每天现炖·新鲜直送·西马全境
立即选购

隐私政策

生效日期：2026 年 8 月 11 日

本隐私政策说明 FLAVORFIX SDN BHD（公司编号 202501048686 (1650094-V)，以下称「我们」）如何依据马来西亚《2010 年个人资料保护法令》（PDPA，含 2024 年修订）收集、使用与保护你的个人资料。

1. 资料控制者

FLAVORFIX SDN BHD（202501048686 / 1650094-V）
Zest Apartment, Jalan Kinrara 6B, Bandar Kinrara, 47180 Puchong, Selangor.

资料事务联络：support@sweetbites.my
WhatsApp：017-570 8212

2. 我们收集的资料

  • 身份与联络资料：姓名、电话 / WhatsApp 号码、电邮地址。
  • 配送资料：配送地址、收件人姓名与电话、配送备注。
  • 订单资料：购买的产品、口味选择、金额、订单记录、月订配送安排。
  • 付款资料：付款方式与交易状态。我们不会收集或储存你的完整信用卡号码，卡片资料由支付服务商直接处理。
  • 沟通纪录：你与我们之间的 WhatsApp 对话、电邮往来、客服纪录、你提交的评价与照片。
  • 送达纪录：配送完成时拍摄的收件照片，可能包含收件人影像与门牌。此照片仅用于证明订单已送达及处理配送争议。
  • 技术与使用资料：IP 位址、浏览器与装置类型、浏览页面、来源网站、Cookie 与类似技术所收集的资料。

我们不主动收集《PDPA》定义下的敏感个人资料（如健康、宗教信仰资料）。如果你在对话中主动提供健康相关资讯（例如过敏情况或怀孕），我们仅用于处理你的订单与安全提醒。

3. 资料来源

大部分资料由你在下单、联络我们或使用网站时直接提供。部分技术资料由 Cookie 与分析工具自动收集。

4. 使用目的

  • 处理订单、安排制作与配送、处理付款与退款
  • 以 WhatsApp 确认口味、配送时间，以及月底询问是否继续月订
  • 提供客户服务与处理投诉
  • 食品安全追溯与产品问题处理
  • 遵守法律义务，包括会计与税务记录保存
  • 防止欺诈与滥用
  • 在你同意的情况下，发送促销讯息
  • 网站分析与广告成效衡量

提供资料是自愿的，但姓名、联络方式与配送地址是处理订单的必要资料；如果未提供，我们将无法完成订单。

5. 资料的披露对象

我们不会出售你的个人资料。为完成上述目的，我们可能向以下各方披露：

  • Shopify — 提供网店平台与订单系统
  • 支付服务商 — 处理付款与退款
  • 物流与配送服务供应商（包括其冷链服务商） — 配送订单，会取得收件人姓名、地址与电话
  • WhatsApp（Meta Platforms） — 我们与你的订单沟通渠道
  • 分析与广告服务商 — 我们透过 Google Tag Manager 部署 Meta Pixel 与 Conversions API、TikTok Pixel 与 Google Analytics 4，日后可能加入其他类似工具。其中 Meta Conversions API 属于伺服器端传送，会将你的电邮与电话号码以加密（雜湊）形式传给 Meta，用于广告成效比对。
  • 专业顾问与主管机关 — 在法律要求或为行使法律权利时

6. 资料的境外传输

上述部分服务商（包括 Shopify、Meta、Google、TikTok）的伺服器位于马来西亚境外。使用本网站即表示你理解你的个人资料可能被传输至境外处理。我们只与提供合理保护水平的服务商合作。

7. Cookie 与追踪技术

本网站使用 Cookie 与类似技术，以维持购物车与语言选择、分析流量，以及衡量广告成效。你可以在浏览器设定中拒绝或删除 Cookie，但部分功能可能无法正常运作。语言选择储存在你的装置本地，不会传送给我们。

8. 资料保存期限

  • 交易与会计记录：依《1967 年所得税法令》保存 7 年；依《2012 年消费者保护（电子贸易交易）条例》至少保存 2 年。
  • 客服与沟通纪录：自最后一次联络起保存 2 年。
  • 行销名单：保存至你撤回同意为止。

超过保存期限且无法律义务保留的资料，我们会删除或匿名化。

9. 资料安全

我们采取合理的技术与管理措施保护你的资料，包括限制存取权限、使用受密码保护的帐户，以及透过加密连线（HTTPS）传输。但没有任何系统能保证绝对安全。

10. 资料外泄通报

若发生可能对你造成重大损害的个人资料外泄事件，我们会依《PDPA》修订规定，在法定时限内通报个人资料保护专员，并在必要时通知受影响的当事人。

11. 你的权利

依据《PDPA》，你有权：

  • 查阅我们持有的关于你的个人资料
  • 要求更正不准确、不完整或过时的资料
  • 撤回你先前给予的同意
  • 要求停止为直销目的处理你的资料
  • 要求停止可能对你造成损害或困扰的处理
  • 在技术可行的情况下，要求将资料转移至另一资料控制者（资料可携权）

行使上述权利，请以 support@sweetbites.my 或 WhatsApp 017-570 8212 联络我们。我们会在收到请求后 21 天内回复。依法，我们可能就查阅请求收取合理费用，或在法律允许的情况下拒绝部分请求，并会说明理由。

12. 行销讯息

我们只在你同意后发送促销讯息。你可以随时回复「STOP」或联络我们退订，退订不影响订单相关的必要通知（例如配送安排）。

13. 儿童

本网站不面向 18 岁以下人士，我们不会刻意收集儿童的个人资料。

14. 政策更新

我们可能不时更新本政策，更新后于本页面公布并注明生效日期。

15. 联络我们

FLAVORFIX SDN BHD（202501048686 / 1650094-V）
Zest Apartment, Jalan Kinrara 6B, Bandar Kinrara, 47180 Puchong, Selangor.

电邮：support@sweetbites.my
WhatsApp：017-570 8212

Effective date: 11 August 2026

This Privacy Policy explains how FLAVORFIX SDN BHD (Company No. 202501048686 (1650094-V), "we", "us") collects, uses and protects your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA), as amended in 2024.

1. Data controller

FLAVORFIX SDN BHD (202501048686 / 1650094-V)
Zest Apartment, Jalan Kinrara 6B, Bandar Kinrara, 47180 Puchong, Selangor.

Data enquiries: support@sweetbites.my
WhatsApp: 017-570 8212

2. What we collect

  • Identity and contact data: name, phone/WhatsApp number, email address.
  • Delivery data: delivery address, recipient name and phone, delivery notes.
  • Order data: products purchased, flavor selections, amounts, order history, monthly plan delivery schedule.
  • Payment data: payment method and transaction status. We do not collect or store your full card number—card details are handled directly by our payment provider.
  • Communications: WhatsApp conversations, emails, support records, and any reviews or photos you send us.
  • Delivery records: a photo taken at the point of delivery, which may show the recipient and the property entrance. It is used only as proof of delivery and to resolve delivery disputes.
  • Technical and usage data: IP address, browser and device type, pages viewed, referring site, and data collected by cookies and similar technologies.

We do not set out to collect sensitive personal data as defined by the PDPA (such as health or religious data). If you volunteer health-related information in conversation—an allergy, or that you are pregnant—we use it only to handle your order and flag safety information to you.

3. Where the data comes from

Most of it you give us directly when you order, contact us or use the site. Some technical data is collected automatically by cookies and analytics tools.

4. Why we use it

  • To process orders, prepare and deliver them, and handle payments and refunds
  • To confirm flavors and delivery timing over WhatsApp, and to ask at month's end whether you'd like to continue a Monthly Plan
  • To provide customer service and handle complaints
  • For food safety traceability and product issue handling
  • To meet legal obligations, including accounting and tax record keeping
  • To prevent fraud and abuse
  • To send you promotional messages, where you have consented
  • For website analytics and advertising measurement

Providing your data is voluntary, but your name, contact details and delivery address are necessary to process an order—without them we cannot fulfil it.

5. Who we share it with

We do not sell your personal data. To do the things above, we may disclose it to:

  • Shopify — our online store platform and order system
  • Our payment provider — to process payments and refunds
  • Our delivery and logistics providers (including their cold-chain subcontractors) — who receive the recipient's name, address and phone number
  • WhatsApp (Meta Platforms) — the channel we use for order communication
  • Analytics and advertising providers — we deploy Meta Pixel and the Meta Conversions API, TikTok Pixel and Google Analytics 4 through Google Tag Manager, and may add similar tools in future. Note that the Meta Conversions API sends data from our server, including your email address and phone number in hashed (encrypted) form, to Meta for advertising measurement.
  • Professional advisers and authorities — where required by law or to exercise legal rights

6. Transfers outside Malaysia

Some of the providers above—including Shopify, Meta, Google and TikTok—operate servers outside Malaysia. By using this site you understand your personal data may be transferred and processed abroad. We work only with providers that offer a reasonable standard of protection.

7. Cookies and tracking

This site uses cookies and similar technologies to keep your cart and language choice, analyse traffic, and measure advertising performance. You can refuse or delete cookies in your browser settings, though some features may stop working. Your language choice is stored locally on your device and is not sent to us.

8. How long we keep it

  • Transaction and accounting records: 7 years, under the Income Tax Act 1967; at least 2 years under the Consumer Protection (Electronic Trade Transactions) Regulations 2012.
  • Support and communication records: 2 years from last contact.
  • Marketing lists: until you withdraw consent.

Data past its retention period with no legal reason to keep it is deleted or anonymised.

9. Security

We take reasonable technical and organisational measures to protect your data, including restricting access, using password-protected accounts, and transmitting data over encrypted connections (HTTPS). No system can be guaranteed completely secure.

10. Data breach notification

If a personal data breach occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner within the statutory timeframe under the amended PDPA, and notify affected individuals where required.

11. Your rights

Under the PDPA you have the right to:

  • access the personal data we hold about you
  • correct data that is inaccurate, incomplete or out of date
  • withdraw consent you previously gave
  • stop us processing your data for direct marketing
  • stop processing likely to cause you damage or distress
  • request transfer of your data to another data controller, where technically feasible (data portability)

To exercise any of these, contact us at support@sweetbites.my or WhatsApp 017-570 8212. We will respond within 21 days. We may charge a reasonable fee for access requests, or decline a request where the law permits—and we will explain why.

12. Marketing

We only send promotional messages if you have consented. You can opt out any time by replying STOP or contacting us. Opting out does not stop essential order messages such as delivery arrangements.

13. Children

This site is not directed at anyone under 18 and we do not knowingly collect children's personal data.

14. Changes to this policy

We may update this policy from time to time. Updates are published on this page with a new effective date.

15. Contact us

FLAVORFIX SDN BHD (202501048686 / 1650094-V)
Zest Apartment, Jalan Kinrara 6B, Bandar Kinrara, 47180 Puchong, Selangor.

Email: support@sweetbites.my
WhatsApp: 017-570 8212