Privacy policy

PRIVACY POLICY

Last updated: May 30, 2026

1. About Us

MyGalore is a multi-vendor e-commerce platform operated by Mahola Services (Registration No. 002739894-D), providing curated online shopping and vendor marketplace services at mygalore.my, including access to MyGalore Global Market for international reach.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit, use, or transact through our platform, whether as a buyer or a registered vendor. This Policy is to be read together with our Terms of Service. In the event of any conflict, this Privacy Policy prevails in matters relating to personal data.

By accessing or using MyGalore, you confirm that you have read, understood, and agree to the terms of this Privacy Policy.

2. Applicable Laws

We are committed to complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions. Where our services extend to users in the United Kingdom or the European Economic Area (EEA), we additionally observe applicable data protection laws including the UK GDPR and EU GDPR.

3. What Personal Information We Collect

We collect personal information depending on how you interact with our platform. This includes:

For Buyers:

  • Contact details: name, email address, phone number, delivery and billing address
  • Financial information: payment card details, transaction records, order history (processed securely via our payment gateway partners)
  • Account information: username, password, account preferences
  • Transaction data: items viewed, carted, purchased, returned, or cancelled
  • Device and usage data: IP address, browser type, device identifiers, pages visited, interaction patterns
  • Communications: customer support messages, feedback, or enquiries submitted to us

For Vendors (Registered Sellers):

  • Identity documents: full name, MyKad or passport number (required for vendor verification)
  • Business information: business name, registration details, product listings, pricing, and inventory data
  • Banking details: for payment disbursement purposes
  • Contact information: email address, phone number, WhatsApp contact
  • Registration data submitted via our vendor registration forms
  • Communications and correspondence with our team

4. How We Collect Your Information

We collect information:

  • Directly from you when you register, place an order, submit a vendor application, fill in a form, or contact us
  • Automatically through the platform via cookies, web beacons, and similar tracking technologies when you browse mygalore.my
  • Through Google Analytics, which collects anonymised usage data to help us understand how visitors interact with our website
  • Through platform infrastructure, which processes transaction and session data on our behalf
  • Through third-party integrations including payment processors, logistics partners, and marketing tools

5. How We Use Your Information

We use your personal information for the following purposes:

  • To process your purchases, fulfil orders, and manage returns or exchanges
  • To register and manage your buyer or vendor account
  • To verify vendor identity and eligibility in accordance with our platform requirements
  • To communicate with you regarding your orders, account, or enquiries
  • To send marketing and promotional communications (you may opt out at any time)
  • To improve, personalise, and secure our platform and services
  • To comply with legal and regulatory obligations under Malaysian law and applicable international laws
  • To detect, investigate, and prevent fraudulent or unauthorised activity
  • To process vendor payouts and maintain transaction records

6. Sharing and Disclosure of Personal Information

We do not sell your personal data. We may share your information with:

  • Platform Provider: As our platform host, our technology provider processes your data as part of providing our services.
  • Payment processors: Including other payment gateways, strictly for transaction processing
  • Logistics and fulfilment partners: For order delivery purposes
  • Google Analytics: For anonymised web traffic and usage analysis
  • Regulatory or legal authorities: Where required by Malaysian law, court order, or valid legal process
  • Business successors: In the event of a merger, acquisition, or business restructuring

All third-party service providers are required to handle your data in accordance with applicable data protection laws.

7. International Data Transfers

MyGalore facilitates access to international markets through MyGalore Global Market. Where your personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected in accordance with PDPA requirements and, where applicable, through mechanisms recognised under UK and EU data protection law, including Standard Contractual Clauses.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your session and remember your preferences
  • Analyse platform usage via Google Analytics
  • Support our platform's core functionality

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

9. Children's Data

MyGalore is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us immediately and we will take steps to delete the information.

10. Data Security and Retention

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is entirely secure.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by Malaysian law. Vendor identity documents are retained for a minimum period consistent with our legal and regulatory obligations.

11. Your Rights

Under the PDPA 2010, and where applicable under UK or EU data protection law, you have the right to:

  • Access personal data we hold about you
  • Request correction of inaccurate personal data
  • Withdraw consent for processing (where processing is consent-based)
  • Request deletion of your personal data, subject to legal retention requirements
  • Object to processing for direct marketing purposes
  • Lodge a complaint with the relevant data protection authority

For UK or EEA residents, you may also have the right to data portability and restriction of processing.

To exercise any of these rights, contact us using the details in Section 13 below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

MyGalore, Condominium Villa Puteri, Jalan Tun Ismail, Kuala Lumpur, 50480, Wilayah Persekutuan, Malaysia

Email: hello@mygalore.my Website: https://mygalore.my