Acerca de

PRIVACY POLICY

Last updated: 22 Aug 2025

​

Welcome to the Taste of Japan Mobile App. This Privacy Policy is established by IRR SDN. BHD.  (business  registration  number 1026563-T) for IPPUDO and TM Restaurants SDN. BHD. (business registration number 222473-M) for MAiSEN, in accordance with the Malaysian Personal  Data  Protection  Act  2010 (“PDPA”). It outlines how each brand collects, uses, and stores your data. This policy will be updated from time to time.

​

By signing up for the Taste of Japan Mobile App services, websites, or any services provided by IRR SDN. BHD. (for IPPUDO) or TM Restaurants SDN. BHD. (for MAiSEN), you agree to the practices and policies outlined in this Privacy Policy. You acknowledge and consent to the collection, use, and sharing of your information as described. Any new features or tools added to our mobile apps will also be subject to this policy.

 

We reserve the right to modify or replace any part of this policy. You are bound by any changes to the Privacy Policy when you use the service after the changes have been posted.

 

1. Purpose

This Data Protection Policy outlines how IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) collects, uses, stores, discloses, and protects personal data in compliance with applicable data protection laws under the Personal Data Protection Act 2010.

 

2. Scope

This policy applies to:

• All employees, contractors, and relevant third-party service providers of IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.).

• All customers, and data subjects, who have their personal data collected by IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.).

 

3. Definitions

• Personal Data: Any information that identifies or can be used to identify a living individual including, but not limited to:

  • Names (first, middle and last)

  • Date of Birth

  •  Malaysian NRIC Number

  • Phone number

  • Email Address

  •  Gender

  • Nationality

  • Marketing Preferences

  •  Transaction Details

• Sensitive Personal Data: Data relating, but not limited to, health, political opinions and religious beliefs.

• Processing: Any operation on personal data including, but not limited to:

  • Data Collection

  • Data Usage

  • Data Storage

  • Data Sharing

  • Data Disclosure

  • Data Security

  • Data Retention

  • Data Access

• Data Subject: The individual to whom the personal data relates (e.g. IPPUDO Malaysia or MAiSEN Malaysia customers or employees).

• Data Protection Officer (DPO): The person responsible for data protection compliance as mandated by the June 2025 amendment of the Personal Data Protection Act 2010.

 

4. Data Protection Principles

IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) are committed to upholding the following principles:

• Lawful and Fair Data Processing: Personal data shall be processed lawfully and fairly.

• Purpose Limitation: Data is collected for specified, legitimate purposes.

• Data Minimization: Only data necessary for business functions is collected.

• Accuracy: Stored data must be accurate and kept to date.

• Storage Limitation: Data will not be retained longer than necessary.

• Integrity and Confidentiality: Appropriate security measures are in place.

• Accountability: IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) is accountable for compliance with these principles.

• Data Access: Data subjects maintain the right to access, adjust, and request for their personal data to be securely disposed of.

• Consent: Data subjects’ consent will be obtained before processing data.

• Disclosure: Data subjects’ data will not be shared to third parties without prior consent.

 

5. Collection and Use of Personal Data

• Personal Data is collected for purposes including, but not limited to:

  • Employment and HR Administration.

  • Customer support and service delivery.

  • Marketing and communications.

  • Legal and regulatory compliance.

  • App Access.

  • Operational Maintenance.

  • Facilitate online purchases of food, beverages or services provided by IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.).

  

6. Consent and Notice

• Data subjects will be informed of the intended purpose of data collection.

• Data subjects consent will be obtained where required.

• Data subjects may withdraw consent at any time by writing in to either IPPUDO Malaysia (IRR SDN. BHD.) or MAiSEN Malaysia (TM Restaurants SDN. BHD.).

 

7. Access and Correction

Data subjects have the right to:

• Access their personal data held by IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.).

• Request correction of inaccurate or incomplete data.

Requests can be sent to:

• IPPUDO Marketing (marketing@ippudo.com.my) Or

• 24-01 Menara Generali, No.27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia

  

8. Data Retention

IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) will retain personal data only as long as necessary for legal, regulatory, auditory or business purposes. Data will securely be destroyed when it is no longer required.

 

9. Data Security

IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) implements appropriate security controls including:

• Encryption and firewalls.

• Role-based access controls.

• Audits and monitoring.

• A secure disposal of physical and digital records.

• Engaging third party vendors who are PDPA compliant.

  

10. Third Party Disclosures

Personal data may, in certain events, be shared with the appropriate third parties only when:

• Required for service delivery.

• Mandated by law or regulation.

• With consent from the data subject.

• Third party vendors comply with Malaysian PDPA laws, or laws of a similar standard. Third-party vendors are bound by confidentiality and data protection obligations.

  

11. International Data Transfers

• Personal data will not be transferred outside Malaysia unless:

  • For regulatory, legal, or auditory reasons.

• The receiving country has equivalent data privacy laws to Malaysia, or can provide adequate security.

• Data subject consent is obtained.

• Contractual legal clauses are in place.

 

12. Data Breach Management

In the event of a data breach:

• Affected data subjects and authorities will be notified promptly as required by law.

• Investigation and remediation will be initiated.

 

13. Employee Responsibilities

IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) employees will:

• Handle personal data responsibly and in line with this privacy policy.

• Report any suspected breaches or misuse.

• Attend training and awareness sessions on data privacy.

• Ensure necessary third parties maintain PDPA compliance.

 

14. Training and Awareness

IPPUDO Malaysia (IRR SDN. BHD.) and MAiSEN Malaysia (TM Restaurants SDN. BHD.) will provide regular training to ensure staff understand data protection obligations.

​

15. Policy Review

This policy will be reviewed at least annually or when significant changes to the Personal Data Protection Act occur. Updates will be communicated to all employees.

​

16. Contact Information

Name: Justin Lim Zhan Li

Position: Data Protection Officer
Email: marketing@ippudo.com.my