Eats Shoots & Roots Sdn Bhd respects your privacy and is committed to protecting your personal data. This Privacy Policy clarifies how we collect, process, use, and safeguard your personal information in accordance with the Malaysian Personal Data Protection Act (PDPA) 2010.
1.1 Personal Data We Collect
When you browse our online shop, register an account, subscribe to our newsletter, or execute a purchase, we may collect the following data:
Identity & Contact Data: Name, billing address, delivery address, phone number, and email address
Transaction Data: Details about payments to and from you, and products you have purchased from us. (Note: Full financial card details are handled via encrypted external gateways and are not saved on our local servers).
Technical & Usage Data: Internet Protocol (IP) address, browser type, cookies, and behavior patterns on our website.
2.2 Purpose of Processing Your Data
Your personal data is collected and processed explicitly for the following operational reasons:
• To execute and deliver your merchandise orders seamlessly.
• To manage payments, refunds, and prevent fraudulent activities.
• To provide reliable customer support and respond to product queries.
• With your explicit consent, to share newsletters, community gardening updates, workshops, and promotional deals.
• To internalize data analytics to improve our e-commerce performance and inventory curation.
2.3 Data Sharing & Disclosure
We do not sell, rent, or trade your personal data to external third parties. We share necessary data only with trusted partners critical to fulfilling your orders: Logistics partners (couriers and delivery companies within Malaysia) to bring your orders to your doorstep. Payment processors to securely execute your transactions. Regulatory authorities or law enforcement where legally required by statutory provisions in Malaysia.
2.4 Data Security & Retention
Your personal data is only retained for as long as necessary to fulfill the operational and legal purposes specified in this policy.
2.5 Your Legal Rights Under the PDPA
As a data subject in Malaysia, you hold the following rights which can be exercised at any time:
The right to request access to and obtain a copy of your personal data currently in our possession.
The right to request immediate correction or update of any inaccurate or incomplete personal data.
The right to withdraw your consent for future marketing communications or data processing.
1.1 Personal Data We Collect
When you browse our online shop, register an account, subscribe to our newsletter, or execute a purchase, we may collect the following data:
Identity & Contact Data: Name, billing address, delivery address, phone number, and email address
Transaction Data: Details about payments to and from you, and products you have purchased from us. (Note: Full financial card details are handled via encrypted external gateways and are not saved on our local servers).
Technical & Usage Data: Internet Protocol (IP) address, browser type, cookies, and behavior patterns on our website.
2.2 Purpose of Processing Your Data
Your personal data is collected and processed explicitly for the following operational reasons:
• To execute and deliver your merchandise orders seamlessly.
• To manage payments, refunds, and prevent fraudulent activities.
• To provide reliable customer support and respond to product queries.
• With your explicit consent, to share newsletters, community gardening updates, workshops, and promotional deals.
• To internalize data analytics to improve our e-commerce performance and inventory curation.
2.3 Data Sharing & Disclosure
We do not sell, rent, or trade your personal data to external third parties. We share necessary data only with trusted partners critical to fulfilling your orders: Logistics partners (couriers and delivery companies within Malaysia) to bring your orders to your doorstep. Payment processors to securely execute your transactions. Regulatory authorities or law enforcement where legally required by statutory provisions in Malaysia.
2.4 Data Security & Retention
Your personal data is only retained for as long as necessary to fulfill the operational and legal purposes specified in this policy.
2.5 Your Legal Rights Under the PDPA
As a data subject in Malaysia, you hold the following rights which can be exercised at any time:
The right to request access to and obtain a copy of your personal data currently in our possession.
The right to request immediate correction or update of any inaccurate or incomplete personal data.
The right to withdraw your consent for future marketing communications or data processing.