Privacy Policy

1. Who we are

Mosycle is a specialty tile distributor operating in Malaysia. We are the data controller responsible for the personal data described in this Policy.

2. What we collect

Contact and enquiry data: name, email address, phone number, company, and the message you submit through a contact or trade enquiry form.

Site usage data: anonymised analytics about how the Site is used, including pages viewed, approximate location derived from IP, browser type, and referral source. We use Google Analytics and similar tools for this.

Social platform data: when you engage with us on Instagram, Facebook, TikTok, RedNote, or other platforms, we see only what those platforms make available to business accounts (e.g. follower counts, engagement on our own posts, public profiles of people who comment).

Cookies: small text files stored by your browser. We use essential cookies to make the Site work and analytics cookies to understand traffic patterns. You can disable cookies in your browser settings; some features may stop working if you do.

3. How we use your data

We use personal data to: respond to your enquiries, prepare quotations, fulfil orders, send you product updates if you request them, improve the Site, measure marketing effectiveness, and meet legal obligations.

4. Legal basis (PDPA)

We rely on your consent (which you give by submitting a form), our legitimate business interests (running and improving the Site, marketing to existing customers), and compliance with law. You can withdraw consent at any time by contacting us.

5. Who we share data with

We do not sell personal data. We share data only with parties that help us operate the business, including: hosting and infrastructure providers (Vercel, Supabase), email service providers, payment processors, logistics partners for delivery, and analytics providers (Google Analytics, Meta, TikTok). These parties are bound by confidentiality and process data only on our instructions.

We may also disclose data when required by law, court order, or to protect our legal rights.

6. International transfers

Some of our service providers store data outside Malaysia (including in the European Union, Singapore, and the United States). When this happens, we take reasonable steps to ensure your data continues to be protected to a standard comparable to Malaysian law.

7. How long we keep data

We keep contact and enquiry data for as long as needed to serve you and to meet legal, tax, and accounting obligations (typically seven years for business records in Malaysia). Analytics data is retained for up to 26 months. We delete or anonymise data once it is no longer needed.

8. Your rights

Under the PDPA you have the right to access the personal data we hold about you, request corrections, withdraw consent, and limit how we use your data for direct marketing. To exercise any of these rights, email us at the address below. We will respond within a reasonable timeframe and may need to verify your identity first.

9. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on our systems, and vendor agreements with our infrastructure providers. No system is perfectly secure, but we aim to minimise risk.

10. Children

The Site is intended for business users and adults. We do not knowingly collect personal data from children under 18. If you believe we have, please contact us and we will delete it.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be flagged on the Site.

12. Contact

Questions about this Privacy Policy or your personal data can be sent to salesmy@mosyclemy.com.