Legal

Privacy Notice

This notice covers the details you give us when you register for the event at fragmania.my/register or apply as a vendor at fragmania.my/brands/apply. It is written for the Personal Data Protection Act 2010 (PDPA).

What we collect

• Your name, phone number and email address.
• Your age group, the state you are from and your household income range.
• The visitor category you pick, for example student or healthcare professional.
• Which of the events you are attending, and for MySihat Expo, the health topics you pick.
• When you check in at the door.
• If you take part in the lucky draw, the amounts verified at the counter or a booth, which brands you bought from, the staff account that recorded it and, when required, a receipt photo and your confirmation.
• If you enter a competition: your IC number, game ID, team name, any medical note you give, and your payment and results.
• If you apply as a vendor: your brand and company names, SSM or company number and document, country, category, products, booth preference, contact details, screening outcome and vendor account details.
• If you reserve a booth: your selection slot and booth, the contract terms version and acceptance time, invoice amounts and status, and payment transaction reference and status.
• If you follow a brand: your email address, confirmation status and unsubscribe choice. Optional browser notifications store a push subscription for that brand.
• If you use Fragmania ID: hashed one-time sign-in challenges, an expiring signed-in session, your collector tier and badges, your profile visibility choices, exports you request and any deletion request.
• If you use the scent journal and digital booth passport: the products and booths you scan, your private notes, 1–5 ratings, wishlist choices, accepted booth stamps and any lucky draw entries they award.
• When you use a public brand profile, we record privacy-protected counts for profile views, product clicks and visits to the brand's public website or social profiles. We do not give vendors the visitor's identity or contact details.
• If you send a wholesale enquiry: your name, company, email, phone, country, product interest, quantity, message and consent choice.
• If you post a sourcing request: your name, company, email, phone, category, quantity, target price, currency, destination country, supplier matches and acceptance choice.
• If you create a business profile: its public trade details, private company registration number, verification status and date.

Why we collect it

• To give you an attendee number and the QR code you show at the Lucky Draw counter.
• To issue and verify lucky draw tickets, and to contact you if you win.
• To check you in at the door and report attendance to the organisers of the events you selected.
• For competitions, to confirm your identity and age on the day and run the brackets and scoring. Your IC is used for nothing else.
• For vendor applications, to screen the company, verify Malaysian Sdn Bhd free booth eligibility, enforce one grant per company per edition, contact the applicant and create an approved vendor portal account.
• For approved vendors, to allocate booths, administer the booth contract, collect deposit and balance payments, issue receipts and keep accounting records.
• To confirm brand follows, send requested launch alerts, honour unsubscribes and give each vendor aggregate performance counts.
• To let you privately review your verified purchases, order requests, tickets, wins, competition entries, editions, collector tier and badges through Fragmania ID.
• To keep your private scent journal, show your digital booth passport, enforce passport limits and award eligible lucky draw entries.
• To send wholesale requirements to a business, suggest relevant suppliers and let the buyer choose whether to share contact details with one interested supplier.

Who can see it

The festival administrators, and the organisers of the events you selected (MySihat Expo, Fragmania, Anjung Malaysiaku). An organiser only sees people who selected their own event. Counter staff see one attendee at a time when they scan a QR, with the phone number partly hidden, and never the full list. Some accounts are limited to counts and partly hidden contact details with no download at all.

Competition IC numbers are seen only by the festival administrators, the competition organisers and the desk staff who verify you. They are never shown on any public page, and event desk accounts cannot see them.

Vendor applications and SSM documents are seen only by authorised Fragmania staff. SSM files are stored privately and are never shown to the public, other applicants or vendors.

Vendors see only aggregate brand analytics such as views, confirmed follower count, product clicks, order requests, verified scans and outbound visits. They never receive follower email addresses. Buyer phone numbers and email addresses remain private except when a sourcing buyer explicitly accepts an interested supplier.

Trade profile owners receive wholesale enquiry details without the sender's email or phone. Suppliers matched to a sourcing request see its commercial requirements only. A matched supplier receives the buyer's email and phone only after that buyer explicitly accepts the supplier's interest through a private management link.

Company registration numbers are visible only to the business owner and authorised Fragmania staff. Public trade profiles show only a verified badge and never the registration number.

Scent journal notes, ratings, wishlist choices and individual passport history are private. Vendors do not receive them or the identity of visitors who scan their QR codes.

Fragmania ID profiles are private by default. If you enable a public profile, only the individual safe fields you switch on are shown to people with your public link. Phone, email, purchase history and ticket numbers are never public.

When online booth payment is enabled, CHIP receives the limited vendor contact, invoice and payment details needed to process the transaction. Fragmania stores the transaction reference, amount, currency, status and timestamps, but does not receive or store card or online banking credentials.

We do not sell your details. We share them only with the organisers of the events you selected and service providers such as CHIP when needed to deliver the service described here.

How long we keep it

We keep attendee details for the event and the period needed to deliver and account for prizes. Vendor application, slot and operational records are kept only as long as needed to screen applications and administer booths. Contract, invoice and payment records are kept for the applicable accounting and legal retention period, then deleted securely.

Your choices

You can ask to see, correct or delete the details we hold about you. Contact us through the contact page with the phone number you registered with.

In Fragmania ID you can download a JSON copy of your profile data, change each public field, turn the public profile off, or submit a deletion request. We may retain transaction, prize, fraud-prevention or legal records where required.

Every brand alert email includes an unsubscribe link. Unsubscribing stops brand marketing email, including alerts you previously confirmed.