QashMarket Privacy Policy
Effective Date: 3 November 2025
This Privacy Policy (the "Policy") describes how QashMarket ("we," "us," or "our"), a web application operated by Fauziyah Md Aris (Qash Aris) for the purpose of a PhD research project and as a marketplace for micro-entrepreneurs, collects, uses, and discloses your Personal Data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By using the QashMarket web application and its services (the "Service"), you consent to the collection, use, and disclosure of your Personal Data in accordance with this Policy.
1. Collection of Personal Data
We collect Personal Data that you voluntarily provide to us when you register for an account, use the Service, or communicate with us.
| Category of Data | Data Collected | Purpose of Collection |
|---|---|---|
| Identity and Contact Data | Email address, Mobile phone number, Full name, Address | For registration, verification, account management, and communication regarding the Service. Crucially, this data is collected for registration verification purposes only. |
| Transaction Data | Subscription payment records (e.g., date, amount, plan). Note: We do not collect or store any credit card or banking details. | To process and manage your subscription to the Service. |
| Technical Data | IP address, browser type, operating system, access times, referring website addresses. | To monitor and analyze the use of the Service, ensure security, and improve the user experience. |
| Usage Data | Information about how you use our Service, such as pages viewed and features used. | For research purposes (as part of a PhD project) to analyze user behavior and improve the platform’s functionality and design. |
2. Purpose of Processing Personal Data
- To provide and maintain the Service: Including managing your account, providing customer support, and processing your subscription payments.
- Verification and Security: To verify your identity during registration and ensure the security and integrity of the Service.
- Communication: To send you service-related notices, updates, and administrative messages.
- Research and Development: As QashMarket is part of a PhD research project, we use aggregated and anonymized Usage Data to analyze user interaction and inform the research findings. Your individual Personal Data will not be disclosed in any research publication without your explicit, separate consent.
- Compliance with Law: To comply with any applicable laws, regulations, legal processes, or governmental requests, including the PDPA.
3. Disclosure of Personal Data
- Service Providers: We may share your data with third-party service providers who perform services on our behalf, such as hosting, data analysis, and payment processing (for subscriptions only). These service providers are obligated to protect your data and are prohibited from using your Personal Data for any other purpose.
- Legal Requirements: We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or protect the personal safety of users of the Service or the public.
- Business Transfer: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred to the acquiring entity.
- With Your Consent: We may disclose your Personal Data to any other third party with your explicit consent.
Crucially, we do not share or sell your Personal Data to third parties for marketing purposes.
4. Third-Party Payment Gateways (Seller/Buyer Transactions)
- QashMarket acts solely as a platform connecting sellers and buyers. All transactions between sellers and buyers are conducted directly using their respective Touch ’n Go e‑Wallets.
- We do not process, store, or have access to any payment details (QR codes, transaction amounts, etc.) related to the buyer-seller transactions.
- The collection and processing of Personal Data related to these transactions are governed by the respective privacy policies and terms of the third-party payment provider (Touch ’n Go e‑Wallet).
- By using the Service, you acknowledge and agree that QashMarket is not responsible for the privacy practices of the Touch ’n Go e‑Wallet or any other third-party payment provider.
5. Your Rights Under PDPA
- Access: Request access to your Personal Data held by us.
- Correction: Request correction of any inaccurate or incomplete Personal Data.
- Withdrawal of Consent: Withdraw your consent to the processing of your Personal Data at any time.
- Prevent Processing: Request us to cease or not begin processing your Personal Data for purposes of direct marketing.
6. Security of Personal Data
We implement appropriate technical and organizational measures to protect your Personal Data from unauthorized access, collection, use, disclosure, copying, modification, or disposal.
7. Contact Information
Data Protection Officer (DPO): Fauziyah Md Aris (Qash Aris)
Email: gr8sukses@gmail.com
WhatsApp: +60193438388
Address: Taiping, Perak, Malaysia (to be updated)
8. Changes to this Policy
We may modify this Policy at any time. Changes take effect upon posting the revised Policy on the Service.