Privacy & Cookie Policy

​1. Introduction

MUSCLE CO-OP is operated by SANCTUARY 22 CO., LTD (hereinafter referred to as "the Company"), based in Phnom Penh, Cambodia.

We respect the privacy of our customers and website visitors and are committed to handling personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our international e-commerce operations and related services.

​

2. Information We Collect

Depending on how customers interact with our website and services, we may collect the following information:

• Name and contact information

• Email address and telephone number, where provided

• Billing and shipping addresses

• Order details, purchased products, and transaction records

• Payment status and transaction references provided by payment service providers

• Customer inquiries, requests, and correspondence

• Device information, IP address, browser information, and website usage data

• Other information voluntarily provided by customers

Payment card information may be collected and processed directly by authorized third-party payment service providers.

​

3. Purposes of Information Use

Personal information may be used for the following purposes:

1. Processing and managing customer orders

2. Arranging product sourcing, fulfillment, and international shipping

3. Confirming payments and maintaining transaction records

4. Providing customer support and responding to inquiries

5. Handling cancellations, delivery issues, returns, and refunds

6. Preventing fraud, unauthorized transactions, and misuse of our services

7. Maintaining website security and improving customer experience

8. Complying with applicable legal, tax, and regulatory obligations

9. Sending promotional communications where permitted by applicable law and, where required, with customer consent

We will not use personal information for unrelated purposes without an appropriate legal basis.

​

4. Legal Basis for Processing

Where applicable data protection laws require a legal basis, we process personal information on grounds including:

• Performance of a contract or steps requested before entering into a contract

• Compliance with legal obligations

• Legitimate business interests, such as fraud prevention, customer support, and website security, where permitted by law

• Customer consent, where required

Customers may withdraw consent where processing is based on consent, subject to applicable legal requirements.

​

5. Sharing Information with Third Parties

As MUSCLE CO-OP operates through international suppliers and fulfillment partners, certain customer information must be shared to complete orders and provide services.

Information may be shared with:

• Overseas manufacturers, suppliers, and fulfillment partners

• International shipping carriers and logistics providers

• Payment service providers and financial institutions

• Website hosting, e-commerce, and technical service providers

• Professional advisers and relevant authorities, where legally required

Information shared with service providers will be limited to what is reasonably necessary for the relevant purpose.Third-party providers may process information in accordance with their own applicable privacy policies and legal obligations.

​

6. International Data Transfers

MUSCLE CO-OP serves customers in multiple countries and regions.

Personal information may be transferred to or processed in Cambodia, the countries where our suppliers and service providers operate, or other locations involved in fulfilling customer orders.Where required by applicable law, we will implement appropriate measures to protect personal information transferred internationally.

​

7. Data Storage and Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include restricted access, secure service providers, and appropriate administrative safeguards.However, no method of electronic transmission or storage can be guaranteed to be completely secure.

​

8. Data Retention

Personal information will be retained only for as long as reasonably necessary to fulfill the purposes described in this policy, including order administration, customer support, accounting, fraud prevention, and compliance with applicable legal obligations.

Retention periods may vary depending on the type of information, the relevant transaction, and applicable laws.When information is no longer required, it will be deleted, anonymized, or otherwise handled appropriately, subject to legal retention requirements.

​

9. Customer Privacy Rights

Depending on applicable law and jurisdiction, customers may have the right to:

• Request access to their personal information

• Request correction of inaccurate or incomplete information

• Request deletion of personal information

• Request restriction of certain processing activities

• Object to certain uses of personal information

• Withdraw previously provided consent

• Request data portability, where applicable

• Lodge a complaint with a relevant data protection authority

Requests may be submitted through our official contact form.We may request reasonable identity verification before processing requests involving personal information.

​

10. Marketing Communications

Where we offer newsletters, promotional messages, or other marketing communications, we will comply with applicable consent and marketing requirements.

Customers may opt out of promotional communications through the unsubscribe method provided or by contacting us.

Transactional communications relating to orders, deliveries, payments, or customer support may continue where necessary.

​

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support website functionality, security, user preferences, and, where enabled, analytics or marketing features.

Further information is provided in our Cookie Policy.

​

12. Children's Privacy

Our website and services are not specifically directed toward children.

Where age restrictions apply to particular products or services, customers must satisfy the relevant legal requirements.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take appropriate action.

​

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business operations, services, technologies, or applicable legal requirements.

The current version will be made available on our website.

Where required by law, material changes will be communicated through appropriate means.

​

14. Contact Information

For privacy-related inquiries, requests to access or correct personal information, or other data protection concerns, please contact us through the official MUSCLE CO-OP contact form.

​

Operating Company: SANCTUARY 22 CO., LTD

Service Name: MUSCLE CO-OP

Business Location: Phnom Penh, Cambodia

Further company information is available on our Company & Legal Information page.