Last updated: [03 August 2026]

NAYYA Studio respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store and disclose your personal data when you visit our website, create an account, place an order, contact us or use our services.

1. Who We Are

This website is operated by:

Business name: NAYYA Studio
Business registration number: [SA0640544-K]
Email: support@nayyastudio.com
Contact number: 014-5688325

In this Policy, “NAYYA”, “we”, “us” and “our” refer to NAYYA Studio.

2. Personal Data We Collect
We may collect personal data that you provide directly to us, including:

  • Full name
  • Email address
  • Phone number
  • Billing and delivery address
  • Account login information
  • Order and purchase history
  • Product size, colour and preference information
  • Messages, enquiries, reviews and feedback
  • Payment confirmation or transaction reference
  • Information provided when joining a promotion or mailing list

We may also collect technical and usage information automatically, including:

  • IP address
  • Browser and device type
  • Pages viewed
  • Website activity
  • Referral source
  • Cookies and similar technologies

Payment card and online-banking details are generally processed by the payment gateway selected during checkout. We do not normally receive or store your complete card number, PIN or online-banking password.

EasyStore may separately process customer information as the platform provider, including account, transaction, device, communication and website-usage information. Its own privacy policy governs the information it processes independently

3. How We Collect Your Data

We may collect your personal data when you:

  • Visit or browse our website
  • Register for a customer account
  • Add products to your cart
  • Place or pay for an order
  • Subscribe to our email list
  • Use a discount or promotional code
  • Contact us through email, WhatsApp or social media
  • Submit a return, exchange or refund request
  • Leave a review or provide feedback
  • Participate in a giveaway, survey or campaign

4. How We Use Your Personal Data

We may use your personal data to:

  • Create and manage your customer account
  • Process and confirm orders
  • Arrange payment, delivery, returns and exchanges
  • Send order confirmations and tracking updates
  • Verify transactions and prevent fraud
  • Respond to enquiries and provide customer support
  • Maintain accurate customer and transaction records
  • Improve our products, services and website
  • Analyse website usage and business performance
  • Manage discounts, vouchers and promotions
  • Send marketing messages where you have agreed to receive them
  • Comply with legal, tax, accounting and regulatory requirements

If certain required personal data is not provided, we may be unable to process your order, arrange delivery or provide the requested service.

5. Marketing Communications

With your consent, we may send you:

  • New collection announcements
  • Product updates
  • Restock alerts
  • Discount codes
  • Promotional offers
  • Invitations and campaign information

You may unsubscribe at any time by:

  • Clicking the unsubscribe link in an email
  • Replying to our message
  • Contacting us using the details below

Unsubscribing from marketing will not stop essential service messages such as order confirmations, payment notices or shipping updates.

6. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

  • Keep items in your cart
  • Remember login or website preferences
  • Improve website performance
  • Understand how visitors use the website
  • Measure advertising and campaign performance
  • Provide more relevant content or promotions

You may block or delete cookies through your browser settings. However, some website functions may not work correctly if cookies are disabled.

7. Payment Information

Payments may be processed by third-party payment providers, banks or electronic-wallet services.

These providers may collect information necessary to:

  • Process the transaction
  • Verify identity
  • Prevent fraud
  • Meet legal and regulatory obligations

Their handling of your information is governed by their own privacy policies and terms.

We do not ask customers to provide card PINs, online-banking passwords or one-time passwords through WhatsApp, email or social media.

8. Who We Share Personal Data With

We may share relevant personal data only where reasonably necessary with:

  • EasyStore and website-service providers
  • Payment gateways and banks
  • Courier and fulfilment companies
  • Email, messaging and customer-support providers
  • Website analytics and advertising providers
  • Accountants, auditors and professional advisers
  • Government, regulatory or law-enforcement authorities where legally required
  • Other service providers who help us operate the business

For example, your name, phone number and delivery address may be provided to the courier so that your parcel can be delivered.

We do not sell your personal data to advertisers or unrelated third parties.

9. International Data Transfers

Some service providers, servers or technology platforms used by us may be located outside Malaysia.

Where personal data is transferred or processed outside Malaysia, we will take reasonable steps to ensure that it is handled securely and for the purposes described in this Policy.

EasyStore also states that customer data may be transferred to group entities or service providers outside Malaysia for service delivery, record maintenance and storage. 

10. Data Security

We take reasonable administrative, technical and organisational measures to protect personal data against:

  • Loss
  • Misuse
  • Unauthorised access
  • Unauthorised disclosure
  • Alteration
  • Destruction

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for keeping account passwords confidential and should contact us immediately if they believe their account has been accessed without permission.

Security is one of the seven personal-data protection principles recognised under Malaysia’s PDPA.

11. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • Complete transactions
  • Provide customer service
  • Maintain business and accounting records
  • Handle disputes, returns and warranties
  • Prevent fraud
  • Meet legal and regulatory requirements

When personal data is no longer reasonably required, we may securely delete, anonymise or destroy it.

Malaysia’s PDPA principles state that personal data should not be kept longer than necessary for its purpose. 

12. Accuracy of Information

We take reasonable steps to keep customer information accurate, complete and current.

Please update your customer account or contact us when your:

  • Name
  • Email
  • Phone number
  • Billing address
  • Delivery address

changes.

13. Your Rights

Subject to applicable law, you may request to:

  • Access personal data we hold about you
  • Correct inaccurate or incomplete data
  • Update your contact information
  • Withdraw or limit consent for certain processing
  • Stop receiving marketing messages
  • Request deletion of your customer account or data where legally permitted
  • Ask how your personal data has been used or disclosed

Access and correction are among the principles recognised under Malaysia’s PDPA. 

To make a request, contact us using the details in Section 17. We may need to verify your identity before completing the request.

Some information may need to be retained for legal, accounting, fraud-prevention or transaction-record purposes even after an account-deletion request.

14. Children’s Privacy

Our website and products are not intended to collect personal data directly from children without appropriate parent or guardian involvement.

Where a customer is below the age legally permitted to enter into a purchase independently, the order should be made or approved by a parent or guardian.

5. Customer Reviews and Social-Media Content

If you submit a review, photograph, video or social-media tag, we may ask for permission to feature it on our:

  • Website
  • Social-media pages
  • Marketing materials
  • Advertising content

We will not intentionally publish private customer information such as addresses, phone numbers or payment details.

You may contact us to request the removal of published customer content, although previously printed or completed campaign materials may not always be retrievable.

16. Third-Party Links

Our website may contain links to:

  • Instagram
  • TikTok
  • Payment providers
  • Courier tracking pages
  • Other third-party websites

We are not responsible for the privacy practices, content or security of third-party websites. Customers should read the relevant third party’s privacy policy before providing personal information.

17. Contact Us

For privacy questions, requests to access or correct personal data, marketing opt-outs or account-deletion requests, contact:

NAYYA Studio
Email: support@nayyastudio.com
WhatsApp: 014-5688325

Please include enough information for us to identify your account or order.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Our services
  • Website functions
  • Service providers
  • Legal requirements
  • Business practices

The latest version will be posted on this page with the revised “Last updated” date.

Your continued use of the website after an update indicates acceptance of the revised Policy, where permitted by law.