Our Privacy Policy

This policy explains how Biri-Biri Treats Enterprise (SSM 202003296641 / 003181799-D, “we”, “us”) collects, uses and protects your personal data when you use biribiritreats.com or place an order. We follow Malaysia’s Personal Data Protection Act 2010 (PDPA).

By using our website or placing an order, you agree to this policy.

• Order details: your name, phone number, email address, and billing or delivery address.
• Order information: the items you order, your chosen pickup, delivery or courier date and time slot, the delivery distance, and any notes or custom text you give us.
• Payment information: payment is handled by HitPay. We receive confirmation that you paid and the payment method used, but we do not see or store your card number or banking login.
• Account details, if you create an account: your email address and password, which is stored in protected form.
• Messages: what you send us by WhatsApp or email.
• Website and device data: your IP address, browser, device and pages visited, collected through cookies and similar tools.

• To take, make, deliver and support your order, and to contact you about it.
• To work out delivery fees and distances from your address.
• To process payments, refunds and store credit.
• To keep business, tax and accounting records.
• To answer your questions and handle complaints.
• To keep the website secure and working, and to understand how it is used so we can improve it.

We do not sell your personal data. We only send you marketing messages if you have agreed to receive them, and you can opt out at any time.

We share only what is needed, with these kinds of service providers:

• HitPay, our payment provider, to process your payment.
• Delivery and courier partners, such as Grab, Lalamove or our food courier. They receive the recipient’s name, phone number and address so they can deliver.
• Google, which provides address suggestions and driving-distance calculations at checkout, plus website statistics and translation.
• Our website host and email provider (Hostinger), which store our website data and send your order emails.
• WhatsApp, if you contact us through the chat button or by phone.

We may also disclose data when the law requires it, or to protect our rights. These providers may only use your data to provide their services to us.

Our website uses cookies and similar tools to keep your cart and login working, remember your language choice, and understand how visitors use the site (through Google Site Kit and Search Console). You can block or delete cookies in your browser settings, but some parts of the site, such as the cart and checkout, may stop working.

The language selector uses Google Translate. When you choose a language, the text of the page you are viewing is sent to Google for translation. Translations are automatic and may not be perfect, so please check important details such as dates, addresses and allergen information in English.

Some of our providers, including Google, HitPay and WhatsApp, may process or store data on servers outside Malaysia. By placing an order, you consent to your data being transferred in this way for the purposes above. We choose providers that protect personal data.

We keep order and payment records for as long as needed to run our business and meet tax, accounting and legal requirements, which is usually up to 7 years. We delete or anonymise other data when we no longer need it.

We protect your data with measures such as secure (HTTPS) connections, password-protected access and trusted service providers. No online system is completely secure, so we cannot guarantee absolute security.

You can ask us to:

• show you the personal data we hold about you,
• correct data that is wrong or out of date,
• stop using your data for marketing, or limit how we use it, and
• delete your data, unless we must keep it by law (for example, order records for tax).

Some data is needed to fulfil an order, so withdrawing it may mean we cannot complete the order. Contact us using the details below, and we will reply within a reasonable time.

We may update this policy from time to time. The latest version is always on this page.

Biri-Biri Treats Enterprise
Address: Block 13A, Bukit OUG Condominium, Jalan 3A/155, 58200 Kuala Lumpur
WhatsApp: +60 11-1286 6511
Email: order@biribiritreats.com