Data Deletion Policy

Raudhya · Last updated: 8 September 2026

This policy explains how you can request deletion of the personal data that Raudhya holds about you, including data obtained through our applications that use Facebook Login or the Facebook, Instagram and WhatsApp platforms.

1. Scope

This policy applies to the following applications and services operated by Raudhya (collectively, the "Apps"):

• Raudhya web store and customer accounts (raudhya.com)
• Raudhya WhatsApp and Messenger ordering and support channels
• Luxana — internal order, finance and commission platform
• Any Raudhya Facebook or Instagram app used for login, messaging, catalogue, or advertising integration

2. What data we may hold

Category	Examples
Account & identity	Name, email address, phone number, Facebook/Instagram user ID, profile picture URL
Order data	Orders, delivery address, order status, payment status (we do not store full card numbers)
Messages	Conversations you send us via WhatsApp, Messenger or Instagram Direct
Marketing & analytics	Website events, ad interaction and conversion events, marketing consent status

3. How to request deletion

Option A — Remove the app from Facebook

1. Go to Facebook → Settings & Privacy → Settings.
2. Open Apps and Websites.
3. Find the Raudhya app in the list and click Remove.
4. Tick the option to delete the posts, videos or events the app created, then confirm.

Removing the app sends us an automated deletion request. We then delete the associated data as described in section 4 and provide a confirmation code and status URL you can use to check progress.

Option B — Contact us directly

Email support@raudhya.com with the subject line "Data Deletion Request" and include:

• The name, email address and/or phone number linked to your account
• The app or channel you used (website, WhatsApp, Messenger, Instagram)
• Whether you want all data deleted or only specific data

We may ask you to verify your identity before acting on the request, so that we do not delete another person's data.

4. What happens after a request

Stage	Timeline
Request acknowledged	Within 3 business days
Identity verified (if needed)	Within 7 business days
Data deleted or anonymised from live systems	Within 30 days of a verified request
Data purged from encrypted backups	Within 90 days, as backups rotate

5. Data we may retain

We may keep limited data where the law requires it or where we have a legitimate need. In these cases the data is restricted to what is strictly necessary and is not used for marketing:

• Financial and tax records — invoices and transaction records are retained for 7 years as required under Malaysian tax and accounting rules.
• Fraud, chargeback and abuse prevention — minimal identifiers may be retained to prevent repeat fraud.
• Legal claims — data relevant to an active dispute is retained until the matter is resolved.
• Aggregated and anonymised data — statistics that can no longer identify you may be retained indefinitely.

6. Third parties

Where your data has been shared with service providers who process it on our behalf (for example hosting, payment, delivery and marketplace partners), we instruct them to delete it as part of the same request. Data held by Meta Platforms about your use of Facebook, Instagram or WhatsApp is controlled by Meta; to remove that, use the tools in your Meta account settings.

7. Your other rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA) — and, where applicable, the GDPR or UK GDPR for customers in Europe and the United Kingdom — you may also request access to your data, correction of inaccurate data, withdrawal of consent, or restriction of processing. Send any of these requests to the contact below.

8. Contact

9. Changes to this policy

We may update this policy from time to time. The current version and its effective date are always published at this URL.