Privacy notice
Last updated: 26 October 2026
This notice explains how CGift (“we”, “us”), operator of cgift.my, collects and uses your personal data, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
1. What we collect
When you send our enquiry form we collect what you choose to give us: your name, company, email address, phone number, and details about your gifting needs (such as occasion, quantity, date, delivery location, gift ideas, preferred call time and any message).
Our server also records basic technical information with each enquiry: your IP address, browser type and the page you came from. We use this to prevent spam and abuse.
We do not use cookies, advertising trackers or third-party analytics on this website.
2. Why we use it
- To contact you about your enquiry, arrange a call and prepare a quote.
- To plan, personalise, pack and deliver your order if you go ahead.
- To keep the website and enquiry form secure and free of spam.
- To meet legal, accounting and record-keeping obligations.
We will not sell your personal data, and we will not send you marketing messages unless you ask us to.
3. Who we share it with
- Our engraving partner, engrave.my, only the details needed to personalise or engrave your order (for example the names to engrave), and only when you go ahead with personalised items.
- Service providers that help us run the website and receive enquiries, such as our hosting and network security provider (Cloudflare) and the messaging service we use to be notified of new enquiries (Telegram). These providers process data on our behalf.
- Delivery partners, the recipient names and addresses needed to deliver an order.
- Authorities, where the law requires it.
4. Transfers outside Malaysia
Some of our service providers may store or process data on servers outside Malaysia. Where this happens we take reasonable steps so that your data stays protected to a standard comparable to the PDPA.
5. How long we keep it
We keep enquiry details for as long as needed to respond to you and, if you become a customer, for as long as needed to serve you and to meet legal and accounting requirements. Enquiries that do not lead to an order are deleted when they are no longer needed, normally within 24 months.
6. Keeping it safe
The website uses encrypted connections (HTTPS). Enquiry records are stored on access-restricted systems and only people who need them to serve you can see them.
7. Your choices and rights
Under the PDPA you can ask to access the personal data we hold about you, ask us to correct it, withdraw your consent, or ask us to limit how we use it. Giving us your name, email and phone number is needed for us to respond to an enquiry; without them we cannot contact you.
8. Contact us
To make a request or ask a question about this notice, send us a message through the enquiry form and mention “Privacy” in the message.
A Bahasa Melayu version of this notice will be published here. Versi Bahasa Melayu notis ini akan diterbitkan di sini.
9. Changes
We may update this notice from time to time. The date at the top shows the latest version.