Privacy Policy

Hiplastics ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you use hiplastics.my, why we collect it, and the choices you have. It's written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. What we collect

• Account data: name and email address when you register or sign in (including via Google).
• Order data: name, email, phone number, delivery address, and order/payment history when you place an order.
• Communications: anything you send us via the contact form, inquiry form, or WhatsApp.
• Usage data: pages visited and general device/browser information, collected automatically via cookies and analytics tools (see Section 5).

2. How we use your data

• To process and deliver your orders, including sharing your name, phone, and address with our courier partners.
• To send order confirmations, shipping updates, and respond to support requests.
• To let you sign in, view your order history, and leave verified product reviews.
• To improve our website and products, and — only with your consent — for analytics and marketing.
• To comply with legal and tax obligations (e.g. record-keeping under Malaysian law).

3. Who we share it with

We don't sell your personal data. We share it only with service providers who help us run the business: our courier partners (for delivery), our payment gateway ToyyibPay (for FPX/DuitNow payments), our database provider Supabase (for secure storage), and our email provider Resend (for order emails) — each only to the extent needed to provide their service to us.

4. Data retention

We keep order records for as long as needed for accounting, warranty, and legal purposes. You can request deletion of your account data at any time (see Section 7), subject to records we're legally required to retain.

5. Cookies & analytics

We use essential cookies to keep you signed in and remember your cart. With your consent (via the cookie banner shown on your first visit), we may also use analytics cookies to understand how the site is used. You can change your cookie choice at any time — see the "Cookie preferences" link in the site footer.

6. Security

We use industry-standard measures — encrypted connections, access-controlled databases, and row-level security — to protect your data. No online system is 100% secure, but we work to keep your information safe.

7. Your rights

Under the PDPA, you may request access to, correction of, or deletion of your personal data, and may withdraw consent for marketing/analytics at any time. To exercise these rights, contact us using the details below.

8. Contact us

For any privacy questions or requests, email sales@hiplastics.com or reach us via the Contact page.