Privacy Policy

Rasa Sayang Eatery operates this online platform, which we refer to as our site or this service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site or use our services, including ordering, booking, or interacting with our online content. We are committed to protecting your personal data and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and relevant Malaysian legislation.

Data Collection

We collect personal data that you provide to us directly, such as when you place an order, make a reservation, sign up for our newsletter, participate in a survey, or contact us. This may include your name, contact information (like phone number and email address), delivery address, payment information, and any other details you provide.

We may also collect certain information automatically when you visit our site. This includes technical data like your IP address, browser type, operating system, referring URLs, and details about your visit, such as the pages you viewed and the time spent on our site. We collect this information through cookies and similar tracking technologies.

Lawful Basis for Processing

We process your personal data based on several legal grounds:

• Necessity for Contract: To provide the services you request, such as processing and fulfilling your orders for dine-in, takeaway, delivery, catering, or event hosting.
• Legitimate Interests: For purposes such as improving our services, understanding customer preferences, conducting analytics, and ensuring the security of our site, provided these interests do not override your fundamental rights.
• Consent: Where required by law, we will obtain your consent for specific processing activities, such as sending you marketing communications. You have the right to withdraw your consent at any time.
• Legal Obligation: To comply with legal obligations, such as tax and accounting requirements.

Use of Your Information

We use the information we collect for various purposes:

• To provide, operate, and maintain our services.
• To process transactions and manage your orders, reservations, and bookings.
• To communicate with you, respond to your inquiries, and provide customer support.
• To send you administrative information, such as service-related announcements.
• To send you marketing communications, promotions, and updates about our services, where you have consented or where otherwise permitted by law.
• To personalize your experience on our site.
• To monitor and analyze usage and trends to improve our site and services.
• To detect, prevent, and address technical issues, fraud, and other illegal activities.
• To comply with legal obligations.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with third-party service providers who perform services on our behalf, such as payment processing, delivery services, website hosting, data analysis, marketing assistance, and customer service. These third parties are obligated to protect your information and use it only for the purposes for which it was shared.

We may also disclose your information if required by law, such as to comply with a subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing.

Data Security

We implement reasonable technical and organizational measures designed to protect your personal data from unauthorized access, use, alteration, and disclosure. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

Your Data Protection Rights

Under applicable data protection laws, you have certain rights regarding your personal data. These may include the right to:

• Access your personal data.
• Request rectification of inaccurate personal data.
• Request erasure of your personal data.
• Request restriction of processing of your personal data.
• Object to the processing of your personal data.
• Request data portability.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. You can manage your cookie preferences through your browser settings or through tools we may provide on our site.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page, and we encourage you to review it periodically.

Contact Us

For questions or concerns regarding this privacy policy or our data practices, please write to us at: