How we handle your data.
Plain-English summary of what we collect, why we collect it, and the rights you have over your information.
Who we are
OATING is a Malaysian-owned oat milk brand. References to “we”, “us”, or “OATING” in this policy mean OATING and its operating affiliates.
We are based in Kuala Lumpur, Malaysia. The data controller for personal data collected through this website is OATING.
What we collect
We collect only what we need to run our business and serve you well. The categories of data we may collect are:
- Identity data: name, company name, role, country.
- Contact data: email address, phone number, shipping or billing address.
- Transaction data: orders placed through our partner portal, invoices, and payment references (we do not store full card numbers).
- Technical data: IP address, browser type, device identifiers, and analytics events when you visit oating.com.
- Communications data: messages you send us via email, contact forms, or support channels.
How we use your data
We use personal data to fulfil orders, support our café and distributor partners, send service communications, improve the website, and meet our legal obligations.
We do not sell personal data. We do not share it with third parties for their own marketing.
Sharing with service providers
We work with a small number of trusted vendors who process data on our behalf: for hosting, analytics, payment processing, email, and customer support. They are bound by contract to use the data only to provide the service we hire them for.
How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected, or as required by Malaysian law (for example, tax records are kept for seven years).
Your rights
Under the Malaysian Personal Data Protection Act 2010 you have the right to access, correct, and request deletion of your personal data. You can also withdraw consent for marketing communications at any time.
To exercise any of these rights, email hello@oating.com from the address on file. We will respond within 21 days.
Cookies and analytics
We use cookies for essential site functionality and a small number of privacy-respecting analytics tools to understand how the site is used. See our Cookie Policy for the full list and how to opt out.
Changes to this policy
We may update this policy as our practices evolve. The “last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated via email to portal account holders.
Contact
Questions, requests, or complaints about how we handle personal data can be sent to hello@oating.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.