Privacy policy

Privacy Policy

Last updated: May 13, 2026

At a glance:
– We only collect the information needed to process your orders, answer your questions, and make your experience better.
– We never sell your personal data for money.
– You can opt out of marketing and targeted ads at any time.
– We review all government requests thoroughly and will disclose only the minimum data required by law.
– Read on for the full, transparent details.

1. Scope & Our Commitment

Nutrascience.co (“Nutrascience,” “we,” “us”) values your privacy. This Privacy Policy explains what personal data we collect, why we need it, how we use and protect it, and the choices available to you.

By visiting our website, making a purchase, or communicating with us (together, the “Services”), you agree to the practices described here. If any term conflicts with our Terms of Service, this Privacy Policy will govern with respect to your personal information.

Malaysia PDPA compliance: For users in Malaysia, this policy is governed by the Personal Data Protection Act 2010 (PDPA). Nutrascience is a data controller under the PDPA and complies with the seven data protection principles set out in the Act.

2. What Information We Collect

We collect information that can be linked to you. We do not collect sensitive health data unless you voluntarily share it in a message to us. The data we collect includes:

Contact & Identity: Name, billing/shipping address, phone number, email address.
Payment & Transaction: Payment card details (processed securely by our payment partners—we never store full card numbers), order history, items viewed, returns, and cancellations.
Account Information: Username, password (encrypted), preferences, saved addresses.
Communications: Messages you send us via contact forms, email, or customer support.
Device & Usage: IP address, browser type, device information, pages visited, and how you interact with the website.
Inferences: Preferences we derive from your browsing and purchase activity to improve your experience.

3. How We Collect It

Directly from you when you place an order, create an account, or reach out to us.
Automatically as you browse the site, using cookies and similar technologies. For detailed information about the cookies we use, the third parties that set them, and how you can manage your preferences, please refer to our Cookie Policy [link].
From service providers that help us run the store (payment processors, hosting, analytics).
From advertising partners only as described below.

4. How We Use Your Information

Fulfilling your orders: Processing payments, shipping products, handling returns, and sending transactional messages.
Customer support: Answering your questions and solving issues.
Tailoring your experience: Remembering your cart, personalising product recommendations based on your on‑site activity.
Marketing (with your permission where required): Sending newsletters, promotions, and product updates. You can unsubscribe anytime via the link in every email.
Improving the store: Analysing website usage to make Nutrascience better.
Security & legal compliance: Preventing fraud, detecting unauthorised activity, complying with laws, and enforcing our terms.

5. How We Protect Your Data (Security)

We implement robust physical, electronic, and managerial procedures to safeguard your personal information. This includes encryption in transit (TLS/SSL) and at rest, strict access controls, regular security assessments, and secure server infrastructure.

No online system is 100% impenetrable, but we are committed to protecting your data to the highest industry standards. Please do not send sensitive information (like complete credit card details) via unencrypted email.

6. How We Share Your Information

We do not sell your personal information for money. We only share it in limited, necessary ways:

With trusted service providers who perform tasks on our behalf (payment processing, shipping, email, analytics, hosting). They are contractually bound to use your data only for the specific service provided.
For personalised advertising: We may share hashed identifiers or device information with platforms like Meta or Google. Under some privacy laws, this could be considered a “sale” or “share.” You can opt out at any time (see Section 8).
For legal reasons: If required by law, court order, or valid government request, following our internal review process (Section 7).
In a business transfer: If Nutrascience is acquired or merged, your data may be transferred to the new owners, who will remain bound by this policy.
With your consent: For any other purpose we describe at the time of collection.

7. Government & Law Enforcement Requests

If we receive a request for your data from any public authority:

The request is immediately escalated to our legal and compliance team (reachable at hello@nutrascience.co).
We thoroughly review the request: verify the identity of the requesting authority, confirm the legal basis, and check validity and proportionality.
We will only disclose the minimum amount of data necessary to comply with the law.
We maintain a confidential log of all such requests, recording details such as date, time, authority, scope, and outcome.
We will review all requests carefully and, where legally permissible, seek to limit disclosure to the minimum required.

8. Your Rights & Choices

Depending on where you live, you may have the following rights. We will not discriminate against you for exercising them.

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to fix inaccurate or incomplete information.
Deletion: Ask us to delete your data, subject to legal exceptions.
Portability: Get a copy of your data in a machine‑readable format.
Opt‑Out of Advertising / “Sale” of Data: Tell us not to “sell” or “share” your personal information for cross‑contextual behavioural advertising.
– California residents: Use the “Do Not Sell or Share My Personal Information” link on our site.
– All users: Email us at hello@nutrascience.co with the subject “Data Opt‑Out.”
– (We are currently assessing implementation of Global Privacy Control; until activated, please use the email method.)
Marketing Unsubscribe: Click “unsubscribe” in any promotional email. You will still receive essential service emails.
Right to Appeal: If we deny a request, you may appeal by contacting us again.

For EEA / UK residents: You also have the right to object to processing, request restriction, and withdraw consent. You may lodge a complaint with your local data protection authority.

For Malaysian residents: You have all the rights afforded under the Personal Data Protection Act 2010, including access, correction, withdrawal of consent, and the right to prevent processing likely to cause damage or distress.

To exercise any of these rights, email us at hello@nutrascience.co. We may need to verify your identity before processing your request.

9. Data Retention

We keep your personal information only as long as necessary to fulfil the purposes described in this policy.

Transaction records: Retained for 7 years to comply with Malaysian tax and accounting laws.
Account and marketing data: Retained while your account is active or you consent to marketing. Once you opt out or your account is deleted, this data is removed or anonymised unless legal retention requires otherwise.
Other data: Retained as long as needed to provide you the Services, resolve disputes, and enforce our agreements.

After the applicable retention period, we securely delete or anonymise the data.

10. Children’s Privacy

Our store is not intended for children under the age of majority. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us immediately so we can delete it. We have no actual knowledge of selling or sharing personal information of individuals under 16.

11. International Transfers

Nutrascience is based in Malaysia, but our hosting platform (Shopify) and some service providers may process data in other countries. If we transfer personal data from the EEA or UK to a country without an adequacy decision, we will implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK equivalent.

12. Shopify & Our Store Technology

Our store runs on Shopify, which processes some personal data independently to provide the platform’s core services. For more details, please see Shopify’s Privacy Policy and the Shopify Privacy Portal.

13. Changes to This Policy

We may update this policy from time to time. We will post the revised version here with a new “Last updated” date. If the changes are significant, we will provide additional notice (such as a banner on the site or an email).

14. How to Contact Us

For any questions about this Privacy Policy, or to exercise your rights:

Email: hello[@]nutrascience.co
Mail: Nutrascience, No 1 Jalan Setia Dagang AL U13/AL, D-2-13, Sunsuria Forum, Shah Alam, Selangor 40170, Malaysia

Nutrascience is the data controller of your personal information.

Governing law: This Privacy Policy is governed by the laws of Malaysia, and any disputes shall be subject to the exclusive jurisdiction of the courts of Malaysia.