Privacy Policy

Shiok POS is a product of Amica Labs (SSM registration no. 202401037024), A1-12-13A, Arcoris Business Suites, Arcoris, 10, Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia ("Shiok POS", "we", "us", or "our"). We operate shiokpos.com and provide point-of-sale software, hardware, and related services (the "Services") to businesses in Malaysia. The Services include the Shiok POS app for Android (whether installed from Google Play or directly from us), the merchant dashboard, and our QR ordering, booking and e-invoice request pages. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit our website, use our Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information as described here.

1. Personal Information We Collect

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
• Account information including your username, password, security questions, preferences, and settings.
• Transaction information including the items or services you view, order, purchase, return, exchange, or cancel, and your past transactions.
• Communications with us including the information you include when contacting our customer support team.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information about how and when you interact with or navigate our website and Services.

2. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, place an order, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services, including from your device when you use our website or products, and through the use of cookies and similar technologies;
• From our service providers, including when we engage them to provide certain technology, payment processing, or support on our behalf;
• From our partners or other third parties.

3. How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

• Provide, tailor, and improve the Services. To process your payments, fulfil your orders, manage your account, arrange shipping, facilitate returns and exchanges, provide customer support, and otherwise deliver the Services you've requested.
• Marketing and advertising. To send you marketing, promotional, and advertising communications by email, text message, or other channels, and to show you relevant advertisements, where permitted.
• Security and fraud prevention. To authenticate your account, provide a secure experience, and detect, investigate, or prevent fraudulent, illegal, or unsafe activity.
• Communicating with you. To respond to your enquiries, provide customer support, and maintain our business relationship with you.
• Legal reasons. To comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

4. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for the purposes described in this Policy. Such circumstances may include:

• With vendors and service providers who perform services on our behalf, such as payment processing, IT and hosting, data analytics, customer support, and delivery/logistics.
• With business and marketing partners to provide marketing services and advertise to you, in accordance with their own privacy notices.
• When you direct or consent to disclosure of certain information to third parties, such as to ship you products.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger, acquisition, or sale of assets, to comply with legal obligations (including responding to subpoenas or similar requests), to enforce our terms or policies, and to protect the rights, property, or safety of Shiok POS, our users, or others.

5. Third-Party Websites and Links

Our website may contain links to websites or platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies. We are not responsible for the privacy or security practices of such third-party sites. Inclusion of a link does not imply our endorsement of the linked site or its operator.

6. Children's Data

Our Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below so that we can delete it.

7. Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Any information you send to us may not be secure while in transit, so we recommend you avoid sending sensitive information through unsecure channels.

How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, or resolve disputes and enforce our agreements and policies.

8. Your Rights and Choices

Depending on applicable law, you may have rights in relation to your personal information, including the right to:

• Access / Know — request access to personal information we hold about you.
• Delete — request that we delete personal information we maintain about you.
• Correct — request that we correct inaccurate personal information we maintain about you.
• Portability — request a copy of your personal information in a portable format, in certain circumstances.
• Manage communication preferences — opt out of promotional emails at any time using the unsubscribe link. We may still send non-promotional emails relating to your account or orders.

You may exercise these rights by contacting us using the details below. We will not discriminate against you for exercising any of these rights, and we may need to verify your identity before processing your request. You may also designate an authorised agent to make a request on your behalf, subject to verification.

9. Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. You may also have the right to lodge a complaint with the relevant data protection authority in Malaysia.

10. International Transfers

We may transfer, store, and process your personal information outside of Malaysia where our service providers are located. Where we do so, we take reasonable steps to ensure your information receives an adequate level of protection.

11. The Shiok POS App

The Shiok POS app is used by businesses (our merchants) and their staff to run their store. This section explains what the app handles and why.

• Account details. The names, email addresses and usernames of the store owner and staff, and their passwords and PINs. Passwords are stored on our servers only in hashed form.
• Store data the merchant enters. Items, prices, stock, sales, receipts, payments, refunds, tables, order notes, employee shifts and clock-in times, and store settings.
• The merchant's customers. If a merchant chooses to record them, their customers' names, phone numbers, email addresses, purchase history and loyalty points.
• Device information. The device model, Android version and app version, and an identifier for each device, so a store's devices can sync with each other and we can support them.
• Camera. Used only when you choose to scan a barcode. The image is read on your device and is not stored or sent to us.
• Bluetooth and USB. Used only to connect to receipt printers and cash drawers you have already paired or plugged in. The app does not scan for or record other nearby devices.
• Photos. Item photos you pick from your device stay on that device unless you upload images through the merchant dashboard.
• Card payments. Card and e-wallet payments are processed by our payment partners (such as Fiuu). We receive the payment result, amount and reference, never the full card number.

Store data is kept on the device so the till keeps working without internet, and is sent to our servers over an encrypted (HTTPS) connection to back it up and share it between the store's devices and dashboard. The app does not show advertising, does not use advertising identifiers, and we do not sell personal information.

When a merchant switches on an integration, the data needed for it is shared with that service: GrabFood (orders and menu), LHDN MyInvois (e-invoices, including the buyer details a customer provides), and payment partners (payment requests).

Merchants' customers: for the customer records a merchant keeps in Shiok POS, the merchant decides what is collected and is responsible for it under the Personal Data Protection Act 2010. We store and process those records on the merchant's behalf. If you are a customer of a business that uses Shiok POS, please contact that business first; we will help them handle your request.

12. Deleting Your Account

A store owner can ask us to delete their Shiok POS account and its data at any time, in either of these ways:

• In the app: Settings > Delete Account.
• On the web: api.shiokpos.com/delete-account.html, or by emailing contact@shiokpos.com from the owner's email address.

We contact the store owner within 3 working days to confirm the request, because staff often use the same till. Once the owner confirms, we close the account straight away and delete the store's data, including its staff logins, items, sales, customers and settings, within 30 days. Records we must keep by law, such as e-invoices already submitted to LHDN and our own billing records for the subscription, are kept for as long as Malaysian law requires (generally 7 years) and then deleted.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page and update the "Last updated" date above.

14. Contact Us

Amica Labs, A1-12-13A, Arcoris Business Suites, Arcoris, 10, Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Malaysia. If you have any questions about our privacy practices or this Privacy Policy, or would like to exercise any of the rights available to you, please contact us at contact@shiokpos.com or via our Contact Us page.