Privacy & Data Protection

Privacy & Cookie Policy

Name: SARI TANI DESA SDN. BHD.
Address: No. 21 & 23, Jalan Apollo U5/188, Bandar Pinggiran Subang, Seksyen U5, Shah Alam, Selangor, 40150, MY
Telephone: +603-7847 5855

Sari Tani Desa Sdn. Bhd. respects your privacy and is committed to protecting personal data collected through our website, communications and business dealings. This page explains how we collect, use, store, protect and manage personal data, as well as our use of cookies and related technologies.

Updated: 22 October 2026

PRIVACY NOTICE

Sari Tani Desa Sdn. Bhd.
www.saritanidesa.com

Effective Date: 22 October 2026
Last Updated: 22 October 2026

INTRODUCTION

Sari Tani Desa Sdn. Bhd. (“Sari Tani Desa”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data under our control.

For the purposes of this Privacy & Cookie Policy, Sari Tani Desa Sdn. Bhd. is the data controller in respect of personal data processed by us in connection with our business operations and website.

This Privacy & Cookie Policy explains how we collect, use, process, store, protect and disclose personal data when you:

visit www.saritanidesa.com;
contact us;
submit an enquiry form;
request a quotation;
deal with us as a customer or prospective customer;
use our products or services;
deal with us as a supplier, contractor or business partner; or
interact with us through other communication channels.

This Policy also explains our use of cookies and related technologies on our website.

This Policy should be read together with any applicable terms, contracts, forms, notices, consents or other documents relating to your dealings with Sari Tani Desa.

1. PERSONAL DATA WE COLLECT

Depending on how you interact with us, personal data we may collect includes:

name;
company or organisation name;
job title or business information;
email address;
telephone number;
correspondence address;
contact information;
enquiries, messages or comments;
information submitted through our Contact Us form;
quotation requests;
information regarding products or services of interest;
information relating to contract manufacturing or Contract OEM;
product formulation information;
information relating to raw materials and herbal supplies;
information relating to grinding services;
information relating to packaging;
information relating to advisory services;
information relating to product registration;
information relating to research or product development projects, where applicable;
order, delivery or payment information, where applicable;
documents provided to us;
records of communications between you and us;
Internet Protocol (IP) address;
device type;
browser type;
operating system;
date and time of access;
pages visited;
traffic source;
log data; and
other technical information relating to website usage.

We may also collect other information that you voluntarily provide to us.

We will endeavour to ensure that personal data collected is adequate, relevant and not excessive for the purposes for which it is required.

2. SOURCES OF PERSONAL DATA

We may obtain personal data:

directly from you;
from the company or organisation you represent;
from an authorised representative;
through our website;
through enquiry forms;
by telephone or email;
through meetings or business communications;
from documents provided to us;
from customers, suppliers or parties connected with a transaction;
from lawful public sources; or
through website technologies and digital services used by us.

3. HOW WE COLLECT PERSONAL DATA

Personal data may be collected when you:

complete a form on our website;
contact us;
request information;
request a quotation;
enquire about products or services;
use our Contract OEM services;
request herbal or raw material supplies;
use our grinding services;
request advisory or formulation services;
request assistance relating to packaging or product registration;
enter into a contract or business transaction with us;
submit documents;
communicate with our personnel; or
visit and use our website.

Certain technical information may also be collected automatically through website servers, system logs, cookies or related technologies.

4. PURPOSES OF PROCESSING PERSONAL DATA

We may process personal data for purposes including:

identifying and communicating with you;
responding to enquiries;
providing information regarding our products or services;
preparing quotations;
processing customer requests;
providing Contract OEM services;
managing product development and formulation projects;
supplying herbs or raw materials;
providing grinding services;
providing packaging services;
providing advisory services;
assisting with product registration matters;
managing customer relationships;
managing supplier and contractor relationships;
performing contracts or business transactions;
processing orders;
arranging deliveries;
processing payments, where applicable;
issuing invoices or related documents;
managing complaints or feedback;
maintaining administrative, accounting and operational records;
conducting audits;
improving our products and services;
improving website user experience;
analysing website usage;
protecting the security of our website, systems and networks;
detecting or preventing fraud, misuse and unlawful activities;
complying with legal or regulatory requirements;
responding to lawful requests from authorities; and
other purposes directly related to your dealings with us.

Where we intend to use personal data for a new purpose that is not related to the original purpose, we will take appropriate measures, including obtaining consent where required by law.

5. SENSITIVE PERSONAL DATA

We generally do not require website users to provide sensitive personal data through ordinary enquiry forms.

You are advised not to submit unnecessary sensitive information through our Contact Us form, email or other open communications.

Where sensitive personal data is required for a specific purpose, it will be processed in accordance with applicable legal requirements.

6. REQUIREMENT TO PROVIDE PERSONAL DATA

Certain information may be required in order for us to:

respond to an enquiry;
prepare a quotation;
establish or manage a customer relationship;
perform a contract;
process a transaction; or
provide a product or service.

If required information is not provided, we may be unable to process your request or provide the relevant service.

Information identified as optional is not mandatory.

7. MARKETING AND COMMUNICATIONS

With your consent where required, we may send information relating to:

products;
services;
promotions;
events;
company news;
articles;
herbal-related content; or
business information that may be relevant to you.

You may request to stop receiving marketing communications at any time.

A request to stop receiving marketing communications will not affect communications necessary for an ongoing transaction, contract, enquiry or service.

8. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We do not sell or rent your personal data to third parties for their independent use.

However, where necessary for the purposes described in this Policy, personal data may be disclosed to:

authorised employees or officers of Sari Tani Desa;
related companies, where applicable;
information technology providers;
website hosting providers;
cloud storage providers;
cybersecurity providers;
email and communication providers;
business system providers;
suppliers;
contractors;
logistics or delivery companies;
payment providers or financial institutions;
auditors;
accountants;
lawyers;
professional advisers;
insurance providers, where applicable;
government agencies;
regulatory bodies;
enforcement authorities; or
other parties where disclosure is permitted or required by law.

Parties processing personal data on our behalf are expected to handle such data appropriately and only for purposes connected with the services they provide.

9. THIRD-PARTY SERVICE PROVIDERS

We may engage third-party service providers to support our website or business operations.

These services may include:

website hosting;
security;
data storage;
email;
communications;
analytics;
maps;
delivery;
payments; or
other technology systems.

Use of such services may require certain data to be processed by the relevant service provider.

We will take reasonable steps to use service providers that maintain appropriate data protection safeguards.

10. TRANSFER OF PERSONAL DATA OUTSIDE MALAYSIA

Certain technology, hosting, cloud storage, communications or digital service providers used by us may operate servers or facilities outside Malaysia.

Accordingly, certain personal data may be transferred, stored or processed outside Malaysia.

Where cross-border transfers occur, we will take reasonable steps and comply with applicable legal requirements to ensure that personal data receives an appropriate level of protection.

11. DATA SECURITY

We take reasonable administrative, physical and technical measures to protect personal data against:

loss;
misuse;
unauthorised access;
unauthorised use;
unauthorised disclosure;
alteration;
destruction; or
other unauthorised processing.

Security measures may include access controls, password management, system protection, personnel access restrictions and other appropriate safeguards.

Access to personal data is restricted to persons who require such information for their work or to provide relevant services.

Although reasonable security measures are taken, no electronic system or transmission of data over the Internet can be guaranteed to be completely secure.

12. PERSONAL DATA BREACHES

If a personal data breach occurs or is suspected, we will assess the incident and take appropriate action.

This may include:

containing or stopping the breach;
investigating the cause;
assessing the nature and volume of data involved;
reducing possible adverse effects;
addressing security weaknesses; and
notifying the Personal Data Protection Commissioner and/or affected individuals where required by applicable law.

13. DATA RETENTION

Personal data will be retained only for as long as necessary to:

fulfil the purposes for which it was collected;
perform a contract or transaction;
resolve an enquiry;
resolve disputes;
maintain business records;
comply with accounting, audit or tax requirements;
comply with legal or regulatory obligations; or
protect legitimate business interests.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal requirements.

14. YOUR PERSONAL DATA RIGHTS

Subject to applicable law, you may contact us to:

request access to your personal data;
request correction of inaccurate data;
update incomplete or outdated data;
withdraw consent to certain processing activities, where applicable;
request that direct marketing be stopped;
make enquiries regarding how your data is processed;
lodge a complaint regarding the handling of personal data;
make a request relating to data portability where the right applies and can be implemented; or
exercise other rights available under applicable data protection law.

We may request information or documents to verify your identity before processing a request.

Certain rights may be subject to exemptions or limitations permitted by law.

15. WITHDRAWAL OF CONSENT

Where processing depends on your consent, you may withdraw that consent by contacting us.

Withdrawal of consent will not affect processing lawfully carried out before the consent was withdrawn.

Withdrawal of certain consent may also mean that we are unable to provide particular products or services.

16. ACCURACY OF PERSONAL DATA

We take reasonable steps to ensure that personal data is accurate, complete and up to date to the extent necessary for the purposes for which it is used.

You are also responsible, to the extent reasonably possible, for ensuring that information provided to us is correct.

If your information changes, please inform us.

17. CHILDREN’S PERSONAL DATA

The Sari Tani Desa website and services are primarily intended for adult users and business purposes.

We do not intend to knowingly collect children's personal data through our website without a lawful basis or the consent of a parent, guardian or other authorised person where required.

If you believe that a child’s personal data has been provided to us inappropriately, please contact us.

COOKIES AND WEBSITE TECHNOLOGIES

18. WHAT ARE COOKIES?

Cookies are small data files stored on your computer, smartphone, tablet or other device when you visit a website.

Cookies and similar technologies may help a website to:

operate properly;
improve security;
remember certain preferences;
understand website usage;
improve performance; and
improve user experience.

19. TYPES OF COOKIES WE MAY USE

A. Essential Cookies

These cookies are necessary for the basic operation of the website.

They may be used for:

technical functions;
security;
navigation;
session management; or
other functions required for the website to operate.

B. Functional Cookies

These cookies may help the website remember certain choices or settings made by users.

C. Performance and Analytics Cookies

Where analytics services are used or enabled on our website, cookies or analytics technologies may help us understand:

number of visits;
pages visited;
duration of visits;
device types;
browser types;
traffic sources;
general user interactions; and
website performance.

This information may be used to improve the design, content and performance of our website.

D. Third-Party Cookies or Technologies

Certain website functions may involve third-party providers such as:

Google Maps;
embedded content;
video services;
social media;
analytics; or
other third-party technologies.

These providers may use their own cookies or similar technologies in accordance with their respective policies.

20. GOOGLE MAPS AND THIRD-PARTY CONTENT

The Sari Tani Desa website uses or may use third-party content such as Google Maps to provide location-related functions.

When you use or load third-party content, the relevant provider may receive certain technical information such as:

IP address;
device type;
browser type;
usage information; or
other data permitted by your device or browser settings.

The collection and use of data by such third parties are governed by their respective privacy policies, terms and settings.

21. COOKIE CONSENT AND CHOICES

Where appropriate, we may provide a cookie banner or cookie management tool allowing users to choose certain categories of cookies.

Options may include:

Accept All

Reject Optional

Manage Preferences

Cookies that are strictly necessary for the operation of the website may be used to the extent permitted by applicable law.

For optional cookies such as analytics, marketing or certain third-party technologies, user choices or consent will be respected where applicable.

22. HOW TO MANAGE OR DELETE COOKIES

Most web browsers allow you to manage cookies through browser settings.

Depending on your browser, you may be able to:

allow all cookies;
block all cookies;
block third-party cookies;
delete stored cookies;
set cookie duration; or
receive a notification when a website wishes to store a cookie.

Blocking certain cookies may affect the functionality or user experience of the website.

23. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services.

This Privacy & Cookie Policy does not govern the privacy practices of third-party websites.

We encourage you to review the privacy policies of those third parties before providing personal data.

Sari Tani Desa is not responsible for the content, security or privacy practices of websites outside our control.

24. CHANGES TO THIS POLICY

We may update or amend this Privacy & Cookie Policy from time to time to reflect changes in:

our business operations;
products;
services;
technology;
website functionality;
data protection practices; or
legal and regulatory requirements.

The latest version will be published at www.saritanidesa.com together with the date of the latest update.

We encourage users to review this page periodically.

25. APPLICABLE DATA PROTECTION LAW

Sari Tani Desa Sdn. Bhd. will handle personal data in accordance with the Personal Data Protection Act 2010 [Act 709], its amendments and applicable data protection laws, regulations, standards, circulars and guidelines in Malaysia.

26. CONTACT US

If you:

have questions regarding this Privacy & Cookie Policy;
wish to understand how your data is used;
wish to request access to your data;
wish to request a correction;
wish to withdraw consent;
wish to stop receiving marketing communications;
wish to exercise a data-related right; or
wish to lodge a privacy-related complaint,

please contact:

Sari Tani Desa Sdn. Bhd.

No. 21 & 23, Jalan Apollo U5/188
Bandar Pinggiran Subang, Seksyen U5
40150 Shah Alam
Selangor, Malaysia

Telephone: +603-7847 5855

You may also contact us through the Contact Us page at:

www.saritanidesa.com

For personal data matters, please indicate:

“Personal Data Protection / Privacy”

in your enquiry.

27. ACKNOWLEDGEMENT AND CONSENT

By providing personal data to us, you acknowledge that you have been given an opportunity to read and understand this Privacy & Cookie Policy.

Where consent is required for a particular processing activity, such consent will be obtained in accordance with applicable legal requirements.

Use of the website alone will not be treated as consent to a processing activity requiring specific consent where applicable law requires such consent to be obtained separately.

28. LANGUAGE

This Privacy & Cookie Policy is provided in Bahasa Malaysia and English.

Both versions are intended to convey the same meaning.

In the event of any inconsistency or conflict in interpretation between the two versions, the Bahasa Malaysia version shall prevail, to the extent permitted by applicable law.