Legal

Privacy Notice

This notice explains what personal data Blue Box Cold Chain Sdn. Bhd. collects, why we collect it, and what you can ask us to do with it. It is issued under the Personal Data Protection Act 2010.

Last updated:

If you send us a shipment, the sender and the consignee both appear in our records. Please make sure the person receiving your goods knows their name, address and phone number are given to us for that delivery.

1Who We Are

  1. 1.1 Blue Box Cold Chain Sdn. Bhd. (Company No. 202101044302), Unit 6-4, 2 Setia Avenue, 40170 Shah Alam, Selangor, is the data user responsible for the personal data described here.
  2. 1.2 This notice covers www.bluebox.com.my and the shipments we arrange through it. It does not cover other companies’ websites we link to.

2What We Collect

  1. 2.1 From you when you enquire or ship: your name, phone number, company name if you give one, collection and delivery addresses, and what you are shipping.
  2. 2.2 About your consignee, given to us by you: their name, delivery address and phone number, so the driver can reach them.
  3. 2.3 From your visit to this website: pages viewed, the site or app you arrived from, the general region you were in, and a browser identifier used to tell a repeat visit from a new one.
  4. 2.4 We do not ask for and do not want your identity card number, bank details or card numbers through this website.

3The Enquiry Form Stores Nothing

  1. 3.1 The quotation form on this website does not send your details to our servers. It assembles a WhatsApp message and hands it to your own phone; you send it. Nothing is written to a database here.
  2. 3.2 Once you send that message, it lives in your WhatsApp conversation with us, under WhatsApp’s own terms as well as this notice.

4Website Measurement

  1. 4.1 We count visits so we know which of our channels bring people here. Your IP address is used once, at the moment of the visit, to look up a general region such as Selangor or Johor. It is then discarded.
  2. 4.2 What we keep instead is a one-way salted hash: a scrambled value that cannot be turned back into your IP address. It lets us tell a returning visitor from a new one without knowing who you are.
  3. 4.3 We also use Google Analytics, which sets its own cookies and processes data on Google’s infrastructure under Google’s terms.
  4. 4.4 You can block this at your end: browsers offer Do Not Track and cookie controls, and Google publishes a Google Analytics opt-out add-on. Blocking it does not affect any delivery.

5Why We Use It

  1. 5.1 To quote for, arrange, collect, carry and deliver your shipments, and to reach you or your consignee about a delivery in progress.
  2. 5.2 To issue invoices and keep the accounting and tax records Malaysian law requires us to keep.
  3. 5.3 To answer enquiries, investigate claims and handle complaints.
  4. 5.4 To understand which channels bring visitors to this website, in aggregate.
  5. 5.5 We do not sell your personal data, and we do not use it for marketing from other companies.

6Who Else Sees It

  1. 6.1 Our drivers and operations staff, so far as they need it to complete your delivery.
  2. 6.2 Customs and other authorities, where a cross-border shipment or the law requires it.
  3. 6.3 Service providers who run parts of our operation on our behalf: our website host, Google Analytics, and WhatsApp when you choose to message us. They may process data outside Malaysia.
  4. 6.4 Our professional advisers, and any party a court or regulator directs us to disclose to.

7How Long We Keep It

  1. 7.1 Shipment and contact records are kept while we are working with you and afterwards for as long as accounting, tax and limitation-period obligations require.
  2. 7.2 Website measurement data is kept in aggregate. It cannot be traced back to an individual once the IP address has been discarded.
  3. 7.3 Records that are no longer needed for any of these purposes are deleted or anonymised.

8Your Rights

  1. 8.1 Under the Personal Data Protection Act 2010 you may ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to limit how we use it, and withdraw a consent you gave us. Withdrawing consent may mean we can no longer carry your shipment.
  2. 8.2 To make any of these requests, contact TO BE CONFIRMED — name or role handling data requests. We will respond within the period the Act allows, and we may need to confirm your identity first.
  3. 8.3 If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi).

9Keeping It Safe

  1. 9.1 We limit access to shipment records to the staff who need them, and we hold raw IP addresses for no longer than the moment of the visit.
  2. 9.2 No system is perfectly secure. If a breach occurs that is likely to cause you harm, we will act on it and notify you and the authorities as the law requires.

10Changes

  1. 10.1 We may update this notice. The version published on this page is the current one, and the date at the top shows when it last changed.
  2. 10.2 This notice sits alongside our Terms & Conditions; where a shipment is concerned, both apply.

Questions About Your Data

Ask us and we will tell you what we hold and why.