Privacy Policy

LampuKita, operated by FAEZ MURSHIDI BIN ADNAN (SSM 202403148374 (003608911-X)) of Cheras, Kuala Lumpur, is the data user responsible for the personal data described here. This policy is provided under Malaysia's Personal Data Protection Act 2010 (PDPA). For any privacy question, email faez@lampukita.co.

We only collect what we need to fulfil what you asked for:

• When you order: your name, email address, phone number, and delivery address (street, city, postcode, state), along with the order reference and amount.
• When you join the waitlist: your email address and, optionally, your name.
• When you send a design enquiry: your name, the WhatsApp number or email you give us, any note you write, the design you configured, and your IP address (used only to rate-limit abuse of the form).
• When you browse: standard analytics data such as pages viewed, approximate location, device, and referrer.

We never receive your full card number or online-banking credentials — those go directly to our payment provider.

To process and deliver your order, send order and delivery updates, reply to your enquiries, keep records required for tax and accounting, prevent fraud and abuse, and understand in aggregate how the site is used so we can improve it.

We do not sell your personal data, and we do not send marketing email unless you asked us to (for example, by joining the waitlist). You can opt out at any time.

We share data only with the service providers needed to run the shop, and only as far as each one needs:

• HitPay — payment processing.
• Supabase — database hosting for orders and enquiries.
• Resend — sending transactional email.
• Vercel — website hosting.
• Google Analytics — aggregate site analytics.
• PosLaju or a comparable courier — your delivery name, address, and phone number.

Some of these providers process data on servers outside Malaysia. We rely on their contractual and security commitments to protect it in transit and at rest.

Order records are kept for seven years to meet Malaysian tax and accounting requirements. Waitlist entries are kept until you ask us to remove them. Design enquiries are kept for up to two years so we can pick up an earlier conversation.

Under the PDPA you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong or out of date, delete it where we are not required to keep it, or stop using it for a particular purpose. Email faez@lampukita.co and we will respond within 21 days.

We use a small number of browser storage keys to remember your language and light/dark preference and to hold your cart between visits. Google Analytics sets its own cookies to measure site usage. You can clear or block these in your browser settings; the shop will still work, though your preferences will not be remembered.

LampuKita is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

If we change this policy we will update the date at the top of this page. Significant changes affecting how we use your data will be communicated to you directly where we can.