Your data, plainly

What we collect

Your name, email, phone number and delivery addresses - given when you create an account, order, or write to us. We also keep payment proofs uploaded for DuitNow transfers.

Why we collect it

To fulfil orders, arrange delivery, confirm payments and answer your messages. Marketing email or WhatsApp only happens with your explicit consent, which you can withdraw at any time.

Measurement and advertising

We record our own first-party events such as page views, product views, cart additions and completed checkouts so we can improve the shop. These records use a temporary session key and may include campaign labels from links. We do not store an IP address or browser fingerprint in these events.

We also use Google Analytics 4 to understand how people find and use the shop, and the Meta Pixel (Facebook and Instagram) and the TikTok Pixel to see whether our ads on those platforms lead to orders. These tools set cookies in your browser and receive the pages you view, the products you look at or add to your cart, the checkouts you start and the orders you place, along with your IP address and browser details.

Our server sends the same shop events to Meta and TikTok directly, so an ad blocker does not hide a sale from them. When you are signed in or placing an order, these include your email address and phone number in hashed form - scrambled one way, so the platform can match them to its own account holders without receiving them readable. Google, Meta and TikTok each handle this data under their own privacy policies, and may process it outside Malaysia.

You can refuse these cookies by blocking them in your browser or with a tracker blocker, and adjust ad personalisation in your Google, Meta and TikTok account settings. The shop works the same either way.

Who sees it

Our small team, our email provider for messages we send, couriers for delivery, and Google, Meta and TikTok for the measurement described above. We do not sell your data.

How long we keep it

Account data is retained while your account remains active. Order records are kept for accounting, but personal fields can be anonymized on request.

Your rights under PDPA

Under Malaysia's Personal Data Protection Act you may access, correct, or ask us to delete your personal data, and withdraw your consent to advertising measurement. Write to us and we will act on it.