Bacilibloom

Privacy notice

What we collect, why, and what you can ask us to do about it.

On this page
  1. What this website collects
  2. What our order form collects
  3. Why we collect it
  4. Who we share it with
  5. How long we keep it
  6. Your rights under the PDPA
  7. Changes

This notice explains how we handle personal data under Malaysia's Personal Data Protection Act 2010 (PDPA).

What this website collects

This website collects very little, and nothing that names you.

  • Language cookie. NEXT_LOCALE remembers whether you chose English or Bahasa Melayu, so the site opens in the language you picked.
  • Google Analytics. We use Google Analytics to understand how people find and use the site: which pages are visited, how long people stay, roughly where they are (country and city), what device and browser they use, and which buttons they click, such as "Order now" or WhatsApp. Google Analytics sets its own cookies (_ga and _ga_*) to tell visits apart. It does not tell us who you are.

You can block these cookies in your browser settings, or install Google's opt-out add-on.

What our order form collects

Orders are placed and paid for through an external form, not on this website. That form collects your name, contact number, email address and delivery address, and takes your payment. The form provider processes that data under its own privacy terms.

Why we collect it

To process and deliver your order, to contact you about it, and to keep the records Malaysian tax law requires. We use analytics only to improve the website. We do not sell your data and we do not use it for advertising.

Who we share it with

Our courier, so your order can be delivered, and our order form provider, which handles payment. Google processes website analytics data on our behalf. Nobody else, unless Malaysian law requires it.

How long we keep it

Order records are kept for seven years, which is the retention period Malaysian tax law expects. Enquiries that do not become orders are deleted once they are resolved. Google Analytics data is kept for 14 months.

Your rights under the PDPA

You can ask to see the personal data we hold about you, ask us to correct it, or ask us to limit how we use it. Write to the email address in the footer and we will respond within 21 days.

Changes

If this notice changes we will update this page. The date below is when it last changed.

Last updated: 26 October 2026