Privacy Policy

1. Data We Collect

Depending on the service you use, we may collect:

• your name, phone number, email address and contact-verification status;
• company, role, site details, programme requirements and messages provided in a business enquiry;
• newsletter signup details: email, name, optional company, selected interest and consent record;
• purchase history, transaction references, payment status and payment-authorisation references from the applicable payment service provider or e-wallet service where used;
• device and fridge-access identifiers, session records and the product-detection information needed to complete or review a transaction;
• sample redemption records, eligibility information and feedback you submit for a campaign;
• technical information needed to operate and protect our online services, such as request and error records.

Our enquiry and newsletter forms do not request card numbers, CVVs, e-wallet PINs, payment passwords or payment OTPs. Please do not include these in a message or support request.

2. How We Use Your Data

We use relevant data to respond to enquiries; provide access to services; process purchases and authorised payments; manage corporate benefits; issue service notices and transaction information; investigate disputes and security concerns; and meet legal obligations.

For Sample & Score, we use contact verification and redemption records to apply campaign rules and review participation, and use submitted feedback to produce campaign reporting. Consumers do not make a payment or need a payment mandate to participate in the free sampling journey.

3. Newsletter & Marketing Choices

We send newsletters and marketing updates when you choose to subscribe. A business enquiry, a purchase or a free sample redemption does not automatically subscribe you. Brand follow-up for a sampling campaign uses a separate opt-in explained in that campaign.

To withdraw newsletter or marketing consent, email cs@juzvending.my with the subject "Unsubscribe" and the relevant email address or phone number. This does not prevent necessary transaction, security or service communications.

4. Data Sharing

Where needed for the relevant service, data may be shared with:

• payment service providers and applicable banks or e-wallet operators for the payment method used, including mandate management, payment status, refunds and disputes;
• smart-fridge hardware and software providers for access, product detection, operating support and transaction review;
• hosting and communication service providers supporting the website, enquiry notifications and customer journey;
• corporate programme administrators for agreed allowance and programme reporting, as explained for that programme;
• campaign clients for redemption and feedback reporting within the scope explained in the campaign notice;
• regulatory authorities or other parties where disclosure is required by law.

Sampling notices explain any sharing of identifiable participation or feedback information. Permission for a brand's promotional follow-up is separate from the verification needed to claim a sample. We do not sell personal data to third parties.

5. Data Retention

We retain data only as long as needed for the stated purpose, the relevant programme, dispute handling and applicable legal obligations. Financial records are typically retained for up to 7 years, subject to legal requirements. Enquiry, newsletter and campaign records are not automatically retained for the same period; their retention depends on purpose, consent and any applicable obligations.

6. Your Rights & Choices

You may contact us to request access to or correction of your personal data, withdraw relevant consent, raise a concern or ask about retention and deletion, subject to applicable law. Some information may still be needed to complete an existing transaction, resolve a dispute or fulfil a legal obligation. You may also raise a complaint with the relevant authority.

Email cs@juzvending.my. We may need to verify your identity before acting on a request. To revoke a payment authorisation, follow the separate payment-authorisation cancellation process; withdrawing marketing consent does not cancel a payment mandate.

7. Security

We use technical and organisational safeguards appropriate to our services, including encrypted website connections and server-side checks on website form submissions. Our public website does not provide a visitor directory or a public download of enquiry or subscriber records. Read our Security Policy for payment safety and how to report a concern.

8. Contact & Updates

The data controller is Juz Vending Sdn Bhd. We may update this Policy as our services change and will display the revised update date. Contact us using the details below for personal-data enquiries.