Last updated: 20 October 2026
This notice explains how Norgesfoods PLT (LLP0011594-LGN), 19B Jalan Wan Kadir 2, Taman Tun Dr. Ismail, 60000 Kuala Lumpur (“Norgesfoods”, “we”, “us”), collects and uses your personal data, as required by Malaysia’s Personal Data Protection Act 2010 (PDPA).
1. What personal data we collect
- Contact details: your name, phone number, WhatsApp number and email address.
- Order details: delivery address, products ordered, order notes, and pickup or delivery preferences.
- Payment information: proof of payment you send us, such as a bank transfer slip or Touch ’n Go eWallet receipt, and the name on the transfer. We do not collect or store card numbers.
- Messages: what you send us on WhatsApp, by email or through the website.
- Website data: cookies and similar technologies used by WooCommerce (to keep your cart and checkout working) and by Google Analytics (to understand how the site is used).
2. How we use it
- To process, pack and deliver your orders, or arrange pickup in TTDI.
- To confirm orders, payments and delivery times with you, mainly on WhatsApp.
- To keep records for accounting, tax and regulatory purposes.
- To send you updates about new stock or offers, but only if you have agreed. You can opt out at any time by replying “STOP” or telling us on WhatsApp.
- To improve our website and service.
3. Who we share it with
We do not sell your personal data. We share it only as needed with:
- delivery partners and riders, who receive your name, phone number and address so they can deliver your order;
- service providers who run our website, email, payments and analytics (for example our web host, WooCommerce, Google Analytics, and our email newsletter provider MailerLite);
- authorities, where required by law.
Some of these providers may store data outside Malaysia. Where they do, we use reputable providers with appropriate safeguards.
4. How long we keep it
We keep order and payment records for as long as Malaysian tax and accounting law requires (generally 7 years). We keep other personal data only as long as we need it for the purposes above, then delete it.
5. Your rights
Under the PDPA you can ask us to access or correct your personal data, ask us to stop direct marketing, and withdraw your consent (although this may mean we can’t fulfil orders). To make a request, contact us using the details below. We will reply within 21 days.
6. Security
We take reasonable steps to protect your personal data from loss, misuse and unauthorised access. Our website uses HTTPS encryption.
7. Contact
Norgesfoods PLT, 19B Jalan Wan Kadir 2, Taman Tun Dr. Ismail, 60000 Kuala Lumpur
Email: info@norgesfoods.com
WhatsApp: +60 11-1140 5539
Data protection contact: Mitchell Chua
If there is any inconsistency between the English version and a Bahasa Malaysia version of this notice, the English version prevails.
