Cyntara Biotech
Effective Date: 1 July 2026

Cyntara Biotech (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data you share with us when using our website and services.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia and its related regulations.

1. Information We Collect

We may collect the following types of personal data:

  • Personal Information: Name, email address, phone number, billing and shipping address, and other details you provide when you place an order or contact us.
  • Account Information: Login details and preferences if you create an account on our website.
  • Order Information: Products purchased, order history, and transaction details.
  • Payment Information: Payment details processed securely through our licensed payment gateways. We do not store your full card details on our servers.
  • Technical Information: IP address, browser type, device information, and website usage data collected through cookies and analytics tools.

We only collect sensitive personal data (as defined under the PDPA) where necessary and with your explicit consent.

2. How We Use Your Information

We use your personal data to:

  • Process, fulfil, and deliver your orders
  • Manage customer accounts and requests
  • Provide customer support
  • Send order confirmations, updates, and, where you have consented, marketing communications
  • Improve website performance and user experience
  • Comply with our legal and regulatory obligations under Malaysian law

3. Consent

By providing your personal data and using our website, you consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy. You may withdraw your consent at any time by contacting us, although this may affect our ability to provide certain products or services to you. Where required, this notice is made available in both Bahasa Malaysia and English.

4. Disclosure of Information

We do not sell or rent your personal data. We may disclose your personal data only to:

  • Payment processors and licensed financial institutions for secure transaction processing
  • Shipping and logistics providers for order delivery
  • Service providers supporting our website and business operations
  • Regulatory or legal authorities where required by law or a valid legal request

5. Cross-Border Data Transfer

Some of our service providers may store or process data outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard comparable with the PDPA.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Malaysian laws (including tax and accounting requirements). Personal data that is no longer needed is securely deleted or anonymised.

7. Data Protection & Security

We implement appropriate technical and organisational measures to protect your personal data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
In the event of a personal data breach that poses a significant risk to you, we will take remedial action and notify the Personal Data Protection Commissioner and affected individuals as required under the PDPA.

8. Cookies & Tracking

Our website uses cookies and similar technologies to improve user experience, analyse traffic, and enhance functionality. You may disable cookies in your browser settings, but some features may not function properly.

9. Your Rights

Under the PDPA, you have the right to:

  • Access your personal data held by us
  • Request correction of inaccurate or incomplete data
  • Withdraw your consent to the processing of your personal data
  • Limit the processing of your personal data
  • Request deletion of your data (where applicable)
  • Opt out of marketing communications at any time

To exercise these rights, please contact us using the details below. We may need to verify your identity and may charge a prescribed fee for data access requests as permitted under the PDPA.

10. Age Restriction

Our website is intended for individuals 21 years and older. We do not knowingly collect personal data from minors. Where a minor provides personal data, we require the consent of a parent or legal guardian.

11. Third-Party Services

We may use third-party services such as payment processors, analytics tools, and shipping providers. These services have their own privacy policies, and we are not responsible for their practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Cyntara Biotech
Email: info@cyntarabiotech.com

Health & Tracking Data (Members Area)

If you use the tracking tools in your account (My Progress / My Protocol), we store the information you choose to enter — body weight, height, BMI, body measurements, and optionally the peptide, dose, frequency and protocol notes you record. This is sensitive personal data. We store it solely to provide your personal tracker and charts; it is private to your account and is never sold or shared. We keep it until you delete your account or ask us to remove it. To request access, correction or erasure, email us at info@cyntarabiotech.com or use the account-deletion option in your account. Providing this data is optional, requires your explicit consent, and you can withdraw that consent at any time from within the members area.