PRIVACY POLICY NOTICE

This Privacy Policy (“Policy”) applies to all visitors to our Website. By using our Website, you consent to the data practices described in this statement. The Personal Data Protection Act 2010 of Malaysia and its regulation(s) (“PDPA”), which regulates the processing of personal data in commercial transactions, applies to all companies under and/or related to Meals in Minutes Sdn. Bhd. (“Meals in Minutes”) (collectively, “our”, “us” or “we”). This Policy governs the collection, use and disclosure of personal data submitted to Meals in Minutes and explains how we collect and handle the personal data of individuals and comply with the requirements of the PDPA. For the purpose of this Policy, the terms “personal data” shall have the same meaning as prescribed in the PDPA.

Terms of Use

This Policy is meant to be read together with the Terms of Use at https://mealsinminutes.co/policies/terms-of-service, which cross-refers to this Policy.

Modifications

We reserve the right to modify or update this Policy from time to time and therefore, we encourage you to periodically review the latest version of this Policy.

Data Protection Officer

If you have any concerns, comments or further queries regarding this Policy, please contact our Data Protection Officer, Brandon Lim (“DPO”) at hello@mealsinminutes.co. You may also contact our DPO for any of the following reasons:

(a) you wish to access your own personal data;

(b) you wish to correct or amend your own personal data;

(c) you wish to withdraw consent in respect of our collection, use or disclosure of your personal data; and

(d) for any other reason listed below.

COLLECTION OF PERSONAL DATA

Information you provide to us

This Policy serves to inform you that we will obtain personal data about you when you visit us / our Website, subscribe to our mailing list and/or submit your data at the ‘Checkout’ page. By submitting your information to us, such as your name, e-mail address, telephone number, address and other data you provide voluntarily, you hereby give your consent to the processing of your personal data.

You hereby warrant and represent to us that (a) personal data which you disclose to us is accurate and complete; and (b) where you volunteer personal data of another person to us, that you are authorized by such other person to disclose such personal data to us, and that such personal data is accurate and complete.

The Website and our related services are not intended for those under 18, and we do not knowingly collect information from those under the age of 18. Those under 18 should not submit any personal information without the permission of their parents or guardians. By using the Website and our related services, you are representing that you are at least 18.

Information we collect through cookies and similar technologies

Please note that our Website is hosted on Shopify. As such, Shopify may automatically collect some information from our Website’s visitors by using cookies, analytics, and other tracking technologies. Meals in Minutes does not have control over Shopify and/or thirdparty analytics software, and therefore, you are advised to refer to Shopify’s Privacy Policy to learn more about how Shopify uses data when you use our Website and how you may control the information sent to Shopify.

In operating this Website, we may also monitor the use of our Website through “cookies.” A cookie is a piece of information that the computer that hosts our Website gives to your computer when you access a website. For example, we may monitor the number of times you visit our Website or which pages you go to. This information helps us build a profile of our users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.

We may collect and process information about your computer hardware and software when you use our Website. The information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used by Meals in Minutes for the operation of the Services (which are defined in our Terms of Use), to maintain quality of the Services, and to provide general statistics regarding use of the Meals in Minutes Website

For EU residents, we will not collect personal data that reveals any of the following about you: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sex life, or sexual orientation.

USE OF PERSONAL DATA

Your personal data is being or is to be collected and further processed for:

(a) communicating with you to send email updates, promotions and/or invitations;

(b) providing the Services to you;

(c) responding to your requests, inquiries and/or complaints;

(d) data mining and gathering customer feedback;

(e) market surveys and trend analysis;

(f) updating you on changes to the Website and Services;

(g) providing you with information on our Services and our related corporations and business partners, unless you have otherwise indicated that you do not wish for us to process your personal data for such purpose;

(h) complying with any legal requirements; and

(i) such other purposes directly related to the foregoing.

(collectively, the “Purposes”).

If you wish to unsubscribe from our mailing lists or elect not to receive further marketing information from us, you may contact our DPO, or if you have been contacted by us via email, you may use the unsubscribe function in that email to notify us. Such requests will be processed within thirty (30) days.

DISCLOSURE OF PERSONAL DATA

We do not release your personal data to third parties, except for the situations listed below or unless we specifically inform you and give you an opportunity to opt out.

We may share your personal information with:

(a) Authorised service providers — including Shopify Payments, delivery partners, analytics providers, and marketing platforms, who help us operate the Website and fulfil your orders. These service providers may have access to your personal data to the extent necessary to perform their functions but are contractually bound to use your data solely for these purposes.

(b) Affiliates — Meals in Minutes-owned or affiliated businesses, to inform you about other related products and services.

(c) Business partners — where you have explicitly opted into promotions, contests, or collaborations.

(d) When required by law — to comply with subpoenas, court orders, or lawful government requests.

Meals in Minutes may contact you on behalf of external business partners and/or affiliates about events or offers that may interest you. In those circumstances, your personal data will not be transferred without your explicit consent.

SHOPIFY APPS & INTEGRATIONS

Our Website uses Shopify Apps and third-party integrations to enhance functionality and provide a better shopping experience. These may include apps for marketing, analytics, shipping, customer service, subscriptions, and payment processing.

Examples include (but are not limited to):

• Email marketing platforms (e.g., Klaviyo, Mailchimp)
• Customer review tools (e.g., Judge.me, Yotpo)
• Payment processors (e.g., PayPal, Stripe, Shopify Payments)
• Analytics and advertising services (e.g., Google Analytics, Meta Pixel)
• Subscription and loyalty apps (e.g., Recharge, Smile.io)

Each third-party app operates under its own privacy policy. We encourage you to review the policies of these third parties to understand how they handle your data. Meals in Minutes ensures that all apps we use comply with Shopify’s data protection standards and are only granted access to the minimum data required to perform their specific functions.

ACCESS TO AND CORRECTION OF PERSONAL DATA

You have the right to request access to and correction of your personal data. We will provide access or make corrections within thirty (30) days of receiving your request, in accordance with the PDPA.

We may charge a small fee for access requests and will notify you beforehand. We may also refuse certain requests as permitted under the PDPA, providing written reasons for such refusal.

WITHDRAWAL OF CONSENT

You may withdraw your consent to our use of your personal data at any time by contacting our DPO. We will explain the implications of withdrawal and cease processing unless required by law.

ACCURACY OF PERSONAL DATA

We will make a reasonable effort to ensure that personal data collected is accurate and complete.

SECURITY OF PERSONAL DATA

We implement appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, or misuse. However, as data transmission over the internet cannot be guaranteed completely secure, we cannot ensure absolute protection and you acknowledge that you transmit data at your own risk.

Shopify also maintains its own security and data protection practices, which you can review at https://www.shopify.com/security.

RETENTION OF PERSONAL DATA

We will cease to retain your personal data once the purpose for which it was collected no longer applies and it is no longer necessary for legal or business purposes.

TRANSFER OF PERSONAL DATA

Your personal data may be stored and processed on servers located outside Malaysia, including by Shopify, which is based in Canada and the United States. By using our Website, you consent to such transfer and processing, and we will ensure that the data receives protection at least comparable to that under the PDPA.

Disclaimer

This Privacy Policy applies only to our Meals in Minutes Website hosted on Shopify and not to any third-party sites. When visiting other websites, please read their privacy policies before providing your data.

In no event will Meals in Minutes, its related partnerships or corporations, or their agents or employees be liable for any consequential, indirect, or special damages resulting from unauthorized use or disclosure of your personal data.