Privacy Policy & Data Security

1. Corporate Commitment to B2B Data Privacy & Confidentiality

Established in 1991, Sky Resources Group has grown into Malaysia’s premier Halal, GMP, and ISO-certified OEM, ODM, and private label cosmetic manufacturer. Operating across more than 30 international markets, we recognize that mutual trust and rigorous data protection form the foundation of successful long-term contract manufacturing partnerships.

This Privacy Policy outlines our transparent framework for gathering, processing, safeguarding, and utilizing personal and enterprise-level business information collected via our website and commercial communication channels. Our practices strictly comply with international data security regulations—including the Malaysian Personal Data Protection Act 2010 (PDPA), EU General Data Protection Regulation (EU GDPR) principles, and international corporate governance protocols.

2. Categories of Information We Collect

To execute tailored skincare formulations, fulfill sample requests, assist with global regulatory filings, and deliver bulk contract manufacturing orders, we collect specific categories of business and personal identifiable information (PII):

A. Commercial Inquiries & Account Details

When brand owners, procurement executives, or cosmetic distributors submit technical requests or contact our team, we collect corporate business details including full name, job title, corporate email address, telephone/mobile numbers, company name, geographical jurisdiction, target product categories, and estimated order volumes.

B. Formulation Specifications & Project Briefs

During custom formulation development and private label consultations, we collect technical briefs, active ingredient preferences, target benchmark product details, packaging specifications, and legal verification documents necessary for Non-Disclosure Agreements (NDAs).

C. Automated Technical & Analytical Metadata

When accessing our digital infrastructure, our servers automatically collect non-identifiable technical browsing information. This includes Internet Protocol (IP) addresses, browser specification types, operating system information, session duration, geographic region, referral URLs, and platform navigation paths to continuously improve user accessibility and digital security.

3. Purpose of Data Processing & Legal Basis

Sky Resources Group processes corporate and technical data strictly for legitimate business objectives and manufacturing obligations, specifically focusing on:

• Manufacturing & R&D Execution: Formulating customized skincare, personal care, and hair care products; preparing lab samples; issuing quotations; and executing full-scale factory production schedules.
• Regulatory & Compliance Filing: Facilitating product notifications, Halal compliance verifications (JAKIM), Certificate of Free Sale (CFS) issuing, and safety data sheet (SDS) approvals for ASEAN, US FDA MoCRA, EU Regulation 1223/2009, and Middle Eastern regulatory bodies.
• Supply Chain & Logistics Management: Managing export packaging declarations, customs clearance processing, freight forwarder integration, and international shipment dispatch.
• B2B Relationship Governance: Responding directly to technical inquiries, delivering requested product catalogs, providing market intelligence updates, and sharing annual cosmetic outlook reports.

4. Proprietary IP Security & NDA Protection

Protecting client intellectual property (IP) is central to our operational ethics. Sky Resources Group guarantees that all proprietary formulation ratios, custom active ingredient matrices, custom fragrance profiles, and client brand assets remain the exclusive, non-transferable property of our partner brands.

We enforce comprehensive, legally binding Non-Disclosure Agreements (NDAs) across all internal manufacturing divisions, laboratory personnel, and operational units. Confidential client information is never commercialized, repurposed, or disclosed to third-party competitors under any circumstances.

5. Cookie Technologies & Digital Tracking

Our website uses standard cookie technology and analytical scripts to enhance site navigation, analyze aggregate visitor behavior, and ensure optimal technical performance for our global web audience.

Cookies utilized on this portal do not store personally identifiable financial information. Site users retain complete autonomy to accept, block, or delete cookies at any time via their individual internet browser configuration controls. Disabling functional cookies will not impede basic browsing access to our corporate profile.

6. Information Distribution & Third-Party Restrictions

Sky Resources Group does not sell, rent, lease, trade, or monetize client data or enterprise contact lists to third-party marketing brokers. Data transfers occur strictly within the following operational exceptions:

• Vetted Logistics & Testing Partners: Accredited international freight partners, customs clearance agents, and independent analytical testing laboratories operating under strict contractual confidentiality obligations.
• Statutory Legal & Regulatory Mandates: Certified governmental regulatory agencies, Halal compliance bodies, or judicial entities when compulsory under governing international trade regulations or statutory laws.
• Corporate Risk & Fraud Prevention: Authorized legal counsel and financial institutions when necessary to protect against unauthorized commercial transactions, cyber threats, or criminal fraud investigations.

7. Data Infrastructure & Security Standards

We implement stringent administrative, technical, and physical security measures designed to safeguard client information against unauthorized access, loss, data corruption, or breach. Digital assets are stored within encrypted enterprise cloud networks equipped with multi-tier firewall protections, SSL encryption, and strict role-based authorization parameters.

Physical batch documentation, master formulation files, and lab retain samples are managed inside our audited, GMP-certified facility in Bukit Mertajam, Penang, Malaysia, under continuous biometric and security monitoring.

8. Global Data Transfers & Data Subject Rights

As an international skincare OEM serving clients across North America, Europe, Asia-Pacific, and the Middle East, corporate data may be processed across international borders to complete global supply chain operations. All international data processing follows unified high-level security standards.

Overseas clients and platform visitors possess statutory rights to inspect, update, correct, or request complete erasure of their personal or business contact records from our active outreach databases at any time.

9. Privacy Contact Information & Governance Enquiries

For inquiries, data access requests, or regulatory compliance questions regarding our privacy practices, please contact our Data Governance & Legal Compliance Office: