Concrix Malaysia Sdn Bhd (202601004235 (1666332-A)) ("Concrix", "we", "us" or "our") is committed to protecting the privacy and security of the personal data of our users. This Privacy Policy explains how we collect, process and protect your information in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). By using our platform, you consent to the practices described in this policy.
1. Information we collect
We collect personal data from buyers and sellers during account registration and through the transaction process, including:
- Identity and verification data: full name, NRIC/passport number (for individual verification), and SSM business registration documents.
- Contact data: business or site addresses, email addresses and mobile phone numbers.
- Marketplace activity: listings, requests, offers, enquiries and their workflow history. Concrix does not collect card or bank details for marketplace payment processing.
- User-generated content: photos of materials, project descriptions, offer notes and assistance requests sent to Concrix.
- Technical data: IP address and browser type, used for security and platform optimisation.
2. Why we process your data
- Marketplace facilitation: to moderate content, present decision-ready offers and broker clarification or introductions.
- Verification and safety: to carry out "know your customer" (KYC) checks that prevent fraud and misrepresentation of stock.
- Privacy protection: to keep buyer contact details and exact warehouse addresses from unrelated marketplace users.
- Monitoring and security: to monitor platform activity, enforce our policies and investigate disputes.
3. Disclosure to third parties
To operate the brokered marketplace, we may share your data with:
- A matched marketplace party: only when needed for an introduction brokered by Concrix and subject to the parties' permission and the applicable workflow.
- Service providers: hosting, security and email providers that process data for Concrix under appropriate safeguards.
- Professional advisors: legal, financial or audit advisors, to protect our legitimate business interests.
- Regulatory authorities: where required by law or requested by a government body.
4. Content licence
By uploading images, material descriptions or inventory data to Concrix, you grant us a non-exclusive, royalty-free, sub-licensable and transferable licence to use, reproduce and display that content, for the purpose of marketing your materials to potential buyers and promoting Concrix across our digital channels.
5. Data storage and cross-border transfer
Your personal data is stored securely. To provide our digital services, we may use cloud-hosting providers whose servers are located outside Malaysia. By using our services, you consent to the transfer of your data to these secure international destinations in accordance with PDPA standards.
6. Data security and retention
We apply technical and organisational measures to prevent unauthorised access to or loss of data. Personal data is retained for as long as necessary to fulfil the purposes above, typically up to seven (7) years, to comply with Malaysian tax and accounting requirements.
7. Your rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or out-of-date data.
- Withdraw consent to processing (which may result in your account being closed).
- Limit how your data is used for marketing purposes.
- Enquire about our data processing practices.
8. Consent
By using the Concrix platform, you consent to the processing of your personal data as described in this policy.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page.
10. Contact us
Questions about this policy or your personal data can be sent through our contact page, or to +6010-2830238, addressed to Concrix Malaysia Sdn Bhd.