Privacy Policy

Devwise Bakehouse Sdn Bhd (Company Reg. No. 202302041185 (1524839-P)) respects your personal data and handles it in line with the Malaysian Personal Data Protection Act 2010 (PDPA). This page explains what we collect, why, and the choices you have.

1. What we collect

When you place an order, book a tasting or contact us, we may collect your name, email address, phone number, delivery address, event date and the details of your enquiry. If you pay by bank transfer or card, payment is processed by our payment providers; we never store full card numbers ourselves.

Our website also records limited technical data — IP address, browser type and pages visited — through cookies described in our Cookie Policy.

2. Why we collect it

• To prepare quotes, confirm orders and deliver them to the right address on the right day.
• To contact you about your order — changes, delivery windows, or a question about your design brief.
• To meet legal obligations, including tax and accounting record-keeping.
• With your separate consent only, to send occasional news about seasonal menus. Every such message includes a working unsubscribe link.

3. Who we share it with

We do not sell, rent or trade your personal data. We share it only with parties needed to complete your order: our delivery riders and courier partners (name, phone, address), payment processors, and our accounting service. Each is bound to use your data solely for that purpose. We may also disclose data where Malaysian law requires it.

4. How long we keep it

Order records are kept for seven years to satisfy tax and accounting requirements, then securely deleted. Enquiries that never become orders are deleted after eighteen months. Marketing consents last until you withdraw them.

5. Security

Data is stored on access-controlled systems, transmitted over encrypted connections, and viewed only by team members who need it to serve you. No system is perfect, but we treat your data with the same care we give a wedding cake in transit.

6. Your rights under the PDPA

You may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to its processing (which may mean we cannot fulfil an order). To exercise any of these rights, email [email protected] with the subject line "Data Request". We respond within 21 days.

7. Children

Our website is not directed at children under 18. Birthday cakes for children are ordered by adults, and we knowingly collect data only from adults.

8. Changes to this policy

If we change this policy, the revision date above is updated and material changes are noted on this page for 30 days. Continued use of the site after that constitutes acceptance.

9. Contact

Devwise Bakehouse Sdn Bhd
No. 23-G, Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia
+603-2282 4917 · [email protected]