Privacy Policy

Last updated: 8 October 2026

At Bio Sure Test Kit, we value your trust and are committed to safeguarding your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website biosuretestkit.com or purchase our products. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. What Personal Data We Collect

We may collect the following types of personal data:

• Identity & Contact Data: Name, email address, phone number, shipping and billing address.
• Payment Data: Credit/debit card details, online banking information, or other payment method details. We do not store full payment card numbers on our servers.
• Order Data: Products purchased, order history, delivery preferences.
• Technical Data: IP address, browser type, device information, and cookies.
• Usage Data: How you navigate and interact with our website.
• Health Data (Sensitive): If you voluntarily provide health-related information when contacting us or using our test kits, we will treat it as sensitive personal data and process it only with your explicit consent, in accordance with the PDPA.

2. How We Collect Your Data

We collect data through the following methods:

• Directly from you: When you register, place an order, contact customer support, or subscribe to our newsletter.
• Automatically: Through cookies, web beacons, and similar technologies when you browse our site.
• From third parties: Payment processors, delivery partners, and marketing platforms (only where you have given consent or as permitted by law).

3. Why We Process Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including shipping and returns.
• To process payments and prevent fraudulent transactions.
• To communicate with you about your orders, inquiries, and requests.
• To send marketing and promotional materials (only with your consent, and you may opt out at any time).
• To improve our website, products, and customer experience.
• To comply with legal obligations under Malaysian law.

4. Disclosure to Third Parties

We may share your personal data with the following parties:

• Service Providers: Payment gateways, courier companies, IT support, and cloud storage providers who assist us in operating our business.
• Marketing Partners: Only when you have given consent, to deliver targeted advertisements.
• Legal Authorities: When required by law, court order, or to protect our rights and safety.

We ensure that all third parties adhere to strict confidentiality and data protection standards consistent with the PDPA.

5. Security and Retention

We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure.

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law (e.g., for tax and accounting purposes).

6. Your Rights Under the PDPA

As a data subject in Malaysia, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correct: Request correction of inaccurate or incomplete data.
• Right to Withdraw Consent: Withdraw your consent for processing at any time, where consent is the basis for processing.
• Right to Limit Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Delete: Request deletion of your data, subject to legal retention requirements.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request.

7. International Transfers

Your personal data may be transferred to and processed in countries outside Malaysia. We will take steps to ensure that such transfers comply with the PDPA and that your data receives an adequate level of protection.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us