PDPA Policy

Privacy Policy

Manjaku Personal Data and Privacy Policy

This Personal Data Protection Policy (“Policy”) sets out how Manjaku Retail Sdn Bhd (Company No. 928920-U) and its subsidiaries, affiliates, and related entities (“Manjaku”, “we”, “our” or “us”) collect, use, process, store, disclose, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By interacting with us, using our website (www.manjaku.com), submitting your personal data, or continuing your relationship with us, you acknowledge and consent to the practices described in this Policy.

Definition of Personal Data

“Personal Data” means any information in our possession or control that relates directly or indirectly to an individual and that can be used to identify that individual, whether on its own or in combination with other information. This includes, but is not limited to:

Full name

Identification number (NRIC/passport)

Date of birth

Gender

Race and religion (if voluntarily disclosed)

e-invoicing details

Contact details (telephone number, email address, mailing address)

Banking or payment information (credit/debit card or bank account details)

Account registration or login credentials

Employment and educational background (for job applicants)

Any other information that may be collected from you in relation to your interaction with Manjaku

Collection of Personal Data

Manjaku may collect your personal data through various sources and channels, including but not limited to:

When you register an account with us on our website or at our physical stores

When you make an online or in-store purchase

When you sign up for our newsletters, promotions, loyalty or membership programs

When you submit an enquiry, feedback, or complaint via email, phone, or chat

When you participate in contests, surveys, promotions, events or lucky draws organized by us

When you apply for employment through our recruitment portals, events, or in person

When you interact with our social media pages or digital advertisements

When data is shared with us by third-party service providers or government authorities (in compliance with lawful purposes)

We may also automatically collect information about your device and usage patterns (e.g., IP address, browser type, device information, cookies) when you visit our website.

Consent

By providing your personal data to Manjaku, you agree and consent to its collection, processing, and use as outlined in this Policy. You also consent to us contacting you by telephone, SMS, email, or other communication channels for the purposes stated herein.

You may withdraw your consent at any time by contacting our customer service department. However, please note that withdrawal of consent may limit our ability to provide you with the products, services, or communications you have requested.

Purpose of Collecting and Processing Personal Data

Your personal data may be used for, but not limited to, the following purposes:

To verify your identity and manage your account registration

To process and fulfil your orders, including payment, delivery, and order tracking

To respond to your enquiries, feedback, requests, or complaints

To improve customer experience, services, and product offerings

To inform you about promotions, events, and product launches that may interest you (only if you have opted in)

To perform data analytics, market research, and customer profiling

For internal business operations such as audits, risk assessments, and legal compliance

To detect and prevent fraudulent or unauthorized transactions

To comply with legal obligations, regulatory requirements, or law enforcement requests

For recruitment, onboarding, and employment verification (for job applicants)

Any other purpose directly related to the above or as required by applicable law

Disclosure of Personal Data

Manjaku will not sell or trade your personal data to third parties. However, we may disclose your data to the following, where necessary and relevant:

Our subsidiaries, affiliated companies, and service providers under strict confidentiality agreements

Delivery and logistics partners for order fulfilment

Payment processing providers, financial institutions, and merchant partners

Auditors, legal counsel, consultants, or other professional advisors

Government authorities or regulatory bodies when required by law

Technology service providers (including website and data hosting providers)

Marketing or event partners (only where you have consented to receive promotional materials)

In the event of corporate restructuring, mergers, or acquisitions

Your personal data will only be shared for purposes consistent with the original intent of collection or as required by law.

Refusal or Withdrawal of Consent

In some instances, the provision of personal data is mandatory (e.g., for account registration, payment processing, or legal compliance). If you choose not to provide the requested information or subsequently withdraw your consent, we may be unable to offer or continue our services to you.

You may opt out of marketing communications at any time by using the unsubscribe link provided in our emails or by contacting us directly.

Security of Personal Data

We take reasonable measures to ensure that your personal data is securely stored and protected from unauthorized access, alteration, disclosure, or destruction. This includes:

Regular security audits and updates of our systems

Access restrictions to sensitive data within our organization

Use of secure servers and encrypted connections for online transactions

Regular data backup and disaster recovery procedures

However, please note that no data transmission over the internet or storage system can be guaranteed to be 100% secure, and we cannot be held liable for unauthorized access beyond our control, such as cyberattacks or technical malfunctions.

Data Retention

Manjaku retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The retention period depends on the nature of our interaction with you. For example:

Account registration data is retained for the duration of your account’s active status

Transaction data is retained for legal and accounting purposes for a minimum statutory period

Complaint and enquiry data is retained until the issue is resolved, plus a reasonable period thereafter

Recruitment data is kept for up to 6 months following an unsuccessful application, unless further consent is obtained

Marketing data is retained until you unsubscribe or withdraw consent

After the retention period ends, your data will be securely deleted or anonymised.

Data Accuracy and Updates

We rely on you to provide accurate, complete, and up-to-date information. You are responsible for updating your personal data when necessary. Manjaku is not responsible for any losses resulting from inaccurate or outdated information provided by you.

You may review and update your data by logging into your account or contacting our customer service team.

Your Rights Under the PDPA

Under the PDPA, you have the right to:

Request access to the personal data we hold about you

Request correction or updating of inaccurate or incomplete data

Withdraw your consent for processing (subject to legal limitations)

Object to processing for direct marketing purposes

To exercise your rights, you may write to us. A nominal fee may apply for access requests, subject to PDPA regulations.

Amendments to This Policy

Manjaku reserves the right to amend this Policy from time to time to reflect changes in legal, technological, or business requirements. Any changes will be posted on our website, and where appropriate, notified to you directly. Continued use of our services after such amendments constitutes your acceptance of the updated Policy.

In the event of any conflict between the English and Bahasa Malaysia versions, the English version shall prevail.