Privacy Policy

1. Introduction & Scope

Aurora Delivery Sdn Bhd ("we", "our", or "us"), operating at Aurora Building, No 1a, Jalan Khoo Teik Ee, Off Jalan Imbi, 55100 Kuala Lumpur, Malaysia and accessible through delivery.aurora2u.com, respects your privacy and is committed to protecting the personal data of senders, recipients, and visitors in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

To deliver parcels securely and maintain accurate milestone telemetry, we collect:

• Sender Details: Name, physical collection address, phone number, and corporate billing details.
• Recipient Details: Full name, delivery destination address, contact number, and delivery special instructions.
• Consignment Metadata: Item category, dimensions, weight, customs declaration (where applicable), and tracking history.
• Proof of Delivery (POD): Recipient signature timestamp and GPS location coordinates upon handoff.
• Technical Telemetry: IP address, device type, and browser cookies used for session authentication and PWA caching.

3. How Your Data Is Utilized

Personal data is strictly used for:

• Physical routing, sorting, dispatch, and final doorstep delivery of parcels.
• Generating public tracking milestones visible via consignment number queries.
• Sending SMS or email delivery status notifications.
• Preventing logistical fraud, uncollected parcel disputes, and processing insurance claims.
• Compliance with regulatory requirements issued by the Malaysian Communications and Multimedia Commission (MCMC).

4. Disclosure to Third Parties

We do not sell, rent, or trade your personal data. Your information is only shared with verified operational parties directly involved in the fulfillment chain (e.g., contracted delivery riders, inter-state line-haul carriers, and airport customs handlers).

5. Data Retention & Security Measures

Consignment records and tracking histories are retained in encrypted databases for 24 months to satisfy audit, taxation, and dispute resolution standards, after which data is anonymized or purged. We apply industry-standard TLS encryption, strict role-based access control, and bcrypt hashing for credentials.

6. Your Rights & Data Protection Officer Contact

Under the PDPA 2010, you have the right to request access to, update, or restrict the processing of your personal information.