Privacy Policy

Overview

Cats Play Toy (SSM Registration No. 202403164862 (PG0557784-P)) respects your privacy. This policy explains what personal data we collect when you shop with us, why we collect it, who we share it with, and the rights you have over it under Malaysia's Personal Data Protection Act 2010 (PDPA). It applies to our website and any orders placed through it.

Information we collect

• Contact details — your name, email address, and phone number.
• Delivery address — the address you ask us to deliver to, and, where relevant, a separate billing address.
• Order history— the items you've purchased, order value, and order status.
• Account information — if you create an account, your login email and a securely hashed password.
• Payment information — handled directly by our payment gateway; we never see or store your full card number.
• Technical data — such as IP address, browser type, and site usage, collected automatically to keep the site secure and working properly.

Why we collect it, and our lawful basis

We process your personal data for the following purposes:

• To fulfil your order — processing payment, packing, and delivering your items, and sending order confirmations and shipping updates. This is necessary to perform our contract with you.
• To respond to enquiries — answering questions you send us, including returns and refund requests. This is necessary to perform our contract with you or, where no order is involved, based on your consent in contacting us.
• To prevent fraud and keep our store secure — based on our legitimate interest in protecting our business and customers.
• To meet legal obligations — such as keeping accounting and tax records as required under Malaysian law.
• To send marketing updates— only where you've opted in; based on your consent, which you can withdraw at any time.

Who we share it with

We share the minimum data necessary with service providers who help us run the store: our payment gateway (to process payment), our delivery partner (to deliver your order), and our email service provider (to send order and account emails). These providers are only permitted to use your data to provide these services to us. We do not sell your personal data to third parties.

Data retention

We keep order records for as long as needed to meet accounting, tax, and other legal obligations in Malaysia. Account data is kept until you ask us to delete it, subject to any records we're required to retain by law.

Cookies & analytics

We use a first-party cookie to remember your cookie preference. With your consent, we also use analytics cookies to understand how visitors use our site and measure the performance of our marketing. These only load after you accept cookies via the banner shown on your first visit, and you can change your mind at any time by clearing your cookies and revisiting the site.

Your rights under the PDPA

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw your consent to marketing communications at any time.
• Limit or object to the processing of your personal data for purposes you haven't consented to.
• Request that we delete personal data we no longer have a lawful reason to keep.

To exercise any of these rights, contact us using the details below. We'll respond within 21 days, as required under the PDPA.

Security

We use industry-standard safeguards — including encrypted connections and access controls — to protect your personal data from unauthorised access, loss, or misuse.

Children's privacy

While our products are for children, our website and checkout are intended to be used by parents or guardians. We do not knowingly collect personal data directly from children.

Contact us

For any privacy questions or PDPA data requests, email us at playera9600@gmail.com or visit our contact page.