Privacy Policy
Last updated: 21 October 2026
This Privacy Policy explains how Bunny Babe (“we”, “us”) collects, uses and protects your personal data when you visit bunnybabe.my or buy from us, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
1. Data we collect
- Order details: your name, WhatsApp number, email (optional), delivery address, the products you buy and your order history.
- Checkout details you type: we save these as you fill in the checkout form, so we can help you finish your order on WhatsApp if you leave before paying.
- On your device: your checkout details and last payment method are stored in your own browser (local storage) so the form is filled in faster next time. You can clear this anytime in your browser settings.
- Voucher sign-ups: the WhatsApp number you give to claim a voucher.
- Browsing data: cookies and pixels from Meta (Facebook/Instagram), TikTok and Google Analytics record pages viewed and actions such as add to bag and purchase.
We do not see or store your card number or online banking login. Payments are handled securely by our payment provider, CHIP.
2. Why we use it
- To process, pack and deliver your order and send you order and tracking updates (WhatsApp or email).
- To apply vouchers and recognise returning customers (for example, to show your saved address — masked — when you enter your WhatsApp number).
- To answer your questions and handle returns.
- To prevent fraud and misuse of vouchers.
- To measure and improve our ads and website.
3. Who we share it with
Only with service providers who help us run the shop:
- CHIP — payment processing
- EasyParcel and courier partners — delivery
- Hostinger — website hosting
- Meta, TikTok and Google — advertising measurement and analytics
We never sell your personal data.
4. Marketing messages
We may WhatsApp you about your order and, occasionally, offers. Reply “STOP” anytime and we will stop sending promotions.
5. How long we keep it
We keep order records for as long as required for accounting and tax purposes (generally 7 years). Checkout and voucher leads are kept for up to 12 months or until you ask us to delete them.
6. Your rights
You can ask to access, correct or delete your personal data, or withdraw consent to marketing, by messaging us on WhatsApp +60 17-684 2008. We will reply within 21 days.
7. Security
Our website uses SSL encryption (https). Access to customer data is limited to the people who need it to fulfil orders.
8. Changes
We may update this policy from time to time. The date at the top shows the latest version.