1 Information We Collect

We collect personal information from you when you interact with our Site in the following ways:

• Making a purchase — name, email address, billing and shipping address, phone number, and payment information.
• Creating an account — username, email address, and password (stored in encrypted form).
• Submitting an enquiry or quotation request — name, company name, email address, phone number, and details of your enquiry.
• Signing up for our newsletter — name and email address.
• Browsing the Site — IP address, browser type, device information, pages visited, and time spent on the Site (collected via cookies and analytics tools).

2 How We Use Your Information

We use the personal information we collect for the following purposes:

• To process and fulfil your orders, including arranging delivery and issuing invoices.
• To send order confirmations, shipping updates, and delivery notifications.
• To respond to your enquiries, quotation requests, or customer service needs.
• To send promotional emails or newsletters about our products and offers — only if you have opted in.
• To improve our website, product listings, and customer experience.
• To detect and prevent fraud or unauthorised access.
• To comply with our legal obligations under Malaysian law.

We will not use your personal data for any purpose beyond what is described here without your prior consent.

3 Sharing of Information

We will not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

We may share your information with trusted third parties only where necessary to fulfil our services, including:

• Courier and logistics providers — to deliver your order to the address provided.
• Payment gateway providers — to securely process your payment transaction.
• IT and hosting service providers — to maintain and operate the Site.

All third parties with whom we share data are required to handle your information securely and use it only for the specific purpose for which it was shared. We may also disclose your information if required to do so by law, court order, or regulatory authority.

4 Third-Party Services

Our Site uses the following third-party services that may collect or process data on our behalf:

• Google Analytics — collects anonymised browsing behaviour data to help us understand how visitors use the Site. Data is processed in accordance with Google’s Privacy Policy.
• WooCommerce / WordPress — our e-commerce and content management platform. Order and account data is stored within our WordPress installation.
• Payment Gateway (e.g. iPay88, Stripe, or similar) — processes credit card and online banking transactions securely. We do not have access to your full card details.
• Courier services — your delivery address and contact details are shared with our appointed courier to fulfil your shipment.

Each of these third parties operates under their own privacy policies. We encourage you to review their policies if you have concerns about how your data is handled beyond our Site.

5 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience and to understand how our Site is used. Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:

• Essential cookies — required for the Site to function, including shopping cart and login session cookies.
• Analytics cookies — used to collect anonymised data about how visitors use the Site (e.g. Google Analytics).
• Preference cookies — remember your settings and preferences to personalise your experience.
• Marketing cookies — used to deliver relevant advertisements where applicable (e.g. Google Ads remarketing).

You can choose to disable cookies in your browser settings. Please note that disabling essential cookies may affect your ability to complete purchases or use certain features of the Site.

6 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Order and transaction records — retained for a minimum of 7 years to comply with Malaysian tax and accounting requirements.
• Account information — retained for as long as your account remains active. You may request account deletion at any time.
• Marketing consent records — retained until you withdraw consent or unsubscribe.
• Enquiry and communication records — retained for up to 3 years after the last interaction.

When data is no longer required, it is securely deleted or anonymised.

7 Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data transmitted between your browser and our Site, and secure servers for storing and processing data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you in accordance with our obligations under the PDPA.

8 Your Rights Under Malaysia’s PDPA

Under Malaysia’s Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by us:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent — you may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent may affect our ability to provide certain services to you.
• Right to limit processing — you may request that we limit how we use your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with our obligations under the PDPA.

9 Children’s Privacy

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information without parental consent, please contact us immediately and we will take steps to delete such information.

10 Links to Other Sites

Our Site may contain links to third-party websites, including our sister sites wows.com.my and safebox2u.com.my. These sites operate independently and have their own privacy policies. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any site you visit.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date at the top.

Your continued use of the Site following any changes constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

• Email: [email protected]
• Phone: (603) 8063 8100 / 8063 8200
• Address: Shredder2u, Puchong, Selangor, Malaysia