Privacy Policy

This policy applies when you visit our website, create or use an account, contact us, place or enquire about an order, receive a delivery, request a return or refund, or otherwise interact with Malatrading. It does not govern independently operated websites, payment providers, carriers, or marketplace suppliers that publish their own privacy notices. Please review those notices before providing information to them.

We collect personal data that is reasonably necessary for the purposes described below. Depending on how you use the service, this may include:

• Identity and contact data: name, email address, telephone number, delivery and billing address, and communications preference.
• Account and transaction data: account identifier, order and return history, cart or wishlist activity, products viewed, delivery details, customer-service records, and fraud or dispute information.
• Payment-related data: payment method token, transaction status, amount, currency, and billing verification information. We do not intentionally store full card numbers or card security codes when a specialist payment provider processes the payment.
• Technical and usage data: IP address, device and browser characteristics, cookies or similar identifiers, log data, approximate location inferred from IP, pages or features used, and security events.
• Information from others: delivery updates from carriers, payment-status information from payment providers, and information from marketplace suppliers or fraud-prevention providers where needed to fulfil or protect a transaction.

• To create and administer accounts, process enquiries, take and fulfil orders, arrange delivery, manage returns, refunds, warranties, and customer support.
• To verify payments, prevent fraud, secure our services, investigate suspected misuse, and enforce our terms and policies.
• To comply with legal, tax, accounting, customs, record-keeping, regulatory, and dispute-resolution obligations.
• To analyse and improve site performance, product selection, fulfilment, and customer experience.
• To send service messages, such as order, delivery, security, or policy notices. Where required, we obtain consent before sending direct-marketing messages; you may opt out at any time.

We process personal data with your consent where consent is required, to take steps at your request or perform a transaction with you, to meet legal obligations, and for legitimate business purposes that do not override your rights and interests, such as fraud prevention, service security, and operational improvement. You may withdraw consent for optional processing or marketing at any time; withdrawal does not affect processing already carried out lawfully or processing we are permitted or required to continue.

We do not sell personal data. We disclose data only on a need-to-know basis to:

• marketplace suppliers, fulfilment providers, carriers, customs brokers, and other parties needed to supply, deliver, return, or service an order;
• payment, identity-verification, fraud-prevention, hosting, analytics, communications, customer-support, professional-adviser, and technology providers acting for us;
• governmental, regulatory, law-enforcement, judicial, insurance, or dispute-resolution bodies where disclosure is required or reasonably necessary to protect rights, safety, property, or the integrity of a transaction; and
• a purchaser, successor, or adviser in connection with a reorganisation, financing, acquisition, or sale of all or part of our business, subject to appropriate safeguards.

Because Malatrading operates cross-border commerce, personal data may be processed in Malaysia and in other countries where our suppliers, technology providers, carriers, marketplace suppliers, or payment providers operate. Before transferring data internationally, we take steps required by applicable law, including assessing the recipient, applying contractual or other appropriate safeguards, and limiting the data transferred to what is necessary for the relevant purpose.

We retain personal data only for as long as needed for the stated purposes, including transaction fulfilment, customer service, legal, tax, accounting, fraud-prevention, and limitation-period requirements. We use reasonable technical and organisational safeguards designed to protect data against unauthorised access, loss, misuse, alteration, or disclosure. No internet transmission or storage system is completely secure. Our services are not directed to children who cannot lawfully enter into a contract in their jurisdiction; do not provide a child's data unless you are authorised to do so.

Subject to applicable law and any permitted exception, you may request information about the personal data we hold, request correction of inaccurate or incomplete data, withdraw consent, object to or limit certain processing, opt out of direct marketing, and request deletion where we no longer need the data. To make a request, email support@malatrading.com from the email associated with your account and state the nature of your request. We may ask for information necessary to verify your identity and will respond within the period required by applicable law.

We use cookies and similar technologies as described in our Cookie Policy. Our services may link to third-party sites or services. Those parties control their own privacy practices, and we are not responsible for their content or policies. We may update this policy when our practices, service, or legal requirements change. The revised version will be posted here with an updated date; where required, we will provide additional notice or obtain consent.