Privacy Policy

1. Data Protection Commitment (PDPA 2010)

In accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, this Privacy Policy outlines how Next Kitchen ("we", "us", or "our"), in partnership with Pure Support Sdn Bhd and D&S Exports, collects, uses, processes, stores, and protects personal and commercial data collected through our storefront, checkout gateway, customer service lines, and warehouse operations.

2. Information We Collect

When you interact with Next Kitchen—whether ordering commercial equipment, requesting a tender quotation, or contacting logistics—we may collect:

• Contact Details: Full name, corporate email address, business telephone/mobile number.
• Corporate & Billing Data: Registered business name, commercial tax/business registration number, and billing address.
• Delivery & Logistics Data: Delivery site address, state, postal code, loading bay access details, on-site contact person.
• Transaction & Order History: Equipment model numbers, SKU identifiers, order dates, payment status, freight class.
• Technical Telemetry: IP address, browser type, device information, and interaction logs collected via essential session cookies.

3. Purpose of Processing Your Data

Your personal and commercial data is processed solely for lawful business purposes, including:

• Processing transactions and generating official computer-generated Tax Invoices and digital receipts.
• Calculating mileage and scheduling specialized commercial freight delivery via Lalamove fleets.
• Managing your 1-Year Commercial Machinery Warranty and registering product serial numbers.
• Dispatching transactional updates, order confirmations, and logistics tracking links via Resend email.
• Responding to technical consultations, machinery part enquiries, and corporate quotation tenders.
• Fulfilling legal, statutory, and corporate tax accounting requirements in Malaysia.

4. Payment Security & PCI-DSS Compliance

We prioritize absolute financial security. When you pay using FPX Online Banking or Credit/Debit Cards:

• Payment details are transmitted directly to Stripe Payments Malaysia Sdn Bhd via 256-bit SSL encryption.
• Stripe is certified as a PCI-DSS Level 1 Service Provider (the highest security tier in the global payment processing industry).
• Next Kitchen never stores your bank login credentials, FPX passwords, CVV/CVC codes, or full 16-digit credit card numbers on our servers.

5. Disclosure to Third-Party Service Partners

Next Kitchen does not sell, rent, or trade your data to third-party marketing companies. Data is only shared with authorized operational partners strictly necessary to complete your order:

• Logistics Partners: Lalamove Malaysia (for vehicle assignment, route tracking, and driver offload coordination).
• Payment Gateways: Stripe (for FPX and credit card clearance).
• Email Infrastructure: Resend (for delivering encrypted receipts and order confirmation emails).
• Warehouse Technicians: Pure Support Sdn Bhd engineering staff at Port Klang Central Warehouse for warranty dispatch and parts fulfillment.

6. Data Retention & Security Standards

We implement physical, managerial, and technological safeguards to prevent unauthorized access, alteration, or disclosure of your information. Commercial transaction records and tax invoices are retained in accordance with Malaysian corporate statutory record-keeping periods (typically seven (7) years).

7. Your Rights Under Malaysian Law

Under the PDPA 2010, you maintain the following rights regarding your personal data:

• The right to request access to your personal data held in our active systems.
• The right to request rectification of inaccurate, outdated, or incomplete data.
• The right to withdraw consent for non-essential communications at any time.

To exercise any of these rights, please submit a written request to our Data Protection Officer at afif@nextkitchen.com.my.

8. Contact for Privacy Matters