Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your information.
Effective Date: August 18, 2026
This Privacy Policy explains how Jomqueue (“we,” “us,” or “our”) collects, uses, stores, transfers, and processes personal data when you use our web platform, mobile applications, and queue management services (collectively, the “Service”).
By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data We Collect

The personal data we collect depends on how you interact with Jomqueue and the requirements configured by the participating business (“Facilitator”).

A. Customer Data

When you use our customer-facing services to join a queue, make or manage a reservation, or receive service-related notifications, we may collect:
  • Queue and Reservation Information: Information necessary to manage your queue or reservation, such as your name, mobile phone number, group size, reservation date or time, vehicle plate number, or other information requested through merchant-configured custom fields.
  • Contact and Messaging Information: Contact information or messaging identifiers necessary to provide service-related communications, depending on the notification methods enabled by the Facilitator. This may include information used to deliver queue confirmations, reservation-related communications, queue status updates, table-ready notifications, and other Service-related alerts through channels such as WhatsApp, SMS, or push notifications.
  • Device Information: Information about the device used to access our customer-facing services, such as:
    • Device type (e.g., mobile, desktop)
    • Operating system and version
    • Browser type and version
    • Language settings of the operating system
    • Push notification tokens, such as those used by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM)
  • Usage Data: Information about your interaction with our Services, including date and time of access and system crash or diagnostic information.

B. Facilitator / Merchant Data

When a business or its authorized personnel uses our services, we collect information necessary to create and manage the business account and provide our Services, such as:
  • Business Information: Business name, business address, contact details, outlet information, operating hours, and tax registration details provided to configure the Jomqueue service.
  • Account Credentials: Name, email address, phone number, login credentials, and assigned roles associated with authorized merchant personnel.
  • Service and Configuration Data: Queue settings, reservation parameters, table/floor layouts, notification settings, and subscription billing history provided by the Facilitator to operate the Service.
  • Usage and Technical Data: Information relating to the use of our merchant dashboard, such as login activity, device information, browser information, and system activity logs.

2. How We Use Your Data

We do not use phone numbers collected for queue notifications for unrelated purposes or marketing communications unless separately permitted or consented to in accordance with applicable laws.
We process personal data strictly for legitimate operational purposes:
  • Providing and Operating the Service: To provide, operate, maintain, and administer our queue management and reservation services, including processing information necessary to manage queues and service-related communications.
  • Communication: To transmit essential Service-related alerts and system notifications.
  • Service Improvement: To analyze usage patterns, fix bugs, and enhance the performance and user experience of our Service. We often use aggregated or anonymized data for this purpose.
  • Security and Compliance: To maintain the security of our Service, prevent fraud, enforce our terms, and comply with applicable legal and regulatory obligations.
We process personal data based on:
  • Performance of a Contract: To fulfill your direct request to join a waitlist and deliver queue status updates.
  • Consent: Granted explicitly by you when enabling mobile device features (such as camera access or push notifications) or subscribing to optional communications.
  • Legal Obligation: Meeting statutory accounting and business regulations.
  • Legitimate Interests: Maintaining and improving the security, reliability, and functionality of our Service where such interests do not override your rights.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
  • Customer Queue Information: Customers do not need to create an account to use the Service. Queue information (such as name, phone number, group size, or vehicle plate number) is made available to the relevant Facilitator to manage queue flow. Customer queue data is treated as short-term session data and is automatically deleted, purged, or anonymized within a reasonable operational timeframe after the queue session ends, except where temporary retention is required to resolve active support requests, maintain security, or defend legal claims.
  • Merchant and Account Information: Personal data associated with Facilitator or merchant accounts (including business details, account credentials, and user roles) is retained for the duration of the active subscription to provide merchant services and fulfil statutory accounting or legal obligations.
  • Usage and Device Data: Technical and device diagnostics may be retained for system troubleshooting, performance analysis, and security auditing. Where possible, usage data is aggregated or anonymized for long-term analytical purposes.
  • Other Data: Retention periods for other data types will depend on their purpose and legal requirements.

5. International Data Transfers

Your personal data may be processed or stored in countries outside Malaysia where our service providers operate. Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place and that your personal data remains protected in accordance with applicable data protection laws.

6. Data Storage, Security, and Sub-Processors

  • Storage Location: Personal data is securely processed and stored on cloud servers operated by Amazon Web Services (AWS).
  • Security Measures: We use industry-standard security measures including encrypted HTTPS/TLS communications, access controls, authentication mechanisms, and secure cloud infrastructure to protect personal data.
  • Sub-Processors and Service Providers: We may engage trusted third-party service providers to process personal data on our behalf where necessary to provide, maintain, secure, or improve our Services. These service providers are permitted to process personal data only for the purposes for which we engage them and are subject to appropriate contractual or other safeguards, where applicable.
Our service providers may include:
  • Cloud Infrastructure: Amazon Web Services (AWS), for secure hosting, storage, and processing of Service data.
  • WhatsApp Messaging: Meta’s WhatsApp Business Platform, for delivering WhatsApp queue-related notifications where WhatsApp notifications are selected or enabled.
  • Telegram Messaging: Telegram, for delivering queue-related notifications where Telegram notifications are selected or enabled.
  • Push Notifications: Apple Push Notification service (APNs), Firebase Cloud Messaging (FCM), or other applicable push notification services, for delivering real-time queue and Service-related notifications.
Where necessary to provide these services, relevant personal data, such as a customer’s mobile phone number, may be transmitted to or processed by the applicable service provider. We do not permit our service providers to use such personal data for unrelated purposes on our behalf.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may disclose or make personal data available to third parties where necessary to provide our Services or in the circumstances described below:
  • With the Facilitator (Business): The merchant or business you are visiting uses our Service to manage its queue or reservation. The Facilitator receives access to the Queue Information you submit (such as your name, group size, and contact details) solely to manage service delivery. The Facilitator’s subsequent use of your personal data is governed by its own privacy policy and applicable laws.
  • Legal Requirements: We may disclose personal data where required or permitted by applicable law, regulation, court order, or valid legal process, or where necessary to respond to lawful requests from competent authorities.

8. Your Privacy Rights

Depending on your jurisdiction and subject to applicable law, you have the following rights regarding your personal data:
  • Right to Access: You may request access to the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure / Deletion: You may request deletion of your personal data, subject to any applicable legal, security, or other legitimate retention requirements.
  • Customer Queue Data: Customers do not need to create an account to use the Service. Queue-related personal data is retained only for the period necessary to provide and administer the queue service and is automatically purged or anonymized after the applicable retention period.
  • Merchant Accounts: Merchants who discontinue their subscription will have their account deactivated. Merchants may also request permanent deletion of their account credentials, business details, and associated personal data at any time by emailing info.jomqueue@gmail.com. We will process such requests within the timeframe required by applicable law.
To exercise any of these rights, contact us at info.jomqueue@gmail.com.

9. Mobile Device Permissions Requested

To deliver native mobile functionality, our customer mobile application may request access to specific device features:
  • Camera Access: Used solely to scan QR codes for joining queues.
  • Push Notifications: Used to deliver instant "Table Ready" alerts and waitlist progress updates.
You can grant or revoke these permissions at any time via your device settings.

10. Tracking & Advertising Disclosures

  • No Cross-App Tracking: We do not track users across third-party applications or websites for targeted advertising.
  • No Advertising Identifiers: Our web and mobile platforms do not collect or request access to Apple's Advertising Identifier (IDFA) or Google Advertising ID (GAID).

11. Children's Privacy

Our Service is not intended for use by children under the minimum age permitted under applicable law. Where required, minors must obtain consent from a parent or legal guardian before using the Service. If you believe a minor has provided us with personal information, please contact us immediately to remove it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in software practices or legal requirements. Updated versions will be posted on this page with a revised "Effective" date. Continued use of our Service constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or privacy requests regarding this Privacy Policy, please contact us at info.jomqueue@gmail.com.