Privacy Notice

Last updated: June 9, 2023

This Privacy Notice and its Addendum(s) (“Privacy Notice”) describe how Ghost Kitchens Sdn Bhd, its respective subsidiaries, affiliates, associated companies and jointly controlled entities (collectively “COOX”, “we”, “us” or “our”) collect, use, process and disclose your Personal Data through the use of COOX mobile applications and websites (respectively “Apps” and “Websites”), as well as products, features and other services globally, operated by COOX (collectively, “Services”).

This Privacy Notice applies to our consumers, agents, vendors, suppliers, partners (such as delivery service provider and merchant partners), contractors and service providers (collectively “you”, “your” or “yours”).

We typically collect, use, disclose or otherwise process your Personal Data in accordance with this Privacy Notice with your consent, or in compliance with applicable laws. By accessing or using our product or services, you agree to the terms outlined in this Privacy Policy.

1. Collection Of Personal Data

1.1 Types of Personal Data We Collect

We may collect various types of personal data from you, including but not limited to:

Demographic Information: Such as age, date of birth, gender, nationality, race and language preference.
Contact Information: Such as name, email address, postal address, and phone number.
Account Information: Such as username, password, and other credentials used to access our services.
Payment Information: Such as credit card details, bank account information, and other financial information necessary for payment processing.
Usage Data: Such as IP address, device information, browser type, and operating system.
Location Data: Such as GPS data or information about your approximate location.
Communication Data: Such as records of your communication with us, including emails, chats, or phone calls.
Marketing Activity Participation Data: Such as the pictures, audio, or videos you may submit, which may include images of yourself;
Merchant On-Boarding Data: Such as company details, government-issued identification numbers, business information and financial information.
Other Information: Any other information you voluntarily provide to us.

1.2 Collection Methods

We may collect personal data when you:

  • Create an account on our website or mobile application.
  • Place an order for our products or services.
  • Contact our customer support team.
  • Participate in surveys, promotions, or contests.
  • Interact with our website or mobile application.
  • Provide feedback, reviews or user-published content.
  • Subscribe to our newsletters or marketing communications.
  • Connect with us through social media platforms.

We may collect personal data from other sources, including but not limited to:

  • Referral programmes;
  • Our business partners, such as delivery service partners and payment providers;
  • Insurance and financial providers;
  • Marketing services providers or partners.
  • Credit bureaus, alternative credit scoring agencies and any other credit reporting organizations;
  • Publicly available or governmental sources of data;
  • when our users add you as an alternative contact

2. Use Of Personal Data

We use the personal data we collect for the following purposes:

Providing User Support: To process your orders, deliver product and services and to resolve user support issues. For example, we may investigate and address concerns; monitor and improve our user support responses; respond to questions, comments and feedback; and inform you about steps taken to resolve user support issues.
Analytics and Research: To conduct research, analysis, and marketing activities to improve our services and understand customer preferences.
Legal Obligations and Consent: To obtain your consent for specific purposes as required by applicable laws, and to comply with legal obligations, enforce our terms of service, and protect our rights and interests.
Marketing and Promotions: To send you content relating to our products or services (that may be of interest or relevance based on your profile). For example, we may send you special offers, alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and notify, invite and manage your participation in our events or activities.
Communication: To communicate with you regarding your orders, inquiries, or promotional offers, by various means, where applicable (including by SMS, chat applications (e.g. WhatsApp, LINE, WeChat, Facebook Messenger), push notification, call, and by email).

If you wish to unsubscribe to the receiving of such marketing communications, please inform us at our contact details below. Please note that while you may opt out of marketing or promotion communications, we may still send you service-related messages (such as information on your transactions etc.).

3. Disclosure Of Personal Data

We may disclose your personal data to third parties in the following circumstances:

Service Providers: We may share personal data with service providers and business partners who assist us in operating our business and providing our services. These third parties are bound by confidentiality obligations and are prohibited from using your personal data for any other purposes.
Legal Compliance: We may disclose personal data to comply with legal requirements, such as responding to lawful requests from public authorities, government agencies, or law enforcement entities.
Subsidiaries and Affiliates: We may share personal data with our subsidiaries, associated companies, jointly controlled entities and affiliates as we share resources to improve our product and services.
Protection of Rights and Interests: We may disclose personal data to protect our rights, safety, or property, or that of others.
With Your Consent: We may disclose personal data to third parties with your consent or as otherwise disclosed at the time of collection. In the event that you are required to furnish any documentation or information to us for any purpose which may contain such sensitive Personal Data (which is not required for that purpose), you agree to redact such sensitive Personal Data before providing such documentation or information to us.
When you provide Personal Data of Other Individuals to Us: In some situations, you may provide Personal Data of other individuals (such as your spouse, family members or friends) to us. If you provide us with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used and disclosed as set out in this Privacy Notice.
Personal Data of Minors: As a parent or legal guardian, please do not allow minors under your care to submit Personal Data to COOX. In the event that such Personal Data of a minor is disclosed to COOX, you hereby accept and agree to be bound by this Notice and take responsibility for his or her actions.

4. Retention Of Personal Data

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. We will delete or anonymize your personal data when it is no longer needed for the purposes for which it was collected and is not required to be retained for legal or legitimate business purposes.


Your personal data may be transferred to and processed in countries outside of your own, including countries that may have different data protection laws than your country of residence. We take appropriate measures to ensure that any such transfers comply with applicable data protection laws.


6.1 Cookies and Similar Technologies

We may use cookies, web beacons, tags, scripts, and similar technologies to collect information about your browsing activities on our website. These technologies help us improve our services, analyze trends, administer the website, track users' movements around the site, and gather demographic information. You have the option to manage your cookie preferences through your browser settings.

6.2 Advertising on Third-Party Platforms

We may engage third-party advertising partners to display advertisements on other websites or platforms. These partners may use cookies and similar technologies to provide you with tailored advertisements based on your interests and browsing history.

7. Protection Of Personal Data

We take appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction. We employ industry-standard security measures to protect the confidentiality and integrity of your personal data. Nevertheless, please understand that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted through any online means, therefore, any transmission remains at your own risk.

8. Your Rights Over Your Data

Access and Rectification: You have the right to access and rectify your personal data held by us. If you have an account with us, you can review and update your account information through the account settings. If you want to exercise your rights or request access to other personal data we hold about you, please contact us using the contact details provided at the end of this Privacy Policy.
Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
Erasure: You have the right to request the erasure of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or if you withdraw your consent.
Objection and Restriction: You have the right to object to the processing of your personal data or request restrictions on the processing under certain circumstances.
Marketing Communications: You have the right to opt-out of receiving marketing communications from us at any time by following the unsubscribe instructions provided in the communication or by contacting us.


We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for any updates. Your continued use of our services after the posting of changes constitutes your acceptance of such changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at [email protected]