Build Ant Design SDN BHD
Effective date: 19 October 2026
1 Who we are
Build Ant Design SDN BHD (we, us or our) operates https://shop.buildant.net (the Website) and is the data controller for personal data processed in connection with our online store. This Privacy Policy explains what personal data we collect, why we use it, who may receive it and how you can exercise your rights. It applies to visitors, account holders, customers and people who contact us. We handle personal data in accordance with the Malaysian Personal Data Protection Act 2010, as amended, and other applicable requirements.
2 Personal data we collect
Depending on how you interact with us, we may collect your name, email address, telephone number, billing and delivery addresses, account login information, order details, purchase history, payment status, transaction references, correspondence, return requests and reviews. When you visit the Website, we may collect technical information such as IP address, device and browser details, pages viewed, referring pages, approximate location derived from IP address and cookie identifiers. Payment providers process payment credentials under their own security arrangements; the transaction information available to us depends on the payment method. Please do not send full card details or sensitive personal data by email.
3 Sources of personal data
We receive personal data directly from you when you browse, register, place an order, submit a form, write a review or contact us. We may also receive information from payment providers, couriers, technology providers and persons you authorise, such as someone placing an order for you. If you provide another person's details, for example a gift recipient's address, you must have authority to do so and make this notice available to them. We use that information only for the relevant purpose or as otherwise permitted by law.
4 Why we use personal data
We use personal data to create and manage accounts; process and fulfil orders; verify payments; arrange delivery; handle returns, refunds and customer support; send order and service updates; maintain transaction and accounting records; detect fraud and security threats; investigate complaints; and meet legal obligations. Where applicable, we also use browsing and interaction information to understand and improve Website performance and our products. Marketing and optional personalisation are carried out only where permitted by law and with consent where required.
5 Consent and your choices
Where required, we obtain your consent before processing personal data and seek explicit consent for sensitive personal data unless a lawful exception applies. We may also process personal data where another basis or exception is available under applicable law, including steps connected with your contract or compliance with legal obligations. This Policy is a notice and does not itself replace a consent mechanism where one is required.
Fields marked as required at checkout or registration are necessary for the stated purpose. If you do not provide information needed for payment, delivery, verification or legal compliance, we may be unable to complete an order or provide the relevant service. Optional information and marketing consent are voluntary. You may withdraw consent or restrict optional processing by contacting us. Withdrawal applies going forward and may affect services that depend on the relevant processing; it does not prevent retention or processing required or otherwise permitted by law.
6 Cookies and marketing
We use cookies and similar technologies where deployed on the Website to support functions such as cart contents, sessions and security. Optional analytics or advertising technologies, if used, may measure visits, remember preferences or help assess marketing effectiveness. Where required, we obtain consent before activating optional technologies and provide a way to change that choice. You can also manage cookies in your browser; blocking necessary cookies may affect store functions. The cookie notice or consent tool, where available, provides details of the technologies in use.
You may opt out of promotional messages using the unsubscribe option in the message or by emailing us. Opting out does not stop necessary order, delivery, security or other service communications. We do not use your personal data for unrelated marketing without the permission required by applicable law.
7 When we share personal data
We disclose personal data only where reasonably necessary for the purposes described here or as permitted by law. Recipients may include payment gateways and banks; delivery and fulfilment partners; Website hosting, cloud, security and IT support providers; customer service providers; analytics or marketing providers where used with appropriate permissions; and professional advisers such as accountants, auditors and lawyers. We require service providers acting on our behalf to protect personal data, limit access and use it only for authorised purposes.
We may disclose information to regulators, courts, law enforcement agencies or other persons where legally required or permitted, or where necessary to establish or defend legal claims. In a merger, reorganisation or business transfer, relevant data may be disclosed subject to lawful safeguards and appropriate notice. We do not sell personal data for monetary payment. If you post a public review, the review and the display name you choose may be visible to others; avoid including private information.
8 Transfers outside Malaysia
Our service providers may process or store personal data outside Malaysia. Any cross-border transfer will be made only where permitted under applicable Malaysian data protection law. Where required, we assess the protection provided in the destination and implement appropriate contractual, organisational or other safeguards, or rely on a lawful exception. You may contact us for information about relevant transfers and safeguards, subject to legitimate confidentiality and security limitations.
9 Retention and security
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, warranty and dispute handling, accounting, tax and legal record keeping. Retention depends on the type of record, applicable legal requirements and any unresolved claim. When no longer required, data will be deleted, anonymised or securely disposed of, including through managed backup expiry where appropriate.
We take reasonable technical and organisational steps to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. Measures are appropriate to the data and risks involved and include access restrictions and safeguards for service providers. No system is completely secure. If a personal data breach occurs, we will assess and respond to it and notify the regulator and affected individuals where required by applicable law. Keep your credentials confidential and notify us of suspected misuse.
10 Your rights and requests
Subject to applicable law and relevant conditions, you may request access to or correction of your personal data; withdraw consent; object to direct marketing; request prevention of processing likely to cause damage or distress; and request data portability where available, subject to technical feasibility and compatibility. You may also ask us to delete information we no longer need, although deletion is subject to applicable retention obligations and legal exceptions. Send requests to Jason@buildant.net. We may take reasonable steps to verify your identity, request details needed to locate the records and apply a fee only where legally permitted. We will respond within applicable statutory time limits and explain any lawful restriction or refusal.
11 Children and external websites
Our store is intended for adults and is not directed at children under 18. We do not knowingly seek to collect children's personal data without appropriate authority. If you believe a child has provided personal data improperly, contact us so we can investigate and take appropriate action. Third party websites or services linked from the Website have their own privacy notices. Please review those notices when you use their services.
12 Updates and complaints
We may update this Policy to reflect changes in our practices or legal requirements. The current version will be published on the Website with its effective date. Where a change requires additional notice or consent, we will provide that notice or obtain consent before the relevant processing. Please contact us first with privacy questions or complaints. You may also complain to the Malaysian Personal Data Protection Commissioner through the official website at https://www.pdp.gov.my.
13 Privacy contact
Privacy contact
Build Ant Design SDN BHD
Website: https://shop.buildant.net
Email: Jason@buildant.net
Business address: 65, Jalan Rangoon, George Town, 10400 George Town, Pulau Pinang, Malaysia
Telephone: +60 0166076599
Company registration number: [Insert SSM registration number]