Privacy Policy

This Privacy Policy explains how KartTell collects, uses, discloses, and safeguards personal data in line with Malaysia’s PDPA 2010 (and similar laws where applicable).

1. Who we are

Controller: [admin@karttell.com]

Contact: [admin@karttell.com], [No 23 Jalan BRP 1/5 Bukit Rahman Putra 47000 Sungai Buloh Selangor Malaysia], Tel: [+60145782222, +60386842222 ]

2. Data we collect

• Account & billing: name, email, phone, business name, address, payment method (via payment provider tokens).

• Store content: product info, images, orders, shipping details, customer names/emails/phones entered by you.

• Usage data: log files, device/browser info, IP, pages viewed, timestamps.

• Cookies & similar tech: essential (login, security), analytics (performance), preferences, and marketing (optional).

  
  

3. How we use data

• Provide, secure, and maintain the Service

• Process orders and payments via integrated providers

• Communicate service notices and support

• Personalise features, run analytics, and prevent fraud/abuse

• Comply with legal obligations (tax, audit, law-enforcement requests)

  
  

4. Legal bases (PDPA principles / where applicable GDPR)

• Contract (to deliver the Service)

• Consent (e.g., marketing, optional cookies)

• Legitimate interests (security, product improvement)

• Legal obligation (record-keeping, compliance)

  
  

5. Sharing of data

We share data with:

• Payment, messaging, analytics, and hosting partners strictly to operate the Service

• Professional advisors (legal/accounting) where necessary

• Authorities when required by law
  We do not sell personal data.

  
  

6. International transfers

Data may be transferred and processed outside Malaysia. We use reputable cloud providers and apply safeguards consistent with PDPA principles and contractual protections.

7. Security

We implement administrative, technical, and organisational safeguards (encryption in transit, access controls, monitoring). No method is 100% secure; please protect your credentials.

8. Data retention

We retain data while your account is active and for a reasonable period thereafter for backup, audit, and legal purposes. You may request deletion—some records may be retained to comply with law.

9. Your rights

Subject to PDPA, you may access, correct, withdraw consent (for marketing), or request deletion of your personal data. Contact [admin@karttell.com]. For customer data you collect in your store, you act as the data user/controller; please handle requests from your customers accordingly.

10. Cookies

Manage preferences in the cookie banner or browser settings. Disabling certain cookies may affect functionality (e.g., login/checkout).

11. Children

The Service is not intended for individuals under 18. We do not knowingly collect data from children.

12. Third-party links

Your store may link to third-party websites/apps. We are not responsible for their practices—review their privacy notices.

13. Changes to this policy

We may update this policy. Material changes will be notified via email or dashboard.