Last updated: 4 October 2026
1. Who we are
Baik Tuan (“we”, “us”, “our”) is operated by Akros One Solution Sdn. Bhd. [Company Reg. No. 201401025771], B-2-3, Solaris Dutamas, 1 Jalan Dutamas 1, 50480 Kuala Lumpur, Malaysia. Our website is https://baiktuan.com.
This policy is our notice under the PDPA. It explains what personal data we collect, why, and your rights.
2. What personal data we collect
Contact forms and enquiries: your name, email, phone number and message.
Orders and deliveries [if you sell through this site]: name, delivery address, phone, email and order details. Payments are handled by third-party payment providers, and we do not store your full card details.
Newsletter and promotions [if applicable]: your email address and preferences.
Comments: the data in the comment form, plus your IP address and browser user agent to help detect spam. An anonymised string from your email (a hash) may be sent to the Gravatar service to check whether you use it.
Media: if you upload images, avoid including embedded location data (EXIF GPS), as visitors can download and extract it.
Automatically collected data: IP address, device and browser type, pages visited and time on site.
3. Cookies
We use cookies to keep the site working, remember your preferences and understand how visitors use the site.
- If you comment, cookies may save your name, email and website for your convenience. They last one year.
- If you log in, we set temporary cookies to check whether your browser accepts them. These are discarded when you close your browser. Login cookies last two days, or up to two weeks if you select “Remember Me”.
You can disable cookies in your browser settings, but parts of the site may not work properly.
4. Embedded content from other websites
Pages may include embedded content (videos, social posts, maps) from sites such as YouTube, Instagram or TikTok. These behave as if you had visited the other site, and they may collect data about you, use cookies and track your interaction with the content.
5. How we use your data
- To respond to your enquiries and provide customer support
- To process and deliver orders [if applicable]
- To send marketing messages, only where you have consented (you can opt out at any time)
- To improve our website, products and services
- To prevent spam and fraud and keep the site secure
- To comply with Malaysian law, including tax and accounting requirements
6. Who we share your data with
We do not sell your personal data. We may share it with:
- Website hosting and technology providers [hosting provider]
- Payment gateways and logistics/courier partners [e.g. TresGo, DHL, J&T: list those you use]
- Analytics and advertising providers [Google, Meta, TikTok]
- Professional advisers, and government or regulatory authorities where required by law
These parties may only use your data for the purposes we engage them for.
7. Transfers outside Malaysia
Some of our service providers (such as hosting, analytics or email platforms) may store or process data outside Malaysia. Where this happens, we take reasonable steps to ensure your data is protected to a standard comparable to the PDPA.
8. How long we keep your data
- Comments and metadata: kept indefinitely, so follow-up comments can be recognised and approved automatically.
- Registered users (if any): personal information is kept until you ask us to delete it. Users can see, edit or delete their information at any time, except their username.
- Enquiries: up to 24 months.
- Order and transaction records: [7 years], as required for Malaysian tax and accounting purposes.
9. Security
We take reasonable and practical steps to protect your data from loss, misuse, unauthorised access or disclosure. If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required by law.
10. Your rights under the PDPA
You may:
- Request access to the personal data we hold about you
- Request correction of inaccurate, incomplete or outdated data
- Withdraw consent for any processing, including marketing
- Request that we limit processing of your data
- Request a copy of your data, or its transfer to another controller where technically feasible (data portability)
To exercise these rights, email bbq@baiktuan.com. We may need to verify your identity and may charge a reasonable fee for processing access requests, as permitted by law. Please note that if you withdraw consent, we may be unable to provide certain services.
11. Children
Our website is not directed at children under 18. If you are a parent or guardian and believe your child has given us personal data, contact us and we will delete it.
12. Third-party links
Our site may link to other websites (including TikTok Shop). We are not responsible for their privacy practices, so please read their policies.
13. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with a new “Last updated” date.
14. Contact us
Akros One Solution Sdn. Bhd.
B-2-3, Solaris Dutamas, 1 Jalan Dutamas 1, 50480 Kuala Lumpur
Email: bbq@baiktuan.com