Da An Logistics Sdn Bhd

Privacy Policy

PRIVACY POLICY

Da An Logistics Sdn Bhd

Johor Bahru, Johor, Malaysia

Effective Date: 13 May 2026

1. Introduction

Da An Logistics Sdn Bhd (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our customers, business partners, employees, and all individuals whose personal information we process in the course of our last mile logistics operations.

This Privacy Policy describes how we collect, use, disclose, store, and protect your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and any other applicable laws and regulations.

By engaging our services, visiting our website, or providing us with your personal data, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Definitions

For the purposes of this Privacy Policy:

  • “Personal Data” means any information that directly or indirectly identifies an individual, including names, contact details, identification numbers, and delivery information.
  • “Processing” means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
  • “Data Subject” refers to the individual whose personal data is collected and processed.
  • “Third Party” refers to any person or organisation that is not a party to the principal transaction between us and the Data Subject.

3. Personal Data We Collect

In operating our last mile logistics services, we may collect the following categories of personal data:

3.1 Customer and Recipient Data

  • Full name and identification details
  • Delivery address (including unit number, block, postcode, and city)
  • Contact number (mobile and/or fixed line)
  • Email address
  • Preferred delivery time and instructions
  • Proof of delivery signature or photograph

3.2 Business and Transaction Data

  • Order reference numbers and parcel tracking information
  • Invoice and payment details
  • Merchant or sender details
  • Transaction history and delivery records

3.3 Technical and Usage Data

  • IP address and device information when using our website or application
  • GPS or geolocation data for delivery routing and proof of delivery
  • Browser type, access times, and pages visited
  • Cookies and similar tracking technologies

3.4 Employee and Rider Data

  • NRIC or passport number
  • Bank account details for salary or commission disbursement
  • Emergency contact information
  • Performance records and delivery logs

4. Purposes of Processing Personal Data

We collect and process personal data for the following purposes:

  • To fulfil and manage delivery orders, including last mile and same-day deliveries within Johor Bahru and surrounding areas
  • To communicate with customers and recipients regarding delivery status, scheduling, and failed delivery attempts
  • To verify identity and prevent fraud, misrepresentation, or unauthorised access
  • To comply with legal and regulatory obligations under Malaysian law
  • To manage our business operations, including invoicing, billing, and record-keeping
  • To improve our logistics services, route optimisation, and customer experience
  • To manage relationships with merchants, e-commerce platforms, and business clients
  • To recruit, employ, and manage our delivery personnel and operations staff
  • To respond to enquiries, complaints, and disputes
  • To send service-related communications and, where consented, marketing and promotional materials

5. Legal Basis for Processing

Under Malaysia’s PDPA, we process your personal data on the following legal bases:

  • Consent: Where you have explicitly given us consent to process your personal data for a specific purpose.
  • Contractual Necessity: Where processing is required to perform our contractual obligations to you or to take steps at your request before entering into a contract.
  • Legal Obligation: Where we are required to process your data to comply with applicable laws, regulations, or court orders.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms.

6. Disclosure of Personal Data

We do not sell or rent your personal data to any third party. We may share your personal data with the following parties, strictly on a need-to-know basis:

  • Merchants, e-commerce platforms, and shippers who engaged our delivery services
  • Technology and software providers supporting our operations (e.g., route planning, fleet management, or parcel tracking systems)
  • Payment processors and financial institutions for invoicing and settlement
  • Government authorities, law enforcement, or regulatory bodies when required by law or legal process
  • Professional advisors including lawyers, auditors, and insurers
  • Logistics partners or sub-contractors engaged to assist in last mile delivery

All third-party service providers are contractually required to protect your personal data and use it only for the purposes for which it was disclosed.

7. Retention of Personal Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. In general:

  • Delivery records and transaction data: 7 years (in accordance with Malaysian accounting and tax requirements)
  • Customer account information: Until account closure, plus a reasonable retention period
  • Marketing data: Until consent is withdrawn
  • Employee records: As required under Malaysian employment law

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

8. Security of Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

  • Encryption of sensitive data in transit and at rest
  • Access controls and role-based permissions for staff
  • Regular security assessments and audits
  • Staff training on data protection obligations
  • Physical security measures at our premises

While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. In the event of a data breach that is likely to cause harm, we will notify the relevant authorities and affected individuals as required by law.

9. Your Rights as a Data Subject

Under the PDPA and applicable Malaysian law, you have the following rights:

  • Right of Access: To request a copy of the personal data we hold about you.
  • Right of Correction: To request that inaccurate or incomplete personal data be corrected.
  • Right to Withdraw Consent: To withdraw consent for processing at any time, without affecting the lawfulness of processing prior to withdrawal.
  • Right to Limit Processing: To request that we limit how we use your personal data in certain circumstances.
  • Right to Complain: To lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12 below. We will respond to your request within 21 days.

10. Cookies and Tracking Technologies

Our website and mobile application may use cookies and similar tracking technologies to enhance user experience and analyse site usage. You may configure your browser settings to refuse cookies; however, doing so may affect the functionality of our digital platforms.

We use the following categories of cookies:

  • Strictly Necessary Cookies: Required for the basic functioning of our website.
  • Performance Cookies: Collect anonymised information on how visitors use our site to help us improve it.
  • Functional Cookies: Remember your preferences and settings.
  • Targeting Cookies: Used (with your consent) to deliver relevant communications and advertisements.

11. Cross-Border Transfer of Personal Data

As a logistics operator, we may occasionally transfer personal data to parties located outside Malaysia in connection with our services (for example, for international parcels or technology infrastructure). Any such transfers will be made in compliance with the requirements of the PDPA and relevant regulations, with appropriate safeguards in place.

12. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests in relation to this Privacy Policy or our handling of your personal data, please contact our designated Data Protection Officer:

Da An Logistics Sdn Bhd

Attn: Data Protection Officer

Address: Johor Bahru, Johor, Malaysia

Email: privacy@daanlogistics.com.my

Tel: +607-XXX XXXX

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any significant changes will be communicated to you through our website, mobile application, or by direct notification. The revised Privacy Policy will take effect from the date indicated at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed of how we protect your personal data.

ACKNOWLEDGEMENT

By engaging the services of Da An Logistics Sdn Bhd, you confirm that you have read, understood, and agree to this Privacy Policy.