Privacy Policy

Last updated: June 2026

Your privacy matters to us. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

The Click Shop is operated by KWCLICKSHOP ENTERPRISE, 19, Lorong Cendana 21, Taman Cendana, 14100 Simpang Ampat, Pulau Pinang. We are the data controller for the personal data you provide to us.

1. What Data We Collect

When you interact with us — by placing an order, creating an account, or contacting us — we may collect the following:

Contact information: your name, email address, phone number, and delivery address
Order information: products purchased, order history, and payment status
Device and usage data: IP address, browser type, pages visited, and referral source (collected automatically via cookies)
Communications: messages you send us via email or our contact form

We do not collect or store payment card details. Payments are processed securely by Shopify Payments in accordance with their own privacy policy.

2. How We Use Your Data

We use your personal data to:

Process and fulfil your orders, including arranging delivery
Send you order confirmations and shipping updates
Respond to your enquiries and provide customer support
Send you marketing communications, if you have opted in (you can unsubscribe at any time)
Improve our website and understand how customers use it
Comply with legal obligations

We will not use your data for purposes incompatible with those listed above, and we will not sell your personal data to third parties.

3. Who We Share Your Data With

We share data only where necessary:

GDEX — our courier partner, who receives your name and delivery address to fulfil shipments
Shopify Inc. — our e-commerce platform, which processes orders and stores customer data on our behalf. See Shopify's Privacy Policy.
Email and marketing tools — if you subscribe to our mailing list, your email may be stored in a third-party email platform
Legal authorities — if required by Malaysian law or court order

4. Cookies

Our website uses cookies — small text files stored on your device — to make the site function properly, remember your preferences, and help us understand how visitors use the site. Some cookies are set by third-party services (such as Shopify and any installed apps).

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above, and as required by Malaysian law. Order records are typically retained for a minimum of seven years for accounting purposes. You may request deletion of your account data at any time (subject to legal retention obligations).

6. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Withdraw consent for the processing of your data (where consent is the basis for processing)
Object to the use of your data for direct marketing

To exercise any of these rights, please contact us at hello@theclickshop.net. We will respond within a reasonable time and no later than 21 days.

7. Data Security

We take reasonable steps to protect your personal data from unauthorised access, disclosure, or misuse. Our website is hosted on Shopify's secure infrastructure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically.

Contact Us

For any privacy-related questions or requests, please contact us at hello@theclickshop.net.