Privacy Policy

Last Modified: 16 July 2026

This Privacy Policy governs the collection, processing, storage, and disclosure of Personal Data by Petra Empire Sdn Bhd (1151810-X), a subsidiary of Woodpeckers Group Sdn Bhd (1299372-H) (collectively referred to as “llaollao Malaysia”, “the Company”, “we”, “us” or “our”). This Privacy Policy applies to the website www.woodpeckers.asia/llaollao, the myllaollaoclub mobile application (“the App”) and any related digital platforms operated by us.

By downloading, installing, registering or continuing to use the App, you signify your explicit consent to the terms of this Privacy Policy. If you are under the age of 18, your registration and continued use of the App are strictly subject to the parental and guardian consent requirements detailed in Section 8 of this Policy.

1. Collection of Personal Data

We comply strictly with the Personal Data Protection Act 2010 (“PDPA”). We only collect Personal Data that is necessary and relevant to providing you with our services and loyalty program benefits.

During account registration and your subsequent use of the App, we may collect information including, but not limited to:

Identity & Contact Details: Your full name, correspondence address, e-mail address, mobile phone number, date of birth and gender.
Technical & Device Data: Your IP address, browser type, device type, operating system, log data and traffic data.
Usage & Transaction Data: Your purchase history, transaction details at participating outlets, accumulated llaoPoints, redeemed rewards and localized GPS location data (where location services are enabled on your device).

2. Purpose of Processing Personal Data

Your Personal Data will be processed by us for the following commercial and legal purposes:

Administering, managing, and maintaining your myllaollaoclub account and loyalty program membership.
Tracking, calculating and validating your transaction history, point accumulation, tier upgrades and reward redemptions.
Processing and delivering targeted promotional offers, birthday rewards, localized marketing updates and news regarding new products or app milestones.
Conducting data analysis, internal research, and market profiling based on demographic and behavioural trends to improve our services and user experience.
Detecting, preventing and prosecuting fraudulent activity, system misuse or unauthorized transactions.
Ensuring internal compliance with our Terms of Use, policies and standard operating procedures.

3. Disclosure of Personal Data

To deliver seamless services, your Personal Data may be shared or transferred between and among Woodpeckers Group Sdn Bhd, its subsidiaries, affiliated companies, registered merchants and our international brand headquarters in Spain (subject to the cross-border provisions in Section 9 of this Policy).

We will keep your Personal Data strictly confidential. We will not sell, trade or share your information with unauthorized third parties. However, you agree that we may disclose your data to authorized third parties, including:

Third-party service providers, data processors or contractors engaged by the Company to assist in app maintenance, payment processing, data hosting or marketing delivery.
Relevant governmental authorities, law enforcement agencies or regulatory bodies where required by law or legal processes.

4. Security and Third-Party Processors

In compliance with the Security Principle of the PDPA, the Company maintains strict technical and organizational security measures to prevent unauthorized electronic access, accidental disclosure, loss or destruction of your data.

Where third-party service providers are appointed to process data on our behalf, the Company ensures that such data processors are contractually bound to provide sufficient security guarantees and process your data strictly in accordance with our instructions and PDPA requirements.

5. Data Retention

Under the Retention Principle of the PDPA, your Personal Data will not be kept longer than necessary for the fulfilment of the purposes outlined in Section 2. We will systematically delete, purge or permanently anonymize your Personal Data once your account has been deleted or has remained completely inactive for a continuous period of seven (7) years, in compliance with statutory financial record retention requirements.

6. Your Rights of Access, Correction, and Erasure

You are responsible for ensuring that the Personal Data you provide to us is accurate and complete. You can update your profile information at any time directly within the settings of the App.

Pursuant to the PDPA, you have the right to request access to your Personal Data, request corrections to inaccurate data, limit the processing of your data or withdraw your consent for marketing communications.

If you wish to permanently delete your account, exercise any of your statutory data protection rights or submit an inquiry regarding your data, please contact our designated Customer Service Team at:

llaollaomy@woodpeckers.asia

7. Changes to this Privacy Policy

The Company reserves the right to modify, update or amend the terms of this Privacy Policy at any time to reflect legislative changes or updates to our operational framework. Revisions will be made effective by placing the updated Policy visibly within the App and on our website. Your continued use of the App following such postings constitutes your binding acceptance of the revised Policy.

8. Processing Data of Minors

In accordance with Section 2 of the myllaollaoclub Terms of Use and Agreement, individuals aged 14 and above are permitted to register an account and participate in our loyalty program. However, if you are under the age of 18 (minor), you must obtain the prior consent of your parent or legal guardian before downloading, installing, registering or continuing to use the App or providing any Personal Data to us.

Where a minor registers an account, the parent or legal guardian is deemed to have:

Consented to the processing of the minor’s Personal Data in accordance with this Privacy Policy; and
Accepted binding responsibility for the minor’s actions, usage of the App, and compliance with the Terms of Use.

If you are a parent or legal guardian and discover that your minor child has registered an account and provided Personal Data to us without your knowledge or consent, you may request the immediate lock, termination and permanent deletion of the minor’s account and personal records by contacting our Customer Service Team at llaollaomy@woodpeckers.asia.

9. Cross-Border Transfer of Personal Data

To facilitate global corporate reporting, business analytics and operational support, your Personal Data may be accessed by, routed through or transferred to our international affiliates and brand principal headquarters located in Spain. By continuing to use the myllaollao app, you provide your explicit consent to the transfer of your Personal Data outside of Malaysia. The Company ensures that all such cross-border transfers comply strictly with Section 129 of the Personal Data Protection Act 2010 and the Personal Data Protection Guidelines on Cross-Border Personal Data Transfer (CBPDT Guidelines), ensuring that overseas receiving entities maintain a level of data protection equivalent to Malaysian statutory standards.