Privacy Policy

Human Fuel Mini Program – Personal Data Protection Notice and Privacy Policy

(Last Update: December 4, 2025)

We value your privacy and are committed to protecting your personal data. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy explains how Human Fuel ("We," "Us," or "Our") collects, uses, discloses, and processes your Personal Data in connection with your use of the Human Fuel Mini Program (the “Mini Program”) and participation in the Human Fuel Loyalty Program.

Collection of Personal Data

We collect Personal Data when you register for an account, use the Mini Program, or engage in any transactions related to the Human Fuel Loyalty Program. 

1. PURPOSES FOR COLLECTION, USE, DISCLOSURE, AND PROCESSING OF PERSONAL DATA

Your Personal Data is collected, used, and disclosed by Human Fuel for the following purposes:

1.1 Core Program Administration and Service Delivery

  1. To provide, administer, and manage your Human Fuel Loyalty Account and access to the Mini Program.
  2. To enable your full and continued participation in the Human Fuel Loyalty Program, including the earning, tracking, and redemption of Rewards (points, vouchers, discounts, etc.).
  3. To process your transactions and complete orders made through the Mini Program or linked services.
  4. To respond to your inquiries, requests for support, or complaints.
  5. To communicate with you regarding your account status, system updates, policy changes, and essential service notifications.

1.2 Business Operations and Improvement

  1. To create internal records related to our business activities and transactions.
  2. To analyze data, generate aggregated reports, and conduct research to improve the Mini Program features, service offerings, and customer experience.
  3. To conduct internal audits and satisfy legal or regulatory reporting requirements.

1.3 Marketing and Promotion (Requires Consent)

  1. To send you promotional, marketing, and advertising materials or documents via email, electronic messages (e.g., WhatsApp, SMS), or other channels, relating to our products, services, special offers, and events.
  2. To personalize and tailor marketing content and Rewards based on your transaction history and preferences.

When you register, you will be given the option to consent to the use of your Personal Data for Marketing Purposes (Paragraph 1.3). By providing clear and unambiguous consent, you accept the use of your Personal Data for these specific purposes.

2. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We respect the confidentiality of your Personal Data. We will not sell, rent, or share your Personal Data with third parties without your explicit consent, except in the following limited situations:

  1. When required or authorized by Malaysian law, regulations, or court order (e.g., to comply with the PDPA).
  2. To our trusted service providers, partners, or data processors (e.g., cloud hosting providers, payment processors, or data analytics firms) who assist us in providing the Mini Program, provided they are bound by confidentiality obligations.
  3. To government or law enforcement agencies with proper authorization, or when necessary for investigations or legal proceedings.
  4. In situations where it is clearly in your interest and consent cannot be obtained in a timely manner (e.g., responding to an emergency threatening life, health, or safety).
  5. As permitted by the PDPA or any other applicable law in Malaysia.

3. ACCESS, CORRECTION, AND WITHDRAWAL OF CONSENT

3.1 Request for Access and Correction

You have the right to request access to and correction of your Personal Data held by Us. To exercise this right, please contact our Data Protection Officer (DPO). We will require sufficient information to verify your identity and the nature of your request. We reserve the right to charge a reasonable administrative fee for processing access requests.

3.2 Withdrawal of Consent (Opt-Out)

You may withdraw your consent for the collection, use, and/or disclosure of your Personal Data for specific purposes, particularly marketing (Paragraph 1.3), by emailing your opt-out notice and the extent of your withdrawal to the DPO. You can also typically unsubscribe from promotional messages through the 'unsubscribe' link or instruction provided in the communication.

3.3 Consequences of Withdrawal

Please be aware that withdrawing consent for core administrative purposes (Paragraph 1.1) may affect your ability to use the Mini Program and participate in the Loyalty Program, potentially resulting in the forfeiture of your Rewards and the deletion of your account. We will inform you of the legal consequences of your withdrawal upon receiving your request.

4. MANAGEMENT AND SECURITY OF PERSONAL DATA

4.1 Data Security

We implement reasonable administrative, technical, and physical security measures to protect your Personal Data against unauthorized access, use, disclosure, copying, modification, loss, damage, and/or alteration. However, no data transmission over the internet can be guaranteed to be 100% secure.

4.2 Data Accuracy

We strive to keep your Personal Data accurate and complete. It is your responsibility to inform us promptly of any changes to your Personal Data (e.g., change of email address or phone number) so we can update our records.

4.3 Retention and Destruction

We will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law or necessary for business purposes. Once it is no longer needed, we will destroy or anonymize the data in a secure manner.

4.4 Transfer Outside Malaysia

If we need to transfer your Personal Data outside of Malaysia (e.g., for data hosting), we will comply with the PDPA by ensuring the recipient country has a comparable level of data protection, or by taking appropriate contractual measures to ensure the Personal Data receives protection comparable to that provided under the PDPA.