Privacy Policy

1. Personal Data Protection Act (PDPA) Compliance

Mocktails On the Go is committed to complying with the Personal Data Protection Act 2010 (Act 709) of Malaysia. We respect your privacy and are dedicated to protecting your personal data in accordance with the principles and requirements set forth in the PDPA.

2. Information We Collect

We may collect, record, retain, store, use, analyze, process, and disclose the following types of personal data:

• Personal Identification Information: Name, email address, phone number, delivery address
• Order Information: Products purchased, order history, payment information (processed securely through third-party payment processors)
• Communication Data: Messages sent through our contact forms, WhatsApp communications, customer service inquiries
• Technical Data: IP address, browser type, device information, website usage data through cookies and similar technologies

3. How We Use Your Information

We process your personal data only for lawful, necessary, and proportionate purposes, including:

• To process and fulfill your orders, including delivery arrangements.
• To communicate with you regarding your orders, inquiries, and customer service requests.
• To send you marketing communications (only with your explicit consent).
• To improve our website, products, and services based on usage patterns.
• To comply with legal obligations and prevent fraud.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business, such as payment processors, delivery services, and IT service providers, under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using encryption (SSL/TLS).
• Limited access to personal data on a need-to-know basis.
• Regular compliance audits and staff training.

6. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of Access & Correction: Request access to or correction of your data.
• Right to Withdraw Consent: Withdraw consent at any time.
• Right to Limit Processing: Restrict how your data is used.
• Right to Object: Object to processing in certain circumstances.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal data, we will securely delete or anonymize it.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. By continuing to use our website, you consent to the use of cookies. You may withdraw consent at any time by adjusting your browser settings.

9. Liability Disclaimer

We disclaim responsibility for breaches beyond our reasonable control, including third-party service providers and external websites. We encourage you to review the privacy policies of any third-party sites you visit. Your use of such sites is at your own risk.

10. Changes to This Privacy Policy

We reserve the right to amend, vary, or revise this Privacy Policy at any time. By publishing the updated policy on our website, we deem that you have been notified. Continued use of our services constitutes valid and express consent to the revised terms.

11. Contact Us for Data Protection Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or wish to exercise your rights under the PDPA, please contact us:

Mocktails On the Go Email: krishanthini@mocktailsonthego.com

12. Consent

By using our website and services, you expressly consent to the continued collection, recording, retention, storage, use, analyzing, disclosure and processing of your personal data as described in this Privacy Policy. Your consent will continue until withdrawn.

13. Cross-border Transfers

If personal data is transferred outside Malaysia, we will ensure equivalent protection standards in line with PDPA requirements. Such transfers will only occur with your consent or where permitted by law.

14. Data Breach Notification

In the event of a personal data breach, we will notify the Personal Data Protection Commissioner and affected individuals within the timeframe required by law. We will also take immediate steps to mitigate risks and prevent recurrence.