Your details, handled with care ✦ PRIVACY POLICY
Last updated: October 2026Privacy Policy
Yoursnackies Desserts Operated by Yoursnackies Sdn. Bhd.
Last Updated: October 2026
This Privacy Policy is our personal data notice under the Personal Data Protection Act 2010 (PDPA). A Bahasa Malaysia version follows the English text below. If the two versions differ, the English version applies.
1. Who we are
Yoursnackies Sdn. Bhd. ("Yoursnackies", "we", "us", "our") runs the website www.yoursnackiesdesserts.com, our outlets at Cheras Maluri and The Exchange TRX, and the Cakies Club loyalty programme. We are the data user responsible for the personal data you share with us.
2. What personal data we collect
2.1 Order details — your name, email address, phone number, delivery address, the recipient's name and phone number if the order is a gift, your chosen delivery date and time, and any message you ask us to write on the card.
2.2 Payment details — payments are processed by Shopify and our payment gateway partners. We receive confirmation that you have paid; we never see or store your full card number or online-banking login.
2.3 Account and Cakies Club details — your login details, points balance, tier, order history and any birthday or occasion you choose to tell us about so we can send you a treat.
2.4 Messages you send us — WhatsApp messages, emails, reviews, contact-form submissions and feedback.
2.5 Website usage data — pages viewed, items added to cart, device and browser type, IP address and approximate location, collected automatically through cookies and similar technologies (see section 6).
2.6 In-store purchases — if you pay at our outlets, our point-of-sale system records the transaction. We do not record your identity unless you share it (for example, to collect Cakies Club points).
3. Why we use your personal data
3.1 To bake, deliver and hand over your order — including confirming the order, scheduling the kitchen, routing our driver to your address, and letting the recipient know a delivery is coming.
3.2 To keep you updated — we send order confirmations, "out for delivery" and "delivered" notifications, pickup reminders and a live delivery-tracking link by email and WhatsApp.
3.3 To run the Cakies Club — awarding points, applying rewards, and sending birthday and tier benefits to members.
3.4 To answer you — responding to enquiries, complaints, refund requests and reviews.
3.5 To improve what we make — understanding which cakes, flavours and delivery slots are popular, and how our website is used.
3.6 Marketing (with your consent) — telling you about new flavours, seasonal items such as Mid-Autumn mooncakes, and promotions by email or WhatsApp. You can opt out at any time (see section 8).
3.7 Advertising — showing you relevant Yoursnackies advertisements on Facebook, Instagram and Google, and measuring whether our advertising works.
3.8 Legal and safety reasons — keeping accounting records, preventing fraud, and meeting our obligations under Malaysian law.
Providing the details in 2.1 is necessary to place an order; without them we cannot fulfil it. Everything else is optional.
4. Who we share your personal data with
We never sell your personal data. We share only what is needed with:
4.1 Shopify, which hosts our online store and checkout, and our payment gateway partners, which process your payment.
4.2 Our delivery drivers and delivery partners (including Lalamove for same-day deliveries), who receive the recipient's name, phone number, address and any delivery instructions so they can find you. They are not permitted to use these details for any other purpose.
4.3 Courier companies, for items we post within West Malaysia, who receive the name, address and phone number on the parcel.
4.4 Our internal tools — order management, kitchen planning, loyalty and finance systems run on service providers such as Supabase, Railway, Vercel, Notion and n8n. Access is limited to Yoursnackies staff who need it to serve you.
4.5 Messaging and email providers that send our order notifications and WhatsApp updates on our behalf.
4.6 Advertising and analytics partners — Meta (Facebook and Instagram) and Google — which receive usage data and, where you have consented, hashed contact details to measure and target advertising.
4.7 Authorities and advisers where the law requires it, or to protect our rights, our customers or our staff.
Some of these providers store data outside Malaysia (for example in Singapore, the United States or the European Union). We choose providers that protect personal data to a standard at least equivalent to the PDPA.
5. How long we keep your data
5.1 Order and payment records are kept for 7 years, as required by Malaysian tax and accounting law.
5.2 Cakies Club account data is kept while your account is active and for 12 months after it is closed.
5.3 Marketing preferences are kept until you opt out. Website usage data is kept for up to 26 months.
5.4 When data is no longer needed, we delete it or make it anonymous.
6. Cookies and tracking
6.1 Our website uses cookies and similar technologies to keep your cart, remember your preferences, understand how the site is used, and show relevant advertising. Shopify's own cookies are described at shopify.com/legal/cookies.
6.2 Third-party tools on our site include the Meta Pixel, Google Analytics and Google Ads tags, and our loyalty and pop-up providers.
6.3 You can block or delete cookies in your browser settings. Doing so may stop some parts of the site, such as the cart or checkout, from working properly.
7. How we keep your data safe
7.1 Our website and checkout are encrypted (HTTPS). Payment details are handled by PCI-DSS-certified providers and never touch our systems.
7.2 Staff access to customer data is limited by role and protected by individual logins. Drivers see only the stops assigned to them.
7.3 No method of transmission or storage is completely secure. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as required by the PDPA.
8. Your rights
Under the PDPA you have the right to:
8.1 Access the personal data we hold about you and receive a copy.
8.2 Correct data that is inaccurate, incomplete or out of date.
8.3 Withdraw consent to marketing at any time — use the unsubscribe link in any email, reply "STOP" to a WhatsApp message, or contact us. We will still send you messages about orders you have placed.
8.4 Limit processing of your data where the law allows, and object to processing that causes you distress.
8.5 Data portability — receive your data in a commonly used format where technically feasible.
8.6 Delete your account and Cakies Club data, subject to the records we must keep by law (section 5).
To exercise any of these rights, email us at enquiry@yoursnackies.com. We may ask you to confirm your identity first. We aim to reply within 21 days, as the PDPA requires.
9. Children
Our website is intended for customers aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, please contact us and we will delete it.
10. Gift orders and recipients
When you order a cake for someone else, you confirm that you are allowed to share their name, phone number and address with us so we can deliver it. We use the recipient's details only to deliver that order and to contact them on the delivery day.
11. Links to other websites
Our site links to third-party services such as Beepit, Instagram, TikTok and Google Maps. Their privacy policies apply when you use them; we are not responsible for how they handle your data.
12. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Significant changes will also be announced on our website or by email.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Yoursnackies Sdn. Bhd.
264, Jalan Cheras, 55200 Kuala Lumpur, Malaysia
Email: enquiry@yoursnackies.com
WhatsApp: +60 16-205 8200
Website: www.yoursnackiesdesserts.com
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi).
Notis Perlindungan Data Peribadi (Bahasa Malaysia)
Notis ini dikeluarkan oleh Yoursnackies Sdn. Bhd. selaras dengan Akta Perlindungan Data Peribadi 2010.
Data yang kami kumpul: nama, e-mel, nombor telefon, alamat penghantaran, butiran penerima hadiah, tarikh dan masa penghantaran, mesej kad, butiran akaun dan Cakies Club, komunikasi anda dengan kami, serta data penggunaan laman web melalui kuki. Butiran pembayaran diproses oleh Shopify dan rakan gerbang pembayaran kami; kami tidak menyimpan nombor kad anda.
Tujuan: memproses, membakar dan menghantar pesanan anda; menghantar pengesahan dan kemas kini penghantaran melalui e-mel dan WhatsApp; mengendalikan program Cakies Club; menjawab pertanyaan dan aduan; menambah baik produk dan laman web kami; pemasaran dengan persetujuan anda; pengiklanan di Facebook, Instagram dan Google; serta mematuhi undang-undang Malaysia.
Pendedahan: data anda dikongsi hanya setakat yang perlu dengan Shopify dan gerbang pembayaran, pemandu dan rakan penghantaran kami (termasuk Lalamove), syarikat kurier, penyedia sistem dalaman kami, penyedia perkhidmatan pemesejan, rakan pengiklanan dan analitik (Meta, Google), serta pihak berkuasa apabila dikehendaki oleh undang-undang. Sesetengah penyedia menyimpan data di luar Malaysia dengan perlindungan yang setara.
Kewajipan: butiran pesanan (nama, telefon, alamat, e-mel) adalah wajib untuk membuat pesanan. Maklumat lain adalah pilihan.
Hak anda: anda berhak mengakses dan membetulkan data peribadi anda, menarik balik persetujuan pemasaran, mengehadkan pemprosesan, meminta data anda dalam format mudah alih, dan memadam akaun anda (tertakluk kepada rekod yang wajib disimpan selama 7 tahun). Hubungi kami di enquiry@yoursnackies.com atau WhatsApp +60 16-205 8200. Kami akan membalas dalam tempoh 21 hari.
Penyimpanan: rekod pesanan dan pembayaran disimpan selama 7 tahun; data akaun selama akaun aktif dan 12 bulan selepas ditutup; data penggunaan laman web sehingga 26 bulan.
Jika anda tidak berpuas hati dengan maklum balas kami, anda boleh membuat aduan kepada Jabatan Perlindungan Data Peribadi Malaysia.