Privacy Policy - Dommas Food | Pizza Deals in Ipoh, Seri Iskandar & Gunung Rapat

Last updated: July 2026

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our online self-collection ordering service. It is prepared in accordance with the Malaysian Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Dommas Food Sdn Bhd (202501038443 (1639852-W)), an authorised franchisee of Domino’s Pizza Malaysia, operating self-collection ordering for our outlets in Perak, Malaysia (Gunung Rapat, Seri Iskandar, and Section 18, Ipoh).

Business address: NO 45A, HALA TAMAN MERU 13, TAMAN MERU 2B, 30200, IPOH, PERAK.

Email: support@dommasfood.com

WhatsApp/Phone: +60178748845

Website: dommasfood.com

2. What Data We Collect

When you use our ordering service, we collect:

Full name
Phone number
Email address
Order details and preferred collection outlet
Preferred collection time
Payment confirmation data (transaction status and reference; we do not collect or store your full card number or online banking credentials — these are handled directly by our payment gateway)
Technical and usage data from our website (see Section 8, Cookies & Tracking)

3. Why We Collect It (Purpose)

Your data is collected and used solely for the following purposes:

To process, coordinate, and fulfil your order
To confirm your collection details via WhatsApp or email
To contact you regarding your order status, changes, or issues
To process payments and, where applicable, refunds
To keep records required for our business and to comply with legal obligations
To follow up on future orders only where you have given consent

We will not use your data for a materially different purpose without informing you and, where required, obtaining your consent.

4. Legal Basis and Consent

We process your personal data on the basis of your consent (given when you tick the consent box and submit the form) and where processing is necessary to perform our contract with you (i.e. to fulfil your order). By submitting the form, you confirm you have read and understood this Policy and agree to your data being processed as described.

5. Who We Share It With (Data Processors and Recipients)

We do not sell or rent your personal data. We share it only as needed to run the service, with:

The relevant Domino’s outlet — to prepare and fulfil your order.
Billplz — our payment gateway, to process payments and refunds.
Tally (tally.so) — the form platform used to collect your order.
Brevo — for order and email communications.
Google (Google Sheets/Workspace) — for order record-keeping.
Cloudflare — for website, routing, and security services.
WhatsApp/Meta — where you are contacted via WhatsApp for order updates.

These providers act as our processors or service providers and are only permitted to use your data to provide their services to us. We may also disclose data where required by law or by a lawful request from an authority.

6. How We Store It and Data Retention

Your data is stored securely using the platforms above. We apply reasonable security measures to protect your data against loss, misuse, and unauthorised access.

We do not retain your personal data longer than necessary for the purposes described. Order records are kept for as long as needed to fulfil the order and meet our legal and business requirements, after which they are deleted or anonymised. Marketing follow-up data is retained only while you remain consented. As a general rule, submissions older than one (1) year are deleted periodically unless we are required to keep them longer.

7. Cross-Border Transfer

Some of our service providers (such as Tally, Brevo, Google, Cloudflare, and Billplz’s infrastructure) may store or process data on servers outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard consistent with the PDPA — for example, by using established providers that offer adequate protection or contractual safeguards, in line with Malaysia’s cross-border transfer requirements.

8. Cookies & Tracking

Our website may use cookies and similar technologies, including the Meta Pixel, to help the site function, understand usage, and measure the effectiveness of our marketing. These tools may collect technical data (such as device and browsing information) and may be used for advertising and retargeting. You can control cookies through your browser settings and your ad-preference settings on the relevant platforms. Where required, we will seek your consent for non-essential cookies.

9. Your Rights Under the PDPA

Under Malaysia’s Personal Data Protection Act 2010 (as amended), you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Withdraw your consent to processing at any time (this may affect our ability to serve you)
Limit the processing of your data in certain circumstances
Data portability — request that your personal data be transmitted to another data controller, where technically feasible and in a compatible format

To exercise any of these rights, contact us using the details in Section 11. We will respond within the timeframes required under the PDPA.

10. Data Breaches

If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and, where required, affected individuals, in accordance with the breach-notification requirements introduced by the PDPA (Amendment) Act 2024.

11. Contact Us / Data Protection Enquiries

For any data-related enquiry, to exercise your rights, or to withdraw consent, contact:

Dommas Food Sdn Bhd Business address: NO 45A, HALA TAMAN MERU 13, TAMAN MERU 2B, 30200, IPOH, PERAK.