PRIVACY POLICY/COOKIES    

This Privacy Policy (hereinafter: Privacy Policy) of the company operating under the business name CRAVE IT SDN BHD (hereinafter: the Service Provider) describes how Service Provider collects, processes and uses Users' data on the website https://craveit.la (hereinafter: Website). The Website is operated by the Service Provider.   

1.       Who is the Controller of the Users' personal data?  
In connection with General Data Protection Regulations (hereinafter: GDPR), the Service Provider informs that the controller, i.e. the entity which decides how the data of the users of the Website (hereinafter: User) will be used, is the Service Provider, who can be contacted at e-mail address contact@craveit.la  

2.       What personal data of Users do we process?  
When placing an order, a new User will be asked to provide the following data: 

1)      First and last name; 
2)      Company name and Tax Identification Number in the case of a company; 
3)      Delivery address; 
4)      E-mail address; 
5)      Telephone number; 
6)      Details required for the delivery of the meal plans; 
7)      Invoice data (optional).   

3.       Do you have to provide your personal data to the Service Provider?  
The provision of the above personal data by the User is voluntary. However, failure to provide such data will result in the impossibility of performance of the agreement with the Service Provider, so that we would not be able to provide you with services. If for some reason you cannot provide your personal data, unfortunately we will not be able to conclude an agreement with you and consequently you will not be able to use the Website.   

4.       Purpose and legal basis for the processing of Users' personal data  
Your personal data defined in point 2 of the Privacy Policy shall be processed on the basis of your consent. Your personal data shall be processed for the purpose of performing the agreement concluded with the Service Provider, in particular for creating and maintaining an account in the Website, the possibility of placing an order, purchasing the selected products and having the order delivered by a driver (hereinafter referred to as the Driver), as well as the possibility of providing electronic services and handling your complaints and requests.   

5.       For how long do we keep the personal data you provide?  
The data specified in item 2 of the Privacy Policy, will be stored until the deletion of the account in the Website, and also after the deletion of the account in the Website only for the purposes of:    

1)      the performance of obligations under the law, including in particular tax and accounting obligations;
2)      pursuing claims in connection with the performance of an agreement with Service Provider.   

We retain personal data collected for marketing purposes for which the User has given separate consent for the duration of the marketing activities or until the User objects to the processing of their personal data.      

6.       Who we share your personal data with  
We share your personal data with the parties to transactions you enter into on the Website and with entities that support us in providing electronic services, i.e. those that provide payment services, our employees and associates, including Drivers, the Website provider, the hosting company that handles our email, entities that work with us to handle accounting, tax and legal matters.   

Transaction data, including personal data, are also provided to the online payment service provider, namely Transaction data, including personal data, are also provided to the online payment service provider, namely Simplepay Gateway Sdn. Bhd. (hereinafter: SenangPay) for payment services to the extent necessary to handle payments. SenangPay is the controller of the personal data provided to it.   

7. Security of personal data  
The Service Provider protects personal data from being made available to unauthorised persons, from being taken by an unauthorised person, from being processed in violation of applicable laws and from being altered, lost, damaged or destroyed.   

8. Storage of personal data and User's rights  
Users have the right to request access to personal data from the controller, the right to rectify, delete, limit processing, the right to data portability, the right to object, the right to withdraw consent. If they find that our processing of their personal data violates the provisions of the GDPR, they have the right to lodge a complaint.   

In the course of ordering products, until the final confirmation by pressing the appropriate button, Users who have an account with the Website have the possibility of independent correction of the entered data through editing their account profile.   

Data verification or order correction can also be done by sending an e-mail to the Service Provider at the following address: contact@craveit.la   

The User has the possibility to change the data entered when creating the account at any time within the options made available.   

Customers who have an account on the Website will be informed of changes to this Privacy Policy via email correspondence.   

In matters not covered by this document, the provisions of Malaysian law shall apply.   

9. Do we transfer your data to countries outside Malaysia? 
Your personal data may be transferred to countries outside Malaysia to entities that support us in providing electronic services such as sending emails, sending notifications, hosting data. 

10. Do we process your personal data automatically (including through profiling) in a way that affects your rights?  
Your personal data will not be processed by automated means (including profiling).           

11. Cookies Policy  
The use of the Website is carried out using the secure SSL Protocol, which affects the protection of data transmission on the Internet.   

The Website may use cookies, i.e. information files saved by the Service Provider's server on the User's computer. The use of cookies makes it possible to improve the quality of services offered by the Website by:   

a. improving the process of selecting and ordering products; 
b. informing about User preferences; 
c. creating statistics on the use of the services of the Website by Users. 

Cookies usually contain the name of the website they come from, the time of storage on the terminal equipment and a unique number. Within the Website we use the following types of Cookies: 

a.         "session" - are stored on the User's terminal equipment until they log out, leave the website or switch off the web browser; 
b.         "permanent" - are stored in the User's terminal equipment for the time specified in the parameters of cookies or until they are deleted by the User;
c.         "performance" - enable collection of information on the manner of use of the sites of the Website;
d.         "necessary" - which enable the use of the services available on the Website; 
e.         "functional" - which makes it possible to remember the settings selected by the User and to personalize the User's interface; 
f.          "own" - placed by the Website; 
g.         "external" - coming from a site external to the Website; 

Cookies on the Website 
Our site uses Cookies to make it easier for you to use its resources. Cookies contain useful information and are stored on the User's computer - our server can read them when the User reconnects to the computer. The use of cookies does not make it possible to retrieve any personal or address data or other confidential information from the User's computer. The use of cookies is not possible if the option to save cookies has been deactivated in the Internet browser. Disabling this option does not prevent the use of the Website, but may cause some difficulties. Most Internet browsers allow the storage of Cookies in the User's terminal equipment by default. Each User of our Website has the possibility to change the settings concerning Cookies in the settings of his/her Internet browser. 

In order to function properly, the Website requires the latest version of one of the following browsers:  
·         Chrome 
·         Firefox 
·         Edge 
·         Opera 
·         Safari     

12. Communication & Marketing   
If you have made a purchase from our store we may occasionally update you on our latest products, news and special offers via email, whatsapp & telephone. You will also be given the opportunity to receive such communications from us and selected third parties when you sign up for an account as a user on our website.   

All users have the option to opt-out of receiving marketing communications from us and/or selected third parties. If you do not wish to continue receiving marketing from us and/or selected third parties you should opt-out by visiting ‘YOUR DETAILS’ in ‘YOUR ACCOUNT’ on https://www.craveit.la. You can access ‘YOUR ACCOUNT’ once you register and login. Or click on the unsubscribe link in any email communications which we might send you.    

13. Disclosures of Your Information   
We may disclose your personal information to any of our group of companies. We may also disclose your personal information to third parties:   

a.       In the event that Crave It Sdn Bhd sells or buys any business or assets; 
b.       If Crave It Sdn Bhd or substantially all of its assets are acquired by a third party, in which case personal data which we hold about our customers may be one of the transferred assets; OR 
c.       If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of; or to protect the rights, property, or safety of Crave It Sdn Bhd, our customers, or others. This includes exchanging information with other companies and organisations for the purpose of fraud protection and credit risk reduction.     

14. Checking Your Details   
If you wish to verify the details you have submitted to Crave It Sdn Bhd you may do so by contacting us via the email address or whatsapp given below. Our security procedures mean that we may request proof of identity before we reveal information. This proof of identity will take the form of your email address and password submitted upon registration. You must therefore keep this information safe as you will be responsible for any action which we take in response to a request from someone using your email and password.    

15. Additional information  Within the Website, there may be placed external links enabling its Users to directly reach other websites or, while using the Website, there may also be placed in your device the cookies originating from other entities, in particular from suppliers such as: Facebook, Google in order to enable you to use the functionalities of the Website integrated with these services. Each provider defines the rules for using cookies in its privacy policy, therefore, for security reasons, we recommend that you read the privacy policy document before using such sites. 

We reserve the right to change the Privacy Policy by posting the new Privacy Policy on our website. After the change, the Privacy Policy will appear on the website with the new date, and those who have an account on the Website will be sent an e-mail information about the change of the document. 

Team CRAVE IT