Privacy Policy

Last updated: 09 October 2026

evercroz is a retail brand operated by Action Tec Sdn Bhd [202001005186 (1361506-U)] ("evercroz", "we", "us" or "our"). We are the data controller responsible for your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit evercroz.com, shop at an evercroz store, create a customer account, make a purchase, contact us, submit a warranty claim or otherwise deal with us. We handle personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

evercroz.com is powered by Shopify, which provides the ecommerce platform we use to run our online store.

By giving us your personal data, you acknowledge that we will handle it as described in this Privacy Policy. Where the law requires your consent, we will ask for it.

Personal data we collect

The data we collect depends on how you deal with evercroz. It may include:

Contact information: your name, email address, telephone number, billing address and delivery address.
Account and membership information: your login details, account preferences and membership status.
Order and transaction information: the products you view or buy, your order history, returns, exchanges, warranty claims, payment status and transaction details.
Payment information: payments are processed by third-party payment providers. We may receive transaction details and payment status, but the providers process your payment credentials under their own privacy practices.
Store customer information: details you choose to give our store team when you buy, register as a member or ask for customer service.
Customer service communications: emails, messages and other information you send us about an order, product or enquiry.
Warranty information: your order number or receipt, product details, serial number where applicable, a description of the issue, and photos or videos you submit with a claim.
Reviews and feedback: any product review, rating or feedback you choose to submit.
Device and technical information: your IP address, browser, device type and network information.
Website usage information: pages and products viewed, items added to your cart and other activity on evercroz.com.

Is providing your data required? You need to give us certain information (such as your name, contact details, delivery address and payment status) to complete a purchase, deliver your order, or process a return, exchange or warranty claim. If you choose not to provide it, we may not be able to provide these services. Providing information for marketing, reviews or optional surveys is voluntary.

How we collect your personal data

We may collect personal data:

Directly from you, when you buy something, create an account, register as a member, contact us, submit a warranty claim or join a promotion.
In our stores, when you give your details to our store team for a purchase, membership, customer service or warranty.
Automatically, when you use evercroz.com, through cookies and similar technologies.
From service providers that help us run our business, such as Shopify, payment providers, logistics providers and technology providers.
From third-party platforms or partners, where applicable, when you deal with evercroz through an authorised marketplace, social platform or other service.

How we use your personal data

We use your personal data to:

Process and deliver your orders: process payments, confirm orders, arrange delivery, give you tracking information and communicate with you about your order.
Manage your account and membership: create and maintain your customer profile, recognise your membership status and provide member benefits, such as the additional 1-year member warranty on eligible purchases.
Handle returns, exchanges and warranty claims: verify your purchase, assess eligibility, communicate with you and process exchanges, claims and replacements. Where necessary, we may share claim information with service providers or brand partners for assessment or fulfilment.
Provide customer support: respond to enquiries and resolve issues.
Improve our products and services: understand how customers use evercroz and improve our products, website, stores and services.
Protect our business and customers: verify transactions, secure accounts, detect suspicious activity and prevent fraud.
Meet legal obligations: comply with laws, tax and regulatory requirements, legal proceedings and lawful requests from authorities.

Membership and marketing

Registering for an evercroz account or membership is separate from subscribing to marketing communications. Creating an account does not mean you will receive promotional emails or newsletters.

If you have chosen to receive marketing, we may use your contact details to send you news, promotions, new arrivals, member offers and other evercroz updates. You can unsubscribe at any time using the link in our marketing emails.

Unsubscribing from marketing does not close your account, and does not stop transactional messages about your orders, warranty claims, account or customer service enquiries.

Cookies and similar technologies

evercroz.com and our service providers use cookies and similar technologies to run the website, remember your preferences, understand how the site is used, improve performance, and support marketing and analytics. These include:

Essential cookies, needed for the website and checkout to work.
Analytics cookies, which help us understand how visitors use the site.
Marketing cookies, which help us show relevant ads and measure their performance.

You can manage cookie preferences through your browser and any cookie controls on our site. Turning off some cookies may affect how parts of the website work.

How we share your personal data

We share personal data only where reasonably necessary to run evercroz and provide our services. This may include sharing it with:

Shopify, which provides the ecommerce platform for evercroz.com.
Payment service providers, which process payments securely.
Courier, logistics and fulfilment providers, which need customer details to deliver your order.
Technology and service providers, which help with hosting, data storage, analytics, security, customer support, reviews or other business functions.
Brand or warranty partners, where needed to assess or fulfil a warranty claim.
Marketing service providers, where applicable and subject to your communication preferences and the law.
Professional advisers, regulators or authorities, where required by law or reasonably necessary to protect our legal rights.

We may also disclose personal data as part of a merger, acquisition, restructuring or other business transaction, subject to applicable legal requirements. We do not sell your personal data.

Shopify

evercroz.com is hosted by Shopify. Shopify processes certain personal data about your use of our online store so it can provide its ecommerce services to us and our customers. Information you submit on evercroz.com may therefore be processed by Shopify and its service providers under Shopify's own privacy practices. You can read more in the Shopify Consumer Privacy Policy.

Transfers outside Malaysia

Some of our service providers, including Shopify and other technology providers, may process or store personal data outside Malaysia. Where we transfer personal data outside Malaysia, we take reasonable steps to make sure it is protected to a standard comparable to the protection under the PDPA, for example through the safeguards and contractual protections used by our service providers.

Data security and breaches

We use reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is required to be reported, we will notify the Personal Data Protection Commissioner and affected individuals as required by law.

Please keep your account login details confidential and do not share them with others.

How long we keep your data

We keep personal data only for as long as reasonably necessary for the purposes it was collected for. How long depends on things such as:

Whether you keep an evercroz account
Your purchase and warranty history
Customer service needs
Legal, tax and accounting obligations
Fraud prevention and security needs
The need to resolve disputes or enforce our policies

When we no longer need personal data, we take reasonable steps to securely delete, anonymise or otherwise dispose of it.

Your rights and choices

Under the PDPA, you may have the right to:

Ask for access to the personal data we hold about you
Ask us to correct personal data that is inaccurate, incomplete or out of date
Withdraw your consent, where we rely on your consent
Ask us to stop or limit processing, including for direct marketing
Ask for your personal data to be transferred to another data controller, where technically feasible and permitted by law

How to make a request: email us at evercrozmy@actiontec-asia.com with your request and enough detail for us to identify you. We may need to verify your identity first, and we will respond within the timeframe required by law. We may charge a fee where the law allows it, and we may decline a request where the law permits or requires us to.

Withdrawing consent or asking us to stop processing may affect our ability to provide some services. Some information may need to be kept where the law requires it or where we have another lawful reason.

Children's privacy

Our services are not directed at children. If you are under 18, please get your parent or guardian's permission before giving us your personal data. If you believe a child has given us personal data without proper authorisation, please contact us so we can look into it.

Third-party websites and services

evercroz.com may link to websites, social platforms or services run by other parties. When you leave evercroz.com, that party's own privacy policy and terms apply. We are not responsible for the privacy or security practices of services we do not operate.

Questions and complaints

If you have questions, requests or concerns about how we handle your personal data, please contact us using the details below. We will review your enquiry and reply as appropriate.

If you are not satisfied with our response, you may also raise a complaint with the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi).

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technology or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Please check it regularly for the latest information.

Contact us

For questions about this Privacy Policy, your personal data or your privacy rights, please contact:

evercroz
Operated by Action Tec Sdn Bhd [202001005186 (1361506-U)]
Email: evercrozmy@actiontec-asia.com
Address: B-LG2-2, Seri Gembira Avenue, Jalan Senang Ria, Taman Gembira, 58200 Kuala Lumpur, Malaysia