Privacy Policy for ODA Malaysia Mobile App

At ODA Malaysia, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our mobile application.

1. Who We Are

We are Sumhero Sdn Bhd (“we”, “us” or “our”), but we operate under the name ODA Malaysia.

2. Information We Collect

We collect the following categories of information to provide and improve our services:

Personal Information

• Name, email address, phone number, and other details when you register an account or use specific features of the app.

Device Information

• Device identifier, operating system, IP address, and mobile network information.

Usage Data

• Information about how you use the app, including the features you access and pages you visit.

3. How We Use Your Information

We process personal data to deliver our services efficiently and securely. The main categories of data processed are:

Profile Data (Master Data)

• What we collect: Name, email, phone number, password, country, language, delivery addresses, interests, and age.
• Why we need it: Required to create your profile and verify that you are not a minor.

Order and Delivery Data

• What we collect: Name, address, phone number, order details, product names/quantities, sender and recipient information (for rider services).
• Why we need it: To prepare, deliver, and fulfill your order efficiently.

Order History Data

• What we collect: Order history, invoices, payment method, delivery address, and status of past orders.
• Why we need it: To help you track your orders, improve services, and optimize your experience.

Location Data

• What we collect: Address, postcode, city, country, longitude and latitude of your device.
• Why we need it: To facilitate accurate delivery and enable rider navigation.

Device Information and Access Data

• What we collect: Device ID, OS version, configuration, IP address, platform interactions.
• Why we need it: For technical maintenance, fraud detection, and platform security.

Customer Care Data

• What we collect: Name, address, phone, email, social media ID (if applicable), support requests, responses, and attachments.
• Why we need it: To verify your identity and assist you efficiently.

Payment Data

• What we collect: Payment method, encrypted bank details, transaction information, refund details, and bank receipts.
• Why we need it: To process and assign payments to your orders and store information for future payments (with your consent).

Source of Data
We collect data through:

• Our website or mobile application
• Online forms (e.g. Google Forms)
• Manual forms
• Cookies
• Phone calls or live chat
• Third parties authorized by you

4. Data Sharing and Disclosure

• Service Providers: We may share information with trusted third-party partners to help operate the app and provide services.
• Legal Requirements: We may disclose data to comply with legal obligations, court orders, or to protect our rights and the safety of others.
• With Consent: We may share your information where you explicitly agree to it or as otherwise described during collection.

5. Data Security

We implement strict security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights

You have the following rights regarding your personal data:

Right to Access

• Request information about the data we store and how we process it.
• We aim to respond within 24 hours to 3 days.

Right to Rectification

• Correct any inaccurate data we hold about you.

Right to Withdraw Consent

• Withdraw consent for data collection and processing at any time.
• Please note that this may affect our ability to provide you with services.

Right to Restriction of Processing

• If deletion is not legally possible, your data will be archived for compliance only.

Right to Data Portability

• Request a machine-readable copy of your data or transfer to another data controller (applies to consent-based processing).

Right to Object

• Object to processing based on legitimate interests or for direct marketing purposes.

Right to Complaint

• Lodge a complaint with the data protection authority in Malaysia or in your country of residence if you believe your privacy rights have been violated.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website or within the mobile application.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: oda@odamalaysia.com
Phone: 00-7382289

By using the ODA Malaysia mobile app, you consent to the collection and use of your information as described in this Privacy Policy.