Privacy Policy

EPOCH BLOOMING TOYS SDN BHD  (hereinafter referred to as “Company”, “we”, “us”, or “our”) is committed to protect the privacy and security of your personal data. This Privacy Policy is governed by the Personal Data Protection Act 2010 (as amended from time to time ) of Malaysia, which expression shall be deemed to include any regulations, orders, circulars and guidelines made or issued thereunder (collectively “PDPA Malaysia”), and describes the methods by which the Company collects, uses, stores, discloses, or transfers your personal data as required under Malaysian law.

For purposes of this Privacy Policy, “you” or “your” refers to any individual accessing our website https://my.sylvanianfamilies.com and/or using any of our services or products. By accessing our website and/or using any of our services or products, you accept and agree to be bound by the terms of this Privacy Policy. If you are acting on behalf of a corporation or other entity, you represent and warrant that you have the authority to bind such corporation or entity (and its relevant affiliates, as applicable) to this Privacy Policy, and that you will notify this Privacy Policy to each relevant data subject.

We do not knowingly collect personal data from anyone under the age of eighteen (18) without prior verifiable consent from a parent or legal guardian. For Malaysian users who are data subjects under the age of eighteen (18), parental or guardian consent must be obtained before personal data is collected or otherwise processed. When obtaining parental or guardian consent, we undertake reasonable verification steps to confirm such status. If it is discovered that personal data has been inadvertently collected or processed from a data subject under eighteen (18) years of age without proper consent, we will promptly take steps to delete such data from our records, unless further retention is required under Malaysian law. If you believe that a child under your guardianship has provided their personal data to us, please contact us using the contact information described in this Privacy Policy, so that we can address the issue in compliance with the PDPA Malaysia.

For clarity, within the meaning of the PDPA Malaysia, the term “personal data” refers to any information relating to an identified or identifiable individual, whether direct or indirect, including name, identification number, address, contact details, online identifiers, or any other information which is regulated as personal data under Malaysian law, regardless of whether collected electronically or otherwise.

A. Personal Data Collected by the Company

The Company will collect, use, store, disclose or transfer your following personal data:
- Name;
- Email;
- Address;
- Phone Number; and
- Online Behavior Data (which includes information obtained through cookies, such as your page views, scrolling activities, clicks, and purchasing behavior on our website).

B. Channels by which Personal Data are obtained

The Company may collect your personal data from your following interactions:
- purchasing the products on our website;
- creating user accounts through registration; or
- your communication with the Company, whether by email, phone, or other communication channels.

C. Collection and Use of Personal Data under Lawful Bases

(1) The Company may collect, use, store, disclose or transfer your personal data to fulfill its contractual obligations for purposes of:
- user identification;
- contacting you to provide services or sales transactions; and
- billing.

(2) In addition to paragraph (1), the Company may also collect, use, store, disclose or transfer your personal data in order to:
-  Inform you about news or advertisements related to the Company’s products or services (including those of its business operators or business partners);
-  Send to you promotional letters about the Company for direct marketing purposes (including about its operators or business partners);
-  Analyze customer behavior (including for its business operators);
-  Provide you with information relevant to your interests based on your website visit; and
- Track your overall online activity to enable website operators to improve the Company’s website or to improve its online marketing strategies.

D. Disclosure of Personal Data

The Company will not share your personal data with third-parties or disclose the same without your consent, unless we are legally permitted or obligated to do so. Furthermore, the Company will not use your personal data for any purpose other than that for which it was originally collected.

Notwithstanding the above, it may be necessary for the Company to share or disclose your personal data with affiliated companies or business partners, including but not limited to :
- AnyMind Japan Inc.
- Vendors, partners, service providers and data processors that the Company may engage from time to time to support the Company’s business and operations.

If we share your personal data with the above parties, we require them to handle your personal data in compliance with this Privacy Policy, our confidentiality and security requirements and the applicable laws and regulations.

Furthermore, it may be necessary for the Company to disclose your personal data during investigations, in compliance with or as required by law or any court order or as requested by government agencies or authorities.

E. Transfer of Personal Data

By agreeing to the Privacy Policy, you also consent to the transfer of your personal data outside Malaysia. 

Without prejudice to the generality of the foregoing, amongst the expected transferees outside Malaysia are:
- AnyMind Japan Inc. (service provider of the Company) in Japan; and
- Epoch Co., Ltd. in Japan.

F. Personal Data Retention and Duration

It is necessary for the Company to retain your personal data throughout the period in order to fulfill the purpose for which it was collected, including:
- Contacting you as our customers; and
- Obtaining your consent

Personal data shall be retained only as long as necessary for the purposes collected or as required by Malaysian law. Data will be securely deleted or anonymized when no longer necessary consistent with PDPA Malaysia requirements.

When the retention period has expired or when Company is no longer entitled to retain your personal data, it will destroy your personal data in accordance with its data retention policy and applicable laws and regulations.

G. Your Rights

As a data subject, you have the right to withdraw consent given to the Company at any time during the period your personal data are retained by the Company. Furthermore, you have the right of access to your personal data and to request  correction of personal data that the Company has retained. 

Further, you have the right to request that we cease to process your personal data for direct marketing.  You also have the right to request that your personal data be transferred to another party.

The exercise of your rights must comply with applicable laws and regulations. The Company reserves the right to refuse to comply with any such exercise  for reasons or circumstances prescribed by law and will explain why we refuse to comply with your request in our reply. To the extent permitted under the applicable laws and regulations, the Company reserves the right to collect fees for processing any requests, including but not limited to copying or reproduction of data.

Please note that we may not be able to grant you access to our website or provide you with services or products in the event you exercise your right to not consent or withdraw your consent to the Company’s processing of your personal data. The foregoing similarly applies should you elect to provide limited consent to the　Company’s processing of your personal data.

You can contact us via our contact information below to submit your request.

To ensure security of your personal data, we will ask you to verify your identity before processing your request. The Company will inform you of its response to your request in accordance with the PDPA Malaysia subject to successful verification of your identity.

H. Data Breach Notification

In the event of a personal data breach, if and where required, we will notify the Personal Data Protection Commissioner and affected individuals in such manner and such period as prescribed by the PDPA Malaysia.

I. Contact Information

EPOCH BLOOMING TOYS SDN BHD22, Jalan BA 2/1 Kawasan Perindustrian Bukit Angkat, Bukit Angkat Selangor Kajang 43000
epochbloomingtoys@gmail.com

J. Modification of Privacy Policy

From time to time, the Company may review this Privacy Policy to comply with guidelines, applicable laws and regulations. The Company will inform you of any changes, by way of the Company’s website, for your consideration. You may be asked to give consent to the Company’s new Privacy Policy by electronic or other appropriate means. The changes to the Privacy Policy will form an integral part of this Privacy Policy upon the effective date of the changes or your consent, as applicable.

K. Language

This Privacy Policy is issued in both English and Malay. In case of any discrepancy, the English version shall prevail. 
 
This Privacy Policy was last updated on October 29th, 2025
 
Note