Privacy Policy – EXL BIZ (M) SDN BHD

Last Updated: 14^th May 2025] 

At EXL BIZ (M) SDN BHD (“we,” “us,” or “our”), we are committed to protecting your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services. 

By using our website, you consent to the practices described in this policy. 

1.Types of Personal Data Collected

We may collect the following types of personal data: 

• Contact Information: Name, email address, phone number, company name, and mailing address. 
• Transactional Data: Payment details, order history, and delivery information. 
• Technical Data: IP address, browser type, device information, cookies, and usage patterns (via analytics tools). 
• Other Information: Feedback, inquiries, or preferences shared voluntarily through forms or communication channels. 

 

2. Purposes of Data Collection

Your personal data is collected and processed for purposes including, but not limited to: 

• Processing orders and delivering products/services. 
• Responding to inquiries or providing customer support. 
• Sending marketing communications (with your consent). 
• Improving website functionality and user experience. 
• Complying with legal obligations under Malaysian law. 

 

3. How We Collect Data

• Directly From You: Through website forms, account registrations, emails, or phone calls. 
• Automatically: Via cookies and tracking technologies when you browse our website. 
• Third Parties: From business partners or service providers (e.g., payment gateways) as necessary. 

 

4. Use of Cookies

• We use cookies to enhance user experience, analyze traffic, and personalize content. 
• You may disable cookies through your browser settings, but this may affect website functionality. 

 

5. Disclosure of Personal Data

We may share your data with: 

• Service Providers: Payment processors, logistics partners, or IT vendors. 
• Legal Authorities: To comply with court orders, government requests, or applicable laws. 
• Business Partners: With your consent, for joint promotions or collaborations. 

We do not sell your personal data to third parties. 

 

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or as required by law. 

 

7. Data Security

We implement reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse, including: 

• Encryption of sensitive information. 
• Restricted access to personal data. 
• Regular security assessments. 

 

8. Your Rights Under PDPA

You have the right to: 

• Access and request a copy of your personal data. 
• Correct inaccurate or incomplete data. 
• Withdraw Consent for processing (e.g., unsubscribe from marketing emails). 
• Delete data no longer required for legal/business purposes. 
• Lodge a Complaint with the Malaysian Personal Data Protection Commissioner. 

To exercise these rights, contact us

 

9. Third-Party Links

Our website may link to external sites not governed by this policy. We are not responsible for their privacy practices. 

 

10. International Data Transfers

If data is transferred outside Malaysia, we ensure recipients comply with PDPA standards or equivalent safeguards. 

 

11. Updates to This Policy

We may update this policy periodically. Changes will be posted on this page, and the “Last Updated” date will reflect revisions.