Privacy Policy

Effective date: 14 September 2026
Last updated: 14 September 2026

KC Group Trading (“KC Group Trading”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal data that we collect and process through our website, online store and related services.

This Privacy Policy explains how we collect, use, disclose, retain and protect your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 and its applicable amendments, regulations and standards.

By using our website, submitting an enquiry or placing an order, you acknowledge that you have read this Privacy Policy.

1. Information we collect

We may collect the following information:

Identity and contact information

Full name
Company or organisation name
Billing and delivery address
Email address
Telephone number

Order and transaction information

Products or materials requested or purchased
Quantities and order value
Delivery location and requested delivery date
Order history
Transaction reference, payment status and payment method
Refund, dispute and chargeback information

Payment information

Payments on our website may be processed through Fiuu, formerly known as Razer Merchant Services, and its participating banks, card networks, e-wallet providers or other payment partners.

When Fiuu’s hosted payment interface is used, payment credentials are entered on or securely transmitted to Fiuu and the relevant payment provider. KC Group Trading may receive limited transaction information such as:

Payment status
Transaction reference
Payment method
Payment amount
Masked card or account details
Information required to investigate refunds, disputes or suspected fraud

KC Group Trading does not request or retain card verification values such as CVV or CVC after payment authorisation.

Customers should review Fiuu’s Privacy Policy to understand how Fiuu collects, processes, retains and transfers payment information.

Enquiry information

When you contact us or request a quotation, we may collect:

Your project requirements
Materials required
Estimated quantity
Delivery location
Messages, attachments and other information you provide

Technical and usage information

When you access our website, we may automatically collect:

IP address
Browser and device type
Operating system
Pages visited
Referring website
Date, time and duration of visits
Cookie identifiers
Website diagnostic and security information

2. How we collect personal data

We may collect personal data:

Directly from you when you place an order
When you create or use an account
When you request a quotation
When you submit a contact form
When you communicate with us by telephone, email, WhatsApp or social media
Automatically through cookies and similar technologies
From payment providers, delivery providers and other service providers involved in your transaction
From publicly available or legally permitted sources

If you provide personal data relating to another person, you confirm that you are authorised to provide that information and have informed that person of this Privacy Policy where required.

3. Why we process your information

We may process personal data to:

Respond to enquiries and quotation requests
Verify customer and company information
Process and fulfil orders
Arrange material supply, transportation and delivery
Process payments and confirm transaction results
Issue invoices, receipts and other transaction documents
Manage cancellations, refunds, complaints, disputes and chargebacks
Communicate order and delivery updates
Provide customer support
Detect and prevent fraud, abuse and security incidents
Maintain business, accounting and tax records
Improve our website, products and customer experience
Comply with legal, regulatory and contractual requirements
Establish, exercise or defend legal claims
Send marketing communications where you have provided the necessary consent

We will not use your personal data for an unrelated purpose without providing additional notice or obtaining consent where required.

4. Information required to complete a transaction

Some personal data is required for us to process an order, arrange delivery, respond to an enquiry or comply with legal obligations.

If you do not provide required information, we may be unable to:

Process your order or payment
Deliver purchased materials
Prepare an accurate quotation
Complete identity or fraud checks
Respond to your request

Required fields will normally be identified when the information is requested.

5. Payment processing through Fiuu

When you select an online payment method, relevant personal and transaction information may be disclosed to Fiuu, participating financial institutions, card schemes, e-wallet providers, fraud-prevention providers and settlement partners.

This processing may be necessary to:

Authorise and complete payments
Authenticate the payer
Prevent fraudulent or unauthorised transactions
Conduct regulatory and compliance screening
Process settlement
Handle refunds and reversals
Investigate complaints, disputes and chargebacks
Maintain legally required transaction records

Payment providers may process your information under their own privacy policies and legal obligations. They may also process or store information outside Malaysia, subject to applicable safeguards and legal requirements.

KC Group Trading is responsible for the products, order fulfilment, delivery, customer service and resolution of complaints concerning the underlying purchase. Fiuu acts as the payment service provider and is not the seller of our products.

Important: You should never send complete card details, online banking passwords, PINs or CVV numbers to KC Group Trading through email, WhatsApp, telephone or the website’s general contact form.

6. Parties we may disclose information to

Where necessary and legally permitted, we may disclose personal data to:

Fiuu and participating payment providers
Banks, card networks and e-wallet operators
Delivery, transportation and logistics providers
Quarry operators, suppliers and fulfilment partners involved in an order
Website hosting, cloud, email and technical service providers
WooCommerce, WordPress and related website service providers
Fraud prevention and cybersecurity providers
Accountants, auditors, insurers, lawyers and professional advisers
Government departments, regulators, courts and law-enforcement authorities
A buyer, investor or successor involved in a merger, acquisition or transfer of our business

These parties should only receive information reasonably necessary to perform their relevant functions or comply with legal requirements.

We do not sell or rent your personal data to third parties.

7. International transfers

Some technology, hosting, payment or service providers may process personal data outside Malaysia.

Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is permitted under applicable Malaysian data-protection law and that appropriate protection is provided.

8. Cookies and similar technologies

Our website may use cookies and similar technologies for:

Essential website functions
Shopping-cart and checkout functionality
User-session management
Security and fraud prevention
Remembering customer preferences
Website performance and diagnostics
Analytics
Marketing, where consent is required

Essential cookies may be necessary for the website, cart and payment process to operate correctly.

You can control certain cookies through your browser or our cookie controls. Disabling essential cookies may prevent parts of the website or checkout from functioning.

Where non-essential analytics or advertising cookies are used, we will request consent where required.

9. Marketing communications

We will send promotional emails or messages only when permitted by law and, where required, after receiving your consent.

You can withdraw your marketing consent by:

Using the unsubscribe option in a communication
Contacting us using the details below
Asking us to stop sending promotional messages

Withdrawing marketing consent will not prevent us from sending necessary order, payment, delivery, security or customer-service communications.

10. Data retention

We retain personal data only for as long as reasonably necessary to:

Complete transactions and deliveries
Provide support
Maintain accounting, tax and business records
Manage warranties, complaints, refunds and disputes
Prevent fraud and security incidents
Meet legal and regulatory obligations
Establish, exercise or defend legal claims

Different records may have different retention periods. When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.

Payment providers may apply their own legally required retention periods.

11. Data security

We take reasonable administrative, organisational and technical measures to protect personal data against:

Loss or destruction
Misuse
Unauthorised access
Unauthorised disclosure
Modification
Accidental or unlawful processing

These measures may include access restrictions, secure account controls, encrypted connections, software updates, backups, monitoring and the use of established payment providers.

No online service is completely secure. You are responsible for keeping account passwords and login credentials confidential and notifying us if you suspect unauthorised account activity.

12. Your rights

Subject to applicable Malaysian law, you may have the right to:

Be informed about how your personal data is processed
Request access to personal data held about you
Request correction of inaccurate, incomplete or outdated information
Withdraw consent where processing is based on consent
Request that certain processing be limited
Object to direct marketing
Make enquiries or complaints about our handling of personal data

Some requests may be restricted where we are required to retain or process information by law or for legitimate transactional, security or legal purposes.

We may need to verify your identity before completing a request.

13. Children’s information

Our website and products are intended for businesses and adults capable of entering into legally binding transactions. We do not knowingly collect personal data from children without appropriate authorisation.

If you believe a child has provided personal data to us, please contact us.

14. External websites

Our website may contain links to third-party websites or services. We do not control their privacy, security or data-processing practices. You should review the privacy policy of each external service before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, website, payment methods or legal obligations.

The revised policy will be published on this page with an updated revision date. Material changes may also be communicated through an appropriate notice.

16. Contact us

For privacy enquiries, access or correction requests, consent withdrawal or complaints, contact:

KC Group Trading

No. 125, Jalan Sungai Nibong 4,
Batu 3 1/2, Taman Klang Mas,
42100 Klang,
Selangor, Malaysia

Email: admin@kcgrouptrading.com & hongfoo@kcgrouptrading.com

Please use the subject line “Personal Data Request” when contacting us about privacy matters.