Privacy Policy

Last Updated: 20 September 2026

Tayba Mart (“Tayba Mart“, “we“, “us“, or “our“) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit or use our website, purchase our products, create an account, contact us, or otherwise interact with Tayba Mart.

Tayba Mart operates an online ecommerce store providing grocery, food, beverage and other products to customers in Malaysia.

This Privacy Policy is intended to explain our personal-data practices in accordance with applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 (Act 709) and applicable amendments and regulations. The Malaysian Personal Data Protection Department states that a privacy notice is an important requirement for businesses processing personal data in commercial transactions.

By using our website or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect different types of information depending on how you interact with our website.

1.1 Personal Information

When you place an order, create an account, contact us or use certain features of our website, we may collect:

  • Full name
  • Billing address
  • Delivery address
  • Email address
  • Telephone/mobile number
  • Account username and password
  • Order history
  • Products purchased
  • Delivery information
  • Customer-service communications
  • Information you provide through contact forms
  • Information relating to refunds, returns or complaints

1.2 Payment Information

When you make a payment, payment information may be processed by our third-party payment service providers.

Depending on the payment method used, this may include payment-related information such as transaction references or other information required to process your payment.

Tayba Mart does not intend to store complete credit or debit card details on its own website servers unless specifically stated otherwise. Payment information may be processed directly by the relevant payment provider according to its own privacy and security policies.

1.3 Technical Information

When you visit our website, certain technical information may automatically be collected, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Website pages visited
  • Date and time of visits
  • Referring website
  • General website usage information
  • Cookies and similar technologies

This information helps us operate, secure and improve our website.

2. How We Collect Your Personal Data

We may collect personal data when you:

  • Visit our website
  • Create an account
  • Place an order
  • Make a purchase
  • Subscribe to our newsletter or marketing communications
  • Contact customer service
  • Submit an enquiry or contact form
  • Request a return or refund
  • Participate in a promotion or campaign
  • Leave a product review
  • Communicate with us through email, telephone, messaging platforms or social media
  • Otherwise voluntarily provide information to us

We may also receive certain information from service providers involved in processing your order, payment or delivery.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

Order Processing

To:

  • Process and confirm your orders
  • Arrange payment
  • Prepare products for delivery
  • Arrange delivery to your address
  • Provide order confirmations
  • Provide shipping and tracking information
  • Process returns, refunds and exchanges

Customer Service

To:

  • Respond to enquiries
  • Resolve complaints
  • Provide customer support
  • Communicate with you regarding your orders
  • Verify information when necessary

Website Operations

To:

  • Create and manage customer accounts
  • Maintain website functionality
  • Improve website performance
  • Improve our products and services
  • Monitor website usage
  • Prevent fraudulent or unauthorized activity
  • Maintain website security

Business Administration

To:

  • Maintain business and transaction records
  • Perform accounting and financial administration
  • Comply with applicable legal and regulatory requirements
  • Resolve disputes
  • Enforce our terms and conditions
  • Protect our legal rights and interests

Marketing

Where permitted and where you have provided the appropriate consent where required, we may use your contact information to send:

  • Promotional offers
  • Product updates
  • Discounts
  • New product announcements
  • Special campaigns
  • Newsletters

You may opt out of marketing communications at any time.

4. Legal Basis and Consent

We process personal data in accordance with applicable Malaysian personal data protection requirements.

Depending on the circumstances, we may process your personal data where:

  • You have provided consent;
  • Processing is necessary to provide products or services you have requested;
  • Processing is necessary to administer your account or order;
  • Processing is necessary for legitimate business purposes, where permitted by applicable law;
  • Processing is necessary to comply with legal or regulatory obligations; or
  • Another lawful basis applies under applicable law.

The Malaysian Personal Data Protection Act establishes principles governing the handling of personal data, including general, notice and choice, disclosure, security, retention, data integrity and access principles.

5. Disclosure of Personal Data

We may disclose or provide access to relevant personal data to third parties where necessary to operate our business and provide our services.

These parties may include:

  • Payment service providers
  • Banks and financial institutions
  • Courier and delivery companies
  • Logistics providers
  • Website hosting providers
  • Website and ecommerce service providers
  • IT and technical service providers
  • Website analytics providers
  • Marketing service providers
  • Customer-service providers
  • Professional advisers
  • Accountants and auditors
  • Legal advisers
  • Government authorities or regulatory bodies where required by law

We only intend to disclose information that is reasonably necessary for the relevant purpose.

We do not sell your personal data to third parties as a business practice.

6. Delivery and Logistics Information

When you place an order, we may provide necessary information to our delivery or logistics partners so that your order can be delivered.

This may include:

  • Customer name
  • Delivery address
  • Telephone number
  • Order reference
  • Delivery instructions
  • Other information reasonably required to complete delivery

The delivery provider may process this information according to its own privacy practices.

7. Payment Information

Payments made through our website may be handled by third-party payment providers.

These providers may collect and process payment information according to their own terms and privacy policies.

Tayba Mart does not request unnecessary payment information and does not intentionally retain complete payment-card information unless this is specifically required and lawfully permitted.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used to:

  • Keep products in your shopping cart
  • Maintain login sessions
  • Remember preferences
  • Improve website functionality
  • Understand website traffic
  • Analyse customer behaviour
  • Improve our website
  • Support advertising and marketing activities where applicable

You may configure your browser to refuse or delete cookies. However, disabling certain cookies may affect some website functionality.

For more information, please refer to our Cookie Policy.

9. Analytics and Website Performance

We may use analytics and similar technologies to understand how visitors use our website.

This may help us understand:

  • Which pages receive visitors
  • How visitors navigate the website
  • Website performance
  • General customer interests
  • Technical problems
  • How we can improve the shopping experience

Analytics providers may process technical information according to their own privacy policies.

10. Marketing Communications

If you have subscribed to receive marketing communications from us, we may send you information about our products, promotions and special offers.

You can unsubscribe from promotional emails by:

  • Clicking the unsubscribe link contained in the relevant email; or
  • Contacting us using the details provided below.

Please note that even if you opt out of marketing communications, we may still send essential service-related communications, such as order confirmations, payment notifications, delivery updates and important account information.

11. Data Security

We take reasonable measures to protect personal data against unauthorized access, disclosure, alteration, misuse, loss or destruction.

Depending on the circumstances, security measures may include:

  • Access controls
  • Password protection
  • Secure website connections
  • Restricted access to customer information
  • Security monitoring
  • Appropriate technical and organizational safeguards

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

The Malaysian Personal Data Protection framework includes a Security Principle requiring appropriate measures to protect personal data from unauthorized access, misuse or disclosure.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining business records, resolving disputes, complying with legal obligations and protecting our legitimate business interests.

When personal data is no longer required, we may securely delete, destroy or anonymize it in accordance with our applicable procedures and legal obligations.

The Malaysian Personal Data Protection framework includes a Retention Principle concerning the retention of personal data only for as long as necessary.

13. Accuracy of Personal Data

We aim to keep personal information accurate, complete and up to date where appropriate.

You should inform us if any personal information you have provided to us changes.

You may contact us to request correction or updating of your personal data.

14. Your Rights

Subject to applicable law and any applicable limitations, you may have rights concerning your personal data, including the ability to:

  • Request access to personal data we hold about you
  • Request correction of inaccurate or incomplete information
  • Withdraw consent where processing is based on consent
  • Request information about how your personal data is being processed
  • Opt out of direct marketing communications
  • Make enquiries or complaints concerning our handling of personal data

Certain requests may be subject to verification requirements and applicable legal restrictions.

Malaysia’s Personal Data Protection framework includes an Access Principle under which individuals may access and correct their personal data, subject to applicable provisions.

15. Withdrawal of Consent

Where we process your personal data based on your consent, you may withdraw that consent by contacting us.

Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

Please note that withdrawing consent may affect our ability to provide certain services or process certain requests where the information is necessary for that purpose.

16. Cross-Border Data Transfers

Some of our service providers may operate outside Malaysia or use infrastructure located outside Malaysia.

Where personal data is transferred outside Malaysia, we will take appropriate steps required by applicable Malaysian data protection laws and regulations.

This may include transfers involving:

  • Website hosting
  • Cloud services
  • Payment processing
  • Analytics
  • Email services
  • Customer-service systems
  • Other technology or business service providers

Malaysia’s Personal Data Protection Department has issued guidance addressing cross-border transfers of personal data.

17. Third-Party Websites

Our website may contain links to third-party websites, payment services, social media platforms or other external services.

If you follow a link to a third-party website, that website will operate under its own privacy policy and terms.

Tayba Mart is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the relevant third party’s privacy policy before providing personal information.

18. Children’s Privacy

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly request or collect personal data from children for purposes that are not permitted under applicable law.

If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter and take appropriate action.

19. Data Breaches and Security Incidents

We maintain procedures designed to identify and respond to personal-data security incidents.

Where applicable, we will take the steps required by Malaysian law and relevant regulatory requirements in response to a personal-data breach.

The Malaysian Personal Data Protection framework now includes specific regulatory guidance concerning personal-data breach notification.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business practices
  • Changes to our website
  • Changes to technology
  • Changes to our service providers
  • Changes in applicable laws or regulations
  • Changes to personal-data protection requirements

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

We encourage you to review this page periodically.

21. Contact Us

If you have questions, requests or concerns regarding this Privacy Policy or the way Tayba Mart handles your personal data, please contact us.

Tayba Mart
Legal Company Name: ALSHAM MARKETS SDN. BHD
Business Address:

No. 12- 1st Floor – Block C, Jalan Excella, Excella 3, Off Jalan Ampang Putra, Taman Ampang Hilir,
55100 Wp Kuala Lumpur


Email: info@tayba-mart.com.my
Telephone: +60184012000
Website: https://tayba-mart.com.my

For personal-data requests, please include sufficient information to help us identify your account or transaction and verify your identity where necessary.

22. Governing Law

This Privacy Policy is intended to be governed by and interpreted in accordance with the laws applicable in Malaysia, including applicable Malaysian personal data protection legislation.