Privacy policy

1. Introduction to this Privacy Policy

Welcome to Marrow Market ("we," "our," "us"). We respect your privacy and are committed to protecting your personal data. This Personal Data Protection Notice explains how we collect, use, disclose, and safeguard your personal data in accordance with the Personal Data Protection Act 2010 (PDPA).

2. Collection of Personal Data

2.1 We collect personal data from you when you:

  • Register for an account on our website (www.marrowmarket.com);
  • Purchase our products or services;
  • Subscribe to our newsletters, marketing materials, or promotional offers;
  • Contact us via email, social media, or customer service channels;
  • Participate in our events, surveys, or promotions;
  • When you submit your personal data to us for any reason.

2.2 The types of personal data collected may include but is not limited to:

  • Name;
  • Contact number;
  • Billing or shipping address;
  • Bank account number and payment information;
  • Marketing and communications data;
  • and other details necessary for order fulfillment and customer support.

3. Legal Basis for Processing Personal Data

3.1 We process your personal data based on the following legal grounds:

  • Performance of a Contract: To fulfill our contractual obligations, such as processing and delivering orders.
  • Legal Obligations: To comply with applicable laws and regulations.
  • Legitimate Interests: To improve our services while balancing your privacy rights.
  • Consent: For marketing communications and promotional activities (you may withdraw consent at any time)

4. Use of Personal Data

4.1 We use your personal data for the following purposes:

  • To process and fulfill your orders;
  • To provide customer support and respond to inquiries;
  • To improve our products and services;
  • To send you promotional offers, updates, and marketing communications (with your consent);
  • To comply with legal and regulatory requirements;
  • To prevent fraud, unauthorized activities, and security breaches.

5. Disclosure of Personal Data

5.1 Your personal data may be shared with third parties when necessary, including:

  • Payment processors for secure transaction handling;
  • Courier and logistics service providers for order delivery;
  • Marketing and advertising partners for promotional activities;
  • Legal or regulatory authorities as required by law.

5.2 We do not sell or rent your personal data to third parties.

6. International Data Transfers

6.1 If your personal data is transferred outside Malaysia, we ensure adequate protection through:

  • Compliance with applicable data protection laws;
  • Standard contractual clauses or similar safeguards;
  • Secure transfer protocols to protect your personal data.

7. Security of Personal Data

7.1 We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, or misuse. However, while we strive to protect your personal data, no method of transmission over the internet is completely secure.

8. Retention of Personal Data

8.1 We retain your personal data only for as long as necessary to fulfill the purposes outlined in this notice or as required by law.

9. Children's Privacy

9.1 Our services are not intended for individuals under the age of 13. We do not knowingly collect personal data from children without parental consent. If you believe a child has provided us with personal data, please contact us to request deletion.

10. User Rights and Consent Management

10.1 Under the PDPA, you have the right to:

  • Access and request a copy of your personal data;
  • Correct or update inaccurate personal data;
  • Withdraw consent for data processing (where applicable);
  • Request the deletion of your personal data (subject to legal obligations).

10.2 To exercise these rights, please contact us at help@marrowmarket.com.

11. Cookies and Tracking Technologies

11.1 We use cookies and similar tracking technologies to enhance your browsing experience. You may manage your cookie preferences through your browser settings.

12. Data Breach Notification

12.1 In the event of a data breach, we will:

  • Notify affected users where necessary;
  • Take immediate action to mitigate risks;
  • Report significant breaches to relevant authorities as required by law.

13. Third-Party Services and Links

13.1 Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.

14. Updates to this Notice

14.1 We may update this Personal Data Protection Notice from time to time. Any changes will be posted on our website, and we encourage you to review this page periodically.

15. Effective Date and Contact Information

15.1 This notice is effective as of 14 March 2024. If you have any questions regarding this Personal Data Protection Notice or how we handle your personal data, please contact us at: