This Privacy Policy explains how Bubble-Wrap.my ("we", "us", "our") collects, uses, discloses and protects personal data when you use this website or contact us through it. We handle personal data in line with the Personal Data Protection Act 2010 of Malaysia.

By using this website or submitting an enquiry, you agree to this policy. If you do not agree, please do not submit your details through the website.

1. Who we are

Bubble-Wrap.my is a bubble wrap supply website serving businesses in Malaysia. For any question about this policy or about your personal data, contact us using the details in section 12.

2. Personal data we collect

2.1 Data you give us

When you complete the quote form or the contact form, or write to us by email or WhatsApp, we may collect:

Your name
Your company name
Your phone or WhatsApp number
Your email address
Your delivery state or address
The products and quantities you are asking about
Any other information you choose to include in your message

2.2 Data collected automatically

When you browse the website, our systems and service providers may record:

Your IP address and general location
Your browser type, device type and operating system
The pages you visit, the time of your visit and the website you came from
Which WhatsApp buttons and product pages are clicked. We record the page and product, not your phone number or the content of your chat

2.3 Data stored in your own browser

The quote list feature stores the products you add in your own browser. It stays on your device, is not transmitted to us unless you submit the form or send the list by WhatsApp, and you can clear it at any time by clearing your browser data.

3. Why we collect it

We use personal data for the following purposes:

To reply to your enquiry and prepare a quotation
To process, confirm and deliver orders
To provide after-sales support and handle any issue with an order
To keep records of transactions and correspondence
To understand which products and pages are of interest, so we can improve the website
To comply with legal, tax and regulatory obligations

We do not sell, rent or trade your personal data to anyone.

Marketing

If you have enquired about or bought from us, we may contact you about our own products, prices and promotions that are related to what you asked about, using the phone number, WhatsApp number or email address you gave us. We do not pass your details to other companies for their own marketing.

You can tell us to stop marketing messages at any time, and we will act on it. Reply to any message, or contact us using the details on our contact page, and ask to be removed from marketing. This does not affect messages we send about a specific quotation or order.

4. We do not collect payment details

This website is an information and enquiry website. It is not an online shop and it has no checkout, shopping cart or payment gateway.

We do not ask for, collect, process or store credit card numbers, debit card numbers, CVV codes, online banking credentials or e-wallet details through this website.
No payment is taken on this website at any stage.
Where an order is confirmed, payment is arranged separately through our normal business channels, such as an invoice and bank transfer.
We will never ask you to send card numbers, banking passwords or one-time passwords (OTP) by WhatsApp, email or through any form on this website. If you receive such a request claiming to be from us, do not respond and please tell us.

5. Consent and choice

Supplying your personal data through our forms is voluntary, but we need at least your name and a contact number or email to reply to you. If you choose not to provide them, we may not be able to respond to your enquiry or process an order.

You may withdraw your consent to our use of your personal data at any time by contacting us. Withdrawal may mean we can no longer provide quotations, orders or support to you.

6. Cookies and analytics

This website may use cookies and similar technologies for two purposes:

Necessary functions, such as keeping your session secure while you submit a form.
Analytics, to understand how visitors use the website in aggregate, for example which pages are read and which products are enquired about.

Most browsers let you refuse or delete cookies in their settings. Blocking cookies may affect how parts of the website work.

7. Disclosure to third parties

We may share personal data with:

Service providers who operate our website hosting, email delivery and analytics on our behalf
Delivery and logistics partners, where your details are needed to deliver an order
Professional advisers, regulators or authorities, where disclosure is required by law

If you contact us through WhatsApp, that conversation also takes place on a platform operated by a third party, and that platform's own privacy terms apply to it.

8. Transfers outside Malaysia

Some of our service providers, such as email, hosting and analytics providers, may store or process data on servers outside Malaysia. Where that happens, we take reasonable steps to ensure the data continues to be protected to a standard comparable with Malaysian law.

9. How long we keep it

We keep enquiry and order records for as long as needed for the purpose they were collected, and afterwards only as long as required for legitimate business, accounting or legal reasons. Records that are no longer needed are deleted or anonymised.

10. Security

We take reasonable practical steps to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These include restricting access to our administration system to authorised personnel and protecting accounts with passwords.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security of data sent to us online.

11. Your rights

Under the Personal Data Protection Act 2010, you have the right to:

Request correction of data that is inaccurate, incomplete or out of date
Withdraw your consent to our processing of your data
Ask us to delete personal data that is no longer needed for the purpose it was collected
Limit the processing of your data for direct marketing purposes

To make a request, contact us with your name and the details of your request. We may need to verify your identity before acting on it.

Where we are required by law to keep certain records, such as transaction, invoicing and tax records, we will retain only what the law requires and delete the rest.

12. Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

13. Contact us

For any question about this Privacy Policy, or to make a request about your personal data, please use the details on our contact page.

14. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is always the current one, and it replaces any earlier version. Please check this page from time to time so that you are aware of any changes.