Privacy Policy

Your privacy matters to us. Here's how we protect and handle your personal information at Gurphillex.

Last Updated: February 15, 2025

Information We Collect

At Gurphillex, we collect various types of information to provide you with exceptional street food experiences and creativity platform services. The information we gather helps us understand your preferences and improve our offerings.

We only collect information that's necessary to deliver our services and enhance your experience with Malaysian street food culture.

Personal Information: When you create an account or place orders, we collect your name, email address, phone number, and delivery address in Malaysia
Payment Details: Credit card information, banking details, and transaction history for order processing
Usage Data: How you interact with our creativity platform, pages visited, and features used
Device Information: IP address, browser type, operating system, and mobile device identifiers
Location Data: GPS coordinates and delivery addresses to ensure accurate order fulfillment across Malaysia

We also collect information through cookies and similar technologies to personalize your experience. This includes your food preferences, favorite street food vendors, and interaction patterns with our creativity content.

How We Use Your Information

Your information serves multiple purposes in helping us deliver authentic Malaysian street food experiences and creative learning opportunities. We're committed to using your data responsibly and transparently.

Processing and delivering your street food orders across Malaysia
Personalizing your creativity platform experience with relevant content and recommendations
Sending order updates, delivery notifications, and important service communications
Improving our platform features and developing new street food offerings
Analyzing usage patterns to enhance user experience and optimize our services
Preventing fraud and ensuring secure transactions
Complying with legal obligations and regulatory requirements in Malaysia

We never sell your personal information to third parties. Any data sharing occurs only with trusted partners who help us deliver services, such as payment processors and delivery partners operating within Malaysia.

Data Protection & Security

Protecting your personal information is our top priority. We implement comprehensive security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

We use industry-standard encryption protocols and regularly update our security systems to maintain the highest level of data protection.

Encryption: All sensitive data is encrypted using AES-256 encryption both in transit and at rest
Access Controls: Strict employee access policies with multi-factor authentication requirements
Regular Audits: Quarterly security assessments and vulnerability testing by independent security firms
Secure Infrastructure: Data stored on secure servers with 24/7 monitoring and intrusion detection
Incident Response: Comprehensive breach response plan with immediate notification procedures

In the unlikely event of a security breach, we will notify affected users within 72 hours and take immediate steps to secure the compromised data and prevent future incidents.

Your Privacy Rights

You have significant control over your personal information and how we use it. We respect your privacy rights and provide easy ways to manage your data preferences and account settings.

Access Rights: Request a copy of all personal data we hold about you within 30 days
Correction Rights: Update or correct any inaccurate personal information in your account
Deletion Rights: Request complete deletion of your account and associated data
Data Portability: Export your data in a common, machine-readable format
Marketing Opt-out: Unsubscribe from promotional communications while maintaining service updates
Processing Restrictions: Limit how we process your information for specific purposes

To exercise any of these rights, simply contact our privacy team using the information provided below. We'll respond to your request within 30 days and guide you through the process step by step.

Data Retention & Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention periods based on their purpose and regulatory requirements.

Account Information: Retained for the duration of your active account plus 3 years after closure
Transaction Records: Kept for 7 years to comply with Malaysian financial regulations
Marketing Data: Deleted immediately upon unsubscribing from communications
Usage Analytics: Anonymized after 2 years and used only for statistical purposes
Support Communications: Retained for 2 years to improve customer service quality

When you delete your account, we begin the data removal process immediately. Most personal information is deleted within 30 days, though some data may be retained longer for legal compliance or legitimate business interests.

You can request immediate deletion of specific data types by contacting our support team. We'll process urgent deletion requests within 5 business days.

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze platform usage. Understanding how these technologies work helps you make informed decisions about your privacy.

Essential Cookies: Required for basic website functionality, login sessions, and security features
Preference Cookies: Remember your language settings, food preferences, and customization choices
Analytics Cookies: Help us understand user behavior and improve our creativity platform features
Marketing Cookies: Enable personalized content and relevant street food recommendations

You can control cookie settings through your browser preferences or our cookie management tool. Disabling certain cookies may affect some platform features, but essential functionality will remain available.

We also use pixel tags and web beacons to track email engagement and measure the effectiveness of our communications. These technologies help us improve our content and delivery timing.

Third-Party Services & Data Sharing

To deliver comprehensive street food experiences and creativity platform services, we work with trusted third-party partners. We carefully select these partners and ensure they meet our privacy and security standards.

Payment Processors: Secure handling of credit card and banking information for transactions
Delivery Partners: Location data and order details shared only for successful delivery coordination
Analytics Providers: Anonymized usage data to improve platform performance and user experience
Email Services: Contact information for sending order confirmations and service communications
Cloud Storage: Encrypted data storage with industry-leading security providers

All third-party partners must sign data processing agreements that require them to protect your information according to our privacy standards. We regularly audit these relationships to ensure compliance.

We never share your personal information for marketing purposes without your explicit consent. Any data sharing is strictly limited to service delivery and operational requirements.

International Data Transfers

While Gurphillex primarily operates within Malaysia, some of our service providers and technology partners may be located in other countries. We ensure appropriate safeguards are in place for any international data transfers.

Data transfers only occur with countries that have adequate data protection laws
Standard contractual clauses are implemented with all international partners
Regular compliance monitoring ensures ongoing protection of transferred data
You have the right to object to international transfers and request local processing alternatives

Most of your data remains within Malaysia's borders, processed by local servers and Malaysian-based partners. International transfers are minimal and occur only when necessary for service delivery or technical operations.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated clearly, and we'll always maintain transparency about how we handle your information.

Minor updates will be posted with updated effective dates
Major changes will be communicated via email and platform notifications
You'll have 30 days to review changes before they take effect
Continued use of our services after changes indicates acceptance of updated terms

We recommend reviewing this privacy policy periodically to stay informed about our data practices. Previous versions will remain available upon request for reference and comparison purposes.

If you disagree with policy changes, you can delete your account before the changes take effect, and we'll process your data according to the previous policy version.

Privacy Questions & Contact Information

For any privacy-related questions, data requests, or concerns about how we handle your information, please don't hesitate to reach out to our dedicated privacy team.

Email: [email protected]
Phone: +60189158315
Address: Lot 9453, Taman Guru Melayu, Jalan Paroi Senawang, Sembilan, 70450 Seremban, Negeri Sembilan, Malaysia

We're committed to responding to all privacy inquiries within 5 business days and resolving any concerns promptly and transparently.