify, Meta, and Google) are based outside of Malaysia and may process your data on servers located in other countries.
Where this happens, we ensure that appropriate safeguards are in place — such as standard contractual clauses or adequacy decisions — to protect your data in line with Malaysian PDPA standards.
11. Children's Privacy
BEEBIYOO products are designed for babies and young children, but our website and marketing are directed at parents and adult caregivers — not at children themselves.
We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data without parental consent, please contact us at hello@beebiyoo.com and we will promptly delete it.
12. Links to Other Websites
Our website may contain links to third-party platforms such as Shopee, Lazada, or our social media pages. These sites operate independently and have their own privacy policies.
We are not responsible for the privacy practices of any third-party website. We encourage you to read their policies before sharing any personal data with them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time — for example, when we introduce a new service, when the law changes, or when we change how we handle data.
When we make changes, we will update the "Last updated" date at the top of this page. If the changes are significant, we will notify you more prominently (for example, by email or by displaying a notice on our website).
Your continued use of our website after any changes are posted means you accept the updated policy.
14. Contact Us & Complaints
If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we've handled your data, please get in touch:
Covalent Forge Sdn. Bhd.
Email: hello@beebiyoo.com
Website: beebiyoo.com
WhatsApp: +60189876337
We will do our best to address your concern. If you are not satisfied with our response, you have the right to contact the
Department of Personal Data Protection (JPDP) Malaysia:
JPDP website: pdp.gov.my
