Privacy Policy
Privacy Policy
Privacy Policy — businesscard.my
Legal entity: AEIOU INTERNATIONAL SDN. BHD. (Registration No. 1319543-X) (“BusinessCard.my“, “we“, “us“, or “our“)
Registered address: 25-A, Jalan SS 21/60, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia
Contact: WhatsApp +6016 263 2273 · +603 749 44 888 · [email protected]
Data Protection Officer: BCMY Customer Support (Data Protection Officer) · [email protected] · 25-A, Jalan SS 21/60, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia
*Last updated: 7 September 2026*
businesscard.my respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) and its subsequent amendments (“PDPA“). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have.
1. Who we are / data controller
For the purposes of the PDPA, AEIOU INTERNATIONAL SDN. BHD. (1319543-X) is the data controller in respect of the personal data we process. Our registered address and contact details are above.
You may contact our Data Protection Officer at [email protected] for any privacy request or concern.
2. What personal data we collect
We collect personal data that you provide to us and that we generate in the course of providing our services:
| Category | Details |
|---|---|
| Identity & contact | Full name, business/company name, email address, telephone number |
| Account | Username and password (if you create an account) |
| Billing & delivery | Billing address and shipping/delivery address |
| Order & artwork | Order details, your designs, artwork files and uploaded images, and the production PDF we generate for your order |
| Payment | Your payment reference / transaction ID from our payment gateway. We do not store your full bank account number or card details in our systems. (If you voluntarily send bank or card details by WhatsApp or email, those details remain within those communication records and are used only to match/process your payment.) |
| Communication | Records of your enquiries, support chats and correspondence with us |
3. How we use your personal data
We process your personal data for the following purposes:
- To process, produce, deliver and support your orders;
- To contact you about your order, artwork approval, delivery or any query;
- To provide order and billing history and customer support;
- To verify and match payments;
- To administer your account;
- To provide information or services you request;
- To comply with legal and regulatory obligations; and
- (Where you have subscribed) to send you marketing communications — only where you have opted in, and always with an unsubscribe option.
4. Lawful basis / consent
4.1 We process personal data to perform the contract with you (your order), to comply with our legal obligations, and — where required — with your consent (for example, to send marketing communications or to process sensitive data, if any, with your explicit consent).
4.2 By providing your personal data to us and confirming your order, you consent to our processing of that data for the purposes set out in this Policy.
4.3 If you are under 18, you must have the consent of a parent or guardian to use this Website and provide us with your personal data. We do not knowingly collect personal data from children under 18.
5. Cookies and similar technologies
5.1 We use cookies and similar technologies to make the Website and your shopping experience work well, to remember your preferences (such as your cart and login during a session) and to improve our service.
5.2 Cookies do not store sensitive personal data such as your bank or card details.
5.3 You can restrict, block or delete cookies in your browser settings; please check your browser’s help menu. Note that some features may not work as intended if cookies are disabled.
5.4 We do not use third-party analytics or marketing-tracking cookies to build a profile of you or share your browsing data with advertisers.
6. Sharing and disclosure of your personal data
6.1 We do not sell or rent your personal data.
6.2 We may disclose your personal data to the following categories of third parties, only as necessary:
- Payment gateway providers (for example, HitPay) solely to process your payment;
- Courier / logistics service providers (for example, Pos Malaysia, J&T, City-Link, Ninja Van, DHL eCommerce — the provider is chosen based on your delivery destination) solely to deliver your order;
- Hosting, cloud and IT service providers that host and maintain the Website and our systems;
- Professional advisers (legal, accounting) where necessary; and
- Authorities / regulators, where required by law.
6.3 Where we disclose your data to a third party, we require it to use it only for the relevant purpose and to protect it appropriately. Where we transfer personal data outside Malaysia, we do so only where the recipient is subject to laws substantially similar to, or providing adequate protection for, your personal data, or where another permitted basis under the PDPA applies.
7. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration and disclosure. This includes secure transmission where applicable, access controls, and safeguards on our payment processing.
8. Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and in accordance with the PDPA retention principle:
| Data | Retention |
|---|---|
| Designer JSON files (designs created in the BCMY Designer) | Up to 24 months after your last order, to support re-order requests |
| Production PDFs (generated for printing, admin use) | 12 months |
| Customer-uploaded artwork/files | 12 months, then purged |
| Account, contact and order data | While your account is relevant / as required for legal and accounting purposes |
| Payment reference | As required by our payment gateway and applicable law |
We delete or anonymise personal data when it is no longer needed, or sooner on your request.
9. Your rights
Under the PDPA, subject to certain exceptions, you have the right to:
- Access the personal data we hold about you (a request may be subject to a reasonable fee);
- Correct any personal data that is inaccurate, incomplete or not up to date;
- Withdraw your consent to the processing of your personal data;
- Prevent processing of your personal data for direct marketing purposes (for example, to stop marketing emails); and
- Complain to the Personal Data Protection Department if you believe we have not complied with the PDPA.
To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within the time period required by the PDPA.
10. Data breach notification
In the event of a data breach that is likely to result in significant harm to you, we will notify the Personal Data Protection Commissioner as required by law and, where appropriate, notify you, in line with the PDPA and applicable guidelines.
11. Third-party links
Our Website may contain links to third-party websites (for example, social media platform). We are not responsible for the privacy practices or content of those websites. Please review their privacy policies before providing personal data.
12. Changes to this Policy
We may review and update this Privacy Policy from time to time. The current version is available on this page with the “Last updated” date at the top. Where a change is material and required, we may notify you before it takes effect.
13. Contact
If you have any question about this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer at [email protected] or by writing to us at the registered address above.
[End of Privacy Policy]