Privacy Policy

1. Introduction

makanApa ("we", "our", "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, and protect your information when you use our Platform at IIUM.

2. Information We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and password (hashed).
• Order information: Items ordered, delivery location, order history.
• Payment information: Transaction records (we do not store card/bank details — payments are handled by BillPlz).
• Device & usage data: Browser type, IP address, pages visited — collected automatically via standard web logs.

3. How We Use Your Information

Your data is used to:

• Process and fulfil your orders.
• Manage your account and authenticate your identity.
• Communicate with you about your orders and account activity.
• Improve the Platform and resolve technical issues.
• Comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Sharing

Your data may be shared with:

• Vendors: Your name and order details are shared with the vendor fulfilling your order.
• Runners: Your delivery location and contact info are shared with the assigned runner.
• BillPlz: Payment processing is handled by BillPlz in accordance with their privacy policy.

5. Data Retention

We retain your account data for as long as your account is active. Order records are kept for a minimum of 2 years for operational and legal compliance purposes. You may request deletion of your account at any time by contacting us.

6. Cookies

makanApa uses session cookies to manage your login state. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect your ability to use the Platform.

7. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your account and data.
• Withdraw consent to data processing (this may affect your ability to use the Platform).

To exercise any of these rights, email us at admin@makanapa.azmiproductions.com.

8. Security

We implement industry-standard security measures including encrypted passwords, HTTPS connections, and access controls. However, no system is completely secure. You are responsible for keeping your account credentials confidential.

9. Changes to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with an updated date. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

10. Contact

For privacy-related enquiries, contact our data officer at admin@makanapa.azmiproductions.com.