Privacy policy

Last updated: 11 August 2026

This Privacy Policy explains how Jeeroul collects, uses, stores, and discloses personal data in connection with our website, WhatsApp conversations, orders, delivery, payment, customer service, and related business operations.

This Policy is prepared with reference to the Personal Data Protection Act 2010 of Malaysia.

1. Business Information

Trading name: Jeeroul
Company name: CTG4U JEEROUL SDN. BHD.
SSM registration no.: 202601004193 (1666290-X)
Website: https://jeeroul.com.my
Business address: 28, Lorong Kampar KU1, 41300 Klang, Selangor, Malaysia.
Customer service email: customer.service@jeeroul.com.my
Customer service phone / WhatsApp: +60 16-253 0528

2. Personal Data We Collect

We may collect personal data that is necessary for our business and order fulfilment, including:

  • name;
  • phone number;
  • email address;
  • delivery address and postcode;
  • order details, pack size, flavour selection, delivery notes, and customer preferences;
  • payment status, payment reference, transaction details, refund details, and receipts;
  • customer service messages, WhatsApp conversations, feedback, complaints, photos, and related records;
  • technical information such as website usage, cookies, device information, and browser information.

We do not intentionally collect more personal data than is reasonably required for the stated purposes.

3. How We Collect Personal Data

We may collect personal data when you:

  • visit or use our website;
  • message us through WhatsApp or social media;
  • place an order or request a payment link;
  • complete payment through an approved payment channel;
  • contact us for delivery support, refund, replacement, feedback, or customer service;
  • respond to promotions, surveys, or marketing messages.

4. How We Use Personal Data

We may use personal data to:

  • process, confirm, pack, deliver, and manage orders;
  • contact customers about order details, flavour allocation, delivery, payment, refund, or product issues;
  • verify payments and prevent fraud, suspicious transactions, or payment disputes;
  • provide receipts, customer service, refunds, replacements, and dispute resolution;
  • manage delivery through logistics partners;
  • improve products, service quality, website experience, and customer communication;
  • send marketing messages, promotions, or updates where permitted by law or with customer consent;
  • comply with accounting, tax, legal, regulatory, audit, record-keeping, and compliance obligations.

5. Disclosure To Third Parties

We may disclose personal data only where necessary to operate our business, including to:

  • payment gateways and payment channel providers, including Fiuu where applicable;
  • banks, card issuers, e-wallet providers, and fraud prevention or dispute handling parties;
  • delivery and logistics partners;
  • website, e-commerce, cloud hosting, automation, messaging, and IT service providers;
  • accounting, tax, legal, audit, and professional advisers;
  • government authorities, regulators, law enforcement, or other parties where required by law.

We do not sell customer personal data.

6. Payment Data

When you pay through an approved payment gateway or payment channel, payment information may be collected and processed directly by that payment provider. Jeeroul does not store full card details on our website.

7. Marketing Communications

We may send service-related messages about your order, delivery, payment, or customer support request.

We may also send marketing messages where permitted or where you have agreed to receive them. You may opt out of marketing messages by following the unsubscribe instruction or contacting us.

8. Cookies and Website Data

Our website may use cookies, analytics, and similar technologies to operate the website, remember preferences, improve performance, and understand website usage.

You may adjust your browser settings to block cookies, but some website functions may not work properly.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including order fulfilment, customer service, dispute handling, accounting, tax, legal, and compliance requirements.

When personal data is no longer needed, we will take reasonable steps to delete, anonymize, or securely store it according to applicable requirements.

10. Security

We take reasonable administrative, technical, and operational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no online transmission or storage method is completely secure. Customers should avoid sending unnecessary sensitive information through unsecured channels.

11. Access and Correction

You may contact us to request access to or correction of your personal data. We may ask for verification before processing such requests.

12. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent by contacting us. Withdrawal of consent may affect our ability to process orders, provide delivery, handle refunds, or respond to support requests.

13. Cross-Border Processing

Some service providers used by us may store or process data outside Malaysia. Where this happens, we will take reasonable steps to ensure personal data is handled in line with this Policy and applicable law.

14. Updates To This Policy

We may update this Privacy Policy from time to time. The latest version posted on our website will apply.