What personal information is collected?
ST only collects personal information on a voluntary basis. Depending on the activity, this may include name, address, phone number, and email when you purchase, register, request support, submit a complaint, complete a survey, or join a newsletter. Purchases may also require payment and shipping details. You can browse without providing this information, though some features require it.
What other types of information may we collect?
For some activities we may ask for a username and password, or non-personal details such as age, occupation, or employer-related information, and may combine these with personal information. Your browser or client software may also transmit technical or geographic signals. ST may use this for aggregate statistics, security, and system integrity. Customer testimonials with personal details are published only with consent.
How do we use your personal information?
We use personal information to fulfil orders, communicate about products and services, route customer service or technical support, and notify you of relevant upgrades, contests, or offers where appropriate. Information may be enhanced or merged with third-party data to keep contact details current, analyse markets, or improve systems. Marketing and profiling uses help us adapt products and services. Direct marketing is sent only where you have consented or another lawful basis applies, and you can opt out at any time. Business-capacity submissions such as job resumes are handled separately from consumer marketing practices described here.
Who is collecting your information?
When you provide information on an ST site, you are sharing it with ST, its parent, and affiliates unless stated otherwise. Some services involve partner companies; you will be told when another company is collecting data. This policy does not control advertisers or third-party sites linked from ours.
With whom may your personal information be shared?
ST may disclose personal information to vendors who fulfil orders, process mailings, or process and store data on our behalf, under confidentiality expectations. We may also disclose information when required by law, to protect rights and safety, to prevent fraud, or in connection with a merger, acquisition, or sale of a line of business. Public forums make posted information visible online; contact admin@stengineering.com.my if you need help removing personal details you posted.
What choices do I have?
Where offered, you may decline future promotional offers at the time you provide information, unsubscribe from mailings, or opt out of certain features. You can also withdraw optional cookie consent via Cookie settings in the site footer. Service-related announcements required to operate an account generally cannot be opted out of.
Internet protocol addresses
ST may track IP addresses for system administration, aggregate reporting, site tracking, security, and abuse prevention. Under the GDPR an IP address can be personal data. We treat it accordingly and do not use it for advertising unless you have consented to marketing cookies.
Correcting or deleting your personal information
Email admin@stengineering.com.my to correct or request deletion of personal information. We aim to respond within 30 days. In some cases we must retain information to meet legal obligations, resolve disputes, or enforce agreements. Deletion may terminate related accounts or services.
How secure is my personal information?
Access to personal information is controlled. Sensitive transmissions such as payment details use industry-standard encryption (for example SSL). We take reasonable steps so that third parties receiving data provide sufficient protection, and retain information as needed to provide services.
Cookies and similar technologies
Cookies are small files stored on your device. Malaysian PDPA treats personal data collected via cookies as personal data where it can identify you. EU/UK rules also require prior consent for cookies that are not strictly necessary.
- Necessary — security, spam protection on forms (Cloudflare Turnstile), load balancing, and storing your privacy choice. These run because the site cannot function securely without them.
- Analytics — optional. Off unless you opt in. We do not currently load analytics tags; this category exists so they cannot be added later without consent.
- Marketing — optional. Off unless you opt in. We do not currently load advertising or remarketing tags.
Theme preference is stored in local storage on your device, not as a tracking cookie. You can accept all, reject optional cookies, or set categories in the privacy notice. Change or withdraw that choice any time via Cookie settings in the footer. A record of the choice is stored for about six months.
Lawful bases (GDPR) and PDPA notice
ST Engineering Supplies Sdn. Bhd., B-05-25, Kompleks Perindustrian EmHub, Persiaran Surian, Seksyen 3, Taman Sains Selangor, Kota Damansara, 47810 Petaling Jaya, Selangor, Malaysia is the data user / controller for this website. Email admin@stengineering.com.my.
Where the GDPR applies we rely on: performance of a contract or steps you request (enquiries, orders); legitimate interests (site security, improving our B2B service, where those interests are not overridden by your rights); legal obligation; and consent for optional cookies and, where we ask for it, direct marketing. Consent is a clear opt-in. It is not implied by visiting the site, by silence, or by a pre-ticked box.
Under the PDPA we process personal data for the purposes in this notice. Providing contact details on a form is voluntary; if you do not provide them we may be unable to respond. You may limit processing of your personal data, subject to exceptions in the Act. Third parties who may receive data include hosting, security, email, and logistics providers acting on our instructions.
Your rights
Depending on which law applies, you may request access to or correction of your personal data, withdraw consent (without affecting processing already carried out), ask us to erase or restrict data, object to certain processing, and ask for data portability. You may complain to the Personal Data Protection Commissioner in Malaysia, or to your local data protection authority in the EEA or UK. We aim to respond to access and correction requests within 30 days.
Changes to this notice
This page is our privacy notice. Using the website does not, by itself, mean you consent to optional cookies, profiling, or marketing. We ask for those choices separately. Material changes will be posted here with an updated date. Where a change needs a new consent (for example a new cookie category), we will ask again.