XPARTS PRIVACY POLICY
1. INTRODUCTION
Xparts Asia Sdn. Bhd. (“Xparts,” “we,” “us” or “our”) is committed to protecting your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 and the Personal Data Protection (Amendment) Act 2024.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you use the Xparts website, mobile applications, marketplace, Installation Panel directory or related services.
By providing your personal data or using the Xparts platform, you acknowledge that you have read and understood this Privacy Policy.
2. PERSONAL DATA WE COLLECT
Depending on how you use Xparts, we may collect the following information:
A. Personal and Contact Information
- Full name.
- Telephone number.
- Email address.
- Billing and delivery address.
- Account profile information.
- Identity information where reasonably required for verification.
B. Vendor and Installation Panel Information
- Business name and SSM registration number.
- Business address and contact details.
- Bank-account and payout information.
- Tax, SST and e-Invoice information, where applicable.
- Details of business owners, directors or authorised representatives where verification is required.
- Business licences, certifications and service information.
C. Transaction Information
- Product orders and purchase history.
- Payment status and transaction references.
- Delivery, return, refund and dispute details.
- Communications relating to orders and customer support.
Complete payment-card details are generally processed by appointed payment-service providers and are not directly stored by Xparts.
D. Technical and Usage Information
- IP address.
- Device type, operating system and browser information.
- App and website usage activity.
- Login records and security information.
- Cookie and analytics identifiers.
- Error reports and platform-performance information.
E. Location Information
With your permission, we may collect approximate or precise location information to:
- Display nearby Installation Panels.
- Support delivery-address selection.
- Provide location-based marketplace features.
You may disable location access through your device settings, but certain location-based features may not function correctly.
F. Communications and Content
We may collect:
- Messages sent to Xparts Customer Support.
- Reviews, ratings and feedback.
- Photographs, videos or documents submitted for returns, refunds, listings, verification or disputes.
3. SOURCES OF PERSONAL DATA
We may collect personal data:
- Directly from you.
- Through your use of the Xparts platform.
- From vendors, Installation Panels and delivery providers involved in a transaction.
- From payment-service providers.
- From identity or business-verification providers.
- From publicly available sources, including SSM records, where legally permitted.
- From cookies, analytics tools and similar technologies.
4. PURPOSES OF PROCESSING
We may process your personal data for the following purposes:
- Creating, verifying and managing your account.
- Processing product orders and payments.
- Facilitating vendor payouts.
- Arranging delivery and order fulfilment.
- Processing returns, refunds, warranties and disputes.
- Displaying nearby Installation Panels.
- Enabling communication between relevant parties.
- Providing customer support and service notifications.
- Verifying vendors and Installation Panels.
- Preventing fraud, misuse and security threats.
- Maintaining and improving the platform.
- Personalising content and user experience.
- Conducting analytics and business planning.
- Sending marketing communications where permitted.
- Complying with legal, tax, accounting and regulatory obligations.
- Enforcing Xparts policies and Terms and Conditions.
Where personal data is required to create an account, process an order, verify a vendor or provide another requested service, failure to provide the required information may prevent Xparts from completing that service.
5. DISCLOSURE OF PERSONAL DATA
Xparts does not sell or rent personal data.
We may disclose personal data where reasonably necessary to:
- Vendors for order processing, fulfilment, returns and warranties.
- Delivery and logistics providers for collection and delivery.
- Installation Panels when requested or initiated by the user.
- Payment gateways, banks and payment-service providers.
- Cloud-hosting, technology, communication and analytics providers.
- Identity, fraud-prevention and business-verification providers.
- Professional advisers, auditors, insurers and legal representatives.
- Government agencies, regulators, courts or law-enforcement authorities where required or legally permitted.
- A buyer, investor or successor in connection with a proposed merger, acquisition, restructuring or transfer of the Xparts business, subject to appropriate confidentiality and legal safeguards.
Third-party service providers processing personal data on behalf of Xparts are required to protect the information and use it only for authorised purposes.
6. VENDORS AND INSTALLATION PANELS
Vendors may receive buyer information necessary to process and fulfil product orders.
Installation Panels may receive information provided by a user when the user chooses to contact or engage them.
Vendors and Installation Panels may act as independent data controllers for information they collect directly from users. Their processing practices may also be governed by their own privacy notices.
Users should avoid providing unnecessary sensitive or confidential information directly to vendors or Installation Panels.
7. MARKETING COMMUNICATIONS
Where permitted by law, Xparts may use your contact information to send:
- Platform announcements.
- Product promotions.
- Vendor campaigns.
- Special offers.
- News and service updates.
You may opt out of promotional communications by:
- Using the unsubscribe option provided.
- Updating your account preferences, where available.
- Contacting [support@xparts.asia](mailto:support@xparts.asia).
Opting out of marketing will not stop essential communications relating to orders, payments, security or your account.
8. COOKIES AND TRACKING TECHNOLOGIES
Xparts may use cookies, software-development kits and similar technologies to:
- Keep users signed in.
- Remember preferences.
- Maintain platform security.
- Measure platform performance.
- Understand how users interact with Xparts.
- Improve functionality and user experience.
- Provide personalised content or advertising where permitted.
You may manage cookies through your browser or device settings. Disabling certain cookies may affect platform functionality.
9. DATA RETENTION
Xparts retains personal data only for as long as reasonably necessary to:
- Provide the requested services.
- Complete orders, payments, returns and refunds.
- Maintain transaction and accounting records.
- Resolve disputes and enforce agreements.
- Prevent fraud and maintain platform security.
- Meet legal, tax and regulatory obligations.
When personal data is no longer required, Xparts will take reasonable steps to securely delete, destroy or anonymise it.
Account-deletion requests remain subject to any legal, accounting, security or operational retention requirements.
10. DATA SECURITY
Xparts implements reasonable technical and organisational security measures, which may include:
- Encryption for data transmission.
- Access controls and authentication measures.
- Restricted staff access.
- Secure payment processing through appointed providers.
- System monitoring and security reviews.
- Confidentiality obligations for staff and service providers.
No internet-based system is completely secure. Users should use strong passwords, protect their devices and immediately notify Xparts of suspected unauthorised account access.
11. PERSONAL DATA BREACHES
Xparts maintains procedures for assessing and responding to personal data breaches.
Where required under Malaysian law, Xparts will notify the Personal Data Protection Commissioner and affected individuals of a personal data breach within the applicable legal timeframe.
Users should report suspected privacy or security incidents to support@xparts.asia, mailto:support@xparts.asia.
12. CROSS-BORDER DATA TRANSFERS
Some service providers or technology systems used by Xparts may store or process personal data outside Malaysia.
Where personal data is transferred outside Malaysia, Xparts will take reasonable steps to ensure that the transfer complies with applicable Malaysian data-protection requirements and that appropriate safeguards are used.
13. YOUR DATA-PROTECTION RIGHTS
Subject to applicable Malaysian law, you may request to:
- Access personal data held about you.
- Correct inaccurate, incomplete or outdated information.
- Withdraw consent where processing is based on consent.
- Prevent or limit direct-marketing communications.
- Request information about how your personal data is processed.
- Request data portability where legally applicable and technically feasible.
- Request account or personal-data deletion, subject to legal and operational retention requirements.
Xparts may request identity verification before processing a request.
Some requests may be subject to legal exceptions, prescribed fees or other requirements permitted under Malaysian law.
To submit a request, contact:
Email: support@xparts.asia, mailto:support@xparts.asia
14. CHILDREN’S PERSONAL DATA
The Xparts platform is not intended for independent use by individuals under 18 years old.
A person under 18 should use the platform only with the involvement and supervision of a parent or legal guardian.
If Xparts becomes aware that a child’s personal data has been collected without appropriate involvement or authorisation, reasonable steps may be taken to delete or restrict that information.
15. THIRD-PARTY LINKS AND SERVICES
The Xparts platform may contain links to third-party websites, applications or services.
Xparts does not control and is not responsible for the privacy practices of independent third parties. Users should review the relevant third party’s privacy notice before providing personal information.
16. CHANGES TO THIS PRIVACY POLICY
Xparts may update this Privacy Policy to reflect legal, operational or platform changes.
The updated version will be published with a revised “Last Updated” date.
Where changes materially affect how personal data is processed, Xparts will provide appropriate notice through the platform, registered email address or another suitable communication channel.
Where required by law, Xparts will obtain fresh consent before applying a new processing purpose.
17. CONTACT INFORMATION
For questions, complaints or requests concerning personal data, contact:
Xparts Asia Sdn. Bhd.
Company Registration Number: 202401010238 (1556088-P)
Business Address: Level 9, Menara UOA, Bangsar, Kuala Lumpur.
Email: support@xparts.asia, mailto:support@xparts.asia
Website: www.xparts.asia, http://www.xparts.asia
Effective Date: 08th Aug 2026
Last Updated: 08th Aug 2026