Skip to Content

Privacy Policy

Effective Date: 16 July 2026

BetterWaves Enterprise (“BetterWaves”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you:

  • visit or use our website at https://betterwavesbn.com;

  • create or use a customer account;

  • purchase or enquire about our products;

  • contact us through email, telephone, WhatsApp, social media or other channels;

  • subscribe to marketing communications;

  • participate in promotions, surveys, events or loyalty activities; or

  • otherwise interact with BetterWaves.

This Privacy Policy should be read together with our Standard Terms and Conditions of Sale and our Cookie Policy.

By providing personal data to us or using our services, you acknowledge that your personal data may be collected, used and disclosed as described in this Privacy Policy, subject to your choices and applicable law.

1. About Us

The organisation responsible for personal data covered by this Privacy Policy is:

BetterWaves Enterprise

Questions, requests or complaints relating to personal data may be directed to us using the contact details above.

2. Meaning of Personal Data

“Personal data” means data about an identifiable individual, whether the individual can be identified from that data alone or from that data together with other information to which an organisation has or is likely to have access.

Personal data does not generally include information that has been anonymised so that it can no longer reasonably be associated with an identifiable individual.

3. Personal Data We May Collect

The types of personal data we collect depend on how you interact with us.

3.1 Identity and contact information

We may collect:

  • your name;

  • email address;

  • telephone or WhatsApp number;

  • billing address;

  • delivery or pickup information;

  • company or organisation name, where applicable; and

  • customer-account details.

3.2 Order and transaction information

We may collect:

  • products ordered, purchased, returned or exchanged;

  • order numbers and transaction references;

  • purchase dates and amounts;

  • delivery and collection records;

  • discount, voucher or gift-card usage;

  • refund, return and complaint records;

  • communication relating to an order; and

  • records of customer preferences and purchase history.

3.3 Payment information

Depending on the payment method selected, we may collect or receive:

  • payment status;

  • payment reference numbers;

  • bank-transfer information;

  • proof-of-payment documents;

  • payment-provider transaction identifiers;

  • the card type and limited card information made available by the payment provider; and

  • information needed to process refunds.

Complete card numbers, card security codes and similar payment credentials are generally processed directly by the relevant payment provider and are not intended to be stored by BetterWaves.

3.4 Account information

Where customer accounts are available, we may collect:

  • login identifiers;

  • encrypted or protected account credentials;

  • saved addresses;

  • account preferences;

  • order history;

  • shopping-cart information; and

  • account activity.

You are responsible for keeping your login details confidential and notifying us if you suspect unauthorised use of your account.

3.5 Communications and customer-service information

When you contact us, we may collect:

  • the contents of emails, WhatsApp messages, social-media messages and other communications;

  • enquiries, feedback, reviews and complaints;

  • photographs or videos submitted in relation to damaged, defective or incorrect products;

  • call or conversation notes;

  • information you provide when requesting support; and

  • records of our responses.

3.6 Marketing and preference information

We may collect:

  • your subscription and marketing preferences;

  • your product or brand interests;

  • responses to campaigns, promotions or surveys;

  • engagement with marketing emails or advertisements;

  • voucher and promotional participation; and

  • communication preferences.

3.7 Website, device and technical information

When you use our Website, certain information may be collected automatically, including:

  • Internet Protocol address;

  • browser type and version;

  • device type and operating system;

  • language and time-zone settings;

  • referring website or source;

  • pages viewed and links selected;

  • date, time and duration of visits;

  • session, login and shopping-cart information;

  • approximate location inferred from technical information;

  • cookie identifiers and similar technologies; and

  • error logs, security events and diagnostic information.

More information on these technologies should be provided in our Cookie Policy.

3.8 Information from social-media platforms

Where you interact with our social-media pages, advertisements or messages, we may receive information permitted by the relevant platform and your privacy settings, such as:

  • your public profile name;

  • username or account identifier;

  • messages, comments or reactions;

  • advertising interaction information; and

  • information submitted through social-media forms.

The relevant social-media platform separately controls its own processing of your information.

3.9 Information about another person

You may provide personal data about another person, for example when:

  • placing an order for delivery to another recipient;

  • authorising another person to collect an order;

  • purchasing a gift; or

  • providing an alternative contact person.

You should only provide another person’s personal data where you are authorised to do so. You should also make them aware that their information will be handled in accordance with this Privacy Policy.

4. How We Collect Personal Data

We may collect personal data:

  • directly from you;

  • through the Website and Odoo customer or checkout functions;

  • when you place or pay for an order;

  • when you create or update an account;

  • when you contact us;

  • through cookies and similar technologies;

  • from payment providers;

  • from delivery, courier or collection partners;

  • from social-media and advertising platforms;

  • from resellers, event organisers or commercial partners where appropriate;

  • from publicly available sources; and

  • from another person acting on your behalf.

Where required, we will provide notice of the relevant purposes when or before personal data is collected.

5. Purposes for Which We Use Personal Data

We may collect, use and disclose personal data for the purposes described below.

5.1 Processing and fulfilling orders

This includes:

  • receiving and confirming orders;

  • verifying and recording payment;

  • preparing products for delivery or collection;

  • arranging delivery;

  • communicating order status;

  • processing returns, exchanges and refunds;

  • providing invoices, receipts and transaction records; and

  • administering warranties or product claims.

5.2 Managing customer accounts

This includes:

  • creating and maintaining customer accounts;

  • authenticating account access;

  • displaying order history and saved information;

  • enabling account and preference updates;

  • maintaining shopping carts or wish lists; and

  • providing account-related support.

5.3 Providing customer service

This includes:

  • responding to enquiries;

  • investigating complaints;

  • handling product, delivery or payment issues;

  • confirming identity where reasonably necessary;

  • managing reviews and feedback; and

  • maintaining records of customer interactions.

5.4 Operating and improving our business

This includes:

  • managing inventory and procurement;

  • analysing sales and product performance;

  • maintaining financial and accounting records;

  • planning promotions and product ranges;

  • improving our Website and customer experience;

  • training personnel;

  • generating aggregated business reports;

  • conducting internal audits; and

  • managing relationships with suppliers and service providers.

5.5 Website operation, security and fraud prevention

This includes:

  • enabling Website and checkout functionality;

  • maintaining customer sessions and shopping carts;

  • preventing unauthorised access;

  • detecting suspected fraud, abuse or unlawful activity;

  • protecting our customers, systems and business;

  • troubleshooting technical issues;

  • monitoring Website performance; and

  • maintaining security and access logs.

5.6 Marketing and promotions

Subject to applicable requirements and your preferences, we may use contact and preference information to:

  • send news, product updates and promotional offers;

  • inform you about sales, events or new products;

  • provide personalised product recommendations;

  • measure the effectiveness of marketing campaigns;

  • create advertising audiences;

  • display relevant advertisements; and

  • administer competitions, giveaways and promotions.

You may opt out of direct marketing at any time using the unsubscribe option provided, adjusting your preferences where available, or contacting us.

Opting out of marketing will not prevent us from sending non-marketing communications relating to an order, payment, account, security issue or customer-service request.

5.7 Legal and regulatory purposes

We may use or disclose information where reasonably necessary to:

  • comply with applicable laws and lawful requests;

  • maintain required tax, accounting and commercial records;

  • respond to regulatory, governmental or law-enforcement authorities;

  • establish, exercise or defend legal claims;

  • recover debts;

  • enforce our contractual rights;

  • investigate suspected wrongdoing; and

  • protect the rights, safety and property of BetterWaves, our customers and others.

6. Consent and Other Permitted Processing

Where consent is required, we will seek consent appropriate to the relevant purpose.

In certain circumstances, consent may be inferred or deemed where:

  • you voluntarily provide personal data for an evident purpose;

  • processing is reasonably necessary to enter into or perform a transaction requested by you;

  • information must be shared with a service provider to fulfil your order; or

  • processing is otherwise permitted by applicable law.

We will not require you, as a condition of receiving a product or service, to consent to the collection, use or disclosure of personal data beyond what is reasonable for providing that product or service.

Where we wish to use personal data for a materially different purpose, we will provide additional notice or seek further consent where required.

7. Direct Marketing

We may send direct marketing communications where:

  • you have requested or consented to receive them;

  • you have subscribed to our mailing list;

  • you have otherwise indicated an interest in our products or promotions; or

  • the communication is otherwise permitted by applicable law.

Marketing communications may be sent through:

  • email;

  • SMS;

  • WhatsApp;

  • social-media platforms;

  • Website notifications; or

  • other channels selected by you.

You may withdraw consent to direct marketing at any time.

You can unsubscribe by:

  • selecting an unsubscribe link in a marketing email;

  • replying with an opt-out request where that option is provided;

  • adjusting available account or communication settings; or

  • contacting us at sales@betterwavesbn.com.

We may retain limited information showing that you opted out so that we can respect your preference in the future.

8. Cookies and Similar Technologies

Our Website may use cookies, pixels, local storage, tags and similar technologies.

These technologies may be used for:

  • essential Website operation;

  • login and account authentication;

  • maintaining shopping carts and checkout sessions;

  • remembering preferences;

  • Website security;

  • fraud prevention;

  • traffic and performance analysis;

  • measuring marketing campaigns;

  • social-media functionality; and

  • personalised advertising.

Some cookies are necessary for the Website to function and cannot reasonably be disabled through our Website.

Optional analytics, advertising or social-media technologies may be controlled through our cookie-consent tool where available.

You may also manage cookies through your browser settings. Blocking certain cookies may affect account login, shopping-cart, checkout or other Website functionality.

Further details, including available cookie categories and controls, should be provided in our Cookie Policy.

9. Disclosure of Personal Data

We do not sell personal data to third parties.

We may disclose personal data to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy.

9.1 Website, hosting and business-system providers

This may include Odoo and other providers supporting:

  • Website hosting;

  • e-commerce operations;

  • customer accounts;

  • order processing;

  • inventory;

  • invoicing;

  • customer relationship management;

  • email delivery;

  • data storage; and

  • technical support.

9.2 Payment providers and financial institutions

Information may be shared with:

  • banks;

  • card-payment processors;

  • payment gateways;

  • digital-wallet providers;

  • fraud-prevention services; and

  • financial-service providers involved in processing payments or refunds.

Payment providers may process personal data under their own terms and privacy policies.

9.3 Delivery and logistics providers

We may disclose information such as your name, contact number, delivery address and delivery instructions to couriers, drivers or logistics providers for order fulfilment.

9.4 Communications providers

We may use email, telecommunications, messaging and social-media providers to communicate with you.

Where you communicate with us through WhatsApp, Instagram, Facebook or another third-party platform, that platform may separately process information in accordance with its own privacy practices.

9.5 Analytics, advertising and marketing providers

Subject to your cookie and marketing choices, we may disclose or make information available to providers that assist with:

  • Website analytics;

  • campaign measurement;

  • email marketing;

  • social-media advertising;

  • customer engagement;

  • audience creation; and

  • advertising performance.

Where reasonably possible, information used for analysis may be aggregated, pseudonymised or otherwise limited.

9.6 Professional advisers

We may disclose information to accountants, auditors, lawyers, insurers, consultants and other professional advisers where reasonably necessary.

9.7 Governmental and legal recipients

We may disclose information to courts, regulators, government bodies, law-enforcement agencies or other authorised persons where:

  • required by law;

  • required by a lawful order or request;

  • necessary to protect legal rights;

  • necessary to investigate suspected fraud or unlawful conduct; or

  • otherwise permitted by applicable law.

9.8 Business transfers

If BetterWaves undergoes a sale, restructuring, merger, acquisition or transfer of all or part of its business, personal data may be disclosed to prospective or actual purchasers and their advisers, subject to appropriate confidentiality and legal requirements.

10. Service Providers

Third parties processing personal data on our behalf are expected to:

  • process personal data only for authorised purposes;

  • protect the confidentiality and security of the data;

  • restrict access to authorised personnel;

  • comply with applicable legal and contractual obligations; and

  • delete, return or cease using the data when it is no longer required, subject to lawful retention requirements.

Some service providers may independently determine how they process certain information. In those situations, their own privacy policies may also apply.

11. Overseas Transfers

Some of our service providers, technology systems, payment providers, social-media platforms or data-storage providers may process or store personal data outside Brunei Darussalam.

As a result, personal data may be transferred to countries that have different data-protection laws.

Where personal data is transferred outside Brunei Darussalam, we will take reasonable steps required under applicable law to ensure that the transferred personal data receives a standard of protection comparable to the protection required in Brunei Darussalam.

These steps may include:

  • using reputable service providers;

  • reviewing relevant privacy and security commitments;

  • entering into contractual data-protection arrangements where appropriate;

  • limiting the information transferred;

  • applying access controls and security measures; and

  • relying on another legally permitted transfer mechanism.

12. Protection and Security of Personal Data

We use reasonable administrative, organisational and technical safeguards intended to protect personal data against:

  • unauthorised access;

  • unauthorised collection, use or disclosure;

  • copying or modification;

  • accidental loss;

  • destruction;

  • improper disposal; and

  • other similar risks.

Measures may include:

  • account and access controls;

  • password protections;

  • encryption where appropriate;

  • secure connections;

  • restricted staff access;

  • system monitoring;

  • software updates;

  • backups;

  • vendor-management measures; and

  • internal confidentiality practices.

No website, internet transmission or electronic-storage system is completely secure. We therefore cannot guarantee absolute security.

You should protect your account password, avoid sharing login credentials and contact us promptly if you suspect unauthorised account activity.

13. Data Breaches

Where we become aware of a personal-data breach, we will assess the circumstances and take reasonable steps to:

  • contain and investigate the breach;

  • reduce potential harm;

  • restore the security of affected systems;

  • document the incident; and

  • notify affected individuals or relevant authorities where required by applicable law.

14. Accuracy of Personal Data

We take reasonable steps to ensure that personal data used to make decisions affecting you, or disclosed to another organisation, is accurate and complete.

You should provide accurate and current information and notify us when your information changes.

Where available, you may update certain details through your customer account. You may also contact us to request correction of inaccurate or incomplete personal data.

15. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to:

  • fulfil the purposes for which it was collected;

  • maintain customer and transaction records;

  • comply with legal, tax, accounting and audit requirements;

  • resolve disputes and complaints;

  • prevent fraud and abuse;

  • enforce agreements; and

  • protect our legitimate legal and business interests.

Different categories of information may be retained for different periods.

For example:

  • order, invoice and payment records may be retained for accounting, tax and legal purposes;

  • customer-service records may be retained while an issue or potential claim remains relevant;

  • account information may be retained while the account is active;

  • security logs may be retained for a limited period for investigation and protection purposes; and

  • marketing information may be retained until you unsubscribe or the information is no longer needed.

When personal data is no longer reasonably required for a legal or business purpose, we will take reasonable steps to delete it, securely dispose of it, or anonymise it so that it can no longer be associated with an identifiable individual.

Backup copies may remain for a limited period until they are overwritten or securely removed in accordance with our system processes.

16. Your Rights and Choices

Subject to applicable law and any permitted exceptions, you may have the right to:

  • request access to personal data held about you;

  • request information about how your personal data has been used or disclosed;

  • request correction of inaccurate or incomplete personal data;

  • withdraw consent for particular processing;

  • opt out of direct marketing;

  • update account and communication preferences;

  • request closure of your customer account; and

  • raise a question or complaint concerning our handling of personal data.

These rights are subject to applicable legal limitations. For example, we may be permitted or required to withhold certain information where disclosure would reveal another person’s personal data, prejudice an investigation, breach legal privilege or conflict with another legal obligation.

17. Access Requests

You may request access to personal data that we hold about you and information regarding how it has been used or disclosed within the applicable legal period.

To help us respond, please provide:

  • your full name;

  • your contact details;

  • relevant order or account information;

  • a clear description of the data requested; and

  • any information reasonably needed to verify your identity.

We may request further information to clarify the scope of a request.

Where permitted by law, we may charge a reasonable fee reflecting the cost of responding to an access request. We will inform you of any applicable fee before proceeding.

18. Correction Requests

You may ask us to correct an error or omission in personal data held about you.

Where appropriate and required, we may also send the corrected information to an organisation to which the inaccurate information was previously disclosed, unless that organisation no longer needs the corrected information for a legal or business purpose.

We may decline a correction request where permitted by law, but will explain the reason where required.

19. Withdrawal of Consent

You may withdraw consent to the collection, use or disclosure of personal data by giving us reasonable notice.

Before processing the withdrawal, we may explain the likely consequences.

Depending on the information and purpose involved, withdrawal of consent may mean that we are unable to:

  • process or fulfil an order;

  • provide delivery;

  • maintain an account;

  • process a refund;

  • respond fully to a request;

  • provide certain Website features; or

  • continue a service requested by you.

Withdrawal does not affect processing already carried out lawfully before the withdrawal.

We may continue to retain, use or disclose personal data without consent where required or permitted by applicable law.

20. Account Closure and Deletion Requests

You may ask us to close your customer account.

Closing an account does not necessarily require us to delete all associated information. We may retain information where necessary for:

  • completed transactions;

  • accounting and tax records;

  • refunds and warranty claims;

  • fraud prevention;

  • disputes and legal claims;

  • compliance with applicable law; or

  • other legitimate business purposes permitted by law.

Where information no longer needs to be associated with you, we may anonymise it rather than delete it.

21. Children’s Personal Data

Our Website and products are intended for general consumer use and are not directed specifically at children.

Persons placing orders should be at least 18 years old or have the permission and supervision of a parent or legal guardian.

We do not knowingly seek to collect personal data directly from young children without appropriate authorisation.

If you believe that a child has provided personal data to us without proper permission, please contact us so that we can review and take appropriate action.

22. Third-Party Websites and Services

Our Website may contain links to external websites, social-media platforms, payment services or other third-party services.

We do not control the privacy, security or content practices of those third parties. This Privacy Policy does not apply to processing independently carried out by them.

You should review the privacy policy of the relevant third party before providing personal data.

23. Reviews, Comments and Public Content

Where you submit a product review, testimonial, comment, social-media tag or other content intended for publication, that content may become publicly visible.

Published content may include the display name, username or other information you choose to make public.

You should not include sensitive, confidential or unnecessary personal information in public reviews or comments.

We may moderate or remove content in accordance with our applicable terms and platform rules.

24. Automated Tools and Personalisation

We may use technological tools to:

  • recommend products;

  • personalise Website content;

  • identify likely customer interests;

  • detect suspicious activity;

  • organise customer-service enquiries;

  • analyse sales or marketing performance; and

  • improve business operations.

These tools may use account, transaction, Website-interaction or preference information.

We do not intend to make decisions producing significant legal or similarly substantial effects on customers solely through automated processing without appropriate safeguards.

25. Anonymised and Aggregated Information

We may combine or anonymise information so that it no longer identifies a particular individual.

We may use anonymised or aggregated information for:

  • sales analysis;

  • product planning;

  • inventory forecasting;

  • customer-experience improvements;

  • Website analytics;

  • statistical reporting; and

  • other legitimate business purposes.

This Privacy Policy does not restrict our use of information that can no longer reasonably identify an individual.

26. Complaints and Questions

Questions, requests and complaints relating to privacy may be submitted to:

Please include sufficient information to help us identify you and understand your request.

We will review privacy complaints in good faith and aim to respond within a reasonable period.

Where you are not satisfied with our response, you may have the right to raise the matter with the relevant data-protection authority or pursue another remedy available under the laws of Brunei Darussalam.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our Website or business operations;

  • new services, payment methods or delivery arrangements;

  • changes to our service providers;

  • changes in technology;

  • changes to applicable legal or regulatory requirements; or

  • improvements to our privacy practices.

The updated version will be published on the Website with a revised effective date.

Where a change materially affects how we use personal data already collected, we will provide additional notice or seek consent where required by law.

28. Governing Law

This Privacy Policy is governed by the laws of Brunei Darussalam, including the Personal Data Protection Order, 2025, where applicable.

Nothing in this Privacy Policy limits any rights or obligations that cannot lawfully be limited under applicable law.

29. Contact Details

For privacy-related enquiries, access or correction requests, withdrawal of consent, marketing opt-outs or complaints, please contact: