Galore Sdn. Bhd. (“Galore”, “we”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This policy explains what we collect, why, and the choices you have. It applies to the Galore website, mobile apps and partner applications.
Personal data: name, phone number, email, delivery addresses and profile details you provide.
Transaction data: orders, bookings, parcels, bill payments, wallet top-ups and points activity.
Technical data: device type, app version and approximate location while an order is active (to power live tracking).
Payment card data is held by our payment processors (Stripe and Curlec) — we never store full card numbers.
To fulfil orders (Partners receive only your name, delivery address and phone number needed for handover), to process payments and refunds, to operate rewards and promotions, to comply with LHDN e-invoicing requirements, and to keep the platform safe from fraud.
Transaction records are kept for 7 years as required by Malaysian tax law. Account data is deleted within 14 days of a verified deletion request, after wallet funds are refunded.
Data is encrypted in transit and at rest, with access limited to staff who need it.
Under the PDPA you may access, correct, or withdraw consent to the processing of your personal data. Contact [email protected] — we respond within 21 days.
Data Protection Officer, Galore Sdn. Bhd., No 20, First Floor, Main Bazaar, 98700 Limbang, Sarawak · [email protected]