Privacy Policy

This notice explains what ListingLab collects when you use the store bot and this website, and how it is used, in line with Malaysia's Personal Data Protection Act 2010.

What we collect

Telegram account details that Telegram shares with bots: your numeric Telegram ID, username, first and last name, and language setting.
Google account details, only if you log in to the website with Google: your name, email address and Google account ID, used to sign you in and to reach you about your orders. We never see your Google password.
Campaign link: if you opened the store from one of our ads or shared links, the name of that campaign, so we can tell which promotions work. We do not use advertising cookies or ad tracking pixels.
Website statistics: our public pages (the shop, products and guides) use Google Analytics, which sets cookies to count visits and records the pages viewed, the device and browser, and the approximate location. It is not used on account, order, login or payment pages. When you buy, our server tells Google Analytics that a sale happened (the order number, product, amount and an anonymous visitor id, never your name, email, phone or payment details), so we can see which pages and adverts lead to sales.
Order records: products ordered, prices, order and invoice numbers, timestamps, delivery status and warranty dates.
Payment references from our payment provider CHIP: the purchase ID, payment status, amount and time. We do not receive or store your bank login, card number or bank account balance.
Store balance records: top-ups, purchases paid with balance, refunds and the resulting balance.
Support messages you send through the bot.
Technical logs such as request times and IP addresses, kept for security and fraud prevention.

How we use it

To process and deliver your orders, issue invoices and honour warranties.
To confirm payments with CHIP and to prevent fraud and abuse.
To answer support requests.
To send store announcements only if you leave them switched on in Notifications.

Who we share it with

CHIP, to create and verify your payment.
Telegram, which carries every message between you and the bot.
Google, for the website statistics above (Google Analytics).
Authorities, where the law requires it.

We do not sell your personal data.

Storage and security

Data is kept on a server we control. Digital items held in stock are stored encrypted, and access to the admin tools is restricted to authorised staff.

How long we keep it

Order, payment and invoice records are kept for as long as Malaysian tax and accounting rules require. Support messages and logs are kept only as long as they are needed for the purposes above.

Your choices

You can ask to access or correct your data, or ask us to delete data we are not required to keep, by contacting support:

Telegram support: @SpaceTree1
In the store bot: open Help or an order, then Support, to open a ticket linked to your order.

We may update this notice. The current version is always on this page.