Privacy and Cookie Policy
Your privacy is important to us. Please read through the following details before providing us with any of your personal data. Your continued use of our website constitutes your acknowledgment and understanding of, and agreement with, our Terms and Conditions and this Privacy Policy.
Privacy & Cookie Policy
Last Updated: September 2026
Tong Garden Food Sdn. Bhd. ("Tong Garden", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.
This Privacy & Cookie Policy explains how we collect, use, disclose, store and protect your personal data when you visit or use our website, create an account, make a purchase, participate in our promotions or membership programmes, communicate with us, or otherwise interact with Tong Garden.
This Policy should be read together with our Terms & Conditions and any other notices provided when we collect your personal data.
By providing personal data to us, you acknowledge that you have read and understood this Privacy & Cookie Policy.
1. Who We Are
This website is operated by Tong Garden Food Sdn. Bhd.
For the purposes of applicable Malaysian personal data protection laws, Tong Garden is responsible for the personal data that we collect and process in connection with this website and our related services.
If you have any questions about this Privacy & Cookie Policy or how we handle your personal data, please contact us using the details provided under Contact Us below.
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Personal and Contact Information
- Name
- Email address
- Telephone or mobile number
- Billing and delivery address
- Account or membership information
Order and Transaction Information
- Products purchased
- Order history
- Delivery information
- Transaction records
- Promotions, discounts or vouchers used
- Returns, refunds and customer service records
Payment Information
When you make a purchase, payment information may be processed by our appointed payment gateway or payment service provider.
Tong Garden does not necessarily receive or store your complete credit or debit card information. Payment information is handled in accordance with the security and privacy requirements of the relevant payment service provider.
Website and Device Information
We may automatically collect certain technical information when you visit our website, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Date and time of visits
- Referring website
- Website interactions
- Cookie identifiers and similar technologies
Marketing and Preference Information
This may include:
- Marketing communication preferences
- Newsletter subscriptions
- Product interests
- Promotion participation
- Survey responses
- Cookie preferences
Information You Provide to Us
We may also collect information that you voluntarily provide when you:
- Contact our customer service team
- Submit an enquiry
- Provide product feedback
- Submit a product review
- Participate in surveys, contests, giveaways or promotions
- Communicate with us through social media or other channels
3. How We Collect Your Personal Data
We may collect personal data:
Directly from you, such as when you create an account, place an order, subscribe to our newsletter, contact us or participate in a promotion.
Automatically through our website, including through cookies, analytics technologies and similar tools.
From service providers and business partners, where appropriate and permitted by law, such as payment providers, delivery partners, marketing platforms and technology providers.
From publicly available sources or social media platforms, where you interact with Tong Garden through those platforms.
4. How We Use Your Personal Data
We may use your personal data to:
Process and Fulfil Orders
- Process purchases and payments
- Confirm orders
- Arrange delivery
- Provide order updates
- Process returns, exchanges and refunds
Manage Your Account
- Create and maintain your customer account
- Manage membership benefits
- Maintain your order history
- Provide personalised account services
Provide Customer Service
- Respond to enquiries
- Handle complaints
- Resolve product or delivery issues
- Manage product feedback
- Provide after-sales support
Improve Our Products and Services
- Understand customer preferences
- Analyse website usage
- Improve website functionality and customer experience
- Develop and improve products and services
- Conduct surveys and research
Marketing and Promotions
Where permitted by applicable law, we may use your information to communicate with you regarding:
- New products
- Promotions
- Special offers
- Events
- Membership benefits
- Contests and campaigns
- Other Tong Garden news that may be relevant to you
You may unsubscribe from marketing communications at any time using the unsubscribe option provided in our communications or by contacting us.
Security and Fraud Prevention
We may process information to:
- Protect our website and systems
- Detect suspicious or fraudulent transactions
- Prevent misuse of our services
- Protect Tong Garden, our customers and third parties
Legal and Regulatory Requirements
We may process or retain information where necessary to comply with applicable laws, regulatory requirements, accounting obligations, tax requirements or lawful requests from government authorities.
5. Marketing Communications
We want our marketing communications to be relevant and useful.
Where required, we will obtain your consent before sending marketing communications.
You can withdraw your consent or unsubscribe from marketing communications at any time by:
- Clicking the Unsubscribe link in our marketing emails;
- Updating your communication preferences, where available; or
- Contacting us directly.
Unsubscribing from marketing communications will not prevent us from sending necessary service communications relating to your account, orders, deliveries or transactions.
6. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to operate effectively, understand how visitors use our website and, where permitted, improve marketing relevance.
Cookies are small data files stored on your device when you visit a website.
We may use the following categories of cookies:
Strictly Necessary Cookies
These cookies are necessary for our website to function properly. They may support functions such as:
- Shopping carts
- Checkout
- Account login
- Website security
- Remembering privacy preferences
These cookies generally cannot be disabled through our cookie preference tools where they are necessary to provide the website service.
Analytics & Performance Cookies
These cookies help us understand how visitors interact with our website, including which pages are visited and how customers navigate the site.
This information helps us improve website performance and customer experience.
Marketing & Advertising Cookies
With your permission where required, these cookies may be used to understand the effectiveness of our marketing campaigns and deliver advertising that may be more relevant to your interests.
Some cookies may be placed by third-party service providers that support our website, analytics or marketing activities.
You can manage your cookie preferences through our cookie preference tools where available and through your browser settings.
Disabling certain cookies may affect some website functionality.
7. Who We Share Your Personal Data With
We do not sell your personal data. We may share personal data with trusted third parties where reasonably necessary to operate our business and provide services to you.
These may include:
- Website and e-commerce service providers
- Cloud hosting and technology providers
- Payment processors and payment gateways
- Banks and financial institutions
- Logistics, courier and delivery providers
- Customer service providers
- Email and marketing service providers
- Analytics providers
- Advertising and social media platforms
- Professional advisers, including auditors, accountants and legal advisers
- Government agencies, regulators and law enforcement authorities where required by law
We require service providers handling personal data on our behalf to take appropriate measures to protect that information and to use it only for authorised purposes.
8. Payment Information
Online payments may be processed through third-party payment service providers.
When you make an online payment, certain payment information may be provided directly to the relevant payment provider rather than to Tong Garden.
The handling of your payment information may therefore also be subject to the privacy and security policies of the relevant payment provider.
We encourage customers to use secure devices and networks when making online purchases.
9. International and Cross-Border Data Transfers
Some of our technology providers, service providers or business partners may operate outside Malaysia or store information using infrastructure located in other countries.
As a result, your personal data may be transferred to or processed outside Malaysia.
Where we transfer personal data internationally, we will take reasonable and appropriate steps to ensure that the transfer is made in accordance with applicable Malaysian personal data protection requirements and that appropriate safeguards are in place.
10. How Long We Keep Your Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, accounting, tax and operational requirements.
The appropriate retention period may depend on factors including:
- The nature of the information;
- The purpose for which it was collected;
- Whether you maintain an active account with us;
- Legal and regulatory requirements;
- The need to resolve disputes or complaints; and
- The need to establish or defend legal claims.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it in accordance with applicable requirements.
11. How We Protect Your Personal Data
We take reasonable administrative, organisational and technical measures to protect personal data against:
- Unauthorised access
- Unauthorised disclosure
- Loss
- Misuse
- Alteration
- Accidental destruction
These measures may include access controls, security procedures, system protections and restrictions on who may access personal data.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. We therefore encourage customers to protect their account credentials and notify us promptly if they suspect unauthorised use of their account.
12. Your Privacy Rights
Subject to applicable Malaysian law, you may have rights relating to your personal data, including the right to:
- Request access to personal data held about you;
- Request correction of inaccurate or incomplete personal data;
- Withdraw consent where processing is based on consent;
- Request that certain processing be stopped or restricted where applicable;
- Opt out of direct marketing communications;
- Exercise applicable data portability rights; and
- Make enquiries or complaints regarding how your personal data is handled.
Some rights may be subject to exceptions or requirements under applicable law.
To exercise your rights, please contact us using the information provided under Contact Us. We may need to verify your identity before processing certain requests.
13. Data Breaches
Tong Garden maintains procedures for responding to suspected or confirmed personal data breaches.
Where a personal data breach occurs, we will assess the incident and take appropriate measures to contain and address it.
Where required under applicable law, we will notify the relevant authorities and/or affected individuals within the applicable regulatory requirements.
14. Children's Privacy
Our website and online store are intended primarily for general consumer use and are not designed to knowingly collect personal data from children without appropriate consent where such consent is required by applicable law.
If we become aware that personal data relating to a child has been collected in circumstances requiring parental or guardian consent, we will take appropriate steps to address the matter.
Parents or guardians who believe that a child has provided personal data to us without appropriate consent may contact us.
15. Third-Party Websites and Platforms
Our website may contain links to third-party websites, social media platforms or services.
These third parties operate independently from Tong Garden and may have their own privacy policies and data practices.
Tong Garden is not responsible for the privacy practices of third-party websites or services that we do not control.
We encourage you to review the privacy policies of third-party services before providing personal data to them.
16. Accuracy of Your Personal Data
We encourage you to ensure that the personal data you provide to us is accurate, complete and up to date.
Where your information changes, you may update your account information where that functionality is available or contact us to request an update.
17. Changes to This Privacy & Cookie Policy
We may update this Privacy & Cookie Policy from time to time to reflect:
- Changes to our business operations;
- Changes to our website or services;
- New technologies;
- Changes in regulatory requirements; or
- Improvements to our privacy practices.
When we make material changes, we may provide an appropriate notice through our website or other communication channels.
The Last Updated date at the top of this Policy indicates when it was most recently revised.
We encourage you to review this Policy periodically.
18. Contact Us
If you have questions about this Privacy & Cookie Policy, wish to exercise your privacy rights, or have concerns regarding how your personal data is handled, please contact:
Tong Garden Food Sdn. Bhd.
Address:[32,Jalan Mega 1, Taman Perindustrian Nusa Cemerlang, 79200 Iskandar Puteri,Johor]
Email: [enquiry@tonggarden.com.my]
Telephone: [016-7105346]
We will endeavour to respond to privacy-related enquiries within a reasonable period and in accordance with applicable legal requirements.