1. Introduction

BrandK Marketing Sdn. Bhd. (“we”, “our”, or “us”) operates the BrandK mobile app (package name com.brandkor.brandk, “the App”), a membership and ordering app for BrandK partner restaurants. The App lets you join store memberships, collect and use points and vouchers, make reservations, and place delivery and self pick-up orders.

This Privacy Policy applies to the App and its related services. It is provided in accordance with the Personal Data Protection Act 2010 (Malaysia) and Google Play and Apple App Store requirements.

2. Data We Collect

Account and profile information: first and last name, mobile phone number, email address, gender, date of birth, and address that you enter when you sign up or edit your profile.
Sign-in information: if you sign in with Google or Apple, we receive your account identifier, name, and email address from that provider. Phone sign-in uses a one-time verification code.
Delivery address and location: the delivery address you search for or enter, the unit/floor details, and the map coordinates of that address. If you allow location access, the App uses your device’s current location only to help you pick an address on the map. Saved delivery addresses are stored on your device.
Order and payment information: items ordered, order amount, delivery fee, order notes, pick-up time, payment method, and payment status. Online banking (FPX) payments are processed by Billplz; we do not receive or store your bank login details or card numbers.
Membership activity: stores you joined, points and prepaid balance history, vouchers, reservations, inbox messages, and customer service inquiries you send.
Device information: push notification token (Firebase Cloud Messaging), device platform (Android / iOS / web), and selected app language.
Usage information: pages viewed in the App and web version, collected through Google Analytics, and security checks performed by Google reCAPTCHA.

3. How We Use Data

To create and manage your account and verify your identity.
To provide membership benefits such as points, prepaid balance, vouchers, and events.
To process reservations, delivery orders, and self pick-up orders, including calculating delivery fees.
To process payments and confirm payment status.
To send order updates, notices, and membership messages by push notification.
To respond to your inquiries and provide customer support.
To keep the service secure, prevent fraud and misuse, and improve the App.

4. Data Sharing

We do not sell your personal data. We share data only as needed to provide the service:

Partner restaurants: the store you order from or reserve with receives your name, phone number, order details, and (for delivery) your delivery address.
Delivery partner: for delivery orders, the delivery address and coordinates are sent to Lalamove to quote and fulfil delivery.
Payment processor: Billplz receives your name, email address, and payment amount to process FPX payments.
Google: Firebase (sign-in and push notifications), Google Maps / Places (address search and maps), Google Analytics, and reCAPTCHA.
Apple: Sign in with Apple, if you choose to use it.
Legal requirements: when required by law or by a lawful request from authorities.

5. Data Retention

We keep your personal data while your account is active. When you delete your account, your profile and membership data are deleted. Order, payment, and tax invoice records may be kept for the period required by Malaysian accounting and tax laws, after which they are deleted.

6. Data Security

All data is transmitted over encrypted HTTPS/TLS connections. We apply administrative and technical safeguards, including access control, to protect your personal data from unauthorized access, loss, or disclosure.

7. Account & Data Deletion

In the App: open the Settings tab and select Membership withdrawal. Your account is deleted immediately and cannot be recovered. All your points and vouchers are deleted.

Without the App: email brandkmarketing@gmail.com or call / WhatsApp +6011-2388-0839 with your registered phone number or email address. We process requests within 30 days after verifying your identity.

Data that will be deleted: account and sign-in information, profile information, push notification token, points, prepaid balance history, vouchers, and membership records. Records we must keep by law (see section 5) are retained only for that purpose.

8. Your Rights

You may access and update your profile in the App at any time, withdraw consent for push notifications or location access in your device settings, and request a copy or correction of your personal data by contacting us.

9. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Policy Updates

We may update this Privacy Policy from time to time. The effective date above shows when it was last changed. Significant changes will be notified through the App or this website.

11. Contact Us

BrandK Marketing Sdn. Bhd.
Email: brandkmarketing@gmail.com
Phone: +6011-2388-0839
WhatsApp: +6011-2388-0839