Privacy Policy

What we collect

We use guest checkout, so there are no customer accounts. When you place an order we collect:

• Your name, email address and phone number
• Your delivery address, if you choose delivery
• Your order details: items, quantities, totals and fulfilment choice
• The payment status and reference CHIP returns to us

We never collect your card details or online banking credentials. When you visit the site, technical data such as your IP address is processed to deliver pages and to protect checkout and login from abuse; for rate limiting we keep only a one-way hash of it.

How we use it

• To process, prepare and hand over your order
• To confirm your payment and record any refund
• To contact you about your order
• To protect the site and checkout against fraud, bots and abuse
• To keep the business and tax records Malaysian law requires

Who we share it with

We never sell or rent your personal data. We share it only with the providers needed to run the shop:

• CHIP (our payment provider) receives your name, email address, phone number, order reference and amount to process your payment.
• Cloudflare hosts this site and its database, runs the bot check (Turnstile) that protects checkout.
• Our courier receives your name, delivery address and phone number to deliver your parcel.

Cookies and browser storage

We use only what the shop needs to work, with no advertising or analytics cookies:

• Your shopping bag and checkout progress are kept in your own browser until you place an order.
• Cloudflare Turnstile may set its own cookies to tell people from bots.
• Store staff who sign in to the admin area receive a secure session cookie.

How long we keep it

We keep order records for as long as needed to fulfil your order and handle refunds, and for up to 7 years to meet Malaysian tax and accounting record-keeping duties. After that we delete or anonymise them.

How we protect it

The site is served over HTTPS, order records are available only to signed-in store staff and to holders of your private receipt link, and payment details are entered on CHIP’s own page. No system is completely secure, but we work to protect your data.

Your rights

Under the PDPA you may ask to access or correct your personal data, limit how we process it, or withdraw consent. Email hello@uncart.dev with your order number. We respond to access requests within 21 days. We may keep records the law requires us to keep.

Contact us

• House of Jya
• Lot 5A, Midvalley, Tawau, Sabah
• Email: hello@uncart.dev
• Phone: +60 12-345 6789

Notis Perlindungan Data Peribadi (PDPA 2010)

Notis ini diberikan menurut Akta Perlindungan Data Peribadi 2010. House of Jya mengumpul nama, alamat e-mel, nombor telefon, alamat penghantaran dan butiran pesanan anda untuk memproses pembayaran, menyediakan dan menyerahkan pesanan anda, menghubungi anda mengenai pesanan, melindungi laman ini daripada penipuan, dan menyimpan rekod yang dikehendaki undang-undang.

Data anda dikongsi hanya dengan pihak yang diperlukan untuk menjalankan kedai ini, iaitu CHIP (pembayaran), Cloudflare (pengehosan dan keselamatan), syarikat kurier (penghantaran). Maklumat yang diminta semasa pembayaran adalah wajib; tanpanya kami tidak dapat memproses pesanan anda.

Anda berhak meminta akses kepada dan pembetulan data peribadi anda, mengehadkan pemprosesannya, atau menarik balik persetujuan anda. Hubungi kami di hello@uncart.dev. Sekiranya terdapat percanggahan antara versi Bahasa Inggeris dan Bahasa Melayu notis ini, versi Bahasa Inggeris akan diguna pakai.