Privacy Policy
Last updated: 8 April 2026
LYT Wellness Sdn Bhd ("we", "us", "our") operates the ELT brand and the website DrinkELT.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data Controller
LYT Wellness Sdn Bhd
Company Registration No.: 202501019827 (1621240-W)
Kuala Lumpur, Malaysia
Email: support@DrinkELT.com
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identity data: Full name
- Contact data: Email address, phone number, delivery address
- Transaction data: Order details, payment method (we do not store full card numbers — payment is processed by Shopify Payments)
- Technical data: IP address, browser type, device information, pages visited
- Communication data: Messages you send us via email or social media
3. How We Collect Your Data
- Directly from you — when you place an order, contact us, or subscribe to communications
- Automatically — through cookies and similar technologies when you visit our website
- From third parties — Shopify (our e-commerce platform) and payment processors
4. Purpose of Processing
We process your personal data for the following purposes:
- To fulfil and deliver your orders
- To process payments via our secure checkout (powered by Shopify)
- To communicate with you about your order, including shipping updates
- To respond to your enquiries and provide customer support
- To send marketing communications (only with your consent)
- To comply with legal obligations, including tax and accounting requirements
- To improve our website, products, and services
5. Legal Basis
Under the PDPA, we process your data based on:
- Contractual necessity — to fulfil orders you have placed
- Consent — for marketing communications (you may withdraw consent at any time)
- Legal obligation — to comply with Malaysian tax, customs, and regulatory requirements
- Legitimate interest — to improve our products and prevent fraud
6. Data Sharing and Disclosure
We may share your personal data with:
- Shopify Inc. — our e-commerce and payment processing platform
- Courier services — to deliver your orders within Malaysia
- Government authorities — where required by Malaysian law
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
7. Data Transfers
Your data may be transferred to and processed in countries outside Malaysia (e.g., Shopify's servers in Canada/USA). Where such transfers occur, we ensure appropriate safeguards are in place as required by the PDPA.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described above, and for a period of 7 years after your last transaction to comply with Malaysian tax and accounting requirements. After this period, your data will be securely deleted or anonymised.
9. Cookies
Our website uses cookies for:
- Essential cookies — required for the website and checkout to function
- Analytics cookies — to understand how visitors use our website (anonymised)
You can control cookies through your browser settings. Disabling essential cookies may affect checkout functionality.
10. Your Rights Under the PDPA
You have the right to:
- Access your personal data held by us
- Correct any inaccurate or incomplete data
- Withdraw consent for marketing communications at any time
- Request deletion of your data (subject to legal retention requirements)
To exercise any of these rights, contact us at support@DrinkELT.com. We will respond within 21 days as required by the PDPA.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption on all web pages and during checkout
- Secure payment processing through Shopify (PCI DSS compliant)
- Access controls limiting who can view personal data
12. Children
Our products and website are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
LYT Wellness Sdn Bhd
Email: support@DrinkELT.com
Website: DrinkELT.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia.