Privacy Policy

This Privacy Policy explains how New Agric Group ("we", "us" or "our") collects, uses, discloses and protects your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").

For the purposes of this Privacy Policy, "Services" means our websites (including www.newagrigroup.com), online ordering platforms, mobile applications, customer portals and any related services we provide.

---

1. Who We Are

New Agric Group is a fresh food supplier based in Selangor, Malaysia, providing fruits, vegetables, seafood, poultry, meats, eggs, frozen goods and groceries to food & beverage operators, supermarkets, grocery stores, central kitchens and other businesses.

Company Name: New Agric Group
Address: 485, Lorong Chinniah, Pandamaran, 42000 Pelabuhan Klang, Selangor, Malaysia
Phone: +6017-319 8310
Email: newagricgroup@gmail.com

2. Application of this Privacy Policy

This Privacy Policy applies to personal data that we collect, use and process in connection with:

• your use of our website, mobile apps and online ordering systems;
• your business relationship with us as a customer, supplier, logistics partner or other stakeholder;
• your communications with us through phone, email, messaging apps or social media; and
• any other interactions you may have with us in connection with our Services.

3. What Personal Data We Collect

The types of personal data we may collect include (but are not limited to):

• Identification details (e.g. full name, NRIC / passport number where required, business registration information);
• Contact details (e.g. mobile number, office number, email address, delivery address, billing address);
• Account and profile information (e.g. login ID, role, preferences, order history);
• Transaction data (e.g. purchase records, invoices, payment information, bank-in slips);
• Usage data (e.g. app and website usage, device information, IP address, logs, cookies);
• Any other information that you voluntarily provide to us in the course of using our Services.

Where you provide us with personal data of another individual (e.g. your staff, delivery contact person), you confirm that you have obtained their consent or are otherwise authorised to provide us with their personal data.

4. How We Collect Your Personal Data

We may collect personal data in various ways, including:

• when you register for an account or submit forms on our website or apps;
• when you place orders, request quotations or enter into contracts with us;
• when you contact us via phone, email, messaging apps (e.g. WhatsApp) or social media;
• when you visit our premises or participate in our events, campaigns or surveys;
• from cookies and similar technologies when you use our website or apps; and
• from publicly available sources or third parties (e.g. your employer, business partners, logistics providers), where permitted by law.

5. Purposes of Processing Your Personal Data

We may process your personal data for one or more of the following purposes (collectively, the "Purposes") as permitted under the PDPA:

• to create and manage your account, and to verify your identity;
• to process, fulfil and manage your orders, deliveries and collections;
• to communicate with you on orders, invoices, payments, support and operational matters;
• to plan routes, manage inventory and coordinate logistics and deliveries;
• to manage our relationship with you as a customer, supplier or partner;
• to respond to your enquiries, feedback, complaints or claims;
• to issue statements, invoices, receipts and to process payments and refunds;
• to maintain business, financial and transaction records for internal reporting, audit and tax purposes;
• to improve our Services, user experience, website and apps, including analytics and service quality monitoring;
• to conduct marketing, promotions, loyalty or customer engagement activities (where permitted);
• to comply with applicable laws, regulations, guidelines, directives and contractual requirements; and
• any other purposes that are directly related to the above or that you have been informed of at the time of collection.

6. Consent and Your Choices

By providing your personal data to us, using our Services or otherwise interacting with us, you consent to the collection, use and disclosure of your personal data for the Purposes set out in this Privacy Policy.

Where we rely on your consent for processing, you may withdraw your consent at any time, subject to any legal or contractual restrictions and reasonable notice. Please note that withdrawing consent may impact our ability to provide you with certain Services.

7. Marketing Communications

We may use your contact details to send you marketing or promotional materials about our products, services, offers, events or campaigns which we believe may be of interest to you or your business.

You may at any time opt out of receiving such marketing communications by following the unsubscribe instructions in the message or by contacting us using the details in the Contact Us section below. Even if you opt out of marketing, we may still send you non-marketing messages relating to your account, orders or our ongoing business relationship.

8. Disclosure of Your Personal Data

We will not sell, rent or trade your personal data. However, we may disclose or share your personal data with the following categories of third parties, where necessary and appropriate for the Purposes:

• our group companies, related or associated companies, and affiliates;
• our authorised agents, contractors, logistics partners and delivery service providers;
• our IT, software, hosting, cloud and payment service providers;
• professional advisors such as auditors, lawyers, consultants and insurers;
• regulatory, governmental or other authorities as required by law, regulation or court order; and
• any other party to whom you have authorised us to disclose your personal data.

In all cases, we will take reasonable steps to ensure that such third parties process your personal data in accordance with the PDPA and with appropriate confidentiality and security measures.

9. Cross-Border Transfers

Some of our service providers or data centres may be located outside Malaysia. As a result, your personal data may be transferred to, stored in or processed in a jurisdiction outside Malaysia. We will take reasonable steps to ensure that any such cross-border transfer complies with the PDPA and that your personal data is afforded a level of protection comparable to that under the PDPA.

10. Cookies and Tracking Technologies

Our website and apps may use cookies and similar technologies to enhance your user experience, remember your preferences and help us improve our Services. Cookies are small text files stored on your device.

You may configure your browser to block or delete cookies, but this may affect the availability or functionality of certain features on our website or apps.

11. Data Security

We implement reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction in accordance with the Security Principle under the PDPA.

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security, but we will continuously review and enhance our security measures.

12. Data Retention

We will retain your personal data for as long as necessary to fulfil the Purposes for which it was collected, or as required or permitted by applicable laws (including tax, accounting and regulatory requirements), in accordance with the Retention Principle under the PDPA.

When personal data is no longer required, we will take reasonable steps to securely delete, anonymise or destroy it.

13. Accuracy and Data Integrity

We take reasonable steps to ensure that the personal data we hold is accurate, complete and up to date in accordance with the Data Integrity Principle under the PDPA. Please contact us as soon as possible if there are any changes to your personal data or if you believe that the information we hold about you is inaccurate or incomplete.

14. Your Rights of Access and Correction

Subject to certain exceptions under the PDPA, you have the right to request access to and correction of your personal data held by us. When making a request, please clearly specify the information you wish to access or correct.

We may charge a reasonable fee for processing access requests in accordance with applicable regulations. We may also request additional information from you to verify your identity before processing your request.

15. Obligatory and Voluntary Personal Data

Where we indicate that certain personal data is obligatory (for example, in registration or order forms), it is necessary for us to collect such data in order to provide the relevant Services to you or to comply with legal requirements. If you choose not to provide such obligatory personal data, we may not be able to provide the Services or complete the relevant transaction.

Personal data not marked as obligatory is provided by you on a voluntary basis. However, if you choose not to provide such data, certain features or Services may be limited.

16. Third-Party Sites and Services

Our website or apps may contain links to third-party websites, services or platforms that are not operated by us (for example, payment gateways, social media platforms or logistics tracking sites). We are not responsible for the privacy practices or content of such third-party sites or services.

We encourage you to read the privacy policies of any third-party sites or services that you visit or use.

17. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory requirements, or for other operational reasons. Any updates will be posted on our website and/or notified to you through appropriate means.

The updated Privacy Policy will take effect from the "Last updated" date stated below. Your continued use of our Services after any changes constitutes your acknowledgement and acceptance of the updated Privacy Policy.