Privacy Policy

1. Who controls the data

Avilion Technologies, Malaysia, controls personal data processed through Avilion websites, accounts, support, enquiries, orders, fabrication, software, and connected services. Privacy questions and requests may be sent to [email protected].

2. Data we collect

• Account data, such as name, username, email address, profile image, authentication provider, and account identifiers.
• Order data, such as products, configurations, delivery and billing details, order status, discounts, payment status, warranty records, and transaction references.
• Support and enquiry data, including messages, attachments, product details, case history, and replies.
• Fabrication data, including submitted model files, dimensions, material choices, print settings, estimates, and delivery selections.
• Technical data, such as IP address, browser and device information, security events, cookies, consent choices, and service logs.
• Connected-service data that you authorise Google, Discord, Spotify, or another provider to share.

Avilion does not intentionally store complete payment card numbers. Payment details are handled by the payment provider used at checkout.

3. Why we use it

Avilion processes data to create and secure accounts; review, accept, fulfil, and support orders; provide products and services; calculate fabrication estimates; deliver messages and files; process payments; prevent abuse and fraud; maintain records; improve reliability; comply with law; and communicate changes or active cases.

Optional marketing or preference processing is used only where consent or another lawful basis permits it. Consent can be withdrawn, although required processing cannot be disabled while still expecting the feature that requires it to work. Authentication without an authentication cookie is not a feature we can negotiate with physics.

4. Cookies, local storage, and language preferences

Required cookies and storage support security, sign-in, order and enquiry continuity, and saved consent. Optional preference storage remembers device choices such as display mode and a guest language. The cookie controls available on the website let you accept, decline, or customise optional preferences.

For signed-in customers, the preferred language and the time it was updated are stored in the Avilion account database. This lets the preference follow the account across devices. On logout, account-specific language is no longer treated as the next user's account preference; an independently chosen guest preference may remain only where the device-storage choice permits it.

5. Who receives data

Data is disclosed only where reasonably necessary to service providers and partners that support hosting, security, email, authentication, payment processing, delivery, analytics enabled by consent, support, and connected product functions. This may include Cloudflare, Stripe, Google, Discord, Spotify, email providers, and delivery carriers where those services are used.

Avilion may also disclose data where required by law, to protect users or systems, to investigate fraud, or as part of a business transfer subject to appropriate safeguards. Personal data is not sold.

6. International processing

Some providers may process data outside Malaysia or Singapore. Avilion uses providers and safeguards intended to provide protection appropriate to the data and applicable law. Singapore personal data transferred overseas is handled in accordance with applicable transfer limitation requirements.

7. Retention

Data is kept only as long as reasonably needed for the purpose collected, including active accounts, fulfilment, warranty, support, security, disputes, and legal, tax, or accounting obligations. Retention periods vary by record type. Data that is no longer required is deleted, anonymised, or securely isolated unless law requires continued retention.

8. Security

Avilion uses access controls, encrypted transport, credential separation, restricted administrative access, logging, and other reasonable technical and organisational measures. No internet service can promise absolute security. Anyone promising otherwise is either confused or selling something unusually expensive.

9. Your choices and rights

Subject to applicable Malaysian or Singaporean law, you may request access to or correction of personal data, withdraw consent, ask about processing, or request deletion where retention is not required. Requests may require identity verification. Withdrawing consent may prevent Avilion from continuing a feature or service that depends on the relevant data.

10. Children

Purchases and customer accounts are not intended for children who cannot legally consent or contract. Discord services may have separate age requirements in the Discord Bot Terms. If personal data was submitted without appropriate authority, contact Avilion for review.

11. Changes and contact

Avilion may update this policy when products, providers, or legal requirements change. The effective date will be updated, and material changes will be communicated where reasonably required.

Send privacy requests to [email protected] or use Avilion Support.

12. Notis privasi Bahasa Melayu

Avilion Technologies di Malaysia memproses data peribadi untuk mengurus akaun, pesanan, pembayaran, penghantaran, sokongan, waranti, pemulangan, keselamatan dan perkhidmatan yang diminta. Data yang berkaitan boleh termasuk nama, alamat e-mel, nombor telefon, alamat penghantaran, rekod pesanan, rujukan pembayaran, mesej sokongan, lampiran dan data teknikal keselamatan.

Data hanya dikongsi dengan penyedia perkhidmatan yang diperlukan, seperti penyedia pembayaran, identiti, e-mel, keselamatan, pengehosan dan penghantaran, atau apabila diwajibkan oleh undang-undang. Anda boleh meminta akses atau pembetulan, menarik balik persetujuan yang berkenaan, atau bertanya tentang pemprosesan melalui [email protected]. Pengesahan identiti mungkin diperlukan. Versi Bahasa Inggeris menerangkan skop penuh notis ini; semakan undang-undang terjemahan Bahasa Melayu masih diperlukan sebelum pelancaran produksi.