Al-Amal Vendor App Privacy Policy

Effective Date: 20 June 2026

Medkad Sdn. Bhd. ("Medkad", "we", "us", or "our") operates the Al-Amal Vendor mobile application (the "App") available on the Apple App Store and Google Play Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App, in accordance with the Personal Data Protection Act 2010 ("PDPA") and applicable Apple App Store and Google Play Store requirements.

By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the App.

1. Information We Collect

We may collect the following categories of information when you use the App:

Account Information: Name, email address, phone number, business/vendor registration details, and login credentials.
Profile Information: Business name, address, identification documents, and other details required for vendor verification.
Device Information: Device model, operating system version, unique device identifiers, IP address, and mobile network information.
Usage Data: App interactions, features used, session duration, crash logs, and diagnostic data.
Location Data: Approximate or precise location, where permitted by you, to support location-based services within the App.
Communications: Information you provide when contacting us for support, feedback, or inquiries.

We do not knowingly collect sensitive personal information beyond what is necessary to provide our services, and we do not collect information from children under the age of 13.

Account Management: Vendor accounts on the App are created and managed exclusively by Al-Amal administrators. There is no self-registration available within the App. Account deletion or cancellation is likewise handled solely by Al-Amal administrators; users may request account deletion by contacting us using the details in Section 11, and the request will be processed by Al-Amal admin on your behalf.

2. How We Use Your Information

We use the information we collect to:

Create, maintain, and authenticate your vendor account.
Provide, operate, and improve the App's features and services.
Process transactions and facilitate communication between vendors and Al-Amal.
Send service-related notifications, updates, and important account information.
Detect, prevent, and address technical issues, fraud, or security concerns.
Comply with legal obligations and enforce our terms of service.
Analyze usage trends to improve user experience.

3. Permissions Used by the App

Depending on your device settings, the App may request the following permissions:

Camera/Photos: To upload documents, receipts, or images required for vendor operations.
Location: To support location-based features, where applicable.
Notifications: To send you push notifications about your account or services.
Storage: To save and access files necessary for App functionality.

You may grant or deny these permissions at any time through your device settings. Denying certain permissions may limit some features of the App.

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers: Third parties who perform services on our behalf, such as cloud hosting, analytics, payment processing, and customer support.
Legal and Regulatory Authorities: When required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
With Your Consent: When you have given us explicit permission to share your information.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

Account Information (name, email, phone number, login credentials): Retained for the duration of your active vendor account, and for up to 3 years after account closure or termination, unless a longer period is required by law.
Business/Profile Information (vendor registration details, identification documents, business address): Retained for the duration of the vendor relationship and up to 7 years thereafter, in accordance with applicable business and tax record-keeping requirements under Malaysian law.
Transaction and Financial Records: Retained for a minimum of 7 years from the date of the transaction, as required by the Income Tax Act 1967 and other applicable Malaysian financial regulations.
Device and Usage Data (device identifiers, IP addresses, session logs, crash reports): Retained for up to 12 months from the date of collection, after which it is deleted or anonymized.
Location Data: Retained for up to 90 days from the date of collection, unless required longer for a specific service purpose.
Support and Communications: Records of support requests, feedback, or inquiries are retained for up to 2 years from the date of the communication.

When data is no longer required within the applicable retention period, it will be securely deleted or irreversibly anonymized. You may request early deletion of your personal information by contacting us using the details in Section 11; such requests will be processed subject to our legal obligations to retain certain data.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Subject to applicable law, you may have the right to:

Access, correct, or update your personal information.
Request deletion of your personal information.
Withdraw consent for data processing, where consent is the basis for processing.
Opt out of marketing communications at any time.

To exercise these rights, please contact us using the details provided in Section 11 below.

8. Third-Party Services

The App may contain links to third-party websites or integrate third-party services (such as analytics or payment providers). This Privacy Policy does not apply to third-party services, and we encourage you to review their respective privacy policies.

9. Children's Privacy

The App is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. We will notify you of material changes by updating the "Effective Date" above and, where appropriate, through the App or other communication channels. Continued use of the App after changes take effect constitutes your acceptance of the revised Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Medkad Sdn. Bhd. (Al-Amal) 218 Block 3, No. 7 Persiaran Sukan Laman Seri Business Park, Seksyen 13 40100 Shah Alam, Selangor, Malaysia

Email: alamal@medkad.com