Lim Soon Huat
Partner with us

Baca dalam Bahasa Malaysia →

Privacy Policy

Last updated: 11 November 2026

1. Who we are

This Privacy Policy explains how Lim Soon Huat Sdn Bhd (54538-D) ("LSH") and Lim Soon Huat Agency Sdn Bhd (932341-D) ("ALSH") (together, "Lim Soon Huat Group", "we", "us" or "our") collect, use and protect personal data through this website, www.limsoonhuat.com (the "Site").

LSH and ALSH are each a data controller under Malaysia's Personal Data Protection Act 2010, as amended (the "PDPA"). The company that responds to your enquiry, or with which you open an account, is the controller of your personal data for that purpose.

This policy covers the Site and the forms on it. If you become a customer, supplier or employee, we will give you a separate notice covering that relationship.

2. Personal data we collect

Information you give us through the Site:

  • Brand partnership enquiries: your name, company, brand names, country, email address, phone or WhatsApp number, product category, channels of interest and any details you share about your business.
  • Trade account applications: store name, contact person, phone or WhatsApp number, email address, store type, number of outlets, business address and the brands you are interested in.
  • General contact form: your name, company, email address, phone number, enquiry type and message.
  • Job applications: your name, contact details, CV, work history, qualifications and anything else you choose to send us.
  • WhatsApp and email: your name, number or email address, and the content of your messages when you contact us through these channels.

Information collected automatically: your IP address, browser and device type, pages visited, time spent on the Site and the referring website. We collect this through cookies and similar technologies (see section 9).

Please do not send us sensitive personal data, such as information about your health, religious beliefs or political opinions, through the Site. We do not ask for it and do not need it.

3. Why we use your personal data

We use your personal data to:

  1. respond to your enquiry and assess a potential brand partnership;
  2. process your trade account application, including verifying your business and assigning a sales representative for your area;
  3. assess job applications and contact you about roles;
  4. communicate with you by email, phone or WhatsApp about your enquiry, application or account;
  5. send you updates about our brands, services and promotions, where you have agreed to receive them;
  6. operate, secure and improve the Site, including preventing spam and fraud;
  7. keep business records and meet our legal, regulatory and audit obligations; and
  8. establish, exercise or defend legal claims.

4. Whether you must give us your data

Fields marked with an asterisk (*) on our forms are required. If you do not provide them, we may not be able to respond to your enquiry or process your application. All other fields are optional.

5. Who we share your data with

We do not sell your personal data. We may share it with:

  • The other company in Lim Soon Huat Group (LSH or ALSH), where your enquiry is best handled by that company or by both.
  • Brand principals we distribute for, but only where we have sold that brand's products to you, and only when the brand asks for the information, for example for its sales reporting or a trade programme you take part in.
  • Service providers who support our business, such as website hosting, email, cloud storage, form handling, spam protection, analytics and IT support. They may only use your data to provide services to us.
  • Professional advisers, such as auditors, lawyers and insurers, under duties of confidentiality.
  • Government agencies, regulators, courts or law enforcement, where we are required or permitted by law.
  • A buyer, investor or successor, as part of a proposed or actual merger, acquisition, restructuring, financing or sale of all or part of our business, subject to appropriate confidentiality obligations.

6. Transfers outside Malaysia

Some of our service providers, such as hosting, email and analytics providers, may store or process data outside Malaysia. When this happens, we take steps required by the PDPA to make sure your personal data receives a level of protection substantially similar to that under Malaysian law. Where needed, this includes contractual safeguards.

7. How long we keep your data

We keep personal data only as long as needed for the purposes above, or as required by law. As a guide:

  • enquiries that do not lead to a business relationship: up to 24 months after our last contact;
  • trade account and partnership records: for the duration of the relationship and up to 7 years after it ends, to meet tax and accounting requirements;
  • unsuccessful job applications: up to 12 months, unless you ask us to delete them sooner; and
  • website analytics data: up to 14 months.

When data is no longer needed, we delete it or anonymise it securely.

8. How we protect your data

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. These include encrypted connections (HTTPS) on the Site, access controls and staff confidentiality obligations. Our service providers are required to protect data to similar standards.

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner and, where the breach is likely to cause you significant harm, notify you, as required by the PDPA.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Cookies and analytics

The Site uses cookies and similar technologies to make the Site work, remember your preferences, protect our forms from spam and understand how visitors use the Site.

  • Essential cookies are needed for the Site to function and cannot be switched off.
  • Analytics: we use Google Analytics, a service provided by Google, and WordPress's built-in statistics to understand how visitors use the Site, such as which pages are visited and how long visitors stay. Google Analytics uses cookies and may process information such as your IP address and device details on servers outside Malaysia. We use this information in aggregate only and do not use it to identify you. Google Analytics cookies are only set if you accept them.
  • Spam protection: we use Google reCAPTCHA to protect our forms from spam and abuse. reCAPTCHA checks whether a form is being completed by a person and may collect device and usage information, such as your IP address and browser details. Google may process this information outside Malaysia, and its use is subject to Google's own privacy policy and terms.

Your cookie choices: when you first visit the Site, a cookie banner lets you accept or reject non-essential cookies, including analytics cookies. You can change your choice at any time through the cookie preferences link at the bottom of every page. You can also block or delete cookies through your browser settings.

Some parts of the Site may not work properly if you block essential cookies.

10. Marketing

We will only send you marketing messages if you have agreed to receive them. You can opt out at any time by clicking "unsubscribe" in an email, replying "STOP" to a WhatsApp message, or contacting us using the details below.

11. Your rights

Subject to the PDPA, you have the right to:

  • access the personal data we hold about you;
  • correct personal data that is inaccurate, incomplete, misleading or out of date;
  • withdraw your consent to our processing of your personal data;
  • limit our processing of your personal data, including for direct marketing;
  • ask us to transmit your personal data to another data controller (data portability), where technically feasible and compatible in format; and
  • ask us to stop processing that is causing, or is likely to cause, substantial damage or distress.

To make a request, contact us using the details in section 13. We will respond within the time required by the PDPA. We may need to verify your identity first, and we may charge a fee where the PDPA allows it. Withdrawing consent may mean we can no longer respond to your enquiry or maintain your account.

12. Children

The Site is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

13. Contact us

For questions, requests or complaints about your personal data, please contact our Data Protection Officer, Lim Ming Fei:

Data Protection Officer, Lim Soon Huat Group
Lot 46, Lorong Kuang Bulan, Taman Kepong, 52100 Kuala Lumpur, Malaysia
Email: [email protected] (subject: "Data Protection")
Phone: +603 6274 1101

If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with the "last updated" date. Where changes are significant, we will take reasonable steps to let you know.

15. Language

This policy is published in English and Bahasa Malaysia. If there is any inconsistency between the two versions, the English version will prevail.