Concrix Malaysia Sdn Bhd (202601004235 (1666332-A)) ("Concrix", "we", "us" or "our") is committed to protecting the privacy and security of the personal data of our users. This Privacy Policy explains how we collect, process and protect your information in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). By using our platform, you consent to the practices described in this policy.
1. Information we collect
We collect personal data from buyers and sellers during account registration and through the transaction process, including:
- Identity and verification data — full name, NRIC/passport number (for individual verification), and SSM business registration documents.
- Contact data — billing address, site pickup addresses, email addresses and mobile phone numbers.
- Transaction and financial data — bank account details for payouts, payment receipts, and your history of purchases or listings.
- User-generated content — photos of materials, project descriptions, and correspondence between buyers and sellers about material condition.
- Technical data — IP address and browser type, used for security and platform optimisation.
2. Why we process your data
- Marketplace facilitation — to verify buyers and sellers and manage listings, bookings and payments.
- Verification and safety — to carry out "know your customer" (KYC) checks that prevent fraud and misrepresentation of stock.
- Logistics coordination — to provide pickup details to third-party logistics providers.
- Monitoring and security — to monitor platform activity, enforce our policies and investigate disputes.
3. Disclosure to third parties
To enable a successful sale and transport of materials, we may share your data with:
- The other party to a transaction — once a booking is confirmed, the buyer's and seller's contact details and site address are shared so the mandatory pre-loading inspection can take place.
- Logistics partners — pickup and delivery information is disclosed to third-party transporters.
- Professional advisors — legal, financial or audit advisors, to protect our legitimate business interests.
- Regulatory authorities — where required by law or requested by a government body.
4. Content licence
By uploading images, material descriptions or inventory data to Concrix, you grant us a non-exclusive, royalty-free, sub-licensable and transferable licence to use, reproduce and display that content, for the purpose of marketing your materials to potential buyers and promoting Concrix across our digital channels.
5. Data storage and cross-border transfer
Your personal data is stored securely. To provide our digital services, we may use cloud-hosting providers whose servers are located outside Malaysia. By using our services, you consent to the transfer of your data to these secure international destinations in accordance with PDPA standards.
6. Data security and retention
We apply technical and organisational measures to prevent unauthorised access to or loss of data. Personal data is retained for as long as necessary to fulfil the purposes above, typically up to seven (7) years, to comply with Malaysian tax and accounting requirements.
7. Your rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or out-of-date data.
- Withdraw consent to processing (which may result in your account being closed).
- Limit how your data is used for marketing purposes.
- Enquire about our data processing practices.
8. Consent
By using the Concrix platform, you consent to the processing of your personal data as described in this policy.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page.
10. Contact us
Questions about this policy or your personal data can be sent through our contact page, or to +6010-2830238, addressed to Concrix Malaysia Sdn Bhd.