Privacy Policy
Last updated: October 2026
This policy explains how Bisol Books ("we"), the operator of bisolbooks.com, collects, uses and protects personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its amendments.
1. Data we collect
Account: name, email address and preferred language. Orders: the books you buy, the amount, and the payment status and reference. We do NOT store card or banking details; payments are processed entirely by a licensed payment gateway. Physical orders (when available): recipient name, delivery address and phone number. "Notify me" sign-ups: email address, language and the product you asked about. Messages you send us. Technical data: login-session and language cookies, and server logs (IP address, browser type) kept by our hosting provider for security.
2. Children's data
Our products are for children, but our customers are adults. Accounts and purchases are for parents, guardians and teachers aged 18 and over. We do not ask for, and you should not send us, children's names, photos, schools or other details. If you believe a child has given us personal data, contact us and we will delete it.
3. How we use it
Delivering PDFs and (when available) shipping physical products; sending receipts; managing your account and My Library; replying to your messages; emailing you about new books and products if you agreed to it (unsubscribe at any time); preventing fraud and meeting legal obligations.
4. Who we share it with
We do not sell your data. We share it only with the service providers we need to operate: our payment gateway, website hosting (Vercel), database and file storage (Supabase), email delivery, and couriers for physical orders only. Some providers process data outside Malaysia, for example in Singapore and the United States. We only use providers that offer the safeguards the PDPA requires.
5. Storage and security
Data is protected with access controls, encryption in transit, and download links that expire quickly. Account data is kept while your account is active. Order records are kept for as long as Malaysian tax and accounting law requires (usually 7 years). The "Notify me" list is kept until you unsubscribe.
6. Your rights
You may access and correct your personal data, withdraw marketing consent, ask us to delete your data, ask for a copy of your data in a common format to take elsewhere (data portability), and limit how we process it. Send requests to privacy@bisolbooks.com. We respond within 21 days.
7. Data breaches
If a data breach is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and the affected users as the law requires.
8. Cookies
Cookies are used only for login sessions and language preference. No third-party advertising cookies.
9. Changes
Any changes will be posted on this page with a new updated date.