Quiko Privacy Policy

Effective date: 17 August 2026 1. Data controller THE COPY HOUSE SDN. BHD. (Registration No. 202301048588 (1542502-M)), G-8 & G-09, PLATINUM LAKE CONDOMINIUM NO.2A, JALAN DANAU SAUJANA, TAMAN DANAU KOTA, 53300 KUALA LUMPUR is the data controller for Quiko Print 24. Privacy enquiries and requests may be sent to customerservice@quiko.com.my or +601110962069. 2. Data collected and sources We collect information you provide, including phone number, email, password hash, Google account identifier when Google sign-in is used, full name when supplied or required for a receipt, preferred language, policy acceptances, support communications and print files. We generate account, session, kiosk selection, file-analysis, print-setting, preview, price, tax, order, receipt, Print Credit, Test Credit, reload, return, controller, printer, failure, audit and security records. Technical records may include IP address, date and time, browser/device information, essential cookies and PWA information. CHIP Collect supplies payment status and references; we do not store your online-banking password or full payment-card credentials. Print Agents provide kiosk, fulfilment and support records. 3. Purposes and legal basis We process data to create and secure accounts; verify email and Google sign-in; remember language; select kiosks; analyse, preview, price, pay, release and print files; operate the Print Credit ledger; verify CHIP Collect payments; issue receipts; return failed amounts; prevent fraud and duplicate posting; monitor kiosk/controller status; investigate failures; provide customer support; calculate tax, commissions and settlements; keep accounting records; enforce policies; maintain system security; and comply with law. Processing is necessary to provide requested services, perform our contract, comply with legal obligations and pursue legitimate operational and security interests. Where consent is required, you may withdraw it prospectively, but this does not affect earlier lawful processing or records that must be retained. 4. Required information and choices Phone number, verified email or approved sign-in credentials, required policy acceptance, order data and necessary payment references are required for the related service. Full name is generally optional until a named receipt is requested. If required information is not provided, registration, recovery, payment, printing, receipt or support functions may be unavailable. We do not sell personal data. Marketing communications, if introduced, will use a separate choice where required. 5. Disclosure We disclose only what is reasonably necessary to: assigned Print Agents for kiosk fulfilment and print-quality support; CHIP Collect, participating banks and payment networks for payment, verification, reversal and dispute handling; Google when you choose Google sign-in; hosting, storage, email, security and technical providers acting under appropriate obligations; accountants, auditors, insurers, professional advisers and recovery providers; and regulators, courts, law enforcement or other persons where required or permitted by law. Third-party services have their own policies, including CHIP at https://www.chip-in.asia/privacy-policy and Google at https://policies.google.com/privacy. 6. Print files and retention Unreleased uploaded files are retained for no more than 12 hours. After release, a file is retained for no more than 2 hours while active and is normally deleted within 1 hour after the related work reaches completed, partially completed, failed or cancelled terminal status. Earlier deletion may occur for security or customer action. Once deleted, the original file may not be available for reprint or investigation. Order metadata and settings remain without the private file. 7. Other retention Application logs are automatically rotated and retained for up to 90 days; customer-assistance contact records are retained up to 90 days unless required for an active dispute. Account data is kept while the account is active and for a reasonable closure period. Order, receipt, Print Credit, payment, tax, settlement, acceptance and related accounting records may be retained for at least 7 years or longer where Malaysian law, audit, litigation, fraud prevention or an unresolved dispute requires. Backups expire through controlled rotation. Data no longer required is deleted or anonymised where reasonably practicable. 8. Security and incidents We use access controls, password hashing, transport encryption, separate admin roles, private file storage, audit records, limited Print Agent access and operational safeguards. No internet service is completely risk-free. We investigate suspected breaches and notify the Personal Data Protection Commissioner and affected persons where required by applicable Malaysian data-breach rules. 9. International processing Some technical or authentication providers may process data outside Malaysia. Where a cross-border transfer occurs, we take reasonable steps required by the Personal Data Protection Act 2010 and applicable guidance, including assessing safeguards and limiting the data transferred. 10. Your rights Subject to Malaysian law, you may ask whether we hold your personal data, request access or correction, withdraw consent where processing relies on consent, object or limit certain processing, or request deletion where no legal or operational retention ground applies. We may verify identity, request details, charge a permitted fee or refuse/restrict a request where the law allows. You may also complain to the Personal Data Protection Commissioner. 11. Changes and contact We may update this Policy with a new version and effective date. Material changes will be notified or require fresh acknowledgement where appropriate. For privacy access, correction, deletion, objection or complaint requests, contact: THE COPY HOUSE SDN. BHD. Registration No. 202301048588 (1542502-M) G-8 & G-09, PLATINUM LAKE CONDOMINIUM NO.2A, JALAN DANAU SAUJANA, TAMAN DANAU KOTA, 53300 KUALA LUMPUR Email: customerservice@quiko.com.my Telephone/WhatsApp: +601110962069