Privacy Policy - Mahnaz Food – Mahnaz Food

🔥 Special Promotion! Buy 6, Get 1 Free — Don’t Miss This Chance!

🚚 Chilled Delivery Now Available — Keep Your Products Fresh!

🍫 Kunafa Chocolate Available — Get It Now Before It Runs Out!

Privacy Policy

Last updated: February 2026

This Privacy Policy describes how Gulsanco Sdn Bhd (Company No: 1092767-P), operating as Mahnaz Food ("we", "us", "our"), collects, uses, and protects your personal information when you visit mahnazfood.com, shop at our retail outlets, or interact with us through WhatsApp, social media, and other channels.

This Privacy Policy should be read together with our Personal Data Protection Notice (PDPA Notice) at mahnazfood.com/pages/pdpa, which provides additional details required under the Personal Data Protection Act 2010 (Act 709).

By using our website or services, you accept the practices described in this Privacy Policy.

 

SECTION 1 — Information We Collect

We collect personal information that you provide to us and information generated through your use of our services. This includes:

 

Information you provide directly:

  Full name

  Phone number (including WhatsApp number)

  Email address

  Shipping and billing address

  Payment information (credit/debit card details, processed securely by third-party payment gateways — we do not store your card details)

  Messages and inquiries sent via WhatsApp, Instagram DM, Facebook Messenger, or email

  Survey or quiz responses

 

Information collected automatically:

  IP address

  Browser and device type

  Pages viewed, time spent, and click activity on our website

  Geographic location (based on IP address)

  Cookie data and browsing preferences

 

SECTION 2 — How We Use Your Information

We use your personal information for the following purposes:

  Processing and delivering your orders

  Providing customer service and responding to inquiries via WhatsApp, email, phone, and social media

  Sending transactional messages such as order confirmations, delivery updates, and invoices

  Sending promotional offers, discounts, and product updates via WhatsApp, SMS, and email (only with your consent)

  Managing loyalty and rewards programs (only with your consent)

  Improving our products, services, and website experience

  Conducting internal market research and analytics

  Complying with legal and regulatory requirements

 

We will only send you marketing communications if you have given us your explicit consent. You can withdraw this consent at any time (see Section 6).

 

SECTION 3 — Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our site.

We use cookies for session management, storing your login and display preferences, and analyzing website traffic. Login cookies last for two days, and display preference cookies last for one year.

You may set your browser to refuse cookies or alert you when cookies are sent. However, some features of our website may not function properly without cookies.

 

SECTION 4 — Third-Party Disclosure

We do not sell or trade your personal information. We may share your information with the following trusted third parties solely to operate our business and serve you:

  Courier and logistics companies — for order delivery (e.g. J&T, Pos Laju, Lalamove)

  Payment gateways — for secure payment processing

  E-commerce platforms — Shopify (our website platform), Shopee, Lazada, TikTok Shop

  Customer communication platform — Respond.io (for managing WhatsApp and messaging)

  Digital advertising platforms — Meta/Facebook, Google, TikTok (for marketing campaigns, only with your consent)

  Email marketing tools — for sending newsletters (only with your consent)

  Professional advisors — auditors, lawyers, where required by law

 

All third parties are required to keep your information confidential and may only use it for the specific purpose for which it was shared.

We may also disclose your information where required by law, to enforce our policies, or to protect the rights, property, or safety of ourselves or others.

 

SECTION 5 — WhatsApp & Messaging

When you contact us via WhatsApp, Instagram DM, or Facebook Messenger, we collect and store your messages, phone number, and name through our customer service platform (Respond.io) to provide you with support and service.

We will only send you promotional messages via WhatsApp if you have given us explicit consent. This consent may be collected through our website, QR code campaigns, click-to-WhatsApp ads, or during a WhatsApp conversation.

You can stop receiving promotional messages at any time by replying STOP or BERHENTI to any promotional message. This will not affect service-related messages such as order updates.

 

SECTION 6 — Your Rights & Opt-Out

Under the Personal Data Protection Act 2010, you have the right to:

  Access the personal data we hold about you

  Request correction of inaccurate or incomplete data

  Withdraw your consent for marketing communications at any time

  Request that we stop processing your data for direct marketing

 

How to opt out of marketing:

  WhatsApp: Reply STOP or BERHENTI to any promotional message

  Email: Click the Unsubscribe link at the bottom of any email

  Contact us directly (see Section 9)

 

Withdrawing consent for marketing will not affect the processing of your data for orders, delivery, and customer service.

 

SECTION 7 — Data Security

We implement appropriate technical and organisational measures to protect your information, including storing data on secure servers, encrypting data transfers using SSL technology, encrypting payment transactions, and restricting access to authorised personnel only.

Your credit card information is never stored on our servers. All payment processing is handled by certified third-party payment gateways.

 

SECTION 8 — Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. When your data is no longer needed, we will securely delete or anonymise it.

 

SECTION 9 — Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your personal data, or wish to withdraw your consent, please contact us:

 

Gulsanco Sdn Bhd (operating as Mahnaz Food)

Address: Jalan TP 7/5, Taman Perindustrian Sime Uep, 40400 Shah Alam, Selangor

Email: info@mahnazfood.com

Phone: +6012-239 9124

 

We will endeavor to respond to your request within 21 working days.

SECTION 10 — Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will take effect immediately upon posting on our website. We encourage you to review this page regularly. If we make significant changes, we will notify you through our website or other appropriate channels.

If our business is acquired or merged with another company, your information may be transferred to the new owners to continue serving you.