Privacy Notice

Data we collect

We collect the following categories of information when you interact with our website or contact us:

• Contact details you provide: name, company, email address, phone number, and message content.
• Commercial information: product interests, RFQ details, project requirements, and files you attach or link.
• Technical data: IP address, device/browser, and usage analytics (pages viewed, referral sources, session duration).
• Operational records for vendors or customers: quotes, purchase orders, invoices, and delivery notes.

How we use your data

We use personal data to:

• Respond to enquiries, provide quotes, and deliver products or services you request.
• Operate, secure, and improve the website, including measuring traffic and diagnosing issues.
• Maintain business records for accounting, quality, and regulatory purposes (e.g., ISO 13485 documentation).
• Communicate updates related to orders, quality notifications, delivery schedules, or changes to this notice.

We rely on legitimate interests to process basic analytics and enquiries, and on contract necessity to process orders and customer records.

Sharing

We do not sell your personal data. We share limited data with:

• Service providers under contract (hosting, email, analytics, and security).
• Logistics and compliance partners as needed to fulfil shipments or regulatory requirements.
• Authorities where required by Malaysian law or to protect our rights and safety.

Retention

We keep enquiry records for up to 24 months. Customer and supplier records may be kept longer to meet accounting and quality retention rules. When retention periods expire, we delete or anonymise data safely.

Your choices

• You may request access, correction, or deletion of your personal data where applicable.
• You can object to certain processing such as direct marketing or non-essential analytics.
• You can adjust cookie preferences as described in our Cookie Policy.

To exercise your rights, contact us at contact@bookofcnbp.org. We will respond within a reasonable time.

Security

We use technical and organisational safeguards appropriate to our operations, including encrypted transport (TLS), access controls, and staff confidentiality commitments. No method of transmission or storage is 100% secure, but we aim to reduce risk with layered controls.

International transfers

Our service providers may process data in other countries. Where this occurs, we rely on contractual protections and security measures to safeguard your information.