Privacy policy

Last updated: 20 August 2026

GAZPRO UNITED SDN BHD (Company No. 201101036629 / 964763-T) operates the Kurvacious store and website at kurvacious.online, including all related information, content, features, tools, products and services (the "Services"). In this policy, "we", "us" and "our" refer to Gazpro United Sdn Bhd.

Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms & Conditions and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Personal Information We Collect or Process

When we use the term "personal information", we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from it:

  • Contact details including your name, address, billing address, shipping address, phone number, WhatsApp number, and email address.
  • Financial information including payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details. Full card numbers are processed directly by our payment providers and are not stored by us.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions.
  • Membership information where you join our membership programme, including your date of birth or birth month, which we use solely to issue birthday benefits.
  • Communications with us including the information you include in emails, WhatsApp messages, contact forms, product reviews and customer support enquiries.
  • Device information including information about your device, browser, or network connection, your IP address, approximate location derived from your IP address (used to display the correct market and currency), and other unique identifiers.
  • Usage information including how and when you interact with or navigate the Services.

We do not collect health or medical information about you as part of the ordering process. If you choose to share health information with us voluntarily — for example, when submitting medical documentation in support of a return request, or when describing your circumstances in a customer service enquiry — we process it only for the purpose for which you provided it, and retain it only as long as necessary for that purpose or as required by law.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, place an order, contact us by email or WhatsApp, complete a form, submit a review, or otherwise provide us with your personal information;
  • Automatically through the Services, including from your device when you visit our website, and through cookies, pixels and similar technologies;
  • From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties, including advertising and analytics partners.

How We Use Your Personal Information

  • Provide, tailor, and improve the Services. To perform our contract with you, process your payments, fulfil and deliver your orders, remember your preferences, send notifications about your account and orders, process returns and exchanges, manage your account and membership, enable you to post reviews, and create a customised shopping experience such as recommending related products.
  • Marketing and advertising. To send marketing and promotional communications by email, WhatsApp or text message where you have consented to receive them, and to show you online advertisements for our products on social media and other websites, including based on items you previously viewed, added to your cart or purchased.
  • Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, and detect, investigate or act on possible fraudulent, illegal, unsafe or malicious activity. If you register an account, you are responsible for keeping your credentials safe. We strongly recommend you do not share your username, password or other access details with anyone.
  • Communicating with you. To provide customer support, respond to your enquiries, and maintain our business relationship with you.
  • Legal reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to participate in legal proceedings, and to enforce or investigate potential violations of our terms or policies.

Cookies, Pixels and Advertising Technologies

We use cookies and similar technologies, including tracking pixels, to operate the Services, remember your preferences and market selection, understand how the Services are used, and deliver and measure advertising.

In particular, we use the Meta Pixel, provided by Meta Platforms, Inc. The Meta Pixel collects information about your activity on our website — such as pages viewed, items added to cart, and purchases completed — and shares it with Meta. This allows us to measure the effectiveness of our advertising and to show relevant advertisements to you and to people with similar interests on Facebook, Instagram and other Meta services. Meta processes this information in accordance with its own data policy, which you can review on Meta's website.

You can manage cookies through your browser settings, and you can adjust how advertising is personalised to you through the ad settings offered by Meta and other advertising platforms. Blocking or deleting cookies may affect how parts of the Services function.

How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include disclosure:

  • To Shopify, which hosts and operates our store platform.
  • To payment providers who process your payment, including eGHL, Atome and Xendit (formerly PayEx).
  • To logistics and courier partners who deliver your order, including where necessary for customs clearance in the destination country.
  • To messaging and communications providers, including WhatsApp (operated by Meta), through which we send order and delivery notifications to the mobile number you provide.
  • To advertising and analytics partners, including Meta, as described in the Cookies, Pixels and Advertising Technologies section above.
  • To cloud, workflow and internal notification tools that we use to alert our team to new orders and to maintain order records, including services provided by Google and Telegram. Where these tools are used, the information transferred is limited to the order details necessary to fulfil and record the order.
  • To our affiliates and offices, including Gazillion Nutrition Pte Limited in Hong Kong, which provides local customer support and processes returns for Hong Kong customers on our behalf.
  • Where you direct, request or otherwise consent to our disclosure of certain information to third parties.
  • In connection with a business transaction such as a merger, acquisition or insolvency; to comply with legal obligations including responses to subpoenas, warrants and similar requests; to enforce applicable terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside. In addition, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, please refer to the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Membership Programme

If you join our membership programme, we collect your date of birth or birth month in order to issue your birthday benefit. This information is collected with your consent, is used only for that purpose, and is stored using secure cloud services provided by Google. You may withdraw this information at any time by contacting us, in which case you will no longer receive birthday benefits but your other membership privileges are unaffected.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on them. Information you provide on public or semi-public venues, including third-party social networking platforms, may be viewable by other users without limitation as to its use. Our inclusion of such links does not imply endorsement.

Children's Data

The Services and our products are intended for adults aged 18 and over. The Services are not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we will delete it. As of the date of this Privacy Policy, we do not have actual knowledge that we share or sell personal information of individuals under 16 years of age.

Security and Retention of Your Information

We take reasonable technical and organisational measures to protect your personal information. However, no security measure is perfect or impenetrable, and we cannot guarantee absolute security. Information you send to us may not be secure while in transit. We recommend you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on factors including whether we need it to maintain your account, provide the Services, comply with legal or tax obligations, resolve disputes, or enforce our agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline a request as permitted by law.

  • Right to access or know. You may request access to the personal information we hold about you.
  • Right to delete. You may request that we delete personal information we hold about you.
  • Right to correct. You may request that we correct inaccurate personal information.
  • Right to portability. You may request a copy of the personal information we hold about you and ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to withdraw consent or limit processing. Where we rely on your consent, you may withdraw it at any time. You may also ask us to limit how we process your personal information for direct marketing purposes.
  • Managing communication preferences. You may opt out of promotional emails at any time using the unsubscribe link in our emails, or by replying to opt out of WhatsApp or text message marketing. If you opt out, we may still send you non-promotional messages about your account or your orders.

Customers in Malaysia have rights under the Personal Data Protection Act 2010. Customers in Singapore have rights under the Personal Data Protection Act 2012. Customers in Hong Kong have rights under the Personal Data (Privacy) Ordinance (Cap. 486). You may exercise any applicable right by contacting us using the details below.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request, as permitted or required by law. You may designate an authorised agent to make a request on your behalf; before accepting such a request, we will require proof of authorisation and may need to verify your identity directly. We will respond within the time required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority — in Malaysia, the Personal Data Protection Department (JPDP); in Singapore, the Personal Data Protection Commission (PDPC); and in Hong Kong, the Office of the Privacy Commissioner for Personal Data (PCPD).

International Transfers

We may transfer, store and process your personal information outside the country in which you live. In particular, orders from all markets are processed in Malaysia, and personal information relating to Singaporean and Hong Kong customers is transferred to Malaysia for order fulfilment, customer service and record-keeping. Where we transfer personal information across borders, we take reasonable steps to ensure it continues to receive a level of protection consistent with applicable data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice where required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please contact us:

GAZPRO UNITED SDN BHD (Company No. 201101036629 / 964763-T)
18, Jalan Hi-Tech 7/2, Kawasan Perindustrian Hi-Tech 7, 43500 Semenyih, Selangor, Malaysia
Tel: +60 3-8723 6862
Email: sales@gazpro.com.my
WhatsApp: +60 14-764 3198 / +60 11-5403 8662

Hong Kong office
GAZILLION NUTRITION PTE LIMITED (Company No. 76538457)
6/F Wilson Logistics Centre, 24-28 Kung Yip Street, Kwai Chung, Hong Kong