Privacy Policy

We collect personal data necessary to provide our products and services, improve your experience, and fulfill your orders. Depending on your interactions with us, this may include:

• Full name, billing address, delivery/shipping address, email address, and phone number.
• Products purchased, order details, order history, and preferences.
• Information relating to payment status and channels. (Note: Sensitive credit/debit card details are processed directly by our payment gateway providers and are not stored on our servers).
• Username and password created when registering an account with us.
• IP address, browser type, device information, traffic data, and browsing behavior gathered via cookies and tracking technologies.

We collect personal information directly from you when you:

• Visit, browse, or navigate our website.
• Register an account or update your account details.
• Place an order for products or request customer service support.
• Subscribe to our newsletter, promotional updates, or communications.
• Participate in surveys, contests, or marketing campaigns.

Your personal data is processed for specific, necessary e-commerce and legal purposes, including:

• Processing transactions, delivering products, and issuing invoices/receipts.
• Communicating regarding order updates, responding to inquiries, and delivering customer support.
• Personalizing your browsing experience, analyzing web traffic, and improving site functionality.
• Preventing fraudulent activities, enforcing our terms, and complying with statutory obligations.

In compliance with the PDPA, we respect your choices regarding direct marketing:

• We will only send you marketing emails, special offers, or newsletters if you have explicitly opted in (e.g., checking a subscription box during checkout or signing up via our site).
• You may withdraw your consent and opt-out of marketing communications at any time, free of charge. You can unsubscribe by clicking the "Unsubscribe" button in the promotional email sent to you.

We do not sell, trade, or rent your personal data to third parties. However, we may share confidential data with trusted third parties to run our store and fulfill services:

• Logistics and courier partners, IT maintenance, automated email marketing platforms, and professional advisers (auditors, lawyers).
• Secured third-party payment processors managing online transactions directly.
• Authorities, courts, or law enforcement bodies if required by applicable Malaysian law or court order.
• Successors or third parties in the event of a merger, acquisition, restructuring, or sale of company assets.

Our website uses cookies (small data files saved on your device) to enhance your site experience:

• Remembering cart items, saving browser preferences, and preserving login status.
• Understanding user traffic patterns, session durations, and site navigation paths to improve store usability.

You can adjust your browser settings to decline or warn you about cookies. Disabling cookies may affect certain functionality or services on our website.

We implement strict organizational and technical security measures to safeguard your personal data:

• All submit pages and payment transactions are secured using Secure Socket Layer (SSL) encryption.
• Sensitive payment card data is handled directly by verified, PCI-DSS compliant third-party payment gateways and is not retained on our servers.
• Regular security maintenance and malware scanning are conducted to prevent unauthorized access, alteration, or data breaches.

Personal data will be retained only for as long as necessary to fulfill the operational purposes outlined in this policy or to satisfy accounting, audit, and legal requirements. Once no longer required, data will be permanently destroyed or anonymized.

You may request to close your user account and delete your associated personal data by contacting us. Certain transactional data may remain archived to comply with statutory tax and regulatory duties.

Under the PDPA, you have the following rights regarding your data:

• The right to request a copy of the personal data we hold about you.
• The right to request corrections or updates to inaccurate, incomplete, or out-of-date personal data.
• The right to limit or revoke consent for data processing or direct marketing.

To exercise any of these rights, please submit a written request to contact@ffg.my.

Our website may contain hyperlinks to external third-party websites or services. We are not responsible for the privacy practices, content, or policies of third-party websites. We encourage you to review their privacy statements before submitting personal information.

We reserve the right to amend or update this Privacy Policy at any time to reflect legal adjustments, industry standards, or changes in our operations. Any updates will be posted on this page with an updated effective date. Continued use of our website constitutes your acceptance of the revised policy.

If you have questions, feedback, or complaints regarding this Privacy Policy, please contact us at contact@ffg.my.