Privacy Policy
Last updated: 26 September 2026
Octopus Marketing Sdn Bhd, operating as Octopus Station (“Octopus Station”, “we”, “us” or “our”), respects your privacy.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use our website at https://octopusstation.com, use the Octopus Station mobile application, create an account, purchase products, request services or communicate with us. Together, these are referred to as our “Services”.
Our Android application uses the package name com.octopusstation.app.
Who we are
Octopus Marketing Sdn Bhd is responsible for the personal information processed through Octopus Station.
Our website address is: https://octopusstation.com.
Information we collect
The information we collect depends on how you interact with our Services.
Account and contact information
When you register an account, place an order or contact us, we may collect information such as your name, email address, telephone number, account username, billing address and delivery address.
Where you provide business information for quotations, orders or invoices, we may also process your company name and relevant business contact details.
Orders, quotations and service information
We may process information relating to your purchases and requests, including products selected, quantities, specifications, order history, delivery instructions, installation details, quotations, returns, refunds and warranty enquiries.
Payment information
We may process information required to identify and reconcile payments, including payment method, transaction reference, payment status, billing information and refund information.
Where payment is handled by an external payment provider, information entered directly into that provider’s payment interface is processed in accordance with that provider’s own privacy and security practices.
Communications and submitted content
When you contact us, we may process the contents of your enquiry and any information or attachments you choose to provide, such as order references, product photographs or supporting documents.
Please do not send us account passwords, full payment card details or unnecessary identity documents.
Technical information
When you access our Services, we and our technical service providers may process information associated with your connection and use of the Services. This may include your IP address, browser type, device type, operating system, app version, request timestamps and technical logs used to operate, secure and troubleshoot the Services.
How we use your information
We use personal information to provide the Services you request, including creating and managing accounts, responding to enquiries, preparing quotations, processing orders and payments, arranging deliveries or installations, and handling refunds, warranty claims and after-sales support.
We may also use relevant information to maintain service security, investigate technical problems, prevent or investigate fraud and misuse, resolve disputes, and meet applicable legal, accounting and regulatory obligations.
Where you have agreed to receive marketing communications, we may use your contact details to send information about our products, offers and services. You may withdraw your marketing consent at any time by contacting us or using an unsubscribe option provided in the communication.
Mobile app notifications and Firebase
The Octopus Station mobile application may use Google Firebase Cloud Messaging to support push notifications.
This service may process app installation identifiers and messaging registration tokens to route messages to the relevant app installation.
We may use notifications for service communications such as order updates, account-related information and important announcements, as well as promotional communications where you have agreed to receive them.
You can control whether notifications are displayed through your device’s notification settings. Disabling notifications does not automatically delete your Octopus Station account or other information associated with your use of the Services.
Cookies
Our website may use cookies and similar technologies to support functions such as account sessions, shopping-cart contents, checkout functionality and remembering your preferences.
You can manage cookies through your browser settings. Blocking certain cookies may prevent some account, shopping-cart or checkout functions from working properly.
Mobile device permissions
The Octopus Station mobile app may request access to certain device features where required for a specific function. Depending on the final app configuration, these may include camera access, photo or file access, location access, microphone access or notification permission.
Permissions can be reviewed and changed through your device settings. We only recommend granting permissions required for features you choose to use.
Who we share your data with
We may disclose personal information where necessary for the purposes described in this Privacy Policy.
- Service and technology providers supporting our website, mobile app, hosting, storage, communications, security and technical maintenance.
- Payment providers and financial institutions involved in processing payments, refunds or payment disputes.
- Delivery, installation and fulfilment partners who require relevant order, contact or address information to fulfil your request.
- Professional advisers and authorities, including accountants, auditors, legal advisers, regulators, courts or law-enforcement authorities where disclosure is necessary and lawful.
We seek to limit information shared with third parties to what is reasonably necessary for the relevant purpose.
International processing
Some of our service providers may process or store information outside Malaysia. Where personal information is transferred internationally, we will take appropriate steps to protect it in accordance with applicable data-protection requirements.
How we protect your information
We take reasonable technical and organisational measures designed to protect personal information against loss, misuse, alteration, unauthorised access and unauthorised disclosure.
Access to personal information is limited to personnel and service providers who require it for authorised business purposes.
No website, mobile application, transmission method or storage system can be guaranteed to be completely secure. You should protect your account credentials and contact us promptly if you suspect unauthorised use of your account.
How long we retain your data
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to meet applicable legal, accounting, tax, warranty, fraud-prevention and regulatory requirements.
Account information may be retained while your account remains active. Order, invoice, payment, delivery and warranty records may be retained after an account is deleted where required for legitimate business or legal purposes.
When personal information is no longer required, we will take reasonable steps to delete, destroy or anonymise it.
Account and personal data deletion
You may request deletion of your Octopus Station account and associated personal information.
To request account deletion, email us at enquiry.octofire@gmail.com with the subject:
Account Deletion Request – Octopus Station
Where possible, send the request from the email address associated with your account. Do not send your password.
We may take reasonable steps to verify account ownership before processing the request.
After verification, we will delete or anonymise personal information that is no longer required. Certain information may need to be retained where required for accounting, tax, fraud prevention, warranty, legal claims or other lawful purposes.
Uninstalling the Octopus Station app does not automatically delete your account or information stored on our systems.
What rights you have over your data
Subject to applicable law, you may request access to personal information we hold about you, request correction of inaccurate or incomplete information, withdraw consent where processing is based on consent, object to or stop direct marketing, and request deletion where applicable.
We may need to verify your identity before processing certain privacy requests.
Where we cannot fulfil a request in full, we may retain information where required or permitted by law and will explain the relevant reason where appropriate.
Children’s privacy
Our Services are intended for customers purchasing products and arranging related services and are not specifically designed for children.
If a parent or guardian believes that a child has provided personal information inappropriately, please contact us so that we can investigate and take appropriate action.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, business practices or legal requirements.
The latest version will be published on this page together with an updated “Last updated” date.
Contact us
For privacy enquiries, account deletion requests, data access or correction requests, please contact:
Octopus Marketing Sdn Bhd
Octopus Station
Email: enquiry.octofire@gmail.com
Telephone: +6017 928 5188
Address:
Lot 704, Batu 13,
Kg. Sungai Rambai,
42600 Jenjarom, Kuala Langat,
Selangor, Malaysia.
For privacy-related emails, please use the subject “Privacy Request – Octopus Station” so that your request can be handled appropriately.
