This policy explains what information passes through the website of SOFT PANTRY SDN BHD 202601022504 (1684601-K): what is collected, what it is used for, who else handles it, how it is guarded, and what the customer can ask us to do with it.
What information is collected?
Four kinds of data may reach us:
Personal information covers a name, an email address, a phone number, a shipping address and a billing address.
Payment information covers credit or debit card details, or the details of another payment method, and it is processed securely through third-party payment gateways.
Order information covers the products purchased, the order history behind them and the preferences a customer records.
Website usage data covers IP address, browser type, device information, the pages visited and cookies.
What is that information used for?
The data we hold drives five things: orders are processed and fulfilled; the customer is contacted about a purchase, a support enquiry or a promotional update; the website, our services and the experience around them are improved on the back of it; fraud is headed off and the site and its users kept secure; and the legal and regulatory obligations we carry are met.
Who else handles it?
We do not sell or rent personal information. Sharing runs in two directions only: to trusted third parties who help operate the website, among them hosting providers, payment processors and shipping partners; and to law enforcement or regulatory authorities in the cases where the law requires it. Every partner on that list is bound by contract to protect the data to the standards we set.
How is it kept safe, and what do cookies do?
Industry-standard measures sit around the data: SSL encryption, secure servers and regular monitoring. Every commercially acceptable means is applied to protect personal information, with one caveat stated honestly: no transmission method running across the internet is 100% secure. Cookies and similar technologies run alongside all of that, lifting the user experience, tracking site performance and delivering personalised content; browser settings can control them or switch them off, at some cost to how the site functions.
What can the customer ask for?
Three rights are open to anyone whose data we hold:
Access to that personal information, and correction of it where it is wrong.
Deletion of the data, subject to legal or administrative requirements.
An opt-out from marketing emails, which can be taken up at any time.
Anything here that reads unclearly is worth asking about: we would rather sort it out than leave you guessing.