Privacy Policy

1. Information We Collect

When you create an account or place an order, we collect: your name, email address, phone number, and delivery address. Payment information is processed by our payment provider (Stripe) and is not stored on our servers.

When you browse our website, we collect anonymised browsing data via cookies to understand how visitors use our site and improve the experience.

2. How We Use Your Information

We use your information to:

• Process and fulfil your coffee orders
• Send order confirmations and shipping updates
• Manage your subscription deliveries
• Respond to enquiries submitted via our contact form
• Send marketing communications (only with your explicit consent)
• Improve our website and product offerings

3. Cookies

We use essential cookies (required for the site to function, such as maintaining your shopping cart and session) and analytics cookies (to understand site traffic patterns). You can control cookie preferences via your browser settings. For full details, see our Cookie Policy.

4. Data Sharing

We do not sell your personal data. We share it only with:

• Our courier partners (DHL, J&T Express) for order delivery
• Our payment processor for payment processing
• Email service providers (e.g. Mailchimp) for newsletters, if you have opted in

All third parties are contractually required to handle your data securely and only for the purposes we specify.

5. Data Retention

Account data is retained for as long as your account is active. Order records are retained for 7 years to comply with Malaysian tax and commerce regulations. You can request deletion of your account and personal data at any time by emailing hello@aromacoffee.my.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access a copy of your personal data
• Correct inaccurate or incomplete data
• Withdraw consent for marketing communications
• Request deletion of your data (subject to legal retention requirements)

7. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: