Privacy policy

PRIVACY POLICY

Last updated: 13 July 2026

Introduction

Kapasawan ("we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains how we collect, use, disclose, and safeguard your information when you visit kapasawan.my.

Data We Collect

When you shop with us or interact with our website, we may collect:

  • Personal identifiers — name, email address, phone number, billing and shipping address
  • Payment information — processed securely via our payment gateway; we do not store card details
  • Order information — products purchased, order history, and transaction records
  • Device & usage data — IP address, browser type, pages visited, and referral source (via cookies and analytics tools)
  • Communications — messages sent to us via email, WhatsApp, or contact forms

How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders
  • Send order confirmations, shipping updates, and receipts
  • Respond to your enquiries and provide customer support
  • Send marketing communications (only with your consent)
  • Improve our website and shopping experience
  • Comply with legal and regulatory obligations

Legal Basis for Processing

We process your data based on:

  • Contractual necessity — to fulfil your order
  • Legitimate interests — to improve our services and prevent fraud
  • Consent — for marketing emails and cookies (you may withdraw consent at any time)

Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties solely to operate our business, including:

  • Courier and logistics partners — for order delivery
  • Payment processors — for secure transaction handling
  • Email/marketing platforms (e.g., Klaviyo) — for communications you've opted into
  • Analytics providers (e.g., Google Analytics) — for website performance insights
  • Shopify — our e-commerce platform provider

All third parties are required to handle your data securely and in compliance with applicable laws.

Cookies

We use cookies to enhance your browsing experience, remember your preferences, and analyse site traffic. You can manage cookie preferences through your browser settings. Disabling cookies may affect certain site functionality.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. Order records are typically retained for a minimum of 7 years for tax and accounting purposes.

Your Rights

Under the PDPA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Withdraw consent for marketing communications at any time
  • Request deletion of your data (subject to legal retention requirements)

To exercise any of these rights, contact us at [your email address].

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at kapasawan.my/policies/privacy-policy. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact Us

For any privacy-related enquiries or data requests: 📧 kapasawanhijab@gmail.com 📱 +60 1110 8282 95 🏢 Kapasawan Hijab, Majestic Maxim, Block C, 56000 Cheras, Kuala Lumpur, Malaysia