1. Scope

BrandK Marketing Sdn. Bhd. (SSM Registration No. 202101011401) (“BrandK”, “we”, “our”, or “us”) provides BrandK POS in Malaysia. This Privacy Policy applies to:

• the BrandK POS program, including KposCashier (Counter POS) and Ordering POS (table and staff ordering);
• the BrandK POS Manager App and the BrandK admin web services; and
• related services such as e-Invoice issuance, staff attendance and payroll tools, installation and support.

The BrandK POS Manager App Privacy Policy continues to apply to that app, and the BrandK membership app Privacy Policy applies to the BrandK membership app used by consumers. This policy is provided in accordance with the Personal Data Protection Act 2010 (Malaysia) (“PDPA”).

2. Our Role

• For information about our business customers and their account users, BrandK decides how the data is used.
• For personal data that a business enters into BrandK POS about its own staff and customers, the business is responsible for that data, and BrandK processes it on the business’s behalf to provide the Services. Staff and customers of a store should first contact that store about their data.

3. Personal Data We Process

Business customers and account users

• Business and registration details, such as business name, SSM document and a copy of the representative’s identity card provided during registration.
• Contact details, such as phone number and email address.
• User IDs and passwords for administrator and staff accounts.

Staff data entered by the business

• Name, phone number, IC or passport number, role and joining date.
• Pay settings (monthly salary or hourly pay) and, if the business chooses to enter them, bank name, account number and account holder name.
• Work schedules, clock-in and clock-out records and payroll calculations.
• Face recognition data, only where the business enables face recognition for attendance. This data is used only to verify staff attendance.

Customer data, depending on the features a store uses

• Membership details, points and vouchers.
• Names and phone numbers for reservations and online pre-orders.
• Recipient names, phone numbers and addresses for delivery orders.
• e-Invoice buyer details requested by a customer: name, ID type, NRIC or passport number, TIN, business registration number, SST number, email, phone number and address.

Transaction and technical data

• Orders, payments, cancellations, refunds and settlement records.
• Device identifiers such as Firebase Cloud Messaging (FCM) tokens used for push notifications.
• Operational logs used for troubleshooting and security.

Website visitors

• The email address and message you submit through our enquiry form.
• Website usage information collected through Google Analytics.

4. How We Use Personal Data

• To provide and operate the POS, ordering, membership, attendance, payroll and e-Invoice features.
• To set up accounts, install the Services and provide support and troubleshooting.
• To send notifications to business owners and staff.
• To keep the Services secure and prevent misuse.
• To manage our customer relationship and billing, and to comply with legal obligations.

We do not sell personal data.

5. Third-Party Services

Personal data is shared with other parties only as needed for the features a business uses:

• Inland Revenue Board of Malaysia (LHDN) MyInvois: e-Invoice details, including supplier and buyer details and transaction items, when an e-Invoice is issued.
• Payment providers: payment information needed to process card and e-wallet payments.
• Delivery platforms: order, recipient name, phone number and delivery address for delivery orders.
• Messaging services (WhatsApp by Meta and SMS providers): phone numbers and message content for notifications such as reservations and pre-orders.
• Google Firebase: device tokens for push notifications.
• Shopping mall operators: sales summaries, where a store’s tenancy requires sales reporting to the mall.
• Authorities: where disclosure is required by law.

6. Storage and Security

Data is stored on servers operated by BrandK. Data is transmitted over encrypted connections (HTTPS), and access to data in the Services requires an authorised user account.

7. Retention

We keep personal data for as long as it is needed for the purposes in this policy, for the duration of a business customer’s subscription and any agreed post-termination access period, and as required by law.

8. Account Deletion and Data Deletion

• BrandK membership app users can delete their account as described on our Delete Account page. Deleting an account removes the account and profile data; some transaction records may be kept by stores where the law requires it.
• Staff accounts are created and removed by the business’s administrator. Staff should contact their employer to update or remove their data.
• Business customers may request deletion of their business data after their subscription ends by contacting us. Records that must be kept by law may be retained for the required period.

9. Your Rights

Under the PDPA, you may request access to and correction of your personal data, and you may limit how it is processed. Please contact us using the details below. If your data was entered by a store, we may refer your request to that store.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed.

11. Contact Us

BrandK Marketing Sdn. Bhd.
Email: brandkmarketing@gmail.com
Phone / WhatsApp: +6011-2388-0839 (WhatsApp)

See also our Terms of Service.