Eatly Global, operated by All About Idly Enterprise ("we", "us", "our"), is committed to protecting your personal information. This Privacy Policy explains what data we collect when you visit eatly's website, place an order, or contact us, in accordance with the Personal Data Protection Act 2010 (PDPA), Malaysia.
1. Information We Collect
We collect personal data that you voluntarily provide or that is generated through your use of our services:
- Account & Contact Details — full name, email address, phone number when you register or contact us.
- Delivery Information — delivery address(es) saved to your customer account.
- Order & Transaction Data — products ordered, quantities, order value, payment method, order status, and invoice records.
- Enquiries & Complaints — messages, attachments and correspondence submitted through our product enquiry or complaint forms.
- Support Tickets — communications exchanged with our customer support team.
- Technical Data — IP address, browser type, referring URL, pages visited, and session data collected automatically through cookies and server logs.
- Payment Data — we do not store card numbers. Payment is processed securely by third-party gateways (see Section 5). We retain transaction references and payment status for order fulfilment and accounting.
2. How We Use Your Information
We use your personal data only for the purposes listed below, which are either necessary to fulfil your order or based on your consent:
- Processing and fulfilling your orders, including delivery and invoicing.
- Setting up and managing your customer account.
- Communicating with you about your orders, enquiries or complaints.
- Sending order confirmations, delivery updates and invoice PDFs.
- Improving our website and services through anonymised analytics.
- Complying with legal obligations under Malaysian law.
- Preventing fraud and ensuring website security.
We will only send you marketing communications if you have opted in. You may withdraw consent at any time by contacting us at eatlyglobal@gmail.com.
3. Legal Basis for Processing
Under the PDPA 2010, we process your personal data on the following grounds:
- Contract performance — processing your order and managing your account.
- Consent — marketing communications and non-essential cookies.
- Legitimate interests — fraud prevention, website security, and service improvement.
- Legal obligation — tax records, consumer protection, and regulatory compliance.
4. Cookies
We use cookies and similar technologies to:
- Maintain your shopping cart session across pages.
- Remember your login state (customer account).
- Analyse site traffic via anonymised statistics.
Essential cookies (cart, session) are required for the site to function. You can disable non-essential cookies in your browser settings, but this may affect some site features.
5. Third-Party Service Providers
We share your data with trusted third parties only as necessary to fulfil your order or operate our platform:
| Provider | Purpose | Data Shared |
|---|
| PayPal |
Online payment processing |
Name, email, order total |
| Curlec (Razorpay) |
FPX / Malaysian online banking |
Name, email, order total, bank reference |
| EasyParcel |
Courier rate lookup & shipment booking |
Delivery address, parcel weight/dimensions |
| Hosting provider |
Website hosting & email |
Server logs, email content |
All third-party providers are contractually required to protect your data and are prohibited from using it for any other purpose. We do not sell your personal data to any third party.
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Customer accounts — retained while your account is active, and for up to 3 years after the last activity, in case of warranty, refund or legal claims.
- Order & invoice records — retained for 7 years as required by Malaysian tax law.
- Enquiries & support tickets — retained for 2 years after resolution.
- Technical/server logs — retained for 90 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction, including:
- HTTPS encryption for all data in transit.
- Bcrypt password hashing for customer accounts.
- Role-based access control in our admin panel — staff can only access data relevant to their role.
- Regular backups and server security maintained by our hosting provider.
Payments are handled directly by PCI-DSS-compliant payment gateways. We never transmit or store full card numbers on our servers.
8. Your Rights Under PDPA 2010
As a data subject under Malaysian law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Withdrawal of consent — withdraw consent for marketing communications at any time.
- Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia.
To exercise your rights, contact us at eatlyglobal@gmail.com. We will respond within 21 days.
9. Children's Privacy
Our website and services are intended for adults. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Continued use of our website after the update date constitutes acceptance of the revised policy.
11. Contact Us