Effective date: 26 October 2026 ยท Contact: Hatiawk159@gmail.com
Responsible operator and contact
The operator of Buy For Me is Giant Harvest Restaurant Sdn Bhd. Privacy contact email: Hatiawk159@gmail.com. WhatsApp: +60 10-585 9819. Contact us to ask about your data or make a privacy complaint.
Information and sources
We collect the information you provide in account registration, guest requests where available, orders and messages: name, email, phone number, country, addresses, order items, notes and payment-related information you choose to send. Account passwords are processed for sign-in and stored as hashes. Hosting and service systems may process technical data such as IP addresses, browser details and request or security logs. Information comes from you, your use of the service and payment or delivery updates relevant to your order. Do not send card security codes or unrelated identity documents.
Purposes and required details
We use relevant data to provide accounts, prepare quotes, fulfil purchases and deliveries or pickups, contact you about orders, handle payments and refunds, prevent misuse and meet legal obligations. Required contact, order and fulfilment details are necessary to process a request; without them we may be unable to provide the service. Optional notes are voluntary. Order communications are separate from marketing; promotional messages require a separate choice.
Recipients and processing locations
Relevant information may be shared with staff handling the order, delivery partners, payment services, hosting and storage providers, and communication services such as WhatsApp, only as needed for these purposes or lawful disclosure. Hosting or communication services may process information outside Malaysia, including for Singapore fulfilment. These services may use infrastructure in countries where they operate. You may contact us for information about the service providers handling your order. Retailers need only information necessary to fulfil a purchase. Any legal request is handled under applicable law.
Storage, retention and security
The website uses browser storage for your cart, sign-in session and app or notification preferences. Essential storage supports these features; clearing it or signing out can remove local state. Our policy is to use appropriate access controls and reasonable safeguards, limit access to authorised people, and retain personal data only as long as necessary for the stated purposes and applicable legal requirements. Electronic transaction records are retained for at least three years where required by applicable law. Other records are retained only as needed for the stated purposes, legal obligations or resolving disputes, then deleted or anonymised. No system can guarantee absolute security.
Your choices and rights
Contact the privacy contact to request access, correction, deletion where applicable, or to limit processing or withdraw consent where processing relies on it. We may need proportionate identity verification. We will explain any lawful restriction or record-retention requirement and the effect on pending services. You can manage browser notifications in device settings; declining optional notifications does not prevent ordering. Marketing consent must be optional and separately recorded. We will date updates to this notice and communicate material changes where required. Effective date: 26 October 2026.