Privacy Policy

Last updated: 21 September 2026

Truly Gourmet Sdn Bhd (Company Registration No.: 202101030654 (1430954-U)) (“Truly Gourmet”, “we”, “us” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit www.trulygourmet.co (“Site”), create an account, place an order, subscribe to our updates, submit a review or contact us. It is issued in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

By using the Site or providing personal data to us, you acknowledge that your personal data will be handled as described in this Privacy Policy.

1. Personal Data We Collect

Depending on how you interact with us, we may collect:

  • Identity and contact details: name, email address, telephone number, billing address and delivery address.
  • Account details: login credentials, account preferences, order history and loyalty or rewards points balance.
  • Order details: products purchased, order value, delivery information and order communications.
  • Payment information: payment status and transaction references. Card and banking details are processed by our third-party payment service providers. We do not store your full card details.
  • Communications: messages you send us by email, WhatsApp, contact forms or other channels, including feedback and complaints.
  • Reviews and content: ratings, reviews, photographs and comments you submit.
  • Marketing preferences: newsletter subscriptions and communication preferences.
  • Social login information: if you sign in using a social media account, the basic profile information that platform shares with us, such as your name, email address and profile picture.
  • Technical and usage information: IP address, device and browser type, pages visited, time spent on the Site, referring website or source, approximate location and cookie identifiers.

2. How We Collect Personal Data

We collect personal data:

  • directly from you, when you browse the Site, create an account, place an order, subscribe, submit a review or contact us;
  • automatically, through cookies and similar technologies when you use the Site; and
  • from third parties, such as payment service providers (payment confirmation), courier and logistics providers (delivery status) and social login providers (where you choose to use social login).

3. Why We Use Your Personal Data

We use personal data to:

  • process, confirm, deliver and support your orders;
  • create and manage your account and any loyalty or rewards programme;
  • respond to enquiries, feedback and complaints;
  • handle product quality and food safety matters, including contacting customers in the event of a product withdrawal or recall;
  • process payments and help prevent fraud, unauthorised activity and security incidents;
  • send order confirmations, delivery updates and other service messages;
  • send newsletters, promotions and marketing communications, where you have agreed to receive them;
  • publish reviews and customer content you have submitted for publication;
  • understand how visitors use the Site so that we can improve our products, content and services;
  • comply with legal, regulatory, tax and accounting obligations, and respond to lawful requests from authorities; and
  • establish, exercise or defend our legal rights.

4. Whether Providing Personal Data Is Obligatory

Information marked as required at checkout or during account registration is necessary for us to process your order or create your account. If you do not provide it, we may be unable to complete your order or provide the relevant service.

Providing personal data for marketing purposes is voluntary. Declining marketing communications will not affect your ability to purchase from us.

5. Who We Disclose Personal Data To

We may disclose personal data, only as reasonably necessary for the purposes described above, to:

  • payment service providers;
  • courier, postal and logistics providers, including international postal services;
  • website hosting, security, IT and technical service providers;
  • email, newsletter and customer communication platforms;
  • analytics service providers;
  • messaging service providers, where you contact us through them;
  • our related companies, where necessary to fulfil orders, manage products or support our operations;
  • professional advisers such as auditors, accountants and lawyers;
  • government agencies, regulators, law enforcement authorities or courts, where required or permitted by law; and
  • a successor entity, in the event of a merger, acquisition or transfer of our business.

We do not sell your personal data.

6. Transfer of Personal Data Outside Malaysia

Some of our service providers, including providers of analytics, email marketing, website security and messaging services, may store or process personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it continues to be protected in a manner consistent with the PDPA.

7. Cookies and Similar Technologies

The Site uses cookies and similar technologies, which are small files stored on your device.

  • Essential cookies enable core functions such as the shopping cart, checkout, account login and security. The Site cannot function properly without them.
  • Functional cookies remember your preferences, such as language selection.
  • Analytics cookies, including Google Analytics delivered through Google Tag Manager, help us understand how visitors use the Site so that we can improve it.
  • Marketing cookies, where used, help us measure the effectiveness of our newsletters and campaigns.

You can manage or delete cookies through your browser settings. Blocking essential cookies may prevent the cart, checkout or account features from working. You can also opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on provided by Google.

8. Direct Marketing

We will only send you marketing communications where you have agreed to receive them.

You may unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us. After you unsubscribe, we may still send you service messages relating to your orders or account.

9. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, or as required by law.

  • Order, invoice and transaction records are generally retained for at least seven years to meet tax and accounting requirements.
  • Account information is retained while your account remains active. You may request that your account be closed.
  • Marketing data is retained until you unsubscribe or withdraw your consent.

When personal data is no longer required, we will delete it or make it anonymous.

10. How We Protect Personal Data

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, modification or disclosure. These include encrypted connections to the Site, access controls, and the use of reputable service providers.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Please keep your account password confidential.

Where required by law, we will notify the Personal Data Protection Commissioner and affected individuals of a personal data breach.

11. Your Rights

Subject to the PDPA, you may:

  • request access to the personal data we hold about you;
  • request correction of personal data that is inaccurate, incomplete, misleading or out of date;
  • withdraw your consent to our processing of your personal data;
  • ask us to limit processing of your personal data, including to stop sending you direct marketing; and
  • request that your personal data be transmitted to another data controller, where this right applies under the PDPA.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on your request, and we may charge a fee where permitted by law. We will respond within the time required under the PDPA.

Please note that withdrawing consent or limiting processing may affect our ability to process orders or provide certain services.

12. Children

The Site is not directed at children. If you are under 18 years old, purchases should be made with the involvement of a parent or legal guardian.

13. Sensitive Personal Data

We do not intentionally collect sensitive personal data, such as information about your physical or mental health or religious beliefs.

Please avoid sharing health information with us unless it is necessary, for example when reporting a product safety concern. Where you do share it, we will use it only to handle that concern.

14. Third-Party Websites and Services

The Site may contain links to retailers, marketplaces, social media platforms, payment providers and other third-party services. These operate independently and have their own privacy policies. We are not responsible for their privacy practices.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Site, services, business operations or applicable law. The latest version and revision date will be published on this page.

Where changes are material, we will take reasonable steps to bring them to your attention.

16. Contact Us

For questions, requests or complaints about this Privacy Policy or your personal data, please contact:

Truly Gourmet Sdn Bhd Company Registration No.: 202101030654 (1430954-U)
Business Address: 5216, Jalan Perindustrian Balakong, Kawasan Perindustrian Balakong, 43000 Kajang, Selangor.
Email: [email protected]
Telephone / WhatsApp: 010 831 3899