1. Introduction
ELA Parcel Centre UMSKAL ("we", "us") respects your privacy. This policy explains how we collect, use, store and protect your personal information when you use our parcel tracking service, in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
2. Information We Collect
- Account Information: Name, phone number, email address
- Social Login Data: Google/Facebook profile ID (if using social login)
- Usage Data: Tracking numbers searched, search timestamps, parcel collection history
- Technical Data: IP address, browser type, push notification subscriptions
3. Use of Information
We use your information to:
- Provide parcel tracking and collection services
- Verify your identity during login
- Send notifications related to your parcel status
- Improve our services and system security
4. Data Sharing
We do not sell or share your personal information with third parties except:
- When required by law or court order
- To provide services you have requested (e.g. SMTP providers for email, Google/Facebook OAuth providers for social login)
5. Data Security
We use reasonable security measures including password hashing, HTTPS connections, CSRF tokens, and rate limiting to protect your data from unauthorised access.
6. Data Retention Period
- Account data: Retained for as long as your account remains active.
- Inactive accounts: If an account is unused for 3 consecutive years, the data will be automatically deleted or anonymised.
- Parcel transaction records: Retained for up to 2 years after collection, for audit, financial record-keeping and dispute resolution purposes.
- Deletion requests: Processed within 30 days of the request (see our Data Deletion page).
7. Data Breach Notification Process
In the event of a security breach affecting your personal data, we will take the following steps:
- Promptly assess the scope and risk of the data breach
- Notify the Personal Data Protection Commissioner (JPDP) within 72 hours if the breach poses a significant risk of harm, in line with the PDPA 2024 amendment requirements
- Notify affected users as soon as possible via email and/or in-app notification
- Take immediate remedial action to contain and mitigate the impact of the breach
8. Your Rights
Under the PDPA, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw your consent at any time
- Lodge a complaint with the Personal Data Protection Department (JPDP) if you believe your rights have been violated
9. Contact Us
For any questions about this privacy policy or to exercise your rights, please contact:
Email: pccumskal@gmail.com