Privacy Policy

This policy explains how Syafi Heritage ("we"), operated by [owner's full name], collects and uses your personal data when you visit or buy from this website, in line with the Personal Data Protection Act 2010 (PDPA).

What we collect

• When you order: your name, email address, phone number and delivery address.
• What you ordered, the amount paid and the payment reference.
• We do not receive or store your bank login or card details — payment is handled entirely by toyyibPay on their own secure page.

How we use it

• To process, deliver and support your order, and to send your order confirmation.
• To contact you about your order (for example by email or WhatsApp).
• To keep records as required by law.

We do not sell your personal data, and we don't send marketing messages without your consent.

Who we share it with

Only the service providers needed to run the shop, and only for that purpose:

• toyyibPay — payment processing (FPX).
• Our courier, [courier name] — your name, phone and address, to deliver your parcel.
• Resend — sends our order emails.
• Supabase and Cloudflare — host this website and its database.

Some of these providers may store data on servers outside Malaysia, with appropriate safeguards.

Cookies and storage

We don't use advertising or tracking cookies. Your cart is saved in your own browser so it's still there when you come back; you can clear it at any time from your browser settings.

How long we keep it

We keep order records for 7 years, then delete them.

Your rights

You may ask to see, correct or delete the personal data we hold about you, or withdraw your consent, by contacting us. We'll respond within 21 days.

Changes

If we change this policy, we'll update the date at the top of this page.