This Privacy Policy explains how HomeWorld2U Sdn. Bhd. ("HomeWorld2U", "we", "us", "our") collects, uses, discloses and protects personal data in the course of our business, in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). It applies to enquirers, customers, suppliers' contact persons and website visitors who provide us with personal data.
The data controller responsible for personal data described in this policy is HomeWorld2U Sdn. Bhd., registered in Malaysia (Registration No. 202601026627 / 1688722-P), with its registered address at 13A-15, Menara Mutiara Central, 2, Jalan Desa Aman 1, Cheras Business Centre, 56100 Cheras, W.P. Kuala Lumpur, Malaysia.
Depending on how you interact with us, we may collect: your full name; company or store name; email address; phone number; billing and delivery addresses; order details including product categories and quantities; payment reference information (we do not store full card numbers); and any other information you choose to include in an enquiry, purchase order or installation request.
We collect personal data directly from you when you submit our website enquiry form, email or call us, issue a purchase order, request installation support, or otherwise communicate with us in the course of a business relationship. We do not purchase personal data from third-party data brokers or list vendors.
We use personal data to: prepare and send quotations; process, pack and fulfil orders; confirm compatibility and firmware version before dispatch; arrange shipping, delivery and, where requested, installation; issue invoices and process payments; respond to enquiries and provide customer support and warranty service; and, where you have given consent, send updates about new products or firmware releases. We do not use personal data for automated decision-making that produces legal or similarly significant effects on individuals.
We process personal data on the basis that you have provided it voluntarily for the purpose of obtaining a quotation, placing an order, or otherwise engaging our services, which constitutes consent under the PDPA, and because processing is necessary to perform a contract with you or to take steps at your request before entering into one. Where we rely on consent for optional communications, such as marketing updates, you may withdraw that consent at any time as described in Clause 11.
Where you request installation support or after-sales assistance for a smart device, we may collect device serial numbers, Wi-Fi network names (not passwords, unless you choose to provide one for on-site setup) and app account details necessary to complete pairing or troubleshoot the device. This information is used solely to provide the requested support and is not used for any other purpose without your separate consent. We do not access or store data collected by the smart device itself once it is set up and connected to your own account.
Where an order, warranty claim or general trading arrangement involves a delivery address, courier, manufacturer or supplier located outside Malaysia, personal data such as a delivery address or recipient contact detail may be transferred outside Malaysia solely for the purpose of completing that shipment or claim. Where this occurs, we take reasonable steps to ensure the receiving party affords the personal data a standard of protection comparable to that required under the PDPA.
We retain personal data for as long as necessary to fulfil the purpose it was collected for, to satisfy accounting, tax and warranty record-keeping obligations under Malaysian law (generally seven years from the relevant transaction, or for the duration of an applicable product warranty if longer), and to resolve any dispute or defend a legal claim. Enquiry data that does not result in an order is retained for a reasonable period to allow follow-up, after which it is deleted or anonymized if no further engagement occurs.
We apply reasonable administrative and technical safeguards to protect personal data against unauthorized access, alteration, disclosure or destruction, including restricting access to customer records to staff who need it to perform their role. No method of transmission or storage is completely secure, and while we work to protect personal data, we cannot guarantee its absolute security.
Under the PDPA, you have the right to request access to the personal data we hold about you, to request correction of inaccurate data, and to withdraw any consent you previously gave for us to process your data for a particular purpose, including marketing communications. To exercise any of these rights, contact us using the details in Clause 15. We will respond within a reasonable time and in accordance with the requirements of the PDPA, noting that withdrawing consent may affect our ability to continue providing services that depend on that data.
Our services are directed at consumers and businesses acting in a purchasing capacity, such as households, resellers and distributors. We do not knowingly collect personal data from children, and any personal data submitted to us is expected to belong to an adult authorized to make the purchase or act on behalf of their organization.
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. We encourage you to review this page periodically.
Questions, access requests or complaints about how we handle personal data can be directed to hworldtou@outlook.com or by phone at +6011-4959 8406. Our registered address is 13A-15, Menara Mutiara Central, 2, Jalan Desa Aman 1, Cheras Business Centre, 56100 Cheras, W.P. Kuala Lumpur, Malaysia.