Privacy Policy
PRIVACY POLICY
At CityFarm, we are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our store and use our services. Please read it carefully.
SECTION 1 – WHAT INFORMATION DO WE COLLECT?
When you make a purchase or interact with our store, we collect the following:
Personal Information:
-
Name, billing and shipping address, email, phone number
-
Payment information (via secure third-party gateways)
-
Purchase history and transaction details
Automatically Collected Information:
-
IP address, browser type, operating system
-
Device identifiers, referring URLs, and usage data
-
Cookies and similar tracking technologies (see Section 7)
Marketing Preferences:
-
If you opt in, we may collect your preferences for email communications and promotions.
SECTION 2 – LEGAL BASIS FOR PROCESSING (GDPR)
We process your personal information under one or more of the following legal bases:
-
To fulfill a contract (e.g., to deliver your order)
-
With your consent (e.g., for marketing communications)
-
For compliance with a legal obligation
-
For our legitimate interests, provided your rights do not override those interests
SECTION 3 – CONSENT AND YOUR RIGHTS
How do we obtain consent?
When you provide personal information to complete a transaction, place an order, or return a purchase, you consent to our collecting and using it for that purpose. For other purposes, like marketing, we will ask for your explicit consent.
How can you withdraw consent?
You can withdraw your consent at any time by contacting us at johanson@cityfarm.my or by writing to:
CityFarm Technologies Sdn Bhd
Attn: Privacy Compliance Officer
D-G-39, Pusat Perdagangan Bukit Serdang, Jalan BS 14/1, Taman Bukit Serdang,
43300 Seri Kembangan, Selangor, Malaysia
SECTION 4 – HOW DO WE USE YOUR INFORMATION?
We use your data to:
-
Process orders and payments
-
Deliver products and provide customer support
-
Send updates, offers, or marketing (if opted in)
-
Improve website performance and user experience
-
Comply with legal obligations
SECTION 5 – DISCLOSURE OF INFORMATION
We may disclose your information:
-
To our service providers (see Section 6)
-
When required by law or legal process
-
To prevent fraud or enforce our Terms of Service
-
In the event of a business merger, acquisition, or sale
SECTION 6 – THIRD-PARTY SERVICES
Our website is hosted on Shopify Inc. Shopify securely stores your information on servers behind firewalls. You can read more on:
Payment Processors
We use PCI-DSS-compliant payment gateways. These third-party services may store your payment data only as long as necessary for your transaction.
Other Third Parties
We may share your data with analytics providers, marketing platforms, or shipping partners strictly for operational purposes.
SECTION 7 – COOKIES AND TRACKING TECHNOLOGIES
Cookies enhance your browsing experience. We use cookies to:
-
Maintain sessions
-
Track store visits and purchases
-
Enable shopping cart functionality
-
Understand usage patterns via Google Analytics
You can control cookie preferences in your browser settings.
Examples:
-
_session_id: sessional, tracks session data -
cart: persistent for 2 weeks, stores cart details -
PREF: set by Google, tracks visit origin
SECTION 8 – DATA RETENTION
We retain your personal information only for as long as necessary:
-
To fulfill the purpose it was collected
-
For legal or regulatory obligations
-
To resolve disputes and enforce our agreements
SECTION 9 – DATA SECURITY
We implement industry-standard measures to protect your data:
-
SSL encryption for data transmission
-
AES-256 encryption for payment data
-
Access controls and firewalls
No system is 100% secure, but we follow best practices to mitigate risks.
SECTION 10 – INTERNATIONAL DATA TRANSFERS
Your data may be processed outside your country of residence, including in jurisdictions with different data protection laws. We ensure such transfers comply with applicable data protection laws, including through the use of standard contractual clauses where required.
SECTION 11 – AGE OF CONSENT
By using this site, you confirm that you are at least the age of majority in your location, or have given us your consent to allow any of your minor dependents to use this site.
SECTION 12 – YOUR RIGHTS (GDPR, CCPA, PDPA)
Depending on your location, you may have the right to:
-
Access the personal data we hold about you
-
Correct or delete your personal data
-
Object to or restrict data processing
-
Withdraw consent
-
Data portability
-
Lodge a complaint with a regulatory authority
To exercise these rights, contact us at hello@cityfarm.my
SECTION 13 – CHANGES TO THIS POLICY
We may update this policy from time to time. Any material changes will be posted on this page and, where appropriate, notified to you. Please review this policy periodically.
SECTION 14 – CONTACT US
For questions, access requests, or complaints, contact our Privacy Officer at:
Email: hello@cityfarm.my
Mailing Address:
CityFarm Technologies Sdn Bhd
[Re: Privacy Compliance Officer]
D-G-39, Pusat Perdagangan Bukit Serdang, Jalan BS 14/1,
Taman Bukit Serdang, 43300 Seri Kembangan, Selangor, Malaysia