Bawal Exclusive Sdn Bhd (“Bawal Exclusive”, “we”, “our” or “us”) respects the privacy of individuals and is committed to protecting the personal data of our users, customers, business partners and visitors (collectively, “Users”).

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia.

This Privacy Policy applies to all personal data collected through our websites, mobile applications, social media platforms, customer service channels, events, promotions, and any other platforms owned or operated by Bawal Exclusive Sdn Bhd (collectively, the “Platforms”).

By accessing or using our Platforms or providing your personal data to us, you consent to the processing of your personal data in accordance with this Privacy Policy.

Personal Data Provided by You

We may collect personal data that you voluntarily provide to us, including but not limited to:

• Full name
  
• Residential or delivery address
  
• Email address
  
• Contact number(s)
  
• Date of birth
  
• Gender
  
• Payment and transaction details
  
• Account login credentials (if applicable)

Any other information you choose to provide when contacting us, registering an account, participating in promotions, or making enquiries

Automatically Collected Information

When you visit our Platforms, certain information may be collected automatically, including:

• Internet Protocol (IP) address
  
• Browser type and version
  
• Device information
  
• Pages visited and time spent
  
• Referring website
  
• Cookies and similar technologies
  

This information is collected to improve website functionality, security, and user experience.

Our Platforms may use cookies and similar technologies to:

• Remember user preferences
  
• Improve website performance
  
• Analyse traffic and usage patterns
  
• Enhance marketing and advertising effectiveness
  

You may choose to disable cookies through your browser settings. However, doing so may limit certain features of our Platforms.

Your personal data may be collected, used and processed for the following purposes (“Purposes”):

• To process and manage purchases, orders, exchanges and returns
  
• To verify and manage customer accounts or memberships
  
• To process payments and transactions
  
• To provide customer support and respond to enquiries or complaints
  
• To deliver products or services requested by you
  
• To administer promotions, contests, events or loyalty programmes
  
• To conduct marketing, promotions and direct communications (subject to consent)
  
• To analyse customer preferences, sales trends and improve our products and services
  
• To maintain internal records and administrative purposes
  
• To comply with legal, regulatory or statutory obligations
  

We may disclose your personal data to:

• Our employees, departments and internal teams
  
• Third-party service providers, vendors, contractors or professional advisers who provide services on our behalf (e.g. payment gateways, logistics providers, IT services, marketing agencies)
  
• Regulatory authorities or law enforcement agencies where required by law
  

All third parties are required to handle your personal data securely and only for the purposes specified by us.

We do not sell, trade or rent your personal data to third parties for commercial purposes.

We take reasonable technical and organisational measures to protect your personal data against:

• Unauthorised access
  
• Accidental loss
  
• Misuse, alteration or disclosure
  

While we strive to protect your personal data, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Your personal data will be retained only for as long as necessary to fulfil the Purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

When personal data is no longer required, it will be securely deleted or anonymised.

You have the right to:

• Request access to your personal data
  
• Request correction of inaccurate or incomplete personal data
  
• Withdraw consent for marketing communications at any time
  

Requests may be made in writing to our contact details below. We may charge a reasonable administrative fee for data access requests as permitted under PDPA.

Our Platforms may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. Users are encouraged to review the privacy policies of those third parties.

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be published on our Platforms and will take effect upon posting.

Continued use of our Platforms after any changes constitutes acceptance of the revised Privacy Policy.