JY Store (Marketplace Platform) — Privacy Policy

🏪 Marketplace Context

JY Store is an online marketplace platform where third-party sellers (“Sellers”) list and sell products or services to buyers (“Users”). When you place an order or contact a Seller, certain information may be shared for fulfilment, delivery, and support.

📌 1. Scope and Acceptance

By accessing, registering, or using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. This Policy applies to visitors, registered Users, Buyers, Sellers, merchants, agents, and service providers using the Platform.

⚖️ 2. Compliance With Malaysian Law

We handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA) and applicable Malaysian regulations. Where appropriate, we also adopt reasonable data protection practices aligned with common international standards.

🧾 3. Personal Data We Collect

3.1 Information You Provide Directly

• Identity and contact details (e.g., full name, email, phone number)
• Delivery and billing information (e.g., shipping address)
• Account information (e.g., username, encrypted password)
• For Sellers: business details such as business name, registration number, bank details, and contact person
• Order-related communications, messages, support requests, and feedback
• Where required for verification or compliance: NRIC/Passport number or supporting documents

3.2 Information Collected Automatically

• IP address, device identifiers, browser type, operating system
• Pages visited, time spent, clicks, referral source, and usage behaviour
• Cookies and similar technologies (see Section 7)

3.3 Information From Third Parties

• Payment confirmation and transaction status from payment gateways
• Delivery and tracking updates from courier/logistics partners
• Verification or compliance data from authorised service providers (if applicable)

🎯 4. Purposes of Data Collection and Use

We may use personal data to:

• Create, manage, and secure user accounts
• Process orders, payments, refunds, and related transactions
• Enable order fulfilment, delivery, and customer support
• Facilitate communication between Buyers and Sellers
• Prevent fraud, misuse, suspicious activity, or prohibited conduct
• Comply with legal, regulatory, tax, accounting, and audit requirements
• Maintain platform security, performance, and service reliability
• Send service notices (e.g., order updates, security alerts, system messages)
• Send marketing communications where consent is provided (see Section 12)

🏪 5. Marketplace-Specific Data Use (Important)

Because JY Store is a marketplace platform:

• Sellers may access Buyer details required for fulfilment and support (e.g., name, phone number, delivery address, order items).
• Sellers must comply with PDPA and applicable laws when using Buyer data and should not use Buyer data for unrelated marketing without consent.
• JY Store acts as a platform provider and does not control Sellers’ independent handling of personal data outside Platform processes.

🔁 6. Disclosure of Personal Data

We do not sell or rent your personal data. We may disclose personal data on a need-to-know basis to:

• Sellers (for fulfilment and customer support)
• Payment gateways and financial institutions (for payment processing)
• Courier, logistics, and delivery partners (for delivery and tracking)
• IT, hosting, cloud, and security service providers (for platform operations)
• Professional advisors (e.g., legal, audit, accounting) where necessary
• Government authorities/regulators where required by law or lawful request

Where applicable, we apply contractual and/or operational safeguards to protect personal data when shared with service providers.

🍪 7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functions (e.g., login sessions, security)
• Remember preferences and improve usability
• Measure traffic, performance, and user behaviour analytics
• Support marketing measurement where enabled

You can control cookies through browser settings. Disabling cookies may affect certain Platform features.

🔒 8. Data Security

We use reasonable safeguards to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These may include access controls, secure hosting, monitoring, and encryption where appropriate.

🗂️ 9. Data Retention

We retain personal data only for as long as necessary to provide Platform services, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Data that is no longer required will be securely deleted or anonymised.

🌍 10. Cross-Border Data Transfers

Some service providers (e.g., cloud hosting, security, email tools) may store or process data outside Malaysia. Where this occurs, we take reasonable steps to ensure data is protected to standards comparable to PDPA requirements.

✅ 11. Your Rights Under PDPA

Subject to PDPA and applicable limitations, you may request to:

• Access your personal data held by us
• Correct inaccurate or incomplete data
• Withdraw consent for certain processing (subject to legal/contractual restrictions)
• Object to or restrict certain uses of your data where applicable

To protect your privacy, we may require identity verification before processing requests.

📣 12. Marketing Communications

Where you have provided consent (or where permitted by law), we may send marketing or promotional messages via email, SMS, WhatsApp, or other channels. You can opt out at any time by using an unsubscribe option (if provided) or by contacting us.

🧒 13. Children’s Privacy

The Platform is intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take reasonable steps to delete it.

🔗 14. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for third-party privacy practices. Please review the relevant third-party policies before providing data.

📝 15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on the Platform with a revised “Last Updated” date. Your continued use of the Platform after updates constitutes acceptance of the revised Policy.

☎️ 16. Contact Us

For questions, PDPA requests, or complaints relating to this Privacy Policy or our handling of personal data, please contact: