Privacy Policy

Effective 7 October 2026

This policy explains how GILDARTZ PLT (202604001542 (LLP0046777-LGN)), a limited liability partnership registered in Malaysia ("Gildartz", "we", "us"), collects, uses and protects personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. What this policy covers

It applies to gildartz.com and to every product we operate, including their websites, web apps and Android and iOS apps (together, the "Services"):

  • Kidz: marketplace for kids' products and services
  • Waku: WhatsApp messaging API for businesses
  • Boss: digital asset marketplace and domain parking
  • Prcl: parcel management for condominiums
  • PTA: school PIBG management
  • Billz: bill payments and e-invoicing for SMEs
  • SpyProp: property intelligence
  • Linopot: food-social app

A product may publish an additional notice for features specific to it. Where it does, that notice applies together with this policy.

2. Personal data we collect

  • Information you give us: name, email address, phone number, account login details, profile information, addresses (for example a delivery address or unit number), and anything you post, upload or send through the Services.
  • Information from your use of the Services: device and browser type, IP address, app version, pages and features used, log and error data, and cookies or similar technologies.
  • Information from others: sign-in providers (such as Google or Apple) if you choose to log in with them; your school, condominium management or business, if they register you on a product (for example PTA or Prcl); and payment providers confirming a transaction.

We do not store full payment card numbers. Card payments are handled by licensed payment providers.

3. How we use it

  • to provide, operate and maintain the Services and your account;
  • to send service messages, such as order updates, parcel alerts, school announcements and one-time passwords, by email, push notification, SMS or WhatsApp;
  • to process payments and keep records required by law, including tax and e-invoicing records;
  • to provide support and respond to your requests;
  • to keep the Services secure and prevent fraud and abuse;
  • to understand usage and improve our products;
  • to send marketing messages, only where you have agreed. You can opt out at any time.

4. WhatsApp messaging

Some Services send messages through WhatsApp, including through Waku. To do this we process the recipient's phone number and the message content, and these are passed to WhatsApp (operated by Meta Platforms) for delivery. WhatsApp's own terms and privacy policy apply to its handling of that data. Businesses that use Waku to message their customers are responsible for having those customers' permission to contact them.

5. Who we share it with

We do not sell personal data. We share it only with:

  • service providers who help us run the Services: hosting, cloud storage, payment gateways, messaging (email, SMS, WhatsApp), app stores and error monitoring. They may use the data only on our instructions;
  • the other party to a transaction you make, for example a seller on Kidz or Boss, or your school or condo management on PTA or Prcl, to the extent needed to complete it;
  • authorities, where the law requires it or to protect the rights and safety of our users or the public;
  • a buyer or successor, if a product or our business is sold or reorganised. This policy will continue to protect your data.

6. Where it is stored

Our servers and some of our providers may be located outside Malaysia. When data is transferred abroad we take reasonable steps to make sure it stays protected to a standard comparable to the PDPA.

7. How long we keep it

We keep personal data for as long as your account is active or as needed to provide the Services, and after that only as long as needed to meet legal, tax and accounting obligations or to resolve disputes. We then delete or anonymise it.

8. How we protect it

We use encryption in transit (HTTPS), access controls and other safeguards suitable for the data involved. No system is completely secure, so we cannot guarantee absolute security. If a breach affects you, we will notify you and the authorities as required by law.

9. Children

Our Services are meant to be used by adults. Some products handle information about children, for example school records on PTA or listings on Kidz. That information is provided by parents, guardians or schools, who are responsible for having the authority to share it. We do not knowingly collect personal data directly from children under 13 without consent from a parent or guardian. If you believe we have, contact us and we will delete it.

10. Your rights

Under the PDPA you may:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is inaccurate, incomplete or out of date;
  • withdraw your consent, or ask us to stop processing your data for direct marketing;
  • ask us to delete your account and data.

Email [email protected]. We will reply within 21 days. We may need to confirm your identity first. Withdrawing consent may mean we can no longer provide some Services to you.

11. Deleting your data

You can delete your account from the settings inside the app, where that option is available. You can also email [email protected] with the subject "Data deletion request", naming the product and the email or phone number on your account. We will delete your account and personal data within 30 days, except records we must keep by law, which we keep only for as long as required.

12. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences and understand how the Services are used. You can block or delete cookies in your browser settings, but some features may stop working.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date, and tell you about important changes through the Services or by email.

14. Contact us

GILDARTZ PLT (202604001542 (LLP0046777-LGN))
Email: [email protected]