Privacy Policy

Last updated: 15 July 2026

Sunpal Enterprise (“Sunpal”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit sunpal.my, use the Sunpal customer application, contact our team, or purchase products and services from us.

We process personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and other applicable law. By using our websites, apps and services, you acknowledge this Policy. Where consent is required, we will ask for it clearly.

1. Who we are

Sunpal Enterprise operates sunpal.my and related customer portals for solar, LiFePO₄ battery, inverter and energy products in Malaysia. Our current business contact details are published on our Contact page.

If you have questions about this Policy or wish to exercise your rights, please contact us using the details on that page and mark your message “Privacy”.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data — name, email address, phone number, company name, delivery and billing address, and account credentials.
• Order and transaction data — products ordered, quotations, invoices, payment status, delivery instructions, warranty and RMA records.
• Technical and device data — IP address, browser type, device identifiers, pages viewed, referring URLs, and approximate location derived from IP.
• Communication data — messages you send via contact forms, chat, WhatsApp, email, or the customer app, including attachments you choose to provide.
• Support and product data — serial numbers, installation details, diagnostic information, photos and videos you share for troubleshooting or warranty claims.
• Marketing preferences — newsletter opt-ins, campaign interactions and communication choices, where applicable.

We do not intentionally collect special category data. Please do not send sensitive personal information unless we specifically request it for a lawful support purpose.

3. How we collect data

We collect personal data when you create an account, place an order, request a quote, size a system, register a warranty, open a support ticket, subscribe to updates, or otherwise communicate with us. We also collect data automatically through cookies and similar technologies — see our Cookie Notice.

We may receive information from payment providers, couriers, installers, analytics partners and the Laravel customer application that powers Sunpal portal services, solely as needed to fulfil your request or operate our business.

4. Why we use personal data

We use personal data to:

• process and fulfil orders, payments, delivery and installation;
• create and manage your Sunpal account and customer portal access;
• provide product guidance, Size My System estimates, quotations and after-sales support;
• administer warranties, returns, RMA and safety notices;
• secure our websites, prevent fraud and maintain service integrity;
• improve product pages, storefront performance and customer experience;
• send service messages about your orders, and marketing messages where permitted;
• comply with legal, tax, accounting and regulatory obligations.

Where PDPA requires a legal basis such as consent, contract performance, legal obligation or legitimate interests balanced against your rights, we rely on the basis that fits the processing activity.

5. Cookies and similar technologies

We use essential cookies for cart, checkout, login and security. With your permission where required, we may also use analytics cookies to understand how sunpal.my is used. You can manage preferences through our homepage consent notice and browser settings. Details are in the Cookie Notice.

6. Sharing of personal data

We do not sell your personal data. We may share it with:

• payment processors and banks to complete transactions;
• couriers and logistics partners to deliver your order;
• installation or technical partners when you request on-site services;
• cloud hosting, email, analytics and customer-support providers who process data on our instructions;
• professional advisers, auditors or insurers where reasonably necessary;
• authorities when required by law or to protect rights, safety or security.

Service providers are expected to protect personal data and use it only for the services they provide to us.

7. International transfers

Some systems that support sunpal.my or the Sunpal customer application may process data outside Malaysia. Where that occurs, we take reasonable steps to ensure appropriate safeguards consistent with the PDPA and our contracts with providers.

8. Retention

We keep personal data only as long as needed for the purposes described above, including order history, warranty periods, dispute resolution, tax and legal retention requirements. When data is no longer required, we delete or anonymise it in a secure manner.

9. Security

We use administrative, technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. No method of transmission or storage is completely secure; please protect your account credentials and notify us promptly of any suspected unauthorised access.

10. Your rights

Subject to the PDPA and applicable exemptions, you may request access to your personal data, correction of inaccurate data, and information about how we process it. You may also withdraw consent where processing is based on consent, and object to certain marketing communications.

To exercise these rights, contact us via the Contact page. We may need to verify your identity before responding. If you remain unsatisfied, you may lodge a complaint with the Personal Data Protection Commissioner or another competent authority.

11. Children

Our storefront and services are intended for adults aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can delete it.

12. Third-party sites

Our websites may link to third-party sites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal data.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material updates may also be highlighted on sunpal.my or communicated through your account.

14. Contact

For privacy requests, corrections or questions, please write to us through sunpal.my/contact with the subject “Privacy”.