Privacy Notice

Jadeite Pavilion is operated by Jadeite Pavilion Hub, a sole proprietor registered in Malaysia. For any privacy matter, contact us at jadeitepavilionhub@gmail.com.

• Order data - name, delivery address, email, phone, items, and total. Purpose: fulfilling your order. Lawful basis: performance of a contract.
• Messages - what you send us by email or form. Purpose: answering you. Lawful basis: legitimate interest.
• Email sign-ups - if you join our drop list, we store your email (with Supabase and our email provider, Klaviyo) to send first access to new pieces and occasional jade notes. Purpose: marketing you opted into. Lawful basis: consent. Unsubscribe from any email at any time.
• On your device - your country, currency, and cart are stored in your browser (localStorage) on your own device, not on our servers.
• Payment - your card number goes directly to Stripe. We never see or store it; we only receive a confirmation token.

Only what is needed to deliver your order:

• Stripe (payment processing, United States).
• Supabase (our order database, hosted in Singapore).
• UPS, FedEx, or Aramex (shipping) - your address and phone for delivery.

We never sell, rent, or share your data for anyone else's marketing.

• Order records: 7 years (required for Malaysian tax law).
• Email correspondence: 2 years after our last contact.
• Abandoned carts: 30 days, then deleted.

Email us to access, correct, or delete the data we hold on you, or to withdraw consent for any optional processing. We respond within 30 days.

Your order data may be processed by Stripe (United States) and our database provider Supabase (Singapore region). Both providers maintain industry-standard security practices.