Who we are
This Personal Data Protection Policy explains how JuzCoffee (“we”, “us”) handles your personal data in Malaysia under the Personal Data Protection Act 2010 (PDPA). The PDPA requires us to follow seven principles: General, Notice & Choice, Disclosure, Security, Retention, Data Integrity, and Access.
What data do we collect
-
Identification & contact: name, phone, email, delivery address.
-
Order data: items ordered, payment method (tokenised by our payment provider), receipts.
-
Account & device data (if you sign up): username, password, app/website usage (e.g., pages viewed), device type, IP.
-
Loyalty & marketing preferences: points, tier, vouchers, opt-in/opt-out choices.
How we use your data (purpose)
-
To take and deliver your orders, process payment, issue receipts, and refunds.
-
To run our Rewards (points, tiers, benefits) and send service notices.
-
To improve our menu, pricing, and store operations (analytics & quality).
-
With your consent, we will send promos or surveys (you can opt out anytime).
Your choices (Notice & Choice)
We will tell you what we collect and why. You can choose not to give certain data, but some features (e.g., delivery) may not work without it. You can opt out of marketing at any time.
Who we share with (Disclosure)
We share data only with:
-
Payment processors, delivery partners, customer-support tools;
-
IT vendors (hosting, security, analytics) under confidentiality;
-
Where required by law, regulators or authorities.
We do not sell your personal data.
How we protect your data (Security)
We take practical steps to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure (access controls, encryption in transit, limited staff access, vendor due diligence).
How long do we keep it (Retention)
We keep personal data only as long as needed for the purpose collected (e.g., accounting, tax, fraud prevention), then delete or anonymise it safely.
Keeping data accurate (Data Integrity)
Please keep your profile and delivery address up to date; we also refresh records from your latest orders.
Your rights (Access & Correction)
You may request access to your personal data and ask us to correct it if it is inaccurate, incomplete, or misleading. We will respond within a reasonable time as required under PDPA.
Cross-border transfers
If we use vendors or servers outside Malaysia, we will take reasonable steps to ensure a similar level of protection as required by Malaysian law.
Data breach & DPO
We follow the JPDP guidance on data breach notification and appointment of a Data Protection Officer (DPO). If a breach happens, we will act quickly and notify as guided by JPDP.
Contact us (PDPA requests)
Email: hello @ juzcoffee.com