Legal & Policies

Your Privacy, Our Responsibility

KRM Fulfillment Sdn Bhd ("SonicHub", "we", "us", or "our") takes the protection of your personal data seriously. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your data when you engage with our website or fulfillment services.

This policy applies to all personal data processed by SonicHub in connection with the operation of our website at www.sonichub.asia and all related logistics and fulfillment services we provide.

1. Who We Are

KRM Fulfillment Sdn Bhd is a third-party logistics (3PL) company incorporated in Malaysia, providing fulfillment, warehousing, and cross-border logistics services across the Asia Pacific region. We are the data controller for personal data collected through our website and service interactions.

For any privacy-related enquiries, contact our designated Personal Data Officer at enquiry@sonichub.asia.

2. Personal Data We Collect

We collect personal data in the following circumstances:

Data you provide to us directly:

• Full name, job title, and company or business name
• Email address, phone number, and business address
• Monthly order volume, product categories, and fulfillment requirements submitted via our consultation form
• Billing details, bank account information, and payment records when you engage our services
• Communications and correspondence with our sales, operations, or support teams

Data collected automatically when you visit our website:

• IP address, device type, operating system, and browser type
• Pages visited, time spent on site, and navigation paths
• Referring URLs and search terms used to find our website
• Cookie identifiers and session data (see our Cookie Policy below)

3. Legal Basis for Processing

We process your personal data under the following legal bases as recognised by the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent — where you have expressly agreed to the processing, such as submitting a consultation request
• Contractual necessity — where processing is necessary to perform or fulfil a service agreement with you
• Legitimate interests — where we have a legitimate business reason, such as fraud prevention or service improvement, and your interests do not override ours
• Legal obligation — where we are required to process data to comply with applicable Malaysian laws or regulations

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to enquiries, process consultation requests, and onboard new clients
• To deliver and manage our warehousing, fulfillment, and logistics services
• To generate invoices, process payments, and maintain financial records
• To send operational updates, service notifications, and account communications
• To improve the performance, usability, and security of our website
• To comply with statutory obligations under Malaysian law, including tax and company regulations
• To detect, investigate, and prevent fraudulent activity or security incidents

We do not sell, rent, trade, or otherwise disclose your personal data to third parties for their own marketing purposes.

5. Disclosure of Personal Data

We may share your personal data with selected third parties only where necessary and always subject to appropriate data protection safeguards:

• Technology and service providers — including cloud infrastructure providers, CRM platforms, payment processors, and analytics tools that support our operations
• Logistics and carrier partners — to execute order deliveries, cross-border shipments, and returns within the APAC network
• Professional advisers — including lawyers, accountants, and auditors acting in the ordinary course of our business
• Regulatory and legal authorities — when required by law, court order, or government directive, or where necessary to protect the rights and safety of SonicHub or others

All third-party processors are bound by contractual obligations to process your data only on our instructions and in compliance with applicable data protection law.

6. International Data Transfers

As an APAC-focused logistics provider, some of our service partners and technology vendors may be based outside Malaysia. Where we transfer personal data internationally, we ensure that appropriate safeguards are in place — including contractual data protection clauses — to maintain a standard of protection equivalent to that required under the PDPA 2010.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Malaysian law. As a general guide:

• Business transaction and financial records are retained for a minimum of seven (7) years in accordance with the Companies Act 2016 and Income Tax Act 1967
• Client account and service data is retained for the duration of the contractual relationship and for a period of two (2) years thereafter
• Marketing and website enquiry data is retained for twelve (12) months from the date of submission, unless a service relationship commences

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights Under the PDPA 2010

As a data subject under Malaysian law, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate, incomplete, or outdated personal data
• Right to withdraw consent — to withdraw your consent to processing at any time, without affecting the lawfulness of prior processing
• Right to limit processing — to request that we restrict how we use your data in certain circumstances

To exercise any of these rights, submit a written request to enquiry@sonichub.asia. We will respond within thirty (30) days. Requests may be subject to verification of identity prior to processing.

9. Data Security

We apply appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (SSL/TLS), access controls, secure cloud infrastructure, and regular security assessments.

While we take every reasonable precaution, no method of electronic storage or transmission is entirely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authority in accordance with applicable law.

10. Links to Third-Party Websites

Our website may contain links to external sites operated by third parties. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies independently before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Material changes will be communicated by posting the revised policy on this page with an updated effective date. We encourage you to review this page periodically. Your continued use of our website or services after any update constitutes acceptance of the revised policy.

Terms of Service

These Terms and Conditions ("Terms") govern your access to and use of the SonicHub website and the fulfillment and logistics services provided by KRM Fulfillment Sdn Bhd, a private limited company incorporated in Malaysia with its registered office in Kuala Lumpur ("SonicHub", "we", "us", or "our").

These Terms apply to all visitors to our website and to all parties who enter into a service relationship with SonicHub. They should be read alongside any specific Service Agreement, Quotation, or Statement of Work agreed between SonicHub and the client.

1. Definitions

• "Client" means any individual or entity that engages SonicHub for fulfillment or logistics services
• "Services" means all warehousing, fulfillment, returns management, cross-border logistics, value-added, and ancillary services provided by SonicHub
• "Goods" means any inventory, stock, or products entrusted to SonicHub by the Client for storage, handling, or dispatch
• "Service Agreement" means any formal written agreement, quotation, or service contract entered into between SonicHub and the Client
• "Platform" means SonicHub's website, client portal, and any proprietary software or systems used to deliver the Services

2. Services Provided

SonicHub provides third-party logistics (3PL) services including but not limited to: inbound receiving and quality inspection, smart warehousing, pick and pack, order fulfillment, returns and reverse logistics management, cross-border shipping, inventory analytics, and value-added services such as custom labeling, kitting, and engraving.

3. Eligibility and Account

To engage SonicHub's services, you must be at least eighteen (18) years of age and have the legal capacity and authority to enter into binding agreements on behalf of yourself or the company you represent.

4. Client Obligations

The Client agrees to provide accurate, complete, and timely information regarding Goods; ensure all Goods comply with applicable Malaysian laws; not deliver prohibited, hazardous, or illegal Goods; maintain adequate insurance; and pay all fees in full and on time.

5. Fees and Payment

All fees and charges are as set out in the applicable Service Agreement or quotation. Invoices are due within the period stated. SonicHub reserves the right to charge interest on overdue amounts at 1.5% per month. Fees may be revised with thirty (30) days' written notice.

6. Liability for Goods

In the event of loss or damage caused directly by SonicHub's negligence, liability shall be limited to the lower of: (a) the actual replacement value declared at inbound; or (b) the liability cap in the applicable Service Agreement. SonicHub shall not be liable for events outside its reasonable control.

7. Limitation of Liability

To the maximum extent permitted by Malaysian law, SonicHub shall not be liable for any indirect, incidental, special, consequential, or punitive damages. Total aggregate liability shall not exceed the total fees paid in the three (3) months preceding the event giving rise to the claim.

8. Indemnification

The Client agrees to indemnify and hold harmless SonicHub from any claims arising from: breach of these Terms; the nature or condition of the Client's Goods; violation of applicable law; or third-party claims arising from the Client's products or operations.

9. Intellectual Property

All content on the SonicHub website and Platform is owned by or licensed to KRM Fulfillment Sdn Bhd. Nothing in these Terms grants any right to use SonicHub's intellectual property without prior written permission.

10. Acceptable Use

You agree not to use the website for any unlawful purpose, attempt to gain unauthorised access to our systems, transmit malicious code, scrape data without consent, or impersonate SonicHub. SonicHub may suspend or terminate access for violations without notice.

11. Termination

Either party may terminate a Service Agreement per the agreed notice period. SonicHub may terminate immediately if the Client materially breaches these Terms, becomes insolvent, or is suspected of illegal activity in connection with the Goods.

12. Force Majeure

SonicHub shall not be held liable for delay or failure arising from causes beyond its reasonable control, including acts of God, natural disasters, war, pandemic, or government restrictions.

13. Governing Law and Dispute Resolution

These Terms are governed by the laws of Malaysia. Disputes shall first be addressed through good-faith negotiation. Unresolved disputes shall be submitted to the exclusive jurisdiction of the courts of Kuala Lumpur, or by mutual written agreement to arbitration under the Rules of the Asian International Arbitration Centre (AIAC).

14. Contact

For questions regarding these Terms, contact us at enquiry@sonichub.asia or call +60 16 359 4393.

How We Use Cookies

This Cookie Policy explains what cookies are, which cookies KRM Fulfillment Sdn Bhd uses on our website, why we use them, and how you can manage your cookie preferences.

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are used to make websites work efficiently, remember preferences, and provide analytical information. Cookies do not contain executable code and are not viruses or malware.

2. Types of Cookies We Use

Strictly Necessary Cookies

Essential for the website to function. Cannot be switched off. Examples: session management, security tokens, CSRF protection.

Performance and Analytics Cookies

Collect anonymised information about how visitors use our website. Examples: Google Analytics, Hotjar (if applicable).

Functional Cookies

Allow the website to remember choices you make and provide enhanced features. May be set by us or third-party providers.

Marketing and Targeting Cookies

Track browsing activity to deliver relevant advertisements. Only placed with your consent. Examples: Meta Pixel, Google Ads, LinkedIn Insight Tag.

3. Third-Party Cookies

Our website may use cookies set by trusted third-party services:

• Google LLC — Analytics and advertising: policies.google.com/privacy
• Meta Platforms, Inc. — Advertising and retargeting: facebook.com/privacy/policy
• LinkedIn Corporation — B2B advertising and analytics: linkedin.com/legal/privacy-policy

4. Cookie Retention Periods

• Session cookies — deleted automatically when you close your browser
• Persistent cookies — remain on your device for a defined period (typically 30 days to 2 years) or until manually deleted

5. Managing and Withdrawing Cookie Consent

You can manage cookies through your browser settings, use Google Analytics Opt-out or the DAA opt-out tool, or contact us directly at enquiry@sonichub.asia. Restricting certain cookies may affect website functionality.

6. Contact Us

If you have questions about our use of cookies, contact our Personal Data Officer at enquiry@sonichub.asia.