Legal
Privacy Policy
How Tonya Twins collects, uses, and protects your information when you shop ToniFlex.
Last updated: 3 August 2026
This Privacy Policy explains how Tonya Twins (“we”, “us”) handles personal data when you browse tonyatwins.com, use our cart, or place an order for ToniFlex™ products.
For privacy questions, email admin@tonyatwins.com or message us on Instagram @tonya_twins.
When you check out, we may collect your full name, email address, phone number, delivery address (including postcode, city, and state), order notes, product sizes and quantities, and shipping preference.
We also store a local cart in your browser (for example size and quantity) so you can continue shopping. Payment is processed by our payment provider; we do not store your full card or banking credentials on our servers.
We use your details to fulfil and ship orders, quote shipping, process payment, send order updates, and respond to support or refund requests.
We may also use aggregated, non-identifying information to improve the site and product experience.
We share only what is needed with trusted providers: payment processors (such as Billplz), courier and shipping partners, and hosting infrastructure that runs this website.
We do not sell your personal information. We may disclose data if required by Malaysian law or to protect our rights and customers.
Order and contact records are kept as long as needed to fulfil the order, handle refunds, meet accounting or legal duties, and resolve disputes.
Local cart data stays on your device until you clear it or complete checkout.
Under Malaysia’s Personal Data Protection Act, you may request access to, correction of, or limits on how we process your personal data, subject to applicable law.
Contact admin@tonyatwins.com with “Privacy request” in the subject. We may need to verify your identity before responding.
ToniFlex is sold to parents and guardians. We do not knowingly collect personal data directly from children for online accounts. If you believe a child provided data to us, contact us and we will review and delete it where appropriate.
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the site after an update means you accept the revised policy.