Last updated: 19 July 2026. DRAFT — pending review by a Malaysian advocate & solicitor. Issued in English and Bahasa Malaysia pursuant to section 7(3) of the Personal Data Protection Act 2010; in case of inconsistency, the English version prevails.
Privacy Notice (English)
This notice is issued by Pure Eats Sdn. Bhd. (“Pure Eats”, “we”) under the Personal Data Protection Act 2010 (PDPA).
1. Personal data we collect
Name, nickname, delivery address, phone/WhatsApp number, email; allergy and dietary profile (which may constitute sensitive personal data — we process it with your explicit consent to keep you safe); order, credit and payment records; optional profile details you volunteer (e.g. date of birth); communications records (types and delivery status of messages — we do not store message contents); and website usage data.
2. Purposes
To provide and bill the subscription service; prepare meals consistent with your allergy profile; deliver orders; provide customer support (including WhatsApp self-service); send service communications (order reminders, payment and expiry notices); operate promotions, referrals and reviews; comply with legal obligations (including tax and e-invoicing); and, only with your consent, send marketing communications.
3. Disclosure
We disclose personal data only to parties needed to run the service: delivery providers; payment processors and our bank; messaging providers (WhatsApp/SMS/email delivery); our POS and IT service providers; professional advisers; and authorities where required by law. We do not sell your personal data. Some providers may process data outside Malaysia; where so, we take reasonable steps to ensure comparable protection.
4. Security, retention and integrity
We take practical steps to protect personal data against loss, misuse and unauthorised access, including passwordless one-time-code login, role-restricted staff access, and not storing message contents or one-time codes. Data is retained only as long as needed for the purposes above or as required by law, then destroyed or anonymised. Please keep your profile up to date so our records remain accurate.
5. Your rights
Under the PDPA you may: access your personal data; correct it; withdraw consent to processing (which may mean we can no longer provide the service); and opt out of direct marketing at any time (section 43 PDPA) — every marketing email includes an unsubscribe link, or contact us. To exercise any right, contact our data protection contact: feedback@pure-eats.co / 33-02, Jalan Eco Majestic 10/1C, Eco Majestic, 43500 Semenyih, Selangor, Malaysia / WhatsApp +6016-232 0284. We may charge a modest fee for data access requests as permitted by the PDPA.
Notis Privasi (Bahasa Malaysia)
Notis ini dikeluarkan oleh Pure Eats Sdn. Bhd. (“Pure Eats”, “kami”) menurut Akta Perlindungan Data Peribadi 2010 (APDP).
1. Data peribadi yang kami kumpul
Nama, alamat penghantaran, nombor telefon/WhatsApp, e-mel; profil alahan dan pemakanan (yang mungkin merupakan data peribadi sensitif — diproses dengan persetujuan nyata anda demi keselamatan anda); rekod pesanan, kredit dan pembayaran; maklumat profil pilihan yang anda berikan; rekod komunikasi (jenis dan status penghantaran mesej — kandungan mesej tidak disimpan); dan data penggunaan laman web.
2. Tujuan
Untuk menyediakan dan mengebil perkhidmatan langganan; menyediakan hidangan selaras dengan profil alahan anda; membuat penghantaran; memberi sokongan pelanggan; menghantar komunikasi perkhidmatan (peringatan pesanan, notis pembayaran dan tempoh luput); mengendalikan promosi, rujukan dan ulasan; mematuhi kewajipan undang-undang; dan, hanya dengan persetujuan anda, menghantar komunikasi pemasaran.
3. Pendedahan
Data peribadi hanya didedahkan kepada pihak yang diperlukan untuk mengendalikan perkhidmatan: penyedia penghantaran; pemproses pembayaran; penyedia perkhidmatan pemesejan dan IT; penasihat profesional; dan pihak berkuasa jika dikehendaki undang-undang. Kami tidak menjual data peribadi anda. Sesetengah penyedia mungkin memproses data di luar Malaysia; jika demikian, kami mengambil langkah munasabah untuk memastikan perlindungan yang setara.
4. Keselamatan, penyimpanan dan integriti
Kami mengambil langkah praktikal untuk melindungi data peribadi daripada kehilangan, penyalahgunaan dan capaian tanpa kebenaran. Data disimpan hanya selagi diperlukan bagi tujuan di atas atau seperti dikehendaki undang-undang. Sila pastikan profil anda sentiasa dikemas kini.
5. Hak anda
Di bawah APDP, anda boleh: mengakses data peribadi anda; membetulkannya; menarik balik persetujuan pemprosesan; dan menarik diri daripada pemasaran langsung pada bila-bila masa (seksyen 43 APDP). Untuk melaksanakan mana-mana hak, hubungi: feedback@pure-eats.co / WhatsApp +6016-232 0284. Fi yang berpatutan mungkin dikenakan bagi permohonan akses data seperti dibenarkan oleh APDP.