Grateful.my (“Grateful”, “we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy in accordance with the Personal Data Protection Act 2010 of Malaysia (PDPA) and other applicable laws and regulations.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use our website at https://grateful.my (the “Website”), including any services, purchases, or affiliate participation.

By using our Website, you agree to the collection and use of your personal data in accordance with this Privacy Policy.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

1.1 Information You Provide Directly

This includes:

Full name
Email address
Phone number
Billing address
Shipping address
Account login credentials
Affiliate registration information
Communication and customer support messages

1.2 Transaction Information

Including:

Purchase history
Order details
Payment confirmation details (processed by third-party payment providers)

We do not store your credit card or full payment details.

1.3 Automatically Collected Information

When you use our Website, we may automatically collect:

IP address
Browser type and version
Device type
Operating system
Website usage data
Cookies and tracking technologies

2. Purpose of Processing Personal Data

We collect and use your personal data for the following purposes:

To create and manage your account
To process and fulfill orders
To deliver products and services
To provide customer support
To manage affiliate accounts and commissions
To improve our Website and services
To ensure security and prevent fraud
To comply with legal and regulatory obligations
To send important updates related to your account or orders
To send marketing communications (only where consent is provided)

We will only use your personal data for lawful and legitimate business purposes.

3. Disclosure of Personal Data

We may disclose your personal data to the following parties where necessary:

Payment gateway providers (e.g., CHIP, Billplz, ToyyibPay, Stripe, etc.)
Courier and logistics providers
Website hosting and IT service providers
Affiliate tracking system providers
Professional advisors (legal, accounting, technical)
Government authorities or regulators where required by law

We do not sell, rent, or trade your personal data to third parties.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

SSL encryption
Secure hosting environment
Access control and authentication
Regular system monitoring

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data only for as long as necessary to:

Fulfill the purposes outlined in this Privacy Policy
Comply with legal, tax, and regulatory requirements
Resolve disputes
Enforce our agreements

When personal data is no longer required, it will be securely deleted or anonymized.

6. Your Rights Under the Personal Data Protection Act 2010

Under Malaysia’s PDPA, you have the right to:

Request access to your personal data
Request correction of inaccurate personal data
Withdraw consent to data processing
Request deletion of your personal data (subject to legal limitations)
Limit or object to processing in certain circumstances

To exercise these rights, please contact us using the details provided below.

7. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to:

Improve user experience
Enable account login functionality
Analyze Website performance
Track affiliate activity

You may disable cookies in your browser settings, but this may affect Website functionality.

8. Affiliate Program

If you participate in our affiliate program, we may collect and use additional information including:

Affiliate account details
Referral tracking information
Commission and payment records

This information is used solely for managing affiliate activities and payments.

9. Third-Party Links

Our Website may contain links to third-party websites.

We are not responsible for the privacy practices or content of such external websites.

You are encouraged to review their privacy policies separately.

10. International Data Transfers

Your personal data may be processed and stored on servers located outside Malaysia.

We ensure that such transfers comply with applicable data protection laws and appropriate safeguards are in place.

11. Account Security

You are responsible for maintaining the confidentiality of your account login credentials.

We are not responsible for unauthorized access caused by your failure to protect your login information.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time.

Changes will be effective immediately upon posting on this Website.

Your continued use of the Website constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Grateful.my
Address: G24A, Kompleks Campbell, Jalan Dang Wangi, Kuala Lumpur, Malaysia
Email: bundlegrateful@gmail.com
Phone: +6011-3224 7806
Website: https://grateful.my

14. Consent

By using our Website, registering an account, or making a purchase, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.