Personal Data Protection (PDPA)

SoJuice Sdn Bhd (1604394-D) processes personal data for the SoJuice Loyalty app and related services. This page summarises your rights under Malaysia's Personal Data Protection Act 2010 ("PDPA"). The full notice is in our Privacy Policy.

The data user responsible for loyalty account personal data is:

Contact: support@sojuice.com.my

Typically: mobile number (for OTP), optional name, email, birthday and profile photo, loyalty points and stamps, vouchers, gift-card and order records, payment references (not full card numbers), push tokens, consents, support messages, and security / diagnostic logs. Full categories are listed in the Privacy Policy.

Sign-in, loyalty programme operation, outlet redemptions, gift cards and pickup orders, customer support, fraud prevention, service notifications, optional marketing (only with consent), product improvement, and legal compliance.

Subject to the PDPA and applicable exceptions, you may:

• Request access to your personal data.
• Request correction of inaccurate personal data.
• Limit processing in certain cases.
• Withdraw consent for marketing (in-app Account settings or by email).
• Request account deletion via the app or our Account Deletion page.

Email support@sojuice.com.my with the mobile number on your account, or write to the registered address above. We may verify that you control that number before acting.

We do not sell personal data. We share data with participating outlets for counter service, and with processors (hosting, SMS, payments, push, analytics, monitoring) as needed to run the Service, as described in the Privacy Policy. We may also disclose data when required by law.

We use reasonable security measures including encryption in transit and access controls. Some ledger, payment, and audit records may be retained after account deletion where required for fraud prevention, accounting, or law.

If you are not satisfied with our response to a PDPA request, you may contact us again at support@sojuice.com.my or escalate to the Personal Data Protection Commissioner of Malaysia according to the PDPA procedures then in force.

Please read the complete Privacy Policy and Terms of Use.