Legal
Privacy policy
How we collect, use and look after your personal data.
Last updated: 1 July 2026
The short version
We collect only what we need to take your order, deliver it and support you. We never sell your data, and we only email you marketing if you opt in. You can ask to see, correct or delete your data at any time.
1. Who we are
This website is operated by Medthrive Sdn. Bhd. ("we", "us"), a Malaysian company. We distribute the officially licensed Pororo and BoBoiBoy range of children's food products in Malaysia. We are the data user responsible for personal data collected through this site, under the Personal Data Protection Act 2010 (Malaysia).
2. What we collect
We keep it to what we genuinely need:
- Order details – your name, delivery address, phone number and email, so we can deliver and update you.
- Payment Confirmation – we receive confirmation that payment succeeded. Card and banking details go directly to our payment provider; we never see or store them.
- Support messages – anything you send us through the contact form, email or WhatsApp.
- Basic site analytics – pages visited and device type, to understand how the site is used.
3. How we use it
To process and deliver your orders, respond to your questions, handle returns and refunds, meet our legal and tax obligations, and improve the site. If you join our newsletter, we use your email to send parenting tips, new drops and member offers - and every email includes a one-click unsubscribe. We do not send marketing unless you opt in.
4. Who we share it with
We never sell your personal data. We share it only with the partners who make your order happen: courier companies (to deliver), payment providers (to take payment securely), and our website and email service providers (to run the site and send order updates). Each partner may only use your data to provide their service to us. If you buy from us on Shopee, Lazada or TikTok Shop, that platform's own privacy policy also applies to your purchase there.
5. Children's data
Our products are for children, but our website is for parents and guardians. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
6. Cookies
We use a small number of cookies: essential ones that keep your cart working and remember your language, and analytics cookies that help us see which pages are useful. You can block or delete cookies in your browser settings - the site will still work, though your cart may not be remembered between visits.
7. How long we keep it, and how we protect it
We keep order records for seven years to meet Malaysian tax and accounting requirements, then delete them. Newsletter data is kept until you unsubscribe. Data is stored on secured servers with access limited to the small team who need it, and transferred over encrypted connections.
8. Your rights
You can ask us at any time to show you the personal data we hold about you, correct anything that is wrong, delete your data (where we are not legally required to keep it), or stop sending you marketing. Just contact us - we respond within 21 days, and usually much faster.
9. Changes and contact
If we change this policy, we will update this page and the date at the top. For anything privacy related, reach us through the contact page, ask for the data protection contact and we will take it from there.