Privacy Policy

Very little, and never without you sending it. This website has no account system, no login and no form that submits to us — the enquiry page simply writes a message for you and opens it in your own WhatsApp or email. Nothing reaches us until you press send there, and you keep the copy.

What we then hold is whatever you chose to put in that message:

• Contact information — name, email address, telephone or WhatsApp number.
• Company information — company name, country, and anything else you choose to tell us about your business.
• Your enquiry — the product you want made, target price, pack format, volumes and any other detail you include.
• Basic technical data — the anonymous, aggregated traffic measurements described in our cookie policy.

Messages you send by WhatsApp also pass through WhatsApp itself, under its own privacy terms, in the same way an email passes through your email provider.

The enquiry you send is used to answer the enquiry. Specifically:

• To reply to you and prepare a quotation, sample or proposal.
• To follow up on that enquiry and on any project that follows from it.
• To improve this website and the information on it.
• For marketing, only where you have agreed to receive it.

We do not send marketing to people who have only asked for a quotation and have not agreed to hear from us further.

We do not sell, trade or rent your personal information. We share it only with service providers who help us operate the website and run the business — for example our email and hosting providers — and only to the extent they need it to provide that service. Where a service provider processes data outside Malaysia, we take reasonable steps to ensure comparable protection.

We may also disclose information where we are required to by law, or to establish or defend a legal claim.

A product brief is commercially sensitive, and we treat it that way. Formulation details you share with us are used to quote and develop your product, and are not shared with other clients. A formula developed for your brand stays with your brand.

Enquiry records are kept for as long as needed to deal with the enquiry and any resulting business relationship, and afterwards for as long as we are required to keep business records. You can ask us to delete your information sooner.

Cookies and similar technologies are covered separately in our Cookie Policy. You can control cookies through your browser settings.

We apply reasonable security measures to protect the confidentiality and integrity of the information we hold. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security, but the site itself receives nothing — there is no submission endpoint and no stored enquiry database to breach. We do not ask for and will never request payment details, passwords or identity documents through this website.

Under the PDPA you may ask us to:

• Give you access to the personal data we hold about you.
• Correct anything that is inaccurate or out of date.
• Delete your personal data, where we are not required to keep it.
• Stop sending you marketing communications — you can opt out at any time.

Write to md@donutra.com and we will respond within a reasonable period.

This is a business-to-business website. It is not directed at children and we do not knowingly collect personal data from anyone under 18.

We may update this policy to reflect changes in our practices or for operational, legal or regulatory reasons. The date at the top of this page shows when it was last changed.

Questions about this policy or about the data we hold should go to md@donutra.com.