Privacy notice

• Who we are
• What we collect
• Why
• Who we share with
• How long
• Your rights
• Cookies
• Contact

This notice explains how Atlas DSF handles personal data when you use atlasdsf.com, buy from Atlas Origins, use our free tools, or work with us on a fragrance project. It is written to meet the Personal Data Protection Act 2010 of Malaysia, as amended in 2024.

Who we are

We are the data user responsible for your personal data. Atlas Origins is our retail brand, and this notice covers it too.

What we collect

Things you give us

• Project enquiries: your name, business name, business type, email, phone number if you share it, and the details of your brief.
• Orders and accounts: your name, email, phone number, delivery and billing address, order history and, if you create one, your account login.
• Free tools: when you sign up to keep using a tool such as our IFRA calculator, your name, email, business name and the type of products you make.
• Messages: what you send us by email, WhatsApp or our forms.

Things collected automatically

• Site usage: pages viewed, approximate country, language, browser and device type, recorded by our website platform so we can understand how the site is used.
• Payments: we do not see or store your full card or bank login details. When online payment is available it is handled by our payment provider, Xendit. Bank transfers show us only what appears on our bank statement.

Why we use it

• To process and deliver your orders, issue invoices and handle returns.
• To reply to enquiries, prepare quotations and carry out projects you ask us for.
• To run your account and our free tools, including limiting free use so they stay available.
• To keep records we are required to keep by law, such as accounting and tax records.
• To improve our website, products and services.
• To send you news, offers or new articles, only if you have opted in. You can unsubscribe at any time.

Giving us your contact and delivery details is needed to complete an order or reply to an enquiry. Everything else is optional. If you choose not to provide something we need, we may not be able to fulfil that request.

Who we share it with

We do not sell personal data. We share it only with parties that help us run the business, and only what they need:

• Odoo S.A., which hosts our website, shop and customer records.
• Google, for business email and documents.
• Couriers such as Shopee Xpress and Pos Malaysia, to deliver your order.
• Payment providers such as Xendit, to take payment.
• Manufacturing partners, only the project details needed to make your product, under confidentiality.
• Professional advisers and authorities, such as our accountants or a regulator, where the law requires it.

Some of these providers store data outside Malaysia. Where that happens we rely on providers whose protections are comparable to the Act, as it permits.

How long we keep it

We keep personal data only as long as we need it for the purposes above. Order and invoice records are kept for seven years to meet Malaysian company and tax law. Enquiries and tool sign-ups that do not lead to work are deleted or anonymised after two years without contact, or sooner if you ask.

How we protect it

Access to customer records is limited to the people who need it, accounts use strong sign-in, and our providers encrypt data in transit. If a breach puts your data at risk, we will notify the Personal Data Protection Commissioner and, where required, you.

Your rights

• Access the personal data we hold about you.
• Correct anything inaccurate or out of date.
• Withdraw consent or ask us to stop marketing to you.
• Limit how we process your data.
• Move your data to another organisation, where technically possible.

Email us to use any of these rights. We will reply within 21 days, as the Act requires. You can also complain to the Personal Data Protection Commissioner of Malaysia.

Cookies

We use cookies that the site needs to work, such as keeping you signed in and remembering your cart, and our platform records visits as described above. We do not currently run advertising or cross-site tracking cookies. If we add any, we will update this notice and ask for your consent first where required.

Children

Our products are perfumery materials intended for adults. We do not knowingly collect data from anyone under 18.

Changes and language

We may update this notice and will change the date at the top when we do. A Bahasa Malaysia version is available on request.

Contact

Questions or requests about your data: gerrick@atlasdsf.com.