Personal Data Protection Act 2010 (PDPA).

Personal Data Protection Policy

Effective Date: 01/01/2025

1. Introduction

At Miroza Leather (M) Sdn Bhd (hereafter referred to as "the Company"), we value your privacy and are committed to protecting your personal data. This policy outlines how we collect, use, disclose, and safeguard personal data in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Scope

This policy applies to all personal data processed by the Company, including data collected from customers, employees, vendors, and other stakeholders.

3. Definition of Personal Data

"Personal Data" refers to any information that relates directly or indirectly to an individual who is identifiable, such as name, contact details, identification numbers, financial information, and other sensitive information.

4. Personal Data Collected

We may collect the following types of personal data:

Customers: Name, contact number, email address, billing address, payment details, purchase history.
Employees: Full name, IC number, contact information, bank account details, and emergency contact.
Vendors: Business registration details, contact information, and payment details.

5. Purpose of Data Collection

The personal data collected will be used for the following purposes:

Processing orders, payments, and delivery.
Customer support and communication.
Marketing and promotional activities (with consent).
Compliance with legal and regulatory requirements.

6. Consent

We will obtain your consent before collecting or processing your personal data unless processing is necessary for legal or contractual obligations. By providing your personal data to us, you consent to the processing as outlined in this policy.

7. Disclosure of Personal Data

We will not disclose your personal data to third parties except for the following purposes:

To service providers for delivery, payment processing, and IT support.
To regulatory authorities, if required by law.
To business partners for marketing purposes (only with your consent).

8. Data Security

We implement appropriate technical and organizational measures to safeguard personal data, including:

Secure storage and encryption of data.
Regular monitoring and audits of data protection measures.
Restricting access to authorized personnel only.

9. Retention of Personal Data

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once the data is no longer needed, it will be securely deleted or anonymized.

10. Changes to This Policy

We reserve the right to update this policy from time to time to reflect changes in legal requirements or business practices. The updated policy will be posted on our website.