Privacy Policy | dōTERRA Essential Oils Wellness
Last updated: 25 March 2026
1Collection of Personal Data
We may collect personal data that you voluntarily provide to us when you:
• submit a contact form;
• request information about products or services;
• book a wellness consultation;
• subscribe to our newsletter or marketing updates; or
• communicate with us through our website, email, WhatsApp, social media, or chatbot.
2Sources of Personal Data
We collect personal data:
• directly from you;
• from your interactions with our website, forms, booking tools, chatbot, and communications;
• from cookies and similar technologies; and
• where applicable, from service providers or platforms you use to contact us.
3Purposes of Processing
We may use your personal data for the following purposes:
• to respond to your inquiries;
• to provide information about our products, services, and educational content;
• to schedule, confirm, and conduct wellness consultations;
• to communicate with you regarding appointments or requested information;
• to send newsletters, promotional communications, or educational updates where you have opted in or where permitted by applicable law;
• to improve our website, services, and user experience;
• to maintain internal records and business administration; and
• to comply with legal or regulatory obligations.
4Marketing Communications
If you choose to receive promotional or educational messages from us, we may send you emails, messages, or other communications about products, services, events, or wellness education.
You may opt out of marketing communications at any time by:
• contacting us using the contact details above.
Your request to opt out of marketing will be respected as soon as reasonably practicable.
5Disclosure of Personal Data
We do not sell your personal data.
We may disclose your personal data only where necessary to:
• trusted service providers that help us operate our website, booking systems, email systems, customer relationship management systems, or communications tools;
• professional advisers, where necessary;
• regulatory authorities, law enforcement agencies, or other parties where required by law; or
• other parties with your consent.
Where third-party service providers process personal data on our behalf, we take reasonable steps to require them to handle the data securely and only for authorized purposes.
6Transfer and Storage of Personal Data
Your personal data may be stored on servers or platforms located in or outside Malaysia, including cloud-based systems used for website hosting, communications, booking, or CRM management.
Where personal data is transferred or stored outside Malaysia, we will take reasonable steps to ensure that it is protected with appropriate safeguards.
7Security of Personal Data
We take reasonable practical steps to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8Cookies and Website Analytics
Our website may use cookies, pixels, and similar technologies to improve functionality, remember preferences, analyze website traffic, and improve user experience.
You may manage cookie preferences through your browser settings. Disabling cookies may affect certain website functions.
9Chatbot and Website Messages
Interactions submitted through our chatbot, website forms, or messaging tools may be logged and reviewed for customer support, service improvement, training, record-keeping, and security purposes.
Please do not submit sensitive medical information, medical records, or emergency health information through the chatbot or website messaging tools.
10Consequences of Not Providing Personal Data
If you do not provide certain requested personal data, we may be unable to respond to your inquiry, arrange a consultation, provide requested information, or communicate with you effectively.
11Your Rights
Subject to applicable Malaysian law, you may request:
• access to your personal data;
• correction of inaccurate, incomplete, misleading, or outdated personal data;
• withdrawal of consent for certain processing activities; and
• deletion or cessation of use of your personal data where applicable.
To make a request, please contact us using the contact details above.
12Retention of Personal Data
We will retain your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Notice, or as required by law.
13Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Any updated version will be posted on this website with the revised effective date.