Privacy Policy

KITA DUA NIAGA (Registration No. 202603042450 / LA0086630-A), operating as TwoPlants, is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1.Who we are

TwoPlants is operated by KITA DUA NIAGA, registered at No 33, Kg Melayu Panchor, 84500 Panchor, Johor, Malaysia. For privacy-related enquiries, contact us at support@twoplants.my, WhatsApp at +601139921316, or Instagram DM (@twoplants.my).

2. What Personal Data We Collect

When you place an order or interact with us, we may collect the following:

  • Full name
  • Phone number
  • Email address
  • Delivery address
  • Order and transaction history
  • Communication records (e.g. WhatsApp messages, Instagram DMs)
  • Reviews and comments submitted on our website or social media
  • Payment confirmation details (we do not store card or banking credentials)

3. How We Collect Your Data

We collect your personal data when you:

  • Place an order through our website
  • Place a manual order via WhatsApp or Instagram DM
  • Contact us for customer support or enquiries
  • Submit a custom or bulk order request
  • Sign up for restock notifications
  • Leave a review or comment on our website, Google My Business, or social media

4. Reviews & User Generated Content

4.1 When you submit a review or comment on our website, Google My Business, or social media platforms, we may collect your name and the content of your submission.

4.2 This information may be published publicly. By submitting a review, you consent to your name and feedback being displayed on our platforms.

4.3 We do not share this information with third parties beyond the platform on which it was submitted.

5. Why We Collect Your Data

Your personal data is collected and used for the following purposes:

  • To process and fulfil your orders
  • To arrange and coordinate delivery
  • To communicate with you about your order status
  • To respond to your enquiries and support requests
  • To notify you of restock, promotions, or updates (only if you have opted in)
  • To comply with legal and regulatory obligations under Malaysian law

6. How We Store & Protect Your Data

6.1 Your data is stored securely and accessed only by authorised personnel within TwoPlants.

6.2 We use industry-standard security measures to protect your data from unauthorised access, disclosure, or misuse.

6.3 We do not store credit card or online banking credentials. All payment transactions are processed through our secure payment provider.

6.4 Communication records via WhatsApp and Instagram are subject to the respective platform’s data security practices.

7. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. Order records are typically retained for a minimum of 7 years for accounting and legal compliance purposes.

8. Who We Share Your Data With

We do not sell or rent your personal data to third parties. We may share your data with:

  • Delivery partners, solely for the purpose of fulfilling your order
  • Payment processors, to complete your transaction securely
  • Regulatory or legal authorities, if required by law

9. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

  • Access the personal data we hold about you
  • Request corrections to inaccurate or incomplete data
  • Withdraw consent for us to process your data (note this may affect our ability to fulfil your order)
  • Request that we cease using your data for direct marketing purposes

To exercise any of these rights, contact us at support@twoplants.my, WhatsApp at +601139921316, or Instagram DM (@twoplants.my).

10. Cookies

Our website may use cookies to improve your browsing experience and analyse site traffic. You may disable cookies through your browser settings, though this may affect certain website features.

11. Third-Party Links

Our website may contain links to third-party platforms such as Instagram and Google. We are not responsible for the privacy practices of those platforms and encourage you to review their respective privacy policies.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. The latest version will always be available on our website. For questions, contact us at support@twoplants.my, WhatsApp at +601139921316, or Instagram DM (@twoplants.my).