1. INTRODUCTION

Galore Sdn Bhd ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Galore mobile application (the "App"). This policy is framed in compliance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").

Please read this Privacy Policy carefully. By using the App, you consent to the data practices described in this policy.

2. COLLECTION OF YOUR PERSONAL DATA

We may collect personal data about you in a variety of ways. The information we may collect on the App includes:

• Personal Identification Data: Your name, email address, phone number, and delivery address
• Geolocation Data: Real-time information about the location of your device to facilitate delivery.
• Financial Data: Payment method details (e.g., credit card numbers), which are processed and stored securely by our third-party payment gateway, not by us
• Transactional Data: Details about your orders (items purchased, order time, special instructions).
• Device and Usage Data: Your IP address, device type, operating system, browser type, and your activity on the App.
• User Content: Ratings, reviews, and feedback you provide about Merchants and Riders.

3. PURPOSE OF PROCESSING YOUR PERSONAL DATA

We use the personal data we collect for various purposes, including to:

• Create and manage your account.
• Fulfill and manage your orders.
• Facilitate the delivery of your items by sharing necessary information (name, address,
• location) with Merchants and Riders.
• Process payments and prevent fraudulent transactions.
• Communicate with you regarding your account or orders.
• Request feedback and contact you about your use of the App.
• With your consent, send you marketing and promotional communications.
• Monitor and analyze usage and trends to improve your experience with the App.
• Comply with legal and regulatory obligations.

4. DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to the following third parties:

• Merchants: To fulfill your order.
• Riders: To deliver your order.
• Third-Party Service Providers: Who perform services for us or on our behalf, including payment processing, data analysis, cloud hosting, and customer service.
• Legal Authorities: If required by law, court order, or to protect the rights, property, and safety of ourselves or others.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We will take reasonable steps to ensure that our agents and service providers are contractually bound not to use your personal data for any reason other than to provide the service they are contracted to provide.

5. SECURITY OF YOUR PERSONAL DATA

We use administrative, technical, and physical security measures to help protect your personal data. While we have taken reasonable steps to secure the personal data you provide to us, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. RETENTION OF YOUR PERSONAL DATA

We will only retain your personal data for as long as it is necessary to fulfill the purposes for which it was collected, or as required for legal, regulatory, or accounting purposes.

7. YOUR RIGHTS UNDER THE PDPA

As a data subject, you have the following rights under the PDPA:

• Right to Access: You have the right to request access to and obtain a copy of your personal data that we hold.
• Right to Correct: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Withdraw Consent: You have the right to withdraw your consent to our processing of your personal data at any time

To exercise these rights, please contact our Data Protection Officer using the contact details below. We may charge a prescribed fee for processing your data access request.

8. INTERNATIONAL DATA TRANSFER

Your personal data may be stored and processed in Malaysia or any other country where our servers or service providers are located. We will take all reasonable steps to ensure that any transfer of personal data outside of Malaysia is done in accordance with the PDPA.

9. BILINGUAL CLAUSE

In accordance with the PDPA, this Privacy Policy may be issued in both English and Bahasa Melayu. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Melayu version, the English version shall prevail.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy at any time. We will notify you of any changes by updating the "Last Updated" date. You are encouraged to periodically review this Privacy Policy to stay informed of our data protection practices.

11. CONTACT US (DATA PROTECTION OFFICER)

If you have questions, complaints, or comments about this Privacy Policy, or if you wish to exercise your rights, please contact our Data Protection Officer at: support@galore.my