Concrix Malaysia Sdn Bhd (202601004235 (1666332-A)) ("Concrix", "we", "us" or "our") is committed to protecting the privacy and security of the personal data of our users. This Privacy Policy explains how we collect, process and protect your information in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). By using our platform, you consent to the practices described in this policy.

1. Information we collect

We collect personal data from buyers and sellers during account registration and through the transaction process, including:

Identity and verification data: full name, NRIC/passport number (for individual verification), and SSM business registration documents.
Contact data: business or site addresses, email addresses and mobile phone numbers.
Marketplace activity: listings, requests, offers, enquiries and their workflow history. Concrix does not collect card or bank details for marketplace payment processing.
User-generated content: photos of materials, project descriptions, offer notes and assistance requests sent to Concrix.
Technical data: IP address and browser type, used for security and platform optimisation.

2. Why we process your data

Marketplace facilitation: to moderate content, present decision-ready offers and broker clarification or introductions.
Verification and safety: to carry out "know your customer" (KYC) checks that prevent fraud and misrepresentation of stock.
Privacy protection: to keep buyer contact details and exact warehouse addresses from unrelated marketplace users.
Monitoring and security: to monitor platform activity, enforce our policies and investigate disputes.

3. Disclosure to third parties

To operate the brokered marketplace, we may share your data with:

A matched marketplace party: only when needed for an introduction brokered by Concrix and subject to the parties' permission and the applicable workflow.
Service providers: hosting, security and email providers that process data for Concrix under appropriate safeguards.
Professional advisors: legal, financial or audit advisors, to protect our legitimate business interests.
Regulatory authorities: where required by law or requested by a government body.

4. Cookies and analytics

We use Google Analytics 4 to understand how visitors find and use the marketplace, so we can improve it. It sets first-party cookies in your browser (named _ga and _ga_*) that record an anonymous identifier, the pages you view and how you arrived at the site.

We enable IP anonymisation, so your full IP address is never stored by Google. We do not use these cookies for advertising, and we do not combine the data they collect with your account details. Google acts as our data processor for this information; its own handling is governed by the Google Privacy Policy.

You can opt out at any time by blocking or clearing cookies in your browser settings, or by installing the Google Analytics opt-out browser add-on. Declining analytics cookies does not affect your ability to use Concrix. We also set a strictly necessary cookie to keep you signed in; that one cannot be disabled without signing you out.

5. Content licence

By uploading images, material descriptions or inventory data to Concrix, you grant us a non-exclusive, royalty-free, sub-licensable and transferable licence to use, reproduce and display that content, for the purpose of marketing your materials to potential buyers and promoting Concrix across our digital channels.

6. Data storage and cross-border transfer

Your personal data is stored securely. To provide our digital services, we may use cloud-hosting providers whose servers are located outside Malaysia. By using our services, you consent to the transfer of your data to these secure international destinations in accordance with PDPA standards.

7. Data security and retention

We apply technical and organisational measures to prevent unauthorised access to or loss of data. Personal data is retained for as long as necessary to fulfil the purposes above, typically up to seven (7) years, to comply with Malaysian tax and accounting requirements.

8. Your rights

Under the PDPA, you have the right to:

Request access to the personal data we hold about you.
Request correction of inaccurate or out-of-date data.
Withdraw consent to processing (which may result in your account being closed).
Limit how your data is used for marketing purposes.
Enquire about our data processing practices.
Delete your account and the data associated with it.

You can delete your account at any time, from Account › Settings on the website or in the Concrix Android app. Our account deletion page sets out the steps, what is removed, and what we are required to keep.

9. Consent

By using the Concrix platform, you consent to the processing of your personal data as described in this policy.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page.

11. Contact us

Questions about this policy or your personal data can be sent through our contact page, or to +6010-2830238, addressed to Concrix Malaysia Sdn Bhd.