Privacy Policy
How AALY Packaging collects, uses and protects your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
Last updated: 5 October 2026
Who we are
AALY PACKAGING PLT (202104003325 (LLP0029969-LGN)), 25-2, Jalan Komersial Skywiz, Pusat Komersial Skywiz, 75450 Ayer Keroh, Melaka, Malaysia. We are responsible for the personal data described in this policy.
What we collect
When you ask for a quote or contact us, we collect what you give us: your name, company name, phone or WhatsApp number, email address, the details of your request (bag type, quantity, timing), and any logo or design file you upload.
If you chat with us on WhatsApp or email us, we also keep those messages.
Our hosting provider processes basic technical data, such as your IP address and browser type, to deliver the website and protect it from abuse.
Why we use it
To reply to your enquiry, prepare quotations and mock-ups, produce and deliver your order, issue invoices, keep the records Malaysian law requires, and improve our service. We do not sell your personal data.
We use Google Ads to measure which of our ads lead to an enquiry. When you send a quote request, your email address and phone number are scrambled (hashed) in your browser and matched by Google to count that enquiry. Google does not receive them in readable form, and we do not use them to show you other ads.
What you must give us
Your name and a phone number are needed so we can reply. Everything else is optional. If you choose not to give us the details of your request, we may not be able to quote.
Who we share it with
Only with the parties needed to serve you:
Cloudflare, which hosts this website. Resend, which delivers the emails sent from our quote form. Google, which provides our email inbox and our advertising measurement (Google Ads). WhatsApp (Meta), when you choose to chat with us there.
The factories in Malaysia and China that produce your order, which receive your artwork and order specifications.
Courier companies, which receive your delivery details.
Authorities, when the law requires it.
Data outside Malaysia
Some of these providers store data outside Malaysia, and orders made in China require your artwork and specifications to be sent there. By using our website and services you agree to this transfer. We only share what each party needs for its part of the work.
How long we keep it
We keep enquiry and order records for as long as we need them for the purposes above and for as long as Malaysian law requires us to keep business and accounting records. After that we delete them. Uploaded files are not stored on the website; they are delivered straight to our email inbox.
How we protect it
The website runs over an encrypted connection (HTTPS). Uploaded files are checked and passed directly into an email, not saved on a web server. Access to our inbox and records is limited to the people who handle your order.
Your rights
Under the PDPA you may ask to see the personal data we hold about you, ask us to correct it, or ask us to limit how we use it or stop contacting you. Email [email protected] or WhatsApp 014-389 2259 and we will respond within the time the PDPA allows.
Language
This policy is published in English and Bahasa Melayu. If the two versions differ, the English version applies.
Changes
We may update this policy. The date at the top of this page shows the latest version.