Who we are
Grow+ is operated by Tagify Sdn Bhd (1684645-W), a company registered in Malaysia (“we”, “us”). This policy explains how we handle personal data under the Personal Data Protection Act 2010 (PDPA). It covers this website, Merchant Admin, the Grow+ POS, Mini POS, kiosk, kitchen and display apps, and the customer apps and ordering websites we run for merchants.
Two kinds of data
- Merchant data. When a business signs up for Grow+, we collect details about the business, its owner and its staff. For this data we decide how it is used.
- Customer data. When you order, book or join a rewards programme through a shop that uses Grow+ (its app, website, kiosk or QR table ordering), the shop decides what it collects and how it uses it. We store and process that data on the shop's behalf. For questions about how a shop uses your data, contact the shop first. We will help them answer.
What we collect
From merchants and their staff
- Name, email address and phone number of the owner and staff.
- Business details: company name, branches, addresses, menus, prices and stock.
- Sign-in details. Passwords and staff PINs are stored only as one-way hashes; we cannot read them.
- Plan, invoice and payment records for your Grow+ subscription.
- Devices paired to your shop (name, type and when they were last used).
- Keys for your own payment account, stored encrypted, so online orders can be paid to you.
From a shop's customers
- Name, phone number and email address, and your birthday if you choose to give it.
- Orders, bookings, receipts, rewards points, stored credit and gift cards.
- A push notification token if you allow notifications in the shop's app.
- One-time codes sent by SMS or WhatsApp to confirm your phone number.
Card and online banking details are entered on the payment provider's own checkout page. Grow+ does not receive or store your full card number.
Why we use it
- To run the service: take and send orders, process payments, keep stock and produce reports.
- To let customers sign in, collect points, redeem rewards and see their orders.
- To send messages you expect: order updates, receipts, booking confirmations and sign-in codes.
- To bill merchants for their Grow+ plan.
- To keep the service secure, prevent fraud and fix problems.
- To meet legal duties, such as tax and accounting records.
A shop may send you offers through its app or by message if you have agreed to receive them. You can turn these off in the app or by contacting the shop.
Who we share it with
We don't sell personal data. We share it only with:
- The shop you are buying from or booking with.
- Payment providers, to process payments.
- Messaging providers, to send SMS and WhatsApp messages and push notifications.
- Hosting and email providers that run our servers and send email for us.
- Apple and Google, when a shop publishes its own app on the App Store or Google Play.
- Authorities, when the law requires it.
Some of these providers may store data outside Malaysia. When that happens we take steps to make sure the data is protected to the standard the PDPA requires.
How long we keep it
We keep merchant data while the account is open and for as long as needed afterwards to meet legal and accounting duties. Customer data is kept while the shop uses Grow+, unless the customer deletes their account or the shop removes it. Transaction records may be kept longer where the law requires.
Your rights
Under the PDPA you can:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is wrong or out of date.
- Withdraw your consent to marketing messages at any time.
- Delete your customer account yourself, from the account screen in the shop's app.
To make a request, contact us or email [email protected]. We may need to confirm who you are first. We reply within 21 days.
Keeping it safe
Every business's data is kept separate from every other's, connections are encrypted, and passwords and payment keys are never stored in plain text. Read more on our Security page.
Children
Grow+ is not meant for children under 13, and we don't knowingly collect their personal data.
Cookies
This website does not use advertising or tracking cookies. Merchant Admin and shop websites store small amounts of data in your browser to keep you signed in and remember your cart.
Changes to this policy
We will post any changes on this page and update the date at the top. If a change affects how we use your data in a significant way, we will tell merchants by email before it takes effect.
Contact
For questions or complaints about privacy, contact us or email [email protected]. Tagify Sdn Bhd (1684645-W).