How Lumos Distribution Sdn. Bhd. (BY LUMOS) collects, uses and protects your personal data.
Last updated 21 September 2026
Who we are
This Privacy Policy is issued by Lumos Distribution Sdn. Bhd. (Company No. 201501045552 / 1170875-W), which operates BY LUMOS and the website bylumos.com (“BY LUMOS”, “we”, “us”). It is our notice under the Personal Data Protection Act 2010 of Malaysia (PDPA).
By browsing our website, placing an order, creating an account or sending us a form, you agree that we may handle your personal data as described here. If you do not agree, please do not use those parts of the website.
Personal data we collect
Depending on what you do on our website, we collect:
- Orders and accounts: your name, email address, phone number, delivery and billing address, the items you order, and your login details if you create an account.
- Payments: payments are processed by senangPay. We receive confirmation of the payment, but we do not see or store your full card number or online banking login.
- Warranty registration: your name, WhatsApp number, email address, the product brand, model and serial number, date and place of purchase, your order or invoice number and, if you choose to upload it, a photo or PDF of your receipt.
- Enquiries: your name, email address, phone number and your message.
- Order tracking: the order ID and billing email you type in, used only to look up your order.
- Technical data: your IP address, browser and device type, pages visited and cookies (see “Cookies, analytics and advertising”). We also keep the IP address with form submissions to spot spam and abuse.
You are not required to give us your personal data, but without it we may not be able to deliver your order, register your warranty or reply to you.
How we use your personal data
- to take, process, collect payment for and deliver your orders, and to send you order updates;
- to provide customer service and handle warranty registrations, exchanges, returns and refunds;
- to reply to your enquiries;
- to keep our website secure and to prevent fraud, spam and abuse;
- to understand how the website is used and to measure and improve our advertising;
- to meet our legal, tax and accounting obligations.
We do not sell your personal data.
Transfers outside Malaysia
Some of the providers above, including Google, Meta and Vercel, process data on servers outside Malaysia, for example in the United States. When this happens we rely on providers that protect personal data appropriately, and we share only what is needed.
Security
We take reasonable steps to protect personal data from loss, misuse and unauthorised access, including limiting who on our team can see it. No system is completely secure, so we cannot guarantee absolute security.
How long we keep it
We keep personal data only as long as we need it for the purposes above, including for the warranty period and any claim, and for as long as the law requires us to keep business, tax and accounting records. After that we delete or anonymise it.
Your rights
Under the PDPA you may ask to:
- see the personal data we hold about you and get a copy;
- correct data that is inaccurate, incomplete or out of date;
- withdraw your consent, or limit how we use your data (this may affect what we can do for you).
To make a request, contact us using the details below. We may ask you to confirm who you are first, and we will reply within the time the law requires.
Children
Our website is not meant for people under 18, and we do not knowingly collect their personal data. If you think a child has given us personal data, please contact us and we will delete it.
Language and changes
This notice is provided in English, Bahasa Melayu and Chinese. If there is any difference between them, the English version prevails. We may update this policy from time to time; the latest version and its date are always shown on this page.
Contact us
Questions about this policy, or want to use your rights? Contact Lumos Distribution Sdn. Bhd. (201501045552 / 1170875-W) using the details below and mark your message “Privacy”.
