1. Who we are
Oxbrite Sdn Bhd ("Oxbrite", "we") runs a laundry pickup & delivery service in the Klang Valley, Malaysia. This policy covers the Oxbrite website (oxbrite.co), our WhatsApp service number, and the service itself. Questions or requests? WhatsApp us at +60 14-933 7861 — a human reads every message.
2. What we collect
- To run your service: your name, phone number, delivery address, pickup/delivery schedule, order and weight history, and notes you give us (e.g. access instructions, stain remarks).
- Photos: for commercial orders we photograph bags/linen on the scale as proof of weight. These photos show items, not people or home interiors.
- Payments: subscription and invoice records (amount, status). Card details are handled by our payment provider — we never see or store your full card number.
- Messages: if you WhatsApp us, we keep the conversation so any staff member can help you without asking you to repeat yourself.
- Website: we use cookieless web analytics to understand which pages are useful and when people visit. Your browser keeps a random identifier in local storage (not a cookie). We record the page pattern, time, device class, referring website, campaign tag, and country; we do not store your IP address, secret link token, name, phone number, or email in analytics. Raw analytics events are deleted after 13 months. Cloudflare Web Analytics provides a separate aggregate count and does not give us an advertising profile about you.
3. Why we collect it
Only to deliver the service you asked for: routing pickups and deliveries, sending you order confirmations, reminders and receipts (by WhatsApp), billing correctly, resolving disputes about weight or items, and improving the service. We do not sell or rent your data to anyone, ever.
4. WhatsApp & Meta
We use the WhatsApp Business Platform (Meta) to send service messages — confirmations, pickup/delivery reminders, receipts. These are service messages about your own orders, not advertising. Message delivery runs through Meta's infrastructure under Meta's own terms; inbound WhatsApp history from before our move to the platform remains on your phone and ours as normal chat history.
5. Who processes data for us
We use a small set of processors, each under contract to handle data only on our instructions: Meta (WhatsApp messaging), our hosting provider (application hosting), our operations database provider (order records), and our payment provider (subscription and card payments). Access is limited to staff who need it to do their job.
6. How long we keep it
- Active customers: as long as the service relationship lasts.
- After you leave: order and billing records are kept as long as needed for accounting and tax law in Malaysia (typically up to 7 years), then deleted.
- Conversations and photos: removed when no longer needed for the service record.
7. Your rights & how to delete your data
You can ask us to show you what we hold, correct it, or delete it. Deletion requests are free and finished within 14 days.
To request deletion: WhatsApp +60 14-933 7861 with the message "Delete my data" from the number on your account. We'll delete your customer record, order history, photos and saved conversations, except records we must legally keep (e.g. tax invoices, which are kept without your contact details where possible). We'll confirm once it's done.
8. Security
Access to customer data is restricted to authorised staff and protected by unique credentials and multi-factor authentication on every system that holds it. If a data breach ever affects you, we will tell you promptly and plainly.
9. Changes
If this policy changes materially, we'll note the new date below and tell active customers over WhatsApp before it takes effect.