Privacy Policy

1. Introduction

We are committed to safeguarding your personal data and handling it in a lawful, secure, and transparent manner. This Policy applies to:

• The Kongsee website (kongsee.com).
• Marketplace operations involving buyers, sellers, and logistics partners.
• Customer support, account management, and internal administration.
• Any future mobile applications or related services.

This Policy applies to all users, including visitors, registered users, buyers, and sellers.

2. What Data We Collect

(A) Personal Information

• Name.
• Phone number.
• Delivery address.
• Email address.
• Account information and identity information.
• For consignment or secondhand selling (as required under the Secondhand Dealers Act): IC (Malaysian) or passport (foreigners).

These documents are used solely for legal verification and will not be shared with third parties unless required by law.

(B) Transaction Information

• Order history.
• Purchase and sales records.
• Payment method (excluding full card numbers).
• Payment status and reference numbers.
• Refund records.

(C) Technical Data

These data are non-identifiable and used for analytics, safety, and performance purposes:

• IP address.
• Browser type, device model, operating system.
• Cookies, session data, tracking pixels.
• Pages visited, time spent, navigation paths.
• Approximate location (city/region only, no GPS data collected).

(D) Kongsee App Data

When you use the Kongsee mobile app, in addition to the above we collect:

• A push notification token issued by Google (Firebase Cloud Messaging) or Apple (APNs) for your installation, if you allow notifications. It identifies the installation, not you personally, and is used only to deliver the order, message and wishlist notifications you have enabled.
• The platform (iOS or Android) of each registered installation, so we send in the right format.
• Camera access, only while you photograph a book you are listing or scan its ISBN barcode. Photos you choose to attach are uploaded as part of your listing; barcode scanning happens on your device and only the ISBN number is kept. We do not record video or access the camera in the background.

The app does not collect precise location, contacts, or advertising identifiers. Notifications and camera access can be withdrawn at any time in your device settings; a withdrawn notification token is deleted the next time we attempt to use it.

(E) User-Submitted Content

• Messages, inquiries, and feedback.
• Product listings, descriptions, photos, and videos.
• Customer support communication.
• Dispute-related submissions.

3. How We Use Your Data

(A) Service Delivery

• Processing orders, payments, and deliveries.
• Coordinating between buyers and sellers.
• Order tracking and customer support.

(B) Communication

• Order updates, verification emails, and account notices.
• Email, SMS, or WhatsApp notifications.
• Push notifications in the Kongsee app, governed by the same per-category preferences as email. Turning a category off stops both.

(C) Marketing (Opt-Out Available)

We may use limited data to:

• Recommend products to buyers.
• Suggest listing or pricing improvements to sellers.

We do not sell personal data to third parties for marketing.

(D) Fraud & Safety

• Detecting fraud, spoofing, or suspicious activity.
• Security monitoring and audit logging.
• Investigating potential misconduct.

(E) Product Improvement

• Usage analysis and performance optimisation.
• Testing new features (e.g., A/B testing).
• Improving operational workflows.

4. Disclosure to Third Parties

We do not sell or rent your personal data. We may share data only where necessary:

(A) Delivery Partners

Shared data may include name, address, phone number, and delivery notes.

(B) Payment Providers

Examples: Stripe, Billplz. We may provide:

• Order amount.
• Email for receipts.
• Technical verification data.

We do not store full credit card information.

(C) IT Service Providers

For hosting, backups, security, media processing, analytics, and automated email services. Data storage may occur in international data centres (e.g., Hostinger Singapore, Google services). Vendors are contractually required to follow confidentiality and data protection obligations.

(D) Legal Compliance

We may disclose data when required by law, such as to law enforcement agencies or pursuant to court orders.

5. Data Retention

We retain data only for as long as necessary for operational and legal purposes:

• Order & transaction records: 7 years (tax & accounting compliance).
• Account data: Active period + up to 30 days after deletion request.
• Technical logs: 6-24 months.
• Customer support records: 1-3 years.

You can delete your account yourself from the Kongsee website (Account → Basic settings) or from the app (Account → Delete account), or by emailing us. Deletion is refused while money is still moving — a non-zero wallet balance, a pending withdrawal, or an order on either side that has not completed — and the screen tells you which.

When an account is deleted we remove your email address, name, username, profile photo, saved shipping address, saved payout details, identity documents, wishlist, cart holds, push notification tokens and browser notification subscriptions, and we detach your identity from any seller profile. A confirmation is sent to the email address that was on the account. What remains: order and transaction records, kept for the 7-year period above and including the delivery name, phone number and address each order was shipped with; wallet ledger entries; messages you sent to other users and reviews you left, shown without your name; and any other record we must retain by law.

6. Data Security

We implement reasonable technical and administrative measures to protect your data, including:

Technical Measures

• HTTPS / TLS encryption.
• Encrypted password storage.
• Restricted server access controls.
• Security patches and system updates.
• Intrusion detection and audit logging.

Administrative Measures

• Least-privilege access for employees.
• Internal monitoring and periodic reviews.
• Vendor compliance checks.
• Data breach response procedures.

No system can guarantee absolute security, but we strive to maintain industry-standard protection.

7. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain login sessions.
• Enhance browsing and shopping experience.
• Analyse traffic and user behaviour.
• Test features and improve performance.
• Prevent fraud and abuse.

You may disable cookies in your browser, but certain features may not function properly.

8. User Rights

Under the PDPA, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data and account (except data required by law).
• To learn how to submit a deletion request, click here.
• Opt out of marketing communications at any time.

We will process requests within a reasonable time.

9. Contact Us

Email: hello@kongsee.com

Website: https://kongsee.com

Address: 53, Jalan 3/62B, Bandar Menjalara, 52200 Kuala Lumpur