Blanja Privacy Policy (Notis Perlindungan Data Peribadi)
Effective Date: 1 October 2025
1. Introduction and Consent
This Privacy Policy (the “Policy”) outlines how
FORESIGHT FUTURES ENTERPRISE
, operating the Blanja platform (“Blanja,” “we,” “us,” or “our”), collects, uses, maintains, and discloses personal data collected from Donors, Partner Restaurants, and website visitors (“Data Subject,” “you,” or “your”).
By using the Blanja website, mobile application, or any of our services, you consent to the processing of your personal data in accordance with the terms of this Policy and the Personal Data Protection Act 2010 (PDPA).
2. Personal Data We Collect
We may collect and process the following categories of personal data (collectively, “Personal Data”):
Date Subject Category:
Examples of Personal Data Collected
Customers:
Full Name, Email Address, Contact Number, Billing Address, Total Amount, Transaction History.
Partner Restaurants:
Business Name, Contact Person’s Name, Contact Person’s Mobile Number and Email, Business Registration Number, Bank Account Details (for payments), Restaurant Location/Address.
Website Visitors:
IP Address, Browser Type, Operating System, pages viewed, time spent on the site, and other aggregate information (collected via cookies and analytics).
Note on Sensitive Personal Data: We generally do not collect Sensitive Personal Data (such as health, political, or religious beliefs) unless required by law. If such data is ever required, we will seek your explicit consent separately and specify the purpose.
3. Purposes of Collecting and Processing Your Personal Data
We collect and process your Personal Data for the following purposes which are directly related to the operation of the Blanja platform and for related commercial transactions:
Purpose:
Applies to:
Details
Facilitating Pay-Forward:
Customers:
To process your payments for Pay-Forward Meals and issue transaction confirmations.
Fulfilling Meal Orders:
Customers/Restaurants:
To confirm and communicate meal orders to Partner Restaurants and facilitate payment to them.
Partner Management:
Restaurants:
To verify business legitimacy, process invoices, manage contracts, and communicate updates on the partnership.
Communication:
All:
To send essential service announcements, security alerts, and respond to your inquiries or feedback.
Marketing (Optional):
All:
To send you updates on new campaigns, Partner Restaurants, or promotional materials, only if you have provided separate, explicit consent (opt-in).
Legal/Compliance:
All:
To comply with legal or regulatory requirements in Malaysia (e.g., tax, audit, anti-money laundering) and to enforce our Terms & Conditions.
4. Consequences of Failing to Provide Personal Data (Obligatory Data)
The provision of certain Personal Data is mandatory (obligatory) for us to fulfil the purposes mentioned in Section 3.
If you fail or refuse to provide the mandatory Personal Data, we may be unable to:
1. Complete your donation transaction (as a Donor).
2. Process payments for meals (as a Partner Restaurant).
3. Enter into or maintain any commercial relationship with you (as a Partner Restaurant).
4. Provide you with access to certain parts of the Platform or services.
5. Disclosure of Personal Data (Disclosure Principle)
We may disclose your Personal Data to the following classes of third parties only where necessary to operate the Blanja platform or as required by law:
Recipient Class:
Purpose of Disclosure
Payment Processors:
To process and verify payments (e.g., banks, payment gateways).
Partner Restaurants:
Donors’ transaction details (name/email, if required for verification) to confirm meal orders and payment fulfilment.
Delivery/Logistics Partners:
If we use third-party services to deliver or distribute the Pay-Forward Meals.
Third-Party Service Providers:
Hosting, data analysis, IT support, and audit services.
Government/Regulatory Bodies:
As required by law, court order, or governmental request in Malaysia (e.g., tax authorities, police).
We will take reasonable steps to ensure that any third parties to whom we disclose your Personal Data are bound by the same security and confidentiality obligations under the PDPA.
6. Security of Personal Data (Security Principle)
We implement appropriate administrative and technical safeguards to protect your Personal Data from loss, misuse, modification, unauthorised or accidental access, disclosure, alteration, or destruction. These measures include:
1. Secure Socket Layer (SSL) encryption for all data transmitted via the website.
2. Restricted access to Personal Data limited to authorised personnel.
3. Secure storage of data on encrypted servers.
7. Retention of Personal Data (Retention Principle)
We will not retain your Personal Data for longer than is necessary to fulfil the purpose for which it was collected, or as required by law (e.g., tax or commercial transaction records). Once the data is no longer necessary, we will securely destroy or permanently anonymise it.
8. Your Rights as a Data Subject (Access and Notice & Choice Principles)
In accordance with the PDPA, you have the following rights concerning your Personal Data:
1. Right to Access: You have the right to request access to your Personal Data held by us.
2. Right to Correction: You have the right to request correction of your inaccurate, incomplete, misleading, or outdated Personal Data.
3. Right to Withdraw Consent: You may withdraw your consent for us to process your Personal Data (including for direct marketing) at any time, subject to any applicable legal or contractual restrictions. Upon withdrawal, we may not be able to continue providing you with the relevant service.
4. Right to Limit Processing: You have the right to request us to cease or not begin processing your Personal Data for purposes of direct marketing.
9. Changes to this Policy
Blanja reserves the right to modify or amend this Policy at any time. Any changes will be published on this page with an updated “Effective Date.” We encourage you to review this Policy periodically to stay informed about how we are protecting your information.
10. Contact and Inquiries
If you have any questions, concerns, or wish to exercise your rights under this Policy, please contact our Data Protection representative:
Name:
FORESIGHT FUTURES ENTERPRISE D.B.A. Blanja
Email:
hello@blanja.my
Permohonan Akses dan Pembetulan Data: All requests for access or correction to Personal Data should be submitted in writing to the contact details above. We may charge a nominal fee for processing an access request as permitted by the PDPA.