Privacy Policy

NUTRILAB MARKETING SDN. BHD. (Registration No. 202501004438 (1605851U)) ("we", "us", "our"), the company that owns and operates www.bioki.com.my, respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA"). Our registered address is D410 (Room 2), Plaza Bukit Jalil (Aurora Place), 1 Persiaran Jalil 1, Bandar Bukit Jalil, 57000 Kuala Lumpur, W.P. Kuala Lumpur, Malaysia. This Policy explains how we collect, use, disclose, and safeguard your personal data.

1. Personal Data We Collect

• Account details: name, email address, phone number, password (stored securely, encrypted).
• Order & delivery details: shipping name, address, postcode, state, and order history.
• Payment information: processed by our payment provider (Billplz); we do not store your full card or banking credentials.
• Refund details: if you are entitled to a refund for an FPX payment, we collect the bank account details you provide (account holder name, bank, account number) solely to process that refund.
• Usage data: basic technical information such as device/browser type, for security and to improve the Website.

2. Purpose of Processing

We process your personal data to:

• Create and manage your account;
• Process and deliver your orders, and provide customer support;
• Handle cancellations, returns, and process refunds;
• Operate our loyalty points and rewards programme;
• Send transactional messages (order confirmations, delivery updates);
• Send marketing communications only if you have opted in (see section 4);
• Comply with legal obligations and prevent fraud.

3. Disclosure to Third Parties

We share your personal data only as necessary with:

• Shipping & courier partners — we use EasyParcel (a shipping aggregator) and its courier partners (such as J&T, SPX, Pos Laju, and others) to process and deliver your orders;
• Payment provider (Billplz) — to process payments;
• Service providers that host our website and database, under confidentiality obligations.

We do not sell your personal data to third parties.

4. Marketing Communications

We will only send you promotional emails or messages if you have expressly opted in. You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us. Withdrawing marketing consent will not affect transactional messages related to your orders.

5. Data Security

We use reasonable technical and organisational measures, including encryption and access controls, to protect your personal data against unauthorised access, loss, or misuse.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to fulfil the purposes above and to comply with legal, accounting, or reporting requirements.

7. Your Rights Under the PDPA

You have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent to the processing of your data (which may affect our ability to provide services);
• Limit the processing of your personal data.

To exercise these rights, contact us via WhatsApp at +60 12-967 9698.

8. Children's Data

Our products are for children, but accounts and purchases are made by adults (parents/guardians). We do not knowingly collect personal data directly from children.

9. Cookies

We use essential cookies/local storage to keep you signed in and remember your cart and language preference. These are necessary for the Website to function.

10. Changes to This Policy

We may update this Policy from time to time. The latest version will always be available on this page.

11. Contact

For any privacy questions or to exercise your PDPA rights, contact us via WhatsApp at +60 12-967 9698 or by email at .

← Back to Bio-Ki Kids