1. Who we are
Criptora Freight Networks Sdn Bhd (SSM No. 202401047281 (1547281-M)) is the data controller for personal information processed through the criptora.live website, the quote and contact forms, and the shipment files we open on behalf of our customers. Our registered office is Suite 18-03A, Menara UOA Bangsar, No. 5 Jalan Bangsar Utama 1, 59000 Kuala Lumpur, Malaysia.
2. The personal data we handle
From visitors to the public website, we collect contact identifiers you provide (name, email, telephone, company), the content of any message you send, and technical metadata such as IP address, browser user agent, referrer and the time of the request.
For shipments we are commissioned to forward, we additionally process commercial information needed to clear and move cargo: shipper and consignee names and addresses, HS-classified commodity descriptions, INCO terms, value declarations, identity documents required by customs (passport or NRIC numbers for individual consignees), and bank or e-money details if you arrange a refund.
3. Why we process it
- To respond to enquiries, prepare freight quotations and book cargo on your behalf.
- To file declarations, certificates of origin and permits with Malaysian and overseas customs authorities.
- To arrange marine, aviation and goods-in-transit insurance with our underwriters.
- To raise invoices, recover duty refunds and meet record-keeping obligations under the Customs Act 1967 and Companies Act 2016.
- To prevent fraud, protect our network and respect sanctions regimes.
4. Legal bases
For website enquiries, we rely on your consent — given when you submit a form — and on our legitimate interest in operating the business. For shipment files, processing is necessary to perform the forwarding contract and to comply with statutory recordkeeping under Malaysian customs and tax law (which requires us to retain shipping records for seven years).
5. Who we share data with
We share the minimum data necessary with carriers (airlines, shipping lines, road and rail operators), overseas agent forwarders in the Criptora network, customs authorities (Jabatan Kastam DiRaja Malaysia and equivalents overseas), insurance underwriters, payment service providers and our accountants. We do not sell personal data and we do not use it for unrelated marketing.
6. International transfers
Because we move cargo across borders, your data is frequently transferred outside Malaysia — typically to the destination country's customs authority and to the receiving agent. We rely on appropriate safeguards (contractual data-protection terms with our network agents) and only transfer the data items strictly needed to clear or release the cargo.
7. How long we keep it
Quote-only enquiries that do not become shipments are deleted after 24 months. Shipment files are retained for seven years from the year of customs clearance, as required by the Customs Act 1967 and our company audit obligations. Marketing consents lapse 36 months after the last contact.
8. Your rights under the PDPA
You may request access to the personal data we hold about you, correction of inaccurate data, and withdrawal of consent for processing not required for a live shipment. Send requests in writing to the address above or to [email protected] with proof of identity. We respond within 21 days.
9. Security
The site is served over HTTPS. Shipment records are held in access-controlled systems with role-based permissions. We carry out an internal data audit twice a year and review supplier processing terms annually.
10. Cookies
We use a small number of cookies described in our Cookie Policy. The consent banner on the site lets you accept or reject non-essential cookies; essential cookies (session and CSRF) cannot be switched off because the forms will not work without them.
11. Changes
If we change this notice, we will publish the updated text here and refresh the "last updated" date. Material changes affecting active shipment files are also communicated by email to the registered contact on the file.
12. Contact
Questions about this notice or about how we handle your data should be sent to [email protected] or in writing to the head office address. The Personal Data Protection Commissioner of Malaysia (JPDP) is the ultimate supervisory authority.