Privacy Policy

IoT Advance Sdn Bhd, which operates the IBIZHO system (“IBIZHO”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how IBIZHO collects, uses, processes, stores, discloses and protects personal data when you access or use our website, Platform, online store services, applications and related services.

This Privacy Policy is intended to be read together with the IBIZHO Merchant Terms & Conditions.

1. APPLICABILITY

This Privacy Policy applies to personal data collected or processed by IBIZHO in connection with:

  • our website;
  • Merchant registration;
  • Merchant accounts;
  • subscription services;
  • Platform usage;
  • customer support;
  • billing and payment administration;
  • technical support;
  • communications;
  • security and fraud prevention; and
  • other services provided by IBIZHO.

Where a Merchant operates its own Store using IBIZHO, the Merchant may separately collect personal data from its Customers.

In such circumstances, the Merchant is responsible for its own privacy practices and legal obligations relating to Customer personal data.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with IBIZHO, we may collect:

Identity information

  • name;
  • company name;
  • business registration information;
  • identification information where reasonably required;
  • account information; and
  • information necessary for verification.

Contact information

  • email address;
  • telephone number;
  • business address;
  • billing address; and
  • correspondence information.

Account information

  • username;
  • account credentials;
  • subscription plan;
  • account preferences;
  • Store information; and
  • administrative information.

Payment and billing information

We may collect information relating to subscriptions, invoices and billing.

Where payments are processed through third-party payment providers, payment card or financial information may be collected and processed directly by the relevant payment provider in accordance with its own privacy policy and security procedures.

3. CUSTOMER AND STORE DATA

Where a Merchant uses IBIZHO to operate an online Store, the Platform may process information relating to the Merchant's Customers, including:

  • name;
  • telephone number;
  • email address;
  • delivery address;
  • billing information;
  • order information;
  • transaction information;
  • product information;
  • delivery information;
  • communications;
  • IP address;
  • device information; and
  • other information necessary to process an order or provide the Store services.

Such information may be processed by IBIZHO on behalf of the Merchant for the purpose of providing Platform functionality.

4. HOW WE USE PERSONAL DATA

We may use personal data for purposes including:

  1. creating and managing accounts;
  2. providing the Platform;
  3. providing subscription services;
  4. operating online Stores;
  5. processing orders;
  6. facilitating payment services;
  7. facilitating logistics services;
  8. providing customer support;
  9. communicating with Merchants and Customers;
  10. processing billing and subscription payments;
  11. maintaining system security;
  12. detecting fraud, abuse and unauthorised activity;
  13. troubleshooting technical issues;
  14. improving our services;
  15. conducting analytics;
  16. maintaining business records;
  17. complying with legal and regulatory obligations;
  18. responding to lawful requests from authorities;
  19. enforcing our Terms & Conditions; and
  20. other purposes reasonably necessary for providing the services.

5. LEGAL BASIS AND CONSENT

IBIZHO will process personal data in accordance with applicable Malaysian data protection laws.

Where consent is required, we will obtain consent in the manner required by applicable law.

Where processing is necessary for providing a service requested by you, complying with legal obligations, protecting our systems or pursuing legitimate business purposes permitted by law, we may process personal data for those purposes to the extent legally permitted.

6. MERCHANT RESPONSIBILITY FOR CUSTOMER DATA

A Merchant using IBIZHO may collect personal data directly from its Customers.

The Merchant is responsible for ensuring that its collection, use, disclosure and processing of Customer personal data complies with applicable laws.

The Merchant must:

  • provide appropriate privacy notices to Customers;
  • obtain required consent where applicable;
  • only collect information reasonably required for its business purposes;
  • use Customer information lawfully;
  • protect Customer information from unauthorised access;
  • avoid using Customer information for unrelated purposes without appropriate authority;
  • comply with applicable retention requirements; and
  • respond appropriately to Customer privacy requests.

IBIZHO does not assume responsibility for a Merchant's independent privacy practices or unlawful use of Customer personal data.

7. THIRD-PARTY SERVICE PROVIDERS

To provide the Platform, IBIZHO may engage third-party service providers.

These may include:

  • payment service providers;
  • banks and financial institutions;
  • logistics and courier providers;
  • cloud hosting providers;
  • database and infrastructure providers;
  • analytics providers;
  • communications providers;
  • customer support systems;
  • security providers; and
  • other technology providers.

Examples of integrated third-party services may include VirtuaPay for payment services and Delyva for logistics services.

Third-party providers may process personal data in accordance with their own terms, privacy policies and legal obligations.

8. PAYMENT INFORMATION

Where a payment is made through an integrated payment gateway, the payment may be processed directly by the relevant payment provider.

IBIZHO does not necessarily receive or store complete payment card information.

The processing of payment information may therefore be governed by the privacy policy and terms of the relevant payment service provider.

9. LOGISTICS AND DELIVERY INFORMATION

Where a Merchant uses an integrated logistics service, IBIZHO may transmit information necessary to fulfil the delivery.

This may include:

  • sender information;
  • recipient name;
  • recipient telephone number;
  • delivery address;
  • shipment information;
  • order information; and
  • other information necessary to provide delivery services.

The relevant logistics provider may independently process such information under its own privacy policy.

10. DISCLOSURE OF PERSONAL DATA

We may disclose personal data to:

  • service providers;
  • payment providers;
  • banks and financial institutions;
  • logistics providers;
  • cloud and hosting providers;
  • IT service providers;
  • security providers;
  • professional advisers;
  • auditors;
  • insurers;
  • regulators;
  • government authorities;
  • law-enforcement agencies; and
  • other parties where disclosure is permitted or required by law.

We may also disclose information where reasonably necessary to investigate fraud, security incidents, illegal activity, violations of our Terms or threats to the Platform.

11. LEGAL AND REGULATORY DISCLOSURES

IBIZHO may disclose information where reasonably necessary to:

  • comply with Malaysian law;
  • comply with a court order;
  • comply with a lawful request from a government authority;
  • investigate suspected illegal activity;
  • prevent fraud;
  • protect Customers;
  • protect IBIZHO;
  • protect third-party service providers; or
  • enforce our legal rights.

12. CROSS-BORDER DATA TRANSFERS

Some of our service providers or infrastructure may be located outside Malaysia.

Where personal data is transferred outside Malaysia, IBIZHO will take reasonable steps to ensure that such transfer is handled in accordance with applicable Malaysian data protection requirements.

13. DATA SECURITY

IBIZHO implements reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • unauthorised disclosure;
  • loss;
  • misuse;
  • alteration;
  • destruction; and
  • other unlawful or unauthorised processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Accordingly, IBIZHO cannot guarantee absolute security of personal data.

14. DATA RETENTION

IBIZHO will retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • providing services;
  • maintaining accounts;
  • fulfilling contractual obligations;
  • resolving disputes;
  • preventing fraud;
  • maintaining business records;
  • complying with legal requirements; and
  • enforcing agreements.

Different categories of data may be retained for different periods depending on the purpose and applicable legal requirements.

15. ACCESS AND CORRECTION

Subject to applicable law, individuals may request access to or correction of personal data held by IBIZHO.

Requests should be submitted using the contact details stated at the end of this Privacy Policy.

IBIZHO may require reasonable verification of identity before processing such requests.

16. MARKETING COMMUNICATIONS

Where permitted by applicable law, IBIZHO may send information concerning:

  • service updates;
  • new features;
  • subscription plans;
  • promotions;
  • educational materials; and
  • other information relating to IBIZHO.

Where required, marketing communications will be sent only with the appropriate consent.

You may request to stop receiving marketing communications by using the unsubscribe mechanism or contacting us.

17. COOKIES AND TECHNOLOGIES

IBIZHO may use cookies and similar technologies to:

  • maintain login sessions;
  • remember preferences;
  • improve Platform functionality;
  • understand Platform usage;
  • analyse performance;
  • detect security threats; and
  • improve user experience.

Users may configure their browser to reject certain cookies, although doing so may affect Platform functionality.

18. CHILDREN

The Platform is primarily intended for businesses and adults.

IBIZHO does not knowingly seek to collect personal data from children where such collection is not permitted by applicable law.

If we become aware that personal data has been collected in circumstances contrary to applicable law, we may take reasonable steps to delete or otherwise address the information.

19. DATA BREACHES AND SECURITY INCIDENTS

If IBIZHO becomes aware of a personal data breach or security incident involving personal data, we will take reasonable steps to investigate, contain and remediate the incident and make notifications where required by applicable law.

20. THIRD-PARTY WEBSITES

The Platform may contain links or integrations to third-party websites and services.

IBIZHO is not responsible for the privacy practices of third parties.

Users should review the applicable third-party privacy policies before providing personal data to those services.

21. CHANGES TO THIS PRIVACY POLICY

IBIZHO may update this Privacy Policy from time to time to reflect changes in:

  • our services;
  • technology;
  • legal requirements;
  • regulatory requirements; or
  • business practices.

Where appropriate, we will provide notice of material changes.

The updated version will be posted on the IBIZHO website with an updated effective date.

22. YOUR RIGHTS

Subject to applicable Malaysian law, you may have rights relating to your personal data, including rights to:

  • request access;
  • request correction;
  • withdraw consent where applicable;
  • request information regarding the processing of your personal data; and
  • make a complaint regarding the handling of your personal data.

Certain requests may be subject to legal limitations, verification requirements or reasonable administrative requirements.

23. CONTACT US

For privacy-related enquiries, requests or complaints:

IoT Advance Sdn Bhd

Privacy Email: contactus@ibizho.com

General Email: contactus@ibizho.com

Website: https://www.ibizho.com/