— Privacy Policy

How we handle your data.

Plain-English summary of what we collect, why we collect it, and the rights you have over your information.

Last updated · 29 April 2026
Draft notice: this document is a working draft published for transparency. The final, legally reviewed version will replace it. If you have questions in the meantime, write to hello@oating.com.
01

Who we are

OATING SDN BHD is a Malaysian-incorporated company. References to “we”, “us”, or “OATING” in this policy mean OATING SDN BHD and its operating affiliates.

Our registered office is in Kuala Lumpur, Malaysia. The data controller for personal data collected through this website is OATING SDN BHD.

02

What we collect

We collect only what we need to run our business and serve you well. The categories of data we may collect are:

  • Identity data — name, company name, role, country.
  • Contact data — email address, phone number, shipping or billing address.
  • Transaction data — orders placed through our partner portal, invoices, and payment references (we do not store full card numbers).
  • Technical data — IP address, browser type, device identifiers, and analytics events when you visit oating.com.
  • Communications data — messages you send us via email, contact forms, or support channels.
03

How we use your data

We use personal data to fulfil orders, support our café and distributor partners, send service communications, improve the website, and meet our legal obligations.

We do not sell personal data. We do not share it with third parties for their own marketing.

04

Sharing with service providers

We work with a small number of trusted vendors who process data on our behalf — for hosting, analytics, payment processing, email, and customer support. They are bound by contract to use the data only to provide the service we hire them for.

05

How long we keep it

We keep personal data only for as long as we need it for the purpose it was collected, or as required by Malaysian law (for example, tax records are kept for seven years).

06

Your rights

Under the Malaysian Personal Data Protection Act 2010 you have the right to access, correct, and request deletion of your personal data. You can also withdraw consent for marketing communications at any time.

To exercise any of these rights, email hello@oating.com from the address on file. We will respond within 21 days.

07

Cookies and analytics

We use cookies for essential site functionality and a small number of privacy-respecting analytics tools to understand how the site is used. See our Cookie Policy for the full list and how to opt out.

08

Changes to this policy

We may update this policy as our practices evolve. The “last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated via email to portal account holders.

09

Contact

Questions, requests, or complaints about how we handle personal data can be sent to hello@oating.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.