Privacy Policy

Good Goods (“we”, “our”, “us”) operates the Good Goods marketplace at goodgoods.club — a peer-to-peer platform for buying and selling second-hand goods in Malaysia.

For privacy enquiries, contact us at support@goodgoods.club.

2.1 Account Information

• Email address (used for sign-in via one-time code or social login)
• Display name and profile photo (optional, set by you)
• Phone number (collected during account setup for OTP verification)

2.2 Identity Verification

Your Malaysian national ID number (MyKad) is collected during account setup as required by Malaysian law. It is stored encrypted using AES-256-GCM and an HMAC-SHA256 index. It is never displayed publicly, shared with other users, or used for any purpose other than preventing duplicate registrations and complying with legal obligations.

2.3 Listing Content

• Photos, title, description, price, and location you submit when posting an ad
• GPS coordinates if you use the “Use my location” feature (stored as GeoJSON for distance-based search)
• Tags and category-specific details you provide

2.4 Transaction Data

• Payment records for account activation (MYR 2.00), annual verification (MYR 2.00), and ad credit purchases
• We do not store card or banking details. Payments are processed by CHIP (chip-in.asia)

2.5 Usage Data

• Pages visited, searches performed, listings viewed, and wishlist activity
• Device type, browser, and IP address for security and abuse prevention

• To create and manage your account
• To verify your identity as required by Malaysian law
• To display your listings to other users
• To process payments for platform fees and ad credits
• To enable buyer–seller communication via inquiries
• To power location-based search and recommendations
• To detect fraud, abuse, and policy violations
• To send transactional emails (OTP codes, payment confirmations) — we do not send marketing emails without your consent
• To comply with applicable Malaysian laws and regulations

We do not sell your personal data. We share data only in the following circumstances:

• Other users: Your display name, profile photo, join date, and listing content are visible to other users. Your email, phone, and MyKad number are never shared with other users.
• CHIP (chip-in.asia): Payment processing. CHIP’s privacy policy governs data shared during checkout.
• Google: Maps API is used for location autocomplete and geocoding. IP addresses and query strings may be transmitted to Google.
• Cloudflare: Images you upload are stored on Cloudflare R2. Cloudflare may process metadata related to uploads and CDN delivery.
• Legal requirements: We may disclose data if required by Malaysian law, court order, or to protect the rights and safety of users or the platform.

We use browser cookies and local storage for:

• Session authentication (keeping you signed in)
• Saving your listing drafts locally in your browser (up to 5 drafts, auto-cleared after 7 days)
• Storing your preferred location for search

We do not use third-party advertising or tracking cookies.

• Active listings: Retained for 90 days from posting date, then soft-deleted. After a further 7-day grace window, listing content (images, description) is permanently deleted. A minimal record (title, slug) is retained for URL integrity.
• Sold listings: Content permanently deleted 90 days after the item is marked sold.
• Account data: Retained while your account is active. Request deletion at any time via support@goodgoods.club.
• Transaction records: Retained for 7 years as required by Malaysian financial regulations.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention obligations)
• Withdraw consent for optional data uses

To exercise any of these rights, contact support@goodgoods.club. We will respond within 30 days.

We use industry-standard security measures including AES-256-GCM encryption for sensitive identity data, HTTPS for all data in transit, and access controls limiting who can view user data. No system is 100% secure — if you suspect a security issue, contact us immediately at support@goodgoods.club.

Good Goods is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us at support@goodgoods.club and we will delete the account.

We may update this policy as the platform evolves. Material changes will be announced on the platform. Continued use after the effective date constitutes acceptance of the updated policy.