MONCAH PRIVACY POLICY
Effective Date: 28 July 2026
1. INTRODUCTION
Moncah ("we", "us", "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains how we collect, use, store, and protect your personal information.
2. DATA WE COLLECT
For Customers:
Full name, email address, phone number
Shipping and billing address
Payment information (processed securely)
Purchase history and website activity
For Vendors:
Full name and identification card number (IC)
Business information (company name, SSM number, address)
Bank account details for payment purposes
Onboarding supporting documents
Product and inventory information
3. PURPOSE OF DATA COLLECTION
Customers — to process orders, arrange delivery, provide customer support, and send marketing communications (with consent).
Vendors — to:
Process vendor registration and verification
Manage accounts and commission payments
Communicate regarding marketplace operations
Ensure legal compliance and auditing
4. CONSENT
We collect your data only with your explicit consent. By completing the vendor registration form or making a purchase on our platform, you agree to the terms of this policy.
You may withdraw your consent at any time by contacting us at: privacy@moncah.com
5. DATA SHARING
We do not sell your personal data to third parties. Data may be shared with:
Logistics service providers (for delivery purposes)
Payment processors (Shopify Payments, etc.)
Relevant authorities if required by law
6. DATA SECURITY
We protect your data through:
SSL encryption on all transactions
Restricted access to authorised personnel only
Regular security audits
Shopify platform compliant with SOC 1 & SOC 2 standards
7. YOUR RIGHTS
Under the Malaysian PDPA, you have the right to:
Access — request a copy of your personal data
Correction — correct inaccurate data
Erasure — request deletion of your data
Withdrawal of Consent — withdraw permission at any time
To submit any request, contact: privacy@moncah.com
8. DATA RETENTION
Customer data: Duration of active account + 7 years (tax requirements)
Vendor data: Duration of active contract + 7 years (legal requirements)
9. CONTACT US
Moncah Email: privacy@moncah.com Website: moncah.com
⚠️ Important Note: This is a draft for guidance purposes. Please review and verify with a lawyer specialising in Malaysian PDPAbefore publishing, particularly for clauses relating to vendor data and retention periods.
Effective Date: 28 July 2026
1. INTRODUCTION
Moncah ("we", "us", "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains how we collect, use, store, and protect your personal information.
2. DATA WE COLLECT
For Customers:
Full name, email address, phone number
Shipping and billing address
Payment information (processed securely)
Purchase history and website activity
For Vendors:
Full name and identification card number (IC)
Business information (company name, SSM number, address)
Bank account details for payment purposes
Onboarding supporting documents
Product and inventory information
3. PURPOSE OF DATA COLLECTION
Customers — to process orders, arrange delivery, provide customer support, and send marketing communications (with consent).
Vendors — to:
Process vendor registration and verification
Manage accounts and commission payments
Communicate regarding marketplace operations
Ensure legal compliance and auditing
4. CONSENT
We collect your data only with your explicit consent. By completing the vendor registration form or making a purchase on our platform, you agree to the terms of this policy.
You may withdraw your consent at any time by contacting us at: privacy@moncah.com
5. DATA SHARING
We do not sell your personal data to third parties. Data may be shared with:
Logistics service providers (for delivery purposes)
Payment processors (Shopify Payments, etc.)
Relevant authorities if required by law
6. DATA SECURITY
We protect your data through:
SSL encryption on all transactions
Restricted access to authorised personnel only
Regular security audits
Shopify platform compliant with SOC 1 & SOC 2 standards
7. YOUR RIGHTS
Under the Malaysian PDPA, you have the right to:
Access — request a copy of your personal data
Correction — correct inaccurate data
Erasure — request deletion of your data
Withdrawal of Consent — withdraw permission at any time
To submit any request, contact: privacy@moncah.com
8. DATA RETENTION
Customer data: Duration of active account + 7 years (tax requirements)
Vendor data: Duration of active contract + 7 years (legal requirements)
9. CONTACT US
Moncah Email: privacy@moncah.com Website: moncah.com
⚠️ Important Note: This is a draft for guidance purposes. Please review and verify with a lawyer specialising in Malaysian PDPAbefore publishing, particularly for clauses relating to vendor data and retention periods.