Privacy policy

Last Updated: 13 September 2026

At HEGA, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how BE IT GODDESS ENTERPRISE ("we", "us", "our", or HEGA) collects, uses, stores, and protects your personal information when you visit our website, create an account, place an order, contact us, or otherwise interact with our online store.

By using our website, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you use our website, we may collect the following information:

Information You Provide to Us

When you place an order, create an account, contact us, or subscribe to our communications, we may collect:

Full name
Billing and delivery address
Email address
Telephone or mobile number
Account login information
Order and purchase details
Clothing size and product preferences where provided
Customer service enquiries and communications
Information you voluntarily provide through reviews, feedback, or other interactions

Payment Information

When you make a purchase, payment information may be processed by our third-party payment providers.

Where possible, we do not directly store complete payment card details on our own systems.

Payment providers may collect and process payment information in accordance with their own privacy policies and security practices.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

IP address
Browser type and version
Device type
Operating system
Pages visited
Date and time of visits
Referring website or source
Website usage and interaction information
Cookies and similar technologies

2. How We Use Your Information

We may use your personal information to:

Process and fulfil your orders.
Arrange delivery of your purchases.
Process payments and refunds.
Create and manage customer accounts.
Respond to enquiries and provide customer support.
Process returns and exchanges.
Send order confirmations, shipping updates, and other transactional communications.
Improve our products, services, and website.
Understand customer preferences and website usage.
Detect and prevent fraud, abuse, or unauthorised activity.
Maintain website security.
Send marketing communications where you have provided the appropriate consent or where otherwise permitted by applicable law.
Comply with legal, regulatory, accounting, and other applicable requirements.

3. Marketing Communications

If you subscribe to our newsletter, promotional communications, or marketing updates, we may use your email address or other contact information to send you information about:

New collections
Product launches
Promotions and discounts
Special offers
Brand news
Other relevant marketing communications

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions included in the relevant communication or by contacting us at contact@hega-shop.com.

Unsubscribing from marketing communications will not affect essential communications relating to your orders or transactions.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve your browsing experience and understand how visitors use our website.

Cookies may be used to:

Remember shopping cart and website preferences.
Maintain login sessions.
Understand website traffic and performance.
Improve website functionality.
Analyse customer behaviour.
Support relevant advertising and marketing activities where applicable.

You may be able to control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

5. Sharing Your Information

We may share personal information with trusted third parties where necessary to operate our business and provide services to you.

These may include:

Payment processing providers
Courier and delivery companies
E-commerce and website service providers
Hosting and technology providers
Marketing and analytics providers
Customer service platforms
Professional advisers
Government authorities or regulators where legally required

We only share information where reasonably necessary for the relevant business, contractual, operational, or legal purpose.

We do not sell your personal information to third parties.

6. Third-Party Services

Our website may use third-party services such as payment gateways, analytics platforms, advertising services, social media integrations, courier systems, and other technology providers.

These third parties may process personal information in accordance with their own privacy policies.

We recommend reviewing the privacy policies of relevant third-party services when using their services through our website.

7. International Transfers

Some of our service providers may store or process personal information outside Malaysia.

Where personal information is transferred outside Malaysia, we will take reasonable steps to ensure that the information is handled in accordance with applicable privacy and data protection requirements.

8. How We Protect Your Information

We take reasonable administrative, technical, and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are responsible for keeping your account login credentials confidential and should notify us if you believe your account has been accessed without authorisation.

9. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, providing customer support, maintaining business records, resolving disputes, preventing fraud, and complying with applicable legal and regulatory obligations.

When personal information is no longer required, we may securely delete or anonymise it.

10. Your Privacy Rights

Subject to applicable Malaysian laws and regulations, you may have rights regarding your personal information, including the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Withdraw consent where processing is based on consent.
Request deletion of personal information where applicable.
Object to or limit certain uses of your information where applicable.
Opt out of direct marketing communications.

Requests may be subject to applicable legal requirements and reasonable verification procedures.

To exercise your rights, please contact us using the details provided below.

11. Children's Privacy

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can review and take appropriate action.

12. Links to Other Websites

Our website may contain links to third-party websites, social media platforms, or other external services.

We are not responsible for the privacy practices, content, or security of third-party websites.

We encourage you to review the privacy policies of any external websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology, or applicable legal requirements.

Any updated version will be published on this page with a revised "Last Updated" date.

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:

Email: contact@hega-shop.com

We will endeavour to respond to privacy-related enquiries within a reasonable period.