This policy explains what personal data Acid Malaya™ collects when you use this website or buy from us, why we collect it and what we do with it. It is written in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Who we are
Acid Malaya™ is a psychedelic streetwear label based in Seri Kembangan, Selangor, Malaysia. For anything about your personal data, email acidmalayaclothing@gmail.com.
2. What we collect
When you place an order, we collect:
- your name, email address and phone number;
- your delivery address (address, city, postcode, state and country);
- any note you add to the order;
- the order itself — items, sizes, quantities, prices and shipping.
When you pay by bank transfer, we receive the payment details your bank shows us and the receipt you send us.
When you contact us (email, Instagram, our support chat), we receive what you send us. The support chat on this site answers from a fixed list of questions — what you type is not sent or stored anywhere.
Orders from our old store (acidmalaya.com before this website) were moved here with the same details, so you can see your full order history under My orders.
There are no passwords: to see your orders, you ask for a login link sent to the email you ordered with. We don't use analytics or advertising trackers on this site.
3. How we use it
- to process, pack and deliver your order, and to show you your order's status;
- to confirm your payment and handle returns, refunds, cancellations and changes;
- to email you about your order (confirmation, payment received, shipping and tracking) and to send you login links when you ask for them;
- to keep records we're required to keep by law (for example, for tax and accounting).
We only send you marketing if you've asked for it, and you can opt out at any time.
4. Who we share it with
We never sell your personal data. We share it only as needed to run the shop:
- Couriers — your name, phone number and delivery address, to deliver your parcel;
- Our hosting provider (Cloudflare) — this website and its order database run on Cloudflare's servers, which may be outside Malaysia;
- Our email provider (Brevo) — your email address, name and order details, to send you order and login emails;
- Authorities — when the law requires it.
5. How long we keep it
We keep order records for as long as we need them to fulfil the order and handle any returns, and afterwards for as long as the law requires us to keep business records. When we no longer need your data, we delete it.
6. Cookies & browser storage
This site keeps a few small things in your own browser. None of them track you across other websites:
- Your cart — the items in your cart, until you check out;
- Saved items — products you've saved with the heart button;
- Your cookie choice — whether you accepted or declined the cookie notice.
When you log in to My orders, a login cookie keeps you logged in for 30 days (or until you log out). Our shop staff use a separate login cookie for the admin area. You can clear any of these at any time in your browser settings.
7. Third-party content
- YouTube videos load only when you press play, from YouTube's privacy-enhanced (no-cookie) domain. Once playing, YouTube's own privacy policy applies.
- Google Maps — the map on our Contact page is provided by Google and is subject to Google's privacy policy.
- Links to Instagram, TikTok, YouTube, Waze and our event registration forms take you to those services, which have their own privacy policies.
8. Your rights
Under the PDPA you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct personal data that is inaccurate, incomplete or out of date;
- stop using your data for marketing, or withdraw consent where we rely on it.
Email acidmalayaclothing@gmail.com with your request (and your order number, if you have one). We'll reply within 21 days.
9. Security
This site is served over HTTPS, and order data is kept in a database that only our shop staff can reach through a password-protected admin area. We never ask for or store card details — payment is made directly with your bank.
10. Changes
We may update this policy from time to time. The date at the top shows when it last changed.
11. Contact us
Acid Malaya™ · 19, Jalan PUJ 3/9, Taman Puncak Jalil, 43300 Seri Kembangan, Selangor, Malaysia · acidmalayaclothing@gmail.com
