Who we are
Chookies Lab (SSM 202503289561 (003787835-M)) is the data controller for the activities covered by this notice. You can contact us at hello@chookies.my.
This notice covers our public website and order or customer-service conversations. Chookies Club provides a separate privacy notice when you join or use the Club.
Information we collect
Depending on how you interact with us, we may collect:
- Contact details, such as your name, phone number, email address, and social or messaging account details.
- Order details, such as the products you request, collection or delivery details, messages, preferences, and any information you choose to share with us.
- Payment and transaction records, such as payment status, amount, method, and transaction reference. Please do not send us full bank-card details in a message.
- Technical information produced when you visit the site, such as your IP address, browser or device information, requested page, and date and time of the request.
- Limited website analytics, such as pages viewed, visit duration, page performance, referring site, campaign labels, and whether you open an order or social link. We do not send your name, phone number, or email address to our analytics provider.
- Your language preference. When you choose a language, we use one necessary cookie to remember that choice for up to one year.
Where the information comes from
We receive information directly from you when you message, email, order, pay, or speak with us. We may also receive relevant information from the services used to complete your request, such as messaging, payment, delivery, social-media, email, and website-hosting providers.
We use PostHog EU Cloud for limited website analytics. PostHog may store an anonymous identifier in browser storage or a cookie so visits can be counted. We do not use this information for advertising.
How we use your information
- To answer questions and communicate with you.
- To confirm, prepare, fulfil, deliver, collect payment for, and keep records of orders.
- To provide receipts, customer support, and resolve problems or disputes.
- To maintain the security and reliability of our website, systems, and business.
- To understand website traffic, campaign performance, and which order or social links visitors choose.
- To meet accounting, tax, legal, and regulatory duties, and to prevent fraud or misuse.
- To send marketing only where you have chosen to receive it or where the law otherwise allows it. You may ask us to stop at any time.
When information is required
You decide what information to provide, but we may be unable to answer a request, confirm an order, arrange delivery, issue a receipt, or meet a legal requirement if necessary information is missing.
Who we share it with
We share personal data only where reasonably needed for the purposes above. This may include our authorised team and service providers for website hosting, analytics, messaging, email, social media, payment, accounting, order records, delivery, security, and professional advice. It may also include public authorities where the law requires or permits disclosure.
Our links may open third-party services such as WhatsApp, Instagram, TikTok, or email. Those services handle information under their own privacy terms. Some providers may process information outside Malaysia; where this happens, we take reasonable steps required by applicable law to protect the information.
We do not sell or rent your personal data.
How long we keep it
We keep personal data only for as long as it is reasonably needed for the purpose collected, including customer service, order, accounting, tax, fraud-prevention, and legal needs. We then delete, anonymise, or securely dispose of it when it is no longer required.
How we protect it
We use reasonable organisational and technical safeguards appropriate to the information we handle. No internet or storage system is completely secure, so please avoid sending unnecessary sensitive information through chat or email.
Your choices and rights
Subject to applicable law, you may ask to access or correct your personal data, withdraw consent, stop direct marketing, or ask how we handle your information. We may need to verify your identity and may retain information where the law requires it.
Email hello@chookies.my with your request. If you are not satisfied with our response, you may contact Malaysia's Personal Data Protection Commissioner.
Changes to this notice
We may update this notice when our practices or legal duties change. The date at the top shows the latest version. Material changes will be made clear on this page or through another suitable channel.
Contact us
For a privacy question or request, contact Chookies Lab at hello@chookies.my.