Privacy Policy

Effective date: 2026-07-01

Last updated: 2026-07-01

BactXActor ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights - in compliance with the Personal Data Protection Act 2010 (Malaysia), the Personal Data (Privacy) Ordinance (Hong Kong), and the General Data Protection Regulation (EU/UK GDPR).


1. Who We Are

BactXActor is a disinfectant brand operated from Malaysia and Hong Kong. You can contact us at:


2. What Data We Collect

We collect personal data only when you actively provide it to us. This may include:

We do not collect sensitive personal data (e.g. health records, financial account numbers) directly.


3. How We Use Your Data

We use your personal data to:

We do not sell, rent, or trade your personal data to third parties.


4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data on the following legal bases:


5. WhatsApp & Third-Party Platforms

When you contact us via WhatsApp, your messages are subject to WhatsApp's Privacy Policy in addition to ours. We use WhatsApp solely to communicate with you - we do not use WhatsApp Business API data for advertising profiling.


6. Cookies & Analytics

Our website currently does not use tracking cookies or third-party analytics tools. If this changes, we will update this policy and display a cookie consent notice accordingly.


7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are typically retained for 7 years to comply with accounting and tax obligations.


8. Data Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. However, no method of transmission over the internet is completely secure.


9. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, contact us at hello@bactxactor.com. We will respond within 30 days.


10. International Data Transfers

As we operate across Malaysia, Hong Kong, and serve customers globally, your data may be processed in different jurisdictions. We ensure appropriate safeguards are in place where required by applicable law.


11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.


12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: