Privacy policy
Last updated 9 September 2026
ESG Outlet Sdn. Bhd. is the data user responsible for personal data collected through this website, and handles it in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
We collect only what we need to fulfil your order or answer your enquiry.
- Contact details: name, email address and phone number
- Delivery details: address, town, postcode and state, where you choose delivery
- Order details: what you bought, when, and any note you attach
- Enquiry details: what you asked us, including any load list you send through the sizing calculator
- Technical data: basic server logs, and anonymous analytics if enabled
What we do not collect
We never see or store your card number, CVV, online banking credentials or bank account details. Payment is handled entirely by Stripe on their own pages; we receive only a confirmation that payment succeeded and the last few digits or payment method type.
Why we use it
We use your personal data to:
- Process, deliver and support your order
- Answer your enquiry and prepare a quotation
- Handle warranty claims, returns and refunds
- Meet our accounting and tax obligations
- Send you service messages about an order you have placed
Who we share it with
We do not sell your personal data. We share it only with parties that need it to complete what you asked for:
- Stripe — to take payment securely (Stripe processes data outside Malaysia)
- Our delivery courier — name, address and phone number, so they can deliver
- Our hosting and email providers — to run this website and send your confirmation
- Government authorities — where we are legally required to disclose
How long we keep it
We keep order records for 7 years to meet Malaysian tax and accounting requirements. Enquiries that do not become orders are kept for [RETENTION PERIOD] and then deleted.
Cookies and local storage
This site stores your shopping cart in your own browser using local storage. That information stays on your device, is not sent to us until you check out, and you can clear it by emptying your cart or clearing your browser data.
We do not use advertising or tracking cookies. If we add analytics in future, this policy will be updated first.
Your rights
Under the PDPA you have the right to request access to the personal data we hold about you, to ask us to correct it if it is inaccurate, to limit how we process it, and to withdraw consent to non-essential processing. Write to sales@esgoutlet.com and we will respond within 21 days.
Security
This site is served over HTTPS and payment is handled by a PCI-DSS compliant provider. We restrict access to order data to staff who need it. No system is perfectly secure, but if a breach affecting your data occurred we would tell you.
Contact
Questions about this policy, or about the data we hold: sales@esgoutlet.com, or write to ESG Outlet Sdn. Bhd., CL 075492152, Lot A, Batu 7, Jalan Winfatt, Off Jalan Labuk, 90000 Sandakan, Sabah.