Privacy Policy

1.1 Account Information. When you register, we collect your full name, email address, phone number, and password (stored as a secure hash).

1.2 Profile Data. Profile picture you upload voluntarily.

1.3 Listing Data. Item photos, descriptions, declared values, defect disclosures, and pre-pack videos you submit.

1.4 Transaction Data. Swap history, credit balance, top-up records, swap protection selections, and platform fees.

1.5 Technical Data. IP address, browser type, device information, and page visit logs collected automatically when you use the Platform.

1.6 Communications. Messages you send through the Platform's swap request system.

3.1 Other Users. Your public profile (name, badge tier, swap count, active listings) is visible to other users. Your contact details are only shared with your swap counterpart after a swap is accepted, solely for shipment coordination.

3.2 Service Providers. We may share data with trusted third-party providers (cloud hosting, payment processing, courier APIs) who are contractually bound to protect your data.

3.3 Legal Requirements. We may disclose your data to law enforcement or regulatory authorities when required by Malaysian law or a valid court order.

3.4 We do not sell your personal data to third parties.

We retain your account data for as long as your account is active. Upon account deletion request, we delete your personal data within 30 days, except where retention is required by law (e.g., financial transaction records are retained for 7 years under Malaysian accounting regulations). Uploaded photos may remain in our backup systems for up to 90 days after deletion.

ReSwaps uses session cookies to keep you logged in and preference cookies to remember your language setting. We also use Google Translate, which may set its own cookies. We do not use advertising tracking cookies. You may disable cookies in your browser settings, though this may affect Platform functionality.

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and access controls. However, no system is 100% secure. You are responsible for keeping your login credentials confidential. Please notify us immediately if you suspect unauthorized access to your account.

Under the Personal Data Protection Act 2010, you have the right to:

• Access your personal data held by us
• Correct inaccurate personal data
• Withdraw consent for marketing communications
• Request deletion of your account and data

To exercise any of these rights, contact us at privacy@reswaps.com.

Our Platform may contain links to third-party websites (e.g., courier tracking pages). We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

ReSwaps is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor has registered, we will delete their account and data immediately.

We may update this Privacy Policy from time to time. We will notify registered users via email or an in-platform notice at least 14 days before changes take effect. Continued use after the effective date constitutes acceptance of the revised policy.

For privacy-related enquiries or data requests:

ReSwaps Privacy Office
Email: privacy@reswaps.com
Response time: within 14 business days