Privacy Policy

1. Introduction

DurianPenang.com ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website at https://durianpenang.com (the "Service").

This policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and other applicable privacy laws. By using our Service, you consent to the data practices described in this policy.

2. Data Controller

DurianPenang.com is the data controller for the personal data we collect through this website. You can contact us regarding any privacy-related matters through our contact page.

3. Information We Collect

3.1 Information You Provide Directly

We may collect personal data that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number when you contact us or subscribe to our newsletter
• User-Generated Content: Comments, reviews, or other content you submit (if applicable)
• Survey Responses: Information provided in surveys or feedback forms
• Communication Data: Messages you send us through contact forms or email

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: Device type, operating system, browser type and version
• Usage Data: Pages visited, time spent on pages, click data, referring websites
• Location Data: General geographic location based on IP address
• Technical Data: IP address, browser settings, time zone, and other technical information

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Advertising Cookies: Used to deliver relevant advertisements (Google AdSense)
• Preference Cookies: Remember your settings and preferences

4. How We Use Your Information

We use the collected information for the following purposes:

• Website Operation: To provide, maintain, and improve our website functionality
• Communication: To respond to your inquiries, comments, or requests
• Content Delivery: To personalize and improve content based on your interests
• Newsletter Services: To send updates about durian season, new content, or relevant information (with your consent)
• Analytics: To understand website usage patterns and improve user experience
• Legal Compliance: To comply with applicable laws and regulations
• Security: To protect against fraud, abuse, and security threats

5. Legal Basis for Processing (PDPA 2010 Compliance)

Under Malaysia's PDPA 2010, we process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific purposes (e.g., newsletter subscription)
• Legitimate Interests: For website analytics, security, and improving our services
• Legal Obligation: Where processing is required by Malaysian law
• Vital Interests: To protect the vital interests of individuals

6. How We Share Your Information

We may share your information in the following circumstances:

6.1 Third-Party Service Providers

• Google Analytics: For website analytics and performance monitoring
• Google AdSense: For displaying relevant advertisements
• Web Hosting Providers: For website hosting and maintenance
• Email Service Providers: For newsletter delivery (if applicable)

6.2 Legal Requirements

We may disclose your information when required by law, legal process, or to protect our rights and safety.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. International Data Transfers

Some of our service providers (such as Google) may be located outside of Malaysia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with PDPA 2010 requirements.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Data: Retained until you request deletion or withdraw consent
• Analytics Data: Typically retained for 26 months (Google Analytics default)
• Website Logs: Retained for security purposes, typically 12 months
• Correspondence: Retained for customer service purposes, typically 3 years

9. Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA 2010, you have the following rights:

• Right to Access: Request information about the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Right to Limit Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Complain: Lodge a complaint with the Personal Data Protection Department

To exercise these rights, please contact us through our contact page. We will respond to your request within 21 days as required by PDPA 2010.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data transmission is protected using SSL/TLS encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: We keep our security measures and software up to date
• Incident Response: We have procedures in place to respond to data breaches

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our website is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete such information.

12. Third-Party Services and Advertising

12.1 Google AdSense

We use Google AdSense to display advertisements on our website. Google AdSense uses cookies and other technologies to:

• Show relevant advertisements based on your interests and browsing behavior
• Measure ad performance and engagement
• Prevent fraudulent activity and invalid clicks
• Collect anonymized demographic and interest data

12.2 Google Analytics

We use Google Analytics to understand how visitors interact with our website. This service collects:

• Website usage statistics and user behavior patterns
• Traffic sources and referral information
• Geographic location data (country/city level)
• Device and browser information
• Page views, session duration, and bounce rates

12.3 Third-Party Data Processing

When you visit our website, the following third-party services may process your data:

• Google LLC: For advertising (AdSense) and analytics services
• Web Hosting Providers: For website hosting and content delivery
• Content Delivery Networks (CDNs): For faster website loading
• Email Service Providers: For newsletter delivery (if applicable)

12.4 Sponsored Content and Paid Listings

Our website may feature sponsored content and paid listings of durian farms, vendors, and related businesses. Please note:

• Featured/Sponsored content is clearly marked where applicable
• We may receive compensation for featuring certain businesses
• Inclusion does not guarantee quality or endorse specific services
• Users should independently verify all business information

12.5 Opt-Out Options

You can control advertising and tracking preferences through:

• Google Ads Settings - Manage personalized advertising
• Digital Advertising Alliance - Industry opt-out page
• Google Analytics Opt-out Browser Add-on
• Browser settings to block cookies and tracking

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (if you've subscribed to our newsletter)

Your continued use of the website after any changes constitutes acceptance of the updated policy.

14. Important Disclaimer

14.1 Information Accuracy

While we strive to maintain accurate information, we cannot guarantee the completeness, accuracy, or timeliness of any information on our website, including:

• Durian variety descriptions, taste profiles, and characteristics
• Farm locations, operating hours, and contact details
• Pricing information and availability
• Seasonal predictions and harvest schedules
• Business services and quality standards

Information may become outdated due to rapidly changing market conditions, seasonal variations, and business updates.

14.2 Data Sources

Information on our website is compiled from various sources, including:

• Personal experiences and observations
• Public information from farms, vendors, and sellers
• User-generated content and community submissions
• Third-party sources and online research
• Industry publications and reports

We cannot verify the accuracy of all third-party information and encourage users to independently confirm details before making decisions.

14.3 Commercial Nature

14.4 Legal Compliance

This privacy policy is designed to comply with:

• Malaysia's Personal Data Protection Act 2010 (PDPA): Governing personal data collection and processing
• International best practices: For websites serving global audiences
• Third-party service requirements: As mandated by Google and other service providers

We make reasonable efforts to comply with applicable privacy laws, but laws may vary by jurisdiction. Users are encouraged to understand their local privacy rights and regulations.

14. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights under PDPA 2010, please contact us:

• Through our contact page
• By visiting this page: https://durianpenang.com/contact

15. Regulatory Information

This privacy policy complies with Malaysia's Personal Data Protection Act 2010 (Act 709). If you believe we have not handled your personal data appropriately, you can file a complaint with: