1. Introduction
HALAL.PLATFORM is operated by Northern Coast Group. This policy explains how we collect, use, and protect your personal data in accordance with PDPA (Malaysia), GDPR (EU), and CCPA (California).
2. Data We Collect
- Name, email, phone, address
- Account data (encrypted passwords)
- Payment data (processed by Stripe — we do not store card numbers)
- Halal certificates and business documents
- Usage data and device info
3. How We Use Data
- Provide and maintain the service
- Process transactions and payments
- Verify halal certificates with issuing authorities
- Communicate about account and support
- Comply with legal obligations
4. Data Sharing
We do not sell personal data. We share only with:
- Service providers (Supabase, Stripe, Vercel, Cloudflare)
- Halal certification authorities for verification
- Legal authorities when required by law
5. Your Rights
- Right to access your data
- Right to correct inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to withdraw consent
6. Security
We use TLS encryption, Row Level Security (RLS), 2FA, and audit logs. Data is stored in Supabase data centers (Singapore, Frankfurt, US) based on user preference.
7. Data Retention
Account data retained while account is active. After deletion, data stored 30 days for backup, then permanently deleted.
8. Contact
For privacy inquiries: privacy@halal.platform
Northern Coast Group, Sabah, Malaysia.