Privacy Policy — YAYAPETS Platform

Operator: BRILLIX DIGITAL SDN. BHD.
Platform: YAYAPETS mobile application and website (collectively, the "Platform")

Welcome to YAYAPETS. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the YAYAPETS platform. We are committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information We Collect

Basic Personal Information
When you register or log in, we collect your name, email address, phone number, and profile photo to establish your account and facilitate communication.

Third-Party Login Information
When you sign in using Google, Apple, or WhatsApp, we receive your name, email address, and profile photo from the respective provider. We do not access your password on those platforms.

Identity Verification Information
When you register as a Seller (Merchant), we may collect your business registration documents (IC/SSM) for enterprise certification purposes.

Pet Listing Information
When sellers publish pet listings, we collect pet details including species, breed, gender, date of birth, size, vaccination records, photos, videos, pricing, and descriptions.

Location Information
With your consent, we collect your GPS location to provide distance-based recommendations and nearby store features. You may disable location access at any time through your device settings.

Camera and Photo Library
With your permission, we access your device camera and photo library to allow you to upload pet photos, merchant certification documents, and profile pictures. We only access these when you actively choose to upload.

Device and Usage Information
We automatically collect device model, operating system version, app version, and usage behaviour (browsing history, search queries, favourites, click patterns) to improve our services and provide personalised recommendations.

Push Notification Token
With your consent, we collect your device push notification token to send you relevant updates and alerts. You may disable push notifications at any time through your device settings.

2. How We Use Your Information

• Account Management — Managing your account, verifying your identity, and providing customer support.
• Pet Browsing and Discovery — Displaying pet listings, enabling search, favourites, and browsing history.
• Service Personalisation — Providing personalised pet recommendations based on your browsing behaviour and location.
• Merchant Services — Enabling sellers to publish and manage pet listings, complete merchant certification.
• Communication — Facilitating contact between buyers and sellers via WhatsApp or in-app channels.
• Safety and Security — Detecting and preventing fraud and unauthorised access.
• Legal Compliance — Complying with applicable laws and regulations.
• Platform Improvement — Analysing usage patterns to improve services.

3. Sharing and Disclosure of Information

We do not sell your personal information to unrelated third parties. We share your information only in the following necessary circumstances:

• Sellers — When you contact a seller, your basic contact information may be shared to facilitate communication.
• Authentication Providers — Login tokens exchanged with Google, Apple, or WhatsApp for secure authentication.
• Cloud Service Providers — Data stored on secure cloud infrastructure (AWS) for hosting and file storage.
• Legal Requirements — When required by law, legal process, or government request.

4. Data Security

• Encrypted Communication — All data transmitted using TLS/SSL encryption.
• Secure Authentication — Passwords are hashed and never stored in plain text. OAuth tokens are securely managed.
• Access Control — Strict internal access controls; only authorised personnel access your data.
• Data Storage — Stored on secure cloud servers with regular backups.

User Obligations: Please keep your login credentials secure and avoid sharing sensitive information in public areas of the app.

5. Data Retention

We retain your personal information for as long as your account is active. If you request account deletion, your personal data will be permanently removed within 30 days, except where retention is required by law (e.g., merchant certification records may be retained for up to 7 years for regulatory compliance).

6. Account Deletion

You may request deletion of your account at any time through the app settings or by contacting customer service. Upon deletion:

• Your personal profile, browsing history, and favourites will be permanently deleted.
• Published pet listings associated with your merchant account will be removed.
• Certain records may be retained as required by applicable laws.

7. Your Rights

Under the PDPA, you have the following rights:

• Access and correct your personal information through account settings.
• Request deletion of your account and personal data.
• Withdraw consent for location services and push notifications via device settings.
• Opt out of promotional communications.
• Request information about how your data has been shared.

8. Cookies and Tracking

The app may use local storage and analytics tools to remember your login status, track app performance, and analyse usage patterns. You can manage these through your device settings.

9. Privacy of Minors

The Platform does not provide services directly to individuals under the age of 18. Minors must use this Platform under parental supervision and consent.

10. International Data Transfers

Your data is primarily stored and processed in Malaysia. If transferred to other jurisdictions, appropriate safeguards are in place.

11. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be notified through in-app notifications. Continued use constitutes acceptance.

12. Contact Us

In-App: Customer Service chat
Operator: BRILLIX DIGITAL SDN. BHD.