Privacy policy

Last updated: 5 August 2026

Kaya Toast Cookie PLT (Registration No. 202604001776) ("Kaya Toast Cookie", "we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our online store or place an order with us.

1. PERSONAL DATA WE COLLECT
When you browse our store, place an order, or contact us, we may collect:
- Identity and contact data: your name, delivery address, email address and phone number.
- Order and transaction data: the products you order, order value, delivery preferences and order history.
- Payment data: payment is processed by our third-party payment provider. We do not collect or store your full card details on our own systems.
- Technical and usage data: information collected automatically through cookies and similar technologies, such as your device, browser, IP address and how you use our store.

2. HOW WE USE YOUR PERSONAL DATA
We use your personal data to:
- process, fulfil and deliver your orders;
- communicate with you about your order, including confirmations and delivery updates;
- respond to your enquiries and provide customer support;
- maintain our records and manage our business;
- where you have consented, send you news, offers and updates (you may opt out at any time); and
- comply with our legal and regulatory obligations.

3. DISCLOSURE OF YOUR PERSONAL DATA
We do not sell your personal data. We may share it with trusted third parties only as needed to run our business, including:
- our e-commerce platform provider (Shopify), which hosts our store;
- our payment provider, to process payments securely;
- our delivery and logistics partners (for example, same-day and courier services such as Lalamove and EasyParcel), to deliver your order; and
- government authorities, regulators or law-enforcement agencies where required by law.

4. CROSS-BORDER TRANSFER
Some of our service providers (such as our e-commerce platform) may store or process data on servers located outside Malaysia. Where this happens, we take reasonable steps to ensure your personal data continues to be protected to a standard consistent with the PDPA. By using our store, you consent to such transfers.

5. DATA RETENTION
We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet any legal, accounting, tax or reporting requirements, after which it will be securely deleted or anonymised.

6. SECURITY
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. YOUR RIGHTS UNDER THE PDPA
Subject to the PDPA, you have the right to request access to and correction of your personal data, to withdraw your consent, and to limit the processing of your data. To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on your request.

8. COOKIES
Our store uses cookies and similar technologies to operate properly, remember your preferences, and understand how the store is used. You can manage cookies through your browser settings, although disabling some cookies may affect how the store works.

9. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date.

10. CONTACT US
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Kaya Toast Cookie PLT (Registration No. 202604001776)
Unit G04, The Orion Condominium, 149, Jln Tun Razak, Titiwangsa, 53200 Kuala Lumpur
Email: hello@kayatoastcookie.com
Contact No: +65 8229 9795
Instagram: @kayatoastcookie