1. Websites covered by this notice

This notice applies to the following websites operated by Prelia Biotech Group Sdn. Bhd.:

• preliabiotech.com
• goldendaily.preliabiotech.com
• halalrawmaterial.com

2. Personal data we collect

When you submit an enquiry, request a quotation, or otherwise contact us through our websites, we may collect:

• Your name
• Your company name and your role or position
• Your business email address
• Your telephone or WhatsApp number
• Your country or business location
• The content of your enquiry, including the products, specifications, quantities and documents you are interested in
• Any other information you choose to include in your message

We do not deliberately collect sensitive personal data as defined under the PDPA. Please do not include such information in your enquiry.

3. How we collect your personal data

We collect personal data directly from you when you complete a form on our websites, contact us by email, or message us on WhatsApp using a link provided on our websites.

We may also receive your business contact details from your colleagues, from trade events, or from business partners who refer you to us.

4. Purposes of processing

We process your personal data for the following purposes:

• To respond to your enquiry and provide the quotation, product information, or documentation you have requested
• To assess whether we are able to supply the products or services you require
• To communicate with you regarding orders, samples, shipments and documentation
• To maintain our records of business enquiries and customer relationships
• To comply with legal, regulatory, tax and export documentation requirements
• To send you information about our products where you have asked to receive it

We do not sell your personal data. We do not use your personal data for automated decision making.

5. Basis of processing

We process your personal data on the basis of your consent, given when you submit an enquiry to us, and where necessary for the performance of a contract or a transaction you have entered into or intend to enter into with us.

6. Disclosure of your personal data

We may disclose your personal data to the following classes of parties:

• Our employees and authorised personnel who need the information to respond to your enquiry
• Our affiliated companies and our manufacturing partners, where this is necessary to prepare a quotation, arrange production, or issue documentation
• Service providers who host our websites, process our web forms, or provide us with email and business software
• Freight forwarders, customs agents and inspection bodies, where required to fulfil an order
• Regulatory authorities, certification bodies and government agencies, where required by law or to support a registration or certification application
• Professional advisers such as auditors, lawyers and accountants
• Any party to whom we are required to disclose under applicable law or a court order

7. Transfer of personal data outside Malaysia

Our manufacturing operations and certain of our service providers are located outside Malaysia. Your personal data may therefore be transferred to, stored in, or accessed from countries outside Malaysia.

The categories of transfer are as follows:

• Website hosting. Our websites are hosted on a content delivery network operated by Cloudflare, Inc., which serves content from data centres in multiple countries.
• Enquiry forms. Enquiries submitted through the forms on our websites are processed by Formspree, Inc., a service provider located in the United States, and forwarded to our company email address.
• Email. Enquiries received by us are stored in our corporate email system, which is provided by a service provider that may store or process data outside Malaysia.
• Manufacturing and documentation. Where necessary to prepare a quotation, arrange production, or issue product documentation, your business contact details and the content of your enquiry may be shared with our manufacturing partners in the People's Republic of China.

We do not transfer enquiry data into any customer relationship management system. Enquiry records are held in our corporate email system and in the internal files of the personnel handling your enquiry.

Where we transfer personal data outside Malaysia, we take reasonable steps to ensure that the recipient provides a level of protection comparable to that required under the PDPA, in line with the guidance issued by the Personal Data Protection Department on cross border personal data transfer.

By submitting your personal data to us, you consent to such transfers.

8. Retention

We retain enquiry and customer contact data for 36 months from our last substantive contact with you, after which it is deleted or anonymised, unless a longer retention period is required by law, by tax or customs requirements, or for the establishment or defence of legal claims.

9. Security

We take practical steps to protect your personal data from loss, misuse, unauthorised access, modification or disclosure. Our websites are served over encrypted connections, and access to enquiry data is limited to authorised personnel who need it to respond to you.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Your rights

Under the PDPA you have the right to:

• Request access to the personal data we hold about you
• Request correction of personal data that is inaccurate, incomplete, misleading or out of date
• Withdraw your consent to our processing of your personal data
• Limit the processing of your personal data for purposes such as direct marketing
• Request that your personal data be transmitted to another data controller, where technically feasible

To exercise any of these rights, contact us using the details in section 13. We may need to verify your identity before acting on your request. A reasonable fee may be charged for a data access request as permitted under the PDPA.

Withdrawing your consent may mean that we are unable to continue responding to your enquiry or supplying you.

11. Whether supply of personal data is obligatory

The information marked as required on our enquiry forms is necessary for us to respond to you. If you do not provide it, we will not be able to process your enquiry or issue a quotation. All other information is optional.

12. Cookies and website analytics

Our websites use only the cookies necessary for the sites to function and to remember your language preference. We do not currently use advertising cookies, and we do not use third party analytics or tracking scripts on our websites.

If we introduce analytics or performance cookies in future, we will update this notice before doing so.

You can set your browser to refuse cookies. Some parts of our websites may not function correctly if you do so.

13. Contact us

For any question about this notice, or to exercise your rights, contact:

We will acknowledge your request within a reasonable period and respond within the time permitted under the PDPA.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner, Malaysia.

14. Changes to this notice

We may update this notice from time to time. The current version is always available on our websites, with the effective date shown at the top.

15. Language

This notice is issued in English and Bahasa Malaysia. In the event of any inconsistency between the two versions, the Bahasa Malaysia version shall prevail.

1. Laman web yang dilindungi oleh notis ini

Notis ini terpakai kepada laman web berikut yang dikendalikan oleh Prelia Biotech Group Sdn. Bhd.:

• preliabiotech.com
• goldendaily.preliabiotech.com
• halalrawmaterial.com

2-15. [Bahasa Malaysia content same as above]

Please refer to the Bahasa Malaysia version for the complete text.