PRIVACY POLICY
Last Updated: 26 August 2026
This Privacy Policy explains how RZ CREATIVELY DESIGNED, trading as IG Shop, collects, uses, stores, discloses, and protects personal data when you:
– Visit www.igshop.com.my;
– Contact or communicate with us;
– Request a quotation;
– Purchase or use our Services;
– Attend training;
– Receive technical support; or
– Otherwise interact with IG Shop.
This Policy is intended to serve as a personal data protection notice under Malaysia’s Personal Data Protection Act 2010 (Act 709), as amended from time to time.
1. Data Controller
The organisation responsible for the personal data described in this Policy is:
RZ CREATIVELY DESIGNED
Business Registration No.: 201203217973
Trading as: IG Shop
Email: sales@igshop.com.my
Address: B01-A-9, Menara 2, KL Eco City, 3, Jalan Bangsar, 59200 Kuala Lumpur, Malaysia
References to “IG Shop,” “we,” “us,” or “our” mean RZ CREATIVELY DESIGNED.
2. Personal Data We May Collect
Depending on how you interact with us, we may collect:
Identity and contact information
– Name;
– Company or business name;
– Business registration details;
– Job title;
– Email address;
– Telephone or WhatsApp number;
– Billing or business address; and
– Social-media or messaging account information.
Project and business information
– Website requirements;
– Products and services offered by your business;
– Brand information;
– Product descriptions, prices, images, and categories;
– Shipping and fulfilment information;
– Business policies;
– Domain and hosting information;
– Technical specifications; and
– Other information supplied for website development, training, or support.
Account and integration information
Where necessary to perform the Services, you may provide access information relating to:
– Website administration;
– Domain and hosting accounts;
– Business email accounts;
– Payment gateways;
– Courier or fulfilment services;
– Marketplaces;
– Analytics and advertising platforms;
– Social-media platforms; and
– Point-of-sale or other business systems.
You should use secure methods approved by us when sharing credentials and should change temporary passwords after the relevant work has been completed.
We do not intentionally collect your customers’ payment-card security codes. Card and online-banking payments should be processed directly by the relevant payment provider.
Transaction information
– Quotation and invoice details;
– Payment status;
– Transaction references;
– Package or service purchased; and
– Records needed for accounting, taxation, and dispute resolution.
Payment-card and online-banking information may be processed directly by third-party payment providers rather than stored by us.
Communications and support information
– Emails, messages, enquiries, and feedback;
– Training and appointment records;
– Support requests;
– Troubleshooting information;
– Screenshots or recordings voluntarily supplied to us; and
– Records of project instructions, revisions, and approvals.
Technical and usage information
When you use our Website, we or our service providers may collect:
– Internet Protocol address;
– Browser and device type;
– Operating system;
– Referring website;
– Pages visited;
– Date, time, and duration of visits;
– Cookie identifiers;
– Website interactions; and
– General location inferred from an IP address.
3. How We Collect Personal Data
We may collect personal data:
– Directly from you;
– Through forms on our Website;
– Through email, telephone, WhatsApp, or social media;
– During consultations, training, and support;
– Through quotations, invoices, and payments;
– From employees or representatives of your organisation;
– Automatically through cookies and similar technologies;
– From service providers involved in delivering the Services; or
– From publicly available sources where permitted by law.
If you provide personal data relating to another individual, you confirm that you are authorised to do so and have provided any notice or obtained any consent required by law.
4. Why We Process Personal Data
We may process personal data to:
– Respond to enquiries and quotation requests;
– Confirm identity and contact details;
– Prepare quotations, proposals, invoices, and agreements;
– Design, develop, configure, test, and deliver websites;
– Set up requested integrations;
– Provide training, support, maintenance, and troubleshooting;
– Manage client relationships and project communications;
– Process and verify payments;
– Maintain financial, business, and tax records;
– Protect websites, accounts, systems, and users;
– Detect or prevent fraud, misuse, or security threats;
– Improve our Website, Services, training, and support;
– Send service announcements and administrative communications;
– Send marketing communications where permitted;
– Establish, exercise, or defend legal rights;
– Comply with legal and regulatory obligations; and
– Carry out other purposes disclosed when the information is collected.
Where consent is required, you may withdraw that consent subject to legal or contractual restrictions. Withdrawal does not affect processing already carried out lawfully.
5. Whether Providing Data Is Mandatory
Certain personal data is required for us to:
– Prepare a quotation;
– Enter into an agreement;
– Process payment;
– Develop or configure a website;
– Provide training or support;
– Verify instructions; or
– Comply with legal obligations.
If required information is not provided, we may be unable to respond to a request, begin or complete a project, configure an integration, or provide support.
6. Disclosure of Personal Data
We may disclose personal data to:
– Our authorised employees, contractors, and technical personnel;
– Hosting companies and domain registrars;
– Payment processors and financial institutions;
– Email, communications, and cloud-service providers;
– Software, analytics, security, and backup providers;
– Payment gateways, courier companies, fulfilment providers, marketplaces, and other services selected by the client;
– Accountants, auditors, insurers, lawyers, and professional advisers;
– Government departments, regulators, courts, and law-enforcement authorities where required; and
– A purchaser, successor, or adviser involved in a genuine business restructuring or transfer.
These parties may process personal data only for the relevant service, transaction, professional duty, legal requirement, or other permitted purpose.
We do not sell personal data to third parties.
7. Client Website and Customer Data
When we develop or support an e-commerce website for a client, the client is normally responsible for deciding what personal data its website collects and how that data is used.
The client is responsible for:
– Publishing an appropriate privacy notice on its website;
– Obtaining any required customer consent;
– Using customer data lawfully;
– Managing access, correction, deletion, and marketing requests;
– Configuring suitable cookie and tracking controls;
– Securing its administrator accounts; and
– Complying with applicable privacy, consumer, marketing, and e-commerce laws.
Where IG Shop accesses or processes the client’s customer data solely to develop, maintain, troubleshoot, or support the client’s website, we will process that data only as reasonably necessary to perform the requested Service or comply with the law.
The client should avoid sending us customer data that is not required for the support request.
8. Cookies and Similar Technologies
Our Website may use cookies, pixels, tags, and similar technologies.
These may include:
– Essential cookies, which enable security and basic Website functionality;
– Preference cookies, which remember selected settings;
– Analytics cookies, which help us understand Website use and performance; and
– Marketing cookies, which help measure campaigns or display relevant advertising.
Where required, we will request consent before using non-essential cookies.
You may manage cookies through the available cookie controls or your browser settings. Blocking certain cookies may affect Website functionality.
Third-party integrations, videos, maps, social-media features, analytics tools, or payment services may set their own cookies and process information under their own privacy policies.
9. Marketing Communications
We may use contact information to send news, offers, package information, or other marketing communications where permitted by law.
You may opt out at any time by:
– Using the unsubscribe option included in the message;
– Replying with an opt-out request; or
– Emailing sales@igshop.com.my.
Opting out of marketing will not prevent us from sending quotations, invoices, project updates, security notices, support responses, or other service-related communications.
10. Cross-Border Processing
Some service providers or technical systems used to operate our Website or deliver the Services may store or process data outside Malaysia.
Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is permitted and that the data receives an appropriate level of protection, including through contractual, organisational, or technical safeguards where applicable.
11. Data Security
We use reasonable administrative, technical, and organisational measures to protect personal data against:
– Loss or accidental destruction;
– Unauthorised access;
– Improper use or disclosure;
– Unauthorised alteration; and
– Other security risks.
However, no website, transmission method, server, or storage system is completely secure. You are responsible for protecting your passwords, devices, accounts, and administrator access.
If we become aware of a personal-data breach, we will assess and respond to it and make any notifications required by applicable law.
12. Data Retention
We retain personal data only for as long as reasonably necessary to:
– Deliver the Services;
– Maintain the client relationship;
– Provide training or support;
– Fulfil the purposes described in this Policy;
– Maintain business, accounting, tax, and project records;
– Resolve disputes;
– Enforce agreements; and
– Comply with legal obligations.
Retention periods may vary depending on the type of information, the Service involved, legal requirements, third-party systems, and whether an ongoing dispute exists.
When personal data is no longer required, we will take reasonable steps to delete, destroy, or anonymise it, subject to legal and technical limitations.
13. Your Rights
Subject to applicable law, you may have the right to:
– Ask whether we process your personal data;
– Request access to your personal data;
– Request correction of inaccurate or incomplete data;
– Withdraw consent previously given;
– Object to or limit processing in certain circumstances;
– Prevent processing likely to cause damage or distress;
– Opt out of direct marketing;
– Request deletion where applicable;
– Request data portability where applicable; and
– Make a complaint concerning the processing of your personal data.
We may request information needed to verify your identity before acting on a request.
Certain requests may be limited where we must retain or process information to comply with the law, perform an agreement, establish or defend a legal claim, protect another person’s rights, or meet other lawful obligations.
To exercise your rights, email sales@igshop.com.my.
14. Links and Third-Party Websites
Our Website may contain links to external websites or services.
We do not control and are not responsible for the content, security, availability, or privacy practices of third parties. You should review the privacy policy of each third-party service before supplying personal data.
15. Children’s Personal Data
Our Website and Services are intended primarily for businesses and adults.
We do not knowingly collect personal data directly from children without appropriate authorisation. If you believe a child has provided personal data to us improperly, please contact us so that we can review and, where appropriate, remove it.
16. Changes to This Policy
We may update this Privacy Policy when our practices, Services, technology, or legal obligations change.
The revised version will be published on our Website with a new “Last Updated” date. Material changes may also be communicated through another appropriate method.
17. Contact and Privacy Requests
For privacy questions, access or correction requests, withdrawal of consent, marketing opt-outs, or complaints, please contact:
RZ CREATIVELY DESIGNED
Business Registration No.: 201203217973
Trading as: IG Shop
Email: sales@igshop.com.my
Address: B01-A-9, Menara 2, KL Eco City, 3, Jalan Bangsar, 59200 Kuala Lumpur, Malaysia
You may also seek information or make a complaint through Malaysia’s Personal Data Protection Commissioner where applicable.
