Cookies By Kiki ("we", "us", "our") operates tartnenas.my. This page explains what personal data we collect when you use this website, why we collect it, and how it's protected. This policy is written to reflect exactly what this website actually does — not generic boilerplate.
What We Collect
When you place an order at checkout, we collect your name, phone number, email address, delivery address, and any order notes you provide. If you choose Pickup instead of Delivery, we still collect your name, phone, and email, but not an address.
When you leave a review, we collect the name, star rating, and comment you submit. Reviews are displayed publicly on this website, so anything you write there is visible to other visitors.
We use Cloudflare Web Analytics to understand overall traffic to this website — things like page views, visit counts, and page load performance. This is privacy-first analytics: it doesn't use cookies, doesn't track you individually across visits, and doesn't build a personal profile of you. We don't use any advertising trackers on this website.
How We Use Your Data
- To prepare, confirm, and fulfil your order
- To contact you about your order (e.g. confirming details, delivery updates, or if something needs clarifying)
- To process payment through our payment partner, HitPay
- To display your review publicly, if you choose to leave one
We do not use your data for marketing emails, newsletters, or any purpose beyond fulfilling your order, unless you separately and explicitly ask us to.
Sharing With Third Parties
To process payment, your name, phone number, email, and order amount are shared with HitPay, our payment processor, who handles the actual payment transaction securely. We do not see or store your full card details ourselves — HitPay handles that directly.
We do not sell, rent, or trade your personal data to anyone else.
Where Your Data Is Stored
Order and review data is stored securely using Cloudflare's infrastructure. Access is limited to the business owners of Cookies By Kiki.
Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Ask what personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, where we're not required to keep it for legitimate business or legal reasons (e.g. completed order records)
- Withdraw a review you've left, by asking us to remove it
To exercise any of these rights, contact us using the details below.
Data Retention
We keep order records for as long as reasonably necessary for business, accounting, and order-history purposes. Reviews remain visible on the site until we're asked to remove them or choose to do so ourselves.
Changes to This Policy
We may update this policy from time to time as the website changes. The "Last updated" date at the top of this page will reflect the most recent revision.
Contact Us
If you have any questions about this policy or how your data is handled, please WhatsApp us at 011-2541 0182.