Privacy Policy

How we collect, use, keep and protect your personal data, and the choices you have.

C'Garden Jewellery ("C'Garden", "we", "us") respects your privacy. This policy explains what personal data we collect when you use cgarden.com.my, contact us, book an appointment or buy from us, and how we look after it. It is written to comply with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). It is provided in English; a Bahasa Malaysia version is available on request.

1. What we collect

We collect only what we need to serve you.

• Contact details: your name, phone number, email address and, for deliveries, a postal address.
• Order details: the pieces you enquire about or buy, ring and wrist sizes, engraving text, design preferences, and payment records (we do not store full card numbers).
• Correspondence: messages you send us by the website form, email, phone or WhatsApp, and notes from your consultations so that we can continue a design conversation where it left off.
• Website usage: pages visited, referring site, approximate location and device type, collected through privacy-focused analytics that do not use cookies or identify you personally.
• Preferences stored in your browser: your chosen mood (light or dark), language, saved pieces and enquiry list are kept in your browser's local storage. They never leave your device unless you send us an enquiry.

We do not knowingly collect personal data from anyone under eighteen. Bespoke commissions and purchases must be made by an adult.

2. Why we use it

• To answer your enquiries and prepare quotations.
• To book and manage consultations at the atelier.
• To design, make, deliver and provide aftercare for your piece, including keeping a record of its specification so it can be resized, repaired or reproduced for you later.
• To take payment and keep the accounting records the law requires.
• To tell you about new work or events, but only where you have agreed to hear from us, and you may opt out at any time.
• To understand how the website is used so that we can improve it.
• To protect against fraud and to meet our legal obligations.

3. Who we share it with

We never sell your personal data. We share it only with the people who help us serve you:

• Couriers and insurers, so that a piece can be delivered to you.
• Payment providers and banks, to process a payment.
• Gemmological laboratories, where a stone is sent for a report in your name.
• Service providers who host this website, our email and our analytics, under contracts that require them to protect your data.
• Professional advisers and authorities, where the law requires it.

Some of these providers are located outside Malaysia. Where that is the case, we take reasonable steps to ensure your data receives protection comparable to the PDPA.

4. Messaging and social media

If you contact us on WhatsApp, Instagram or Facebook, those platforms process your messages under their own privacy policies. We keep the content of our conversation with you as part of your client record.

5. How long we keep it

We keep your client record, including the specification of any piece we have made for you, for as long as you remain a client and for seven years after your last order, so that we can honour aftercare and meet Malaysian record-keeping requirements. Enquiries that do not lead to an order are deleted after two years. You may ask us to delete your data sooner, subject to any records we are legally required to keep.

6. How we protect it

Client records are kept on access-controlled systems. This website is served over HTTPS. Our staff and workshop partners see only the information they need to do their part of the work. No system is perfectly secure, and if we ever became aware of a breach affecting your data we would tell you and the relevant authority without undue delay.

7. Your rights

Under the PDPA you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is inaccurate or incomplete.
• Withdraw consent to our use of your data, including for marketing, at any time.
• Ask us to stop processing your data where it is causing, or is likely to cause, damage or distress.
• Ask us to delete your data, subject to our legal obligations.

To exercise any of these rights, write to hq@cgarden.com.my. We may ask you to confirm your identity first. We will respond within twenty-one days.

8. Cookies and analytics

This website does not set advertising or tracking cookies. It uses Vercel Web Analytics, which records page views without cookies and without identifying individual visitors. Your preferences (mood, language, saved pieces, enquiry list) are stored in your browser's local storage and can be cleared at any time from your browser settings.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page tells you when it was last revised. Material changes will be announced on this website.

10. Contact

Questions about this policy or about your personal data should be sent to hq@cgarden.com.my, or by post to the address below, marked for the attention of the data protection contact.

C'Garden Jewellery
The MET Corporate Towers, 20 Jalan Dutamas 2, 50480 Kuala Lumpur, Malaysia
hq@cgarden.com.my · 010-766 7448