Effective 16 July 2026 (version 2026-07-16.1).
1. Scope and contact
This Notice explains how EzPz processes personal data across the Platform. It covers account registration, listings, enquiries, managed service requests, vendor operations, support, disputes, payments, marketing preferences, and AI or voice-assisted features. For privacy questions, access, correction, deletion, or objection requests, contact privacy@ezpz.my.
EzPz is operated by Synergik Group Sdn. Bhd. (Company No. 202301034170), which acts as the data user/controller for the Platform. Our registered office is No. D12-08, Menara Mitraland, Jalan PJU 5/1, PJU 5 Kota Damansara, 47810 Petaling Jaya, Selangor, Malaysia. Our Tax Identification Number is C58466059060. We process personal data in line with applicable Malaysian data-protection requirements, including the Personal Data Protection Act 2010 (Act 709), as amended.
2. Personal data we collect
- Account and contact data, including name, email, phone number, authentication identifiers, profile information, and saved addresses.
- Acceptance and preference records, including document versions, timestamps, operational communication settings, and optional marketing choices.
- Listing, enquiry, lead, service-request, quote, booking, schedule, message, review, support, dispute, and safety-report information.
- Seller and vendor application data, including business or professional details, selected categories, service areas, availability, verification documents, and compliance status.
- Payment, refund, payout, invoice, and provider-reference metadata. We do not need to store full card, bank-login, or online-banking credentials.
- Technical and security information, such as device, browser or app details, IP address, cookies, diagnostics, event logs, and fraud-prevention signals.
- AI or voice inputs that you choose to provide, together with structured request details, source, confidence, and confirmation or audit evidence.
3. Why we use personal data
- To create and secure accounts and provide browsing, listings, enquiries, service intake, matching, quotes, scheduling, notifications, support, and dispute handling.
- To verify sellers and vendors, enforce category and safety rules, prevent fraud, protect users, and maintain audit records.
- To support seller identity verification and, only when enabled under updated terms, provider-processed payments, refunds, and payouts.
- To operate, troubleshoot, secure, measure, and improve the Platform and meet accounting, tax, legal, and regulatory obligations.
- To convert AI or voice input into a reviewable draft. AI and voice do not make a binding decision, accept payment, or authorise a refund or payout for you.
- To send optional marketing only where you have chosen to receive it or another lawful basis applies. You can opt out of marketing without opting out of essential transactional or safety messages.
4. Who may receive data
- Relevant customers, vendors, sellers, agents, or other counterparties receive only the information needed for the relevant enquiry, quote, booking, or service.
- Service providers supporting payment, hosting, authentication, communications, analytics, customer support, verification, and AI features process data on our behalf or under their own terms where applicable.
- Professional advisers, insurers, auditors, authorities, or law-enforcement bodies may receive data where required or reasonably necessary for a legal, safety, fraud, or dispute matter.
EzPz does not sell personal data. Some providers may process data outside Malaysia; where this occurs, we assess the transfer and use appropriate contractual, provider, access, and security controls.
5. Retention and security
We retain data only for as long as it is needed for the purpose collected, including account operation, verification, payment, tax, fraud, safety, support, dispute, and legal-record obligations. When data is no longer needed, we delete, anonymise, or restrict it in accordance with the applicable schedule. A deletion request does not require us to erase records we must retain or preserve for these purposes.
We use measures appropriate to the risk, including access controls, authentication, server-side authorisation, encryption in transit, logging, monitoring, and provider controls. No service can guarantee absolute security.
6. Your choices and rights
Subject to verification and applicable law, you may ask us to:
- confirm whether we process your personal data and provide access;
- correct inaccurate, incomplete, misleading, or out-of-date information;
- withdraw optional consent or stop marketing communications;
- delete or restrict data that we no longer need, subject to lawful retention and record-keeping requirements; and
- explain how to escalate a concern to the Malaysian Personal Data Protection Commissioner.
7. AI, voice, and children
Do not submit passwords, bank credentials, full identity-document numbers, or unrelated sensitive personal data through AI or voice features. These features assist with searches and service drafts; they do not replace your review. The Platform is not directed at children. If you believe a child has provided personal data without appropriate authority, contact us so we can assess and act.
8. Updates
We may update this Notice to reflect changes to the Platform, processing, law, or guidance. Material changes will carry a new effective date and be communicated through an appropriate Platform channel.