Effective: 21 October 2026. This policy is a pre-launch template and must be reviewed against actual seller identity, providers and data flows before collecting personal information.
1. Who is responsible
Peptonas is the consumer-facing reseller name. The legally responsible entity, Malaysian registered address and data protection contact must be published before live collection or transactions.
2. Data handled
The static public catalogue does not accept orders or process payment information. Cloudflare may process standard technical and security logs when the site is accessed. Administrative certificate records may contain regulatory and business contact data in private Cloudflare D1 and R2 storage.
3. Purposes and disclosures
Technical information may be processed to deliver and secure the site. Business documentation is handled to assess product authenticity, authorisation and compliance. Service providers should receive only data needed for these purposes, subject to applicable agreements and legal requirements.
4. Retention and security
Access to administrative records is restricted by server credentials. Retention periods, contact mechanisms, processor details and cross-border transfers must be confirmed against the actual production configuration before launch.
5. Your choices
You may request access, corrections or deletion where applicable. The verified data protection contact channel must be published before this website collects customer enquiries or orders.
6. Updates
Material changes will be reflected in this page with a revised effective date. Applicable Malaysian privacy requirements, including the Personal Data Protection Act, should be checked by the seller's adviser.