Privacy Policy
Jin Xuan Holdings Sdn Bhd (SSM-200801008028) and its related corporations, where applicable ("Company", "Jin Xuan", "we", "us" or "our") respect the privacy and protection of your personal data.
We handle personal data provided to us or collected by us in accordance with the Personal Data Protection Act 2010 ("PDPA") and any other applicable data protection laws in Malaysia.
This Privacy Policy applies to all customers, website users, mobile application users, social media users, suppliers, vendors, business partners, employees, job applicants and other parties who may interact or communicate with us through our official website at jinxuan.com.my, mobile application, official social media accounts, messaging channels, online ordering channels, third-party delivery platform pages, emails, telephone calls, WhatsApp, physical outlets or any other related platforms and services ("Official Platforms" and "Services").
By accessing or using our Official Platforms, submitting your personal data to us, placing an order, contacting us, registering an account, participating in our campaigns, visiting our outlets, or interacting with our Services, you agree and consent to the collection, use, processing, storage, disclosure and handling of your personal data in accordance with this Privacy Policy.
If you do not agree with this Privacy Policy, please do not provide your personal data to us and stop using our Official Platforms and Services.
- Types of Personal Data Collected
- We may collect and process personal data including, but not limited to, the following:
- personal identification and contact information, including your name, telephone number, email address, address, date of birth, age, gender, nationality, image, photograph and other identifying details;
- order and service information, including food orders, delivery details, takeaway details, reservation details, catering enquiries, frozen dim sum orders, outlet preferences, product preferences, feedback and customer service records;
- account and app information, including username, password, login details, verification code, account preferences, app activity and usage data;
- access and technical information, including IP address, device type, browser type, operating system, general location data, website traffic data, pages viewed, time spent on our Official Platforms, referral links, cookies and similar technologies;
- payment-related information, including payment method, transaction details, payment confirmation and other information required to process payments. We do not directly store full card details where payment is processed by third-party payment gateways or service providers;
- marketing and communication information, including your communication preferences, enquiries, feedback, survey responses, campaign participation, contest entries, comments, messages and interactions with our social media content;
- images, videos and CCTV footage, including images or videos captured at our outlets, dining areas, premises, events, campaigns, official photography or videography sessions, CCTV systems, or materials voluntarily uploaded, tagged, shared or submitted to us;
- employment-related information, including resume details, work experience, qualifications, references, identification details, contact information, salary information, banking details, tax information, EPF, SOCSO and other information submitted for recruitment or employment purposes;
- information from third-party platforms, including delivery partners, payment providers, analytics providers, advertising platforms, social media platforms and other service providers where you interact with Jin Xuan through those platforms;
- publicly available online content that features Jin Xuan, our products, outlets, brand name, hashtags, locations or services, whether or not Jin Xuan is tagged, mentioned or directly notified;
- sensitive personal data, where applicable and permitted by law, including health-related information, dietary or allergy information, religious-related dietary preferences, biometric data or other sensitive personal data as defined under applicable laws.
- We will only collect personal data that is necessary, relevant or reasonably required for the purposes stated in this Privacy Policy.
- We may collect and process personal data including, but not limited to, the following:
- Collection of Personal Data
- We may collect your personal data in the following ways:
- when you access, browse or use our website, mobile application or online platforms;
- when you create an account, register with us, submit a form or use our online ordering system;
- when you place an order, make a reservation, request takeaway, arrange delivery, enquire about catering or purchase frozen dim sum;
- when you contact us through WhatsApp, telephone, email, social media, messenger platforms, website forms or face-to-face communication;
- when you participate in our promotions, contests, giveaways, campaigns, events, surveys or customer feedback activities;
- when you interact with our official social media accounts, including commenting, messaging, tagging, sharing, reviewing or submitting content;
- when your image or video is captured by CCTV, photography or videography at our outlets, dining areas, premises, events, campaigns, media shoots, content shoots or official brand activities;
- when you apply for a job or submit employment-related information to us;
- when third-party platforms or service providers provide information to us in relation to your order, delivery, payment, enquiry or interaction with Jin Xuan;
- when you publish, post, upload or share content that features Jin Xuan, our products, outlets, brand name, hashtags, locations or services on publicly available online platforms, whether or not Jin Xuan is tagged, mentioned or directly notified; and
- when you voluntarily provide your personal data to us for any other reason.
- If you provide personal data relating to another person, such as a family member, friend, colleague, guest, recipient of an order or person appearing in any content submitted by you, you confirm that you have obtained the necessary consent from that person for us to collect, use and process their personal data in accordance with this Privacy Policy.
- If you are below 18 years old, you should obtain consent from your parent or legal guardian before providing any personal data to us.
- We may collect your personal data in the following ways:
- Use of Personal Data
- We may collect, use, process, store and disclose your personal data for the following purposes:
- to communicate with you;
- to verify your identity or account details;
- to process, confirm and manage orders, payments, deliveries, takeaway requests, reservations, catering enquiries and customer service matters;
- to provide our products, services, website features, mobile application features and online ordering services;
- to respond to enquiries, feedback, complaints, requests or reports submitted by you;
- to send updates, announcements, promotions, campaigns, offers, vouchers, event information or marketing communications where permitted by law;
- to manage your participation in contests, giveaways, campaigns, surveys, events or promotional activities;
- to improve our products, menu, services, website, mobile application, customer experience and outlet operations;
- to conduct internal records, research, data analysis, market research, customer profiling, business development and service improvement;
- to display, manage or moderate social media comments, messages, tags, posts, user-generated content and online interactions;
- to create, publish, edit, display, share or use photography, videography, social media content, campaign content, outlet ambience content, dining experience content or other promotional materials relating to Jin Xuan, where permitted by applicable laws;
- to manage security, fraud prevention, technical support, troubleshooting, system maintenance and platform performance;
- to process payments, refunds, replacements, credits or other order-related matters;
- to manage recruitment, employment applications, human resources and employee administration;
- to comply with legal, regulatory, audit, tax, accounting, reporting, operational or business requirements;
- to protect and enforce our legal rights, contractual rights, business interests, intellectual property rights and brand reputation;
- to view, respond to, share, repost or engage with publicly available content that features Jin Xuan, our products, outlets, brand name, hashtags, locations or services, where permitted by the relevant platform terms and applicable laws;
- to contact you for permission, clarification, credit, ownership confirmation or usage arrangement where we wish to use user-generated photos, videos or content for advertising, paid media, website banners, printed materials, menu materials, packaging, campaigns or other commercial promotional purposes;
- to transfer or disclose information where required in connection with any business restructuring, merger, sale, purchase or transfer of business or assets; and
- for any other purpose directly related or incidental to the above.
- We may collect, use, process, store and disclose your personal data for the following purposes:
- Disclosure of Personal Data
- We may disclose or share your personal data with the following parties where necessary:
- Jin Xuan's related corporations, directors, employees and authorised representatives;
- our outlets, customer service team, operations team, marketing team, IT team, finance team and management team;
- third-party service providers, including website developers, app developers, hosting providers, cloud storage providers, IT support providers, analytics providers and marketing service providers;
- payment processors, banks, card issuers, e-wallet providers and payment gateway providers;
- delivery partners, third-party ordering platforms and logistics providers;
- social media platforms, advertising platforms, digital marketing platforms and communication service providers;
- photographers, videographers, designers, creative agencies, marketing agencies, printers, media production teams and other content-related service providers engaged by Jin Xuan;
- auditors, lawyers, accountants, consultants, insurers, professional advisers and other business advisers;
- government agencies, regulatory bodies, law enforcement agencies, courts or authorities where required by law;
- business partners, vendors, suppliers and contractors who assist us in operating our business and providing our Services;
- content owners, photographers, creators or users where communication is necessary to request permission, provide credit, clarify ownership or arrange the use of user-generated photos, videos or content relating to Jin Xuan; and
- any other party where disclosure is necessary for the purposes stated in this Privacy Policy, required for our business operations, or permitted by law.
- Some of these parties may be located within or outside Malaysia. Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the personal data continues to be handled in accordance with applicable data protection standards.
- We may disclose or share your personal data with the following parties where necessary:
- Payment Processing
- When you make payment through our website, mobile application, outlet payment system, online ordering channel, third-party delivery platform, e-wallet, card payment system or payment gateway, your payment information may be processed by the relevant bank, payment gateway, e-wallet provider, card issuer or platform operator.
- Payment-related information is handled according to the privacy policy, security standards and terms of the relevant payment provider or platform operator.
- Jin Xuan does not directly store full credit card or debit card details where such payment information is processed by third-party payment service providers.
- Protection of Personal Data
- We will take reasonable administrative, technical and physical measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, misuse or similar risks.
- These measures may include access controls, staff training, secure storage, password protection, system monitoring, antivirus protection, encryption where appropriate and limiting access to personal data on a need-to-know basis.
- However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
- You are responsible for keeping your account details, passwords, verification codes, devices and personal information secure.
- Jin Xuan shall not be responsible for any loss, damage, unauthorised access or disclosure caused by your own actions, third-party platforms, external websites, public networks, device security issues or circumstances beyond our reasonable control.
- Retention of Personal Data
- We may retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws.
- We may also retain personal data for legal, regulatory, accounting, audit, business, operational, dispute resolution, marketing, historical record, brand documentation or internal record-keeping purposes.
- When personal data is no longer required, we will take reasonable steps to securely delete, destroy, anonymise or remove the means by which the data can be associated with you, where appropriate and practicable.
- Your Rights in Respect of Personal Data
- Subject to the PDPA and applicable laws, you may request to access, review, correct, update or withdraw consent for the processing of your personal data.
- You may also request that we limit the processing of your personal data, subject to applicable legal, contractual, operational, technical and business requirements.
- To make a request, you may contact us using the contact details stated in Section 14 of this Privacy Policy.
- We may require verification of your identity before processing any request relating to your personal data.
- We may refuse, limit or defer a request where permitted by law, including where the request may affect the rights of another person, conflict with legal requirements, affect our business operations, affect our legal rights, or prevent us from fulfilling necessary business, contractual or legal obligations.
- If you withdraw your consent, we may no longer be able to provide certain products, services, account features, promotions, customer support or online functions to you.
- Where your personal data appears in images, videos, social media content, marketing materials or archived materials already published, printed, produced, shared or distributed, Jin Xuan may take reasonable steps to review your request, subject to operational, technical, legal, commercial and practical limitations.
- Cookies and Similar Technologies
- Our website, mobile application and online platforms may use cookies, pixels, tags, analytics tools or similar technologies to improve user experience, analyse website traffic, understand user behaviour, remember preferences, improve content and support marketing activities.
- You may adjust your browser or device settings to refuse or manage cookies. However, some features of our website, mobile application or online platforms may not function properly if cookies are disabled.
- Third-Party Platforms and External Links
- Our Official Platforms may contain links to third-party websites, delivery platforms, payment gateways, social media platforms, maps, videos or other external services.
- These third-party platforms are operated by independent parties and have their own privacy policies, terms of use and data practices.
- Jin Xuan is not responsible for the privacy practices, security, content, accuracy, availability or services of third-party platforms.
- We encourage you to review the privacy policies of third-party platforms before providing personal data to them.
- User-Generated Content
- If you publish, post, upload, tag, mention, share or otherwise make available any photo, video, comment, review, message or content featuring Jin Xuan, our products, outlets, brand name, hashtags, locations or services on public online platforms, we may view, respond to, share, repost or engage with such content where permitted by the relevant platform terms and applicable laws.
- If Jin Xuan is tagged, mentioned, hashtagged, location-tagged or directly shared in your content, we may treat such interaction as permission to engage with, share or repost the content on our official social media accounts, unless you inform us otherwise.
- If Jin Xuan wishes to use user-generated photos, videos or content for advertising, paid media, website banners, printed materials, menu materials, packaging, campaigns or other major commercial promotional purposes, we may seek further permission from the relevant content owner where required.
- You confirm that any content you submit, upload, tag, share or provide to Jin Xuan does not infringe the rights of any third party, including copyright, trademark, privacy, image rights or other intellectual property rights.
- You grant Jin Xuan the right to view, respond to, share, repost, display or otherwise engage with your publicly available content featuring Jin Xuan, our products, outlets, brand name, hashtags, locations or services, where permitted by the relevant platform terms and applicable laws.
- Jin Xuan reserves the right to remove, hide, report, edit, crop, blur, stop using or take down any user-generated content at any time if we consider it inappropriate, inaccurate, offensive, misleading, unauthorised, infringing, harmful or damaging to Jin Xuan, our employees, customers, partners or users.
- Photography, Videography and Customer Images
- Photography and videography may take place at our outlets, dining areas, premises, events, campaigns, media shoots, content shoots or official brand activities for marketing, promotional, social media, documentation, training, operational, monitoring, archival or internal business purposes.
- Images or videos captured by Jin Xuan, our employees, representatives, photographers, videographers, agencies or service providers may include our products, outlets, employees, customers, visitors, dining areas, events, ambience, service moments, queues, celebrations, group gatherings or brand activities.
- Where customers or visitors appear incidentally in the background, are not clearly identifiable, are partially visible, or are part of the general outlet ambience, Jin Xuan may use such images or videos on our Official Platforms, including our website, mobile application, official social media accounts, digital platforms, marketing materials and other promotional channels, where permitted by applicable laws.
- Where a customer, visitor or child is clearly identifiable in close-up shots or featured content, Jin Xuan may seek consent before using such images or videos for advertising, paid media, website banners, printed materials, menu materials, packaging, campaigns or other major commercial promotional purposes, where required.
- If you do not wish to be photographed or filmed at our outlets, events or campaigns, please inform our staff, photographer or videographer where reasonably practicable. Jin Xuan will take reasonable steps to accommodate such requests, subject to operational, technical, legal, commercial and practical limitations.
- CCTV footage is collected mainly for safety, security, operational, monitoring, internal review and investigation purposes, and will not normally be used for marketing or promotional purposes.
- Jin Xuan reserves the right to edit, crop, blur, remove, stop using, archive or take down any image or video at any time, whether upon request or at our own discretion, subject to legal, operational, technical, commercial and business considerations.
- You acknowledge that it may not always be possible to remove images or videos that have already been printed, published, shared, distributed, archived, reposted by third parties or used in completed marketing materials.
- Changes to This Privacy Policy
- Jin Xuan reserves the right to amend, update or replace this Privacy Policy from time to time.
- The latest version of this Privacy Policy may be posted on our website, mobile application, official social media accounts or other online platforms.
- Your continued use of our Official Platforms or Services after any changes are posted will be deemed as your acceptance of the updated Privacy Policy.
- Contact Us
- If you have any questions, requests or concerns relating to this Privacy Policy or your personal data, you may contact us at:
Jin Xuan Holdings Sdn Bhd (SSM-200801008028)
Office Address: 7, Jalan TPK 2/5, Taman Perindustrian Kinrara, 47100 Puchong, Selangor, Malaysia.
Office Telephone: +603-8079 1866
Customer Service WhatsApp: +6011-6277 0218
Facebook & Instagram Message
- If you have any questions, requests or concerns relating to this Privacy Policy or your personal data, you may contact us at:
- Governing Law
- This Privacy Policy shall be governed by and interpreted in accordance with the laws of Malaysia.
- Any dispute arising out of or relating to this Privacy Policy shall be subject to the jurisdiction of the courts of Malaysia.
This privacy policy was last updated in Aug 2026.