Privacy policy

Who we are

WK Living Co. is the trading name of WK LIVING ENTERPRISE (SSM registration no. 202603192838 (PG0590893-V)), a business registered in Malaysia and based in Bukit Mertajam, Penang, Malaysia.

Under the Personal Data Protection Act 2010 ("PDPA"), we are the data user responsible for the personal data described here. You can reach us at wklivingco@outlook.com or on WhatsApp at +60174217098.

What we collect

There are two kinds of data involved, and they work quite differently.

First, what you type into the order form: your name, your contact details, and anything you add in the note field, which may include a delivery address. This website has no server-side database and no online payment. The order form assembles what you type into a message and hands it to WhatsApp — you send that message yourself, and nothing is stored on this website. We receive your details only once you press send in WhatsApp.

Second, what is collected automatically as you browse. We use the Meta Pixel, which records three things: a page view on every page, a Contact event when you tap the WhatsApp order button, and a Lead event when you tap the wholesale enquiry button. The order total and currency accompany the Contact event. Meta also receives technical information it collects on its own account:

• —Your IP address and approximate location derived from it
• —Your browser and device type
• —The page you are on and the site you arrived from
• —Meta's own cookie identifier, which lets Meta recognise a returning browser
• —Basic page and product information from this site, including product pricing

What we do not collect

The Meta Pixel has an optional feature, automatic advanced matching, that reads contact details out of forms on a page and sends them to Meta. We have this feature switched off. Your name, phone number and email address are never passed to Meta by this website.

We do not collect payment details on this site. There is no online checkout, and we never ask for card or online banking credentials by email or WhatsApp.

Cookies

This site sets one cookie of its own: it remembers whether you are reading in English or Bahasa Malaysia, so the page loads in your language next time. It lasts a year, holds nothing but the language code, and does not track you.

The Meta Pixel sets its own cookies for advertising measurement. You can block these in your browser settings, or through Meta's own ad preference controls in your Facebook or Instagram account. Blocking them does not affect your ability to browse or order.

Why we use it

We use the data described above to:

• —Process and deliver your order, and answer questions about it afterwards
• —Handle warranty claims and after-sales support
• —Reply to wholesale and general enquiries
• —Measure whether our advertising is reaching the right people
• —Build audiences for advertising on Meta platforms, based on website visits
• —Keep the accounting and tax records the law requires us to keep

Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing. We share it only where the work requires it:

• —Meta Platforms, which receives the browsing data described above and processes it under its own data policy
• —WhatsApp, which carries your order message and is likewise governed by its own terms
• —Delivery companies, which need the recipient's name, address and phone number to deliver a parcel
• —Our accountant and the Malaysian tax authorities, where the law requires it

How long we keep it

Records of completed orders are kept for 7 years. This is not a period we are free to shorten: Malaysian tax law requires business records to be retained for that long, and an order record is a business record.

Enquiries that did not lead to an order are kept for 24 months and then deleted. We chose this period because a rain chain is often bought some months after it is first considered, and we would rather still recognise you when you come back.

Data collected by the Meta Pixel is held by Meta according to its own retention policy, which is outside our control.

Your rights

Under the PDPA you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to limit how we use it, or withdraw a consent you previously gave. Write to us at either contact address above and we will respond within a reasonable time; we may need to confirm who you are before releasing anything.

Where a request would require us to delete records we are legally obliged to keep, we will tell you so and explain which part we cannot delete. In practice this means order records inside the 7-year tax retention period.

Keeping it safe

This site is served over an encrypted connection, and because it stores no customer data itself, there is no customer database here to breach. Order details live in our WhatsApp conversation with you and in our own business records, which we keep to the same standard as the rest of our commercial information.

If a breach ever occurs that is likely to cause you harm, we will notify you and the Personal Data Protection Commissioner as the law requires.

Changes to this policy

If what we do with data changes, we will update this page and change the date at the top. Please check back if it matters to you.