Privacy Policy
Last updated 19 October 2026
This explains what personal data BBME collects when you register for an event or visit this site, what we do with it, and the choices you have. It is issued under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Who we are
BBME (Baby & Beyond Maternity Expo) is organised by Playmart Sdn Bhd (202501023072). We are the data user responsible for your personal data.
What we collect
- Registration details: your name, email address, mobile number and country.
- Optional details you choose to give: how you heard about us, your stage (for example expecting or parent), due date, number and ages of children, what you are interested in, and, for trade visitors, your company name, business type and website.
- Entry records: your ticket code and the time you are checked in at the event.
- Technical details: your IP address, kept briefly in security counters that limit repeated form submissions and sign-in attempts.
- A record of whether you agreed to receive news, and when.
- Waiting list: if you ask on the home page to hear about the next expo, your email address, the language of the page you used, and when you agreed. Nothing else is collected, and joining does not register you for any event.
- Your language choice, kept in a small cookie so the site opens in the language you picked.
How we use it
- To register you and send your entry QR code and event reminders.
- To check you in and manage the event, including capacity and safety.
- To understand who attends, so we can plan better shows. Reports use totals, not individuals.
- To send news about future BBME events, only if you ticked the box for it.
- To email you once when the next expo is announced, if you joined the waiting list.
Who we share it with
We do not sell your personal data. We share it only in these cases:
- Exhibitors: when you let an exhibitor scan your entry QR code at their booth, they receive your name, contact details and company so they can follow up with you. If you do not want this, do not let them scan it.
- Service providers that run the site for us, such as hosting, database storage and email delivery. They may only use your data to provide that service to us.
- Cloudflare, which runs a bot check (Turnstile) on our registration form. It receives your IP address and browser details to tell people from automated programs.
- Authorities, when the law requires it.
Data stored outside Malaysia
Our service providers may store data on servers outside Malaysia. We choose providers that protect data to a standard we consider appropriate.
News and unsubscribing
We send event news only if you agreed, either when you registered or when you joined the waiting list on the home page. Every news email has an unsubscribe link, and one click stops it. Your ticket and event reminder emails are not news, so they are still sent for events you registered for.
Cookies
We use one cookie that remembers your language. We do not use advertising or tracking cookies on the public site.
How long we keep it
We keep your details for as long as we need them to run the event and follow up after it, and as long as the law requires. After that we delete or anonymise them. Waiting-list emails are kept until you unsubscribe or we no longer need the list, and are then deleted.
Keeping it safe
Access to registration data is limited to staff who need it, behind a login. Ticket links use long random codes that cannot be guessed. No system is perfectly secure, but we take reasonable steps to protect your data.
Your rights
You can ask to see the personal data we hold about you, to correct it, to withdraw your consent or to have it deleted. Email us and we will reply as soon as we can. We may need to confirm who you are first.
Changes
If we change this policy we will update this page and the date at the top.
